$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c395aa6-82d8-305b-882d-70fc9f94aec8.roa File: 5c395aa6-82d8-305b-882d-70fc9f94aec8.roa (raw, json) Hash identifier: 8KUvA5opPUHqnOllb2tItAGxX07Ksg0fXn3NeOa6bZ8= Subject key identifier: 30:BA:22:CE:88:0B:BF:AC:3C:22:73:82:F8:BF:0B:89:77:77:0E:10 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2D3F9B15352C6AC804753540 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c395aa6-82d8-305b-882d-70fc9f94aec8.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 396580 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:9b:15:35:2c:6a:c8:04:75:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=4bc4faee-79b7-4ddd-a761-565cea98291d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a7:88:2b:ed:7f:f9:a4:0b:8c:b5:5d:db:eb: 6a:f9:22:d7:be:1d:08:11:8b:61:60:a3:63:25:5d: 47:8b:5d:39:78:cd:be:dd:8b:4b:e3:b2:e9:19:b5: 6c:be:d5:d1:74:66:fb:e2:93:1d:32:84:41:ef:b3: 69:97:d2:49:c8:b3:0e:0a:f8:37:05:cd:1b:69:17: b0:a6:b0:8c:41:8d:a9:83:4b:0b:7f:26:e9:e0:24: 8d:06:e3:2d:a8:39:f0:80:62:84:74:51:c2:65:d7: 40:e9:f1:1a:1c:18:71:df:94:94:d5:57:be:93:bb: bc:da:31:c1:5f:d8:3d:86:a0:f8:c7:ef:61:8b:76: 6e:51:4e:01:bb:af:e4:81:65:5b:b5:46:61:22:f0: 5b:ce:59:4c:a5:90:b6:4c:3b:21:af:a5:4c:23:19: 4a:fa:ca:a8:fe:89:02:a8:04:11:6a:5a:e0:bf:7d: 5a:1c:73:c9:9d:2b:81:48:64:68:74:f1:75:fe:7b: 2e:aa:28:88:0f:1f:26:2e:98:91:26:d0:29:d4:16: 6d:07:73:58:52:7f:71:18:2f:86:28:21:7f:32:09: f9:4f:72:02:12:bd:76:a7:f8:62:f6:28:24:85:1f: ac:29:e5:38:4d:c6:81:1b:a0:83:fe:bb:71:25:e5: 64:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:BA:22:CE:88:0B:BF:AC:3C:22:73:82:F8:BF:0B:89:77:77:0E:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c395aa6-82d8-305b-882d-70fc9f94aec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:91:67:60:df:63:9e:36:ce:fa:86:3a:27:04:99:1d:9b:a2: f0:9f:40:44:88:cf:35:8c:d0:23:98:a3:9a:a8:01:be:cd:e1: d5:8e:5c:4c:ac:62:0f:1d:88:44:2e:08:ba:50:0b:2c:4e:98: 81:14:34:85:2f:72:79:2a:98:cc:73:24:d1:db:c7:20:59:1f: 32:9e:4f:4e:e8:55:5a:91:91:cd:2b:ee:3c:eb:42:f6:65:b4: 78:42:de:9d:b0:af:20:42:bf:c8:90:ca:a0:c0:36:49:d4:95: 53:b7:60:ce:8b:48:dd:ab:5e:fc:fa:88:f5:54:89:e2:e4:10: ab:89:fd:8f:8f:c3:20:dd:a4:31:98:fc:c0:0a:14:40:b9:e5: e3:07:84:19:f4:1f:fa:c8:a6:9a:70:6b:df:4d:d2:ca:24:87: de:f1:12:b2:6f:5d:e2:a5:5d:86:df:38:3a:cc:d5:87:0c:d2: 91:a7:2b:d5:ea:e5:5a:a7:97:66:07:93:de:d5:c7:2b:b7:ae: 9e:39:26:ad:a1:71:74:30:01:3e:bb:fe:43:7b:76:41:8d:dd: d7:44:06:ce:df:f2:a1:6e:ec:44:e2:9a:7e:42:fc:b9:aa:d9: 95:93:2f:8c:57:45:a1:e3:35:0a:a9:3d:92:a6:c3:91:bf:24: fe:23:29:e0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0tP5sVNSxqyAR1NUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk NGJjNGZhZWUtNzliNy00ZGRkLWE3NjEtNTY1Y2VhOTgyOTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6eIK+1/+aQLjLVd2+tq+SLXvh0IEYthYKNj JV1Hi105eM2+3YtL47LpGbVsvtXRdGb74pMdMoRB77Npl9JJyLMOCvg3Bc0baRew prCMQY2pg0sLfybp4CSNBuMtqDnwgGKEdFHCZddA6fEaHBhx35SU1Ve+k7u82jHB X9g9hqD4x+9hi3ZuUU4Bu6/kgWVbtUZhIvBbzllMpZC2TDshr6VMIxlK+sqo/okC qAQRalrgv31aHHPJnSuBSGRodPF1/nsuqiiIDx8mLpiRJtAp1BZtB3NYUn9xGC+G KCF/Mgn5T3ICEr12p/hi9igkhR+sKeU4TcaBG6CD/rtxJeVkZQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDC6Is6IC7+sPCJzgvi/C4l3dw4QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWMzOTVhYTYtODJkOC0z MDViLTg4MmQtNzBmYzlmOTRhZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB6kWdg32OeNs76hjonBJkdm6Lwn0BEiM81jNAjmKOaqAG+zeHVjlxM rGIPHYhELgi6UAssTpiBFDSFL3J5KpjMcyTR28cgWR8ynk9O6FVakZHNK+4860L2 ZbR4Qt6dsK8gQr/IkMqgwDZJ1JVTt2DOi0jdq178+oj1VIni5BCrif2Pj8Mg3aQx mPzAChRAueXjB4QZ9B/6yKaacGvfTdLKJIfe8RKyb13ipV2G3zg6zNWHDNKRpyvV 6uVap5dmB5Pe1ccrt66eOSatoXF0MAE+u/5De3ZBjd3XRAbO3/KhbuxE4pp+Qvy5 qtmVky+MV0Wh4zUKqT2SpsORvyT+Iyng -----END CERTIFICATE-----Generated at Thu Mar 26 13:52:42 2026 by rpki-client