$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66b13ed7-7352-3459-92da-5bf7d3131e63.roa File: 66b13ed7-7352-3459-92da-5bf7d3131e63.roa (raw, json) Hash identifier: /Gn6/N4O4g9qAYPyvSB6W92uIe1v6digUqrBYZRPkZ4= Subject key identifier: 2A:4C:E8:4B:25:9D:02:D2:72:2C:D1:77:0A:74:1E:19:1C:16:14:5D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2D3F994C32D99D6BE1C7013C Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66b13ed7-7352-3459-92da-5bf7d3131e63.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 397209 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:99:4c:32:d9:9d:6b:e1:c7:01:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=6aef390f-f7b4-4aaa-96ed-e5ab5bd90ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:23:0f:94:81:b8:d4:97:9b:47:a9:76:6b:e8: 32:a9:c4:64:4f:13:43:79:a5:aa:f0:18:45:cc:20: 7b:8b:f9:cc:d0:19:b5:4e:f1:de:c5:7f:36:e4:c9: 50:ba:90:0b:22:ee:86:99:fd:7d:a4:5f:ee:19:f4: 75:62:42:3a:e3:8f:2b:fa:89:41:bb:47:72:0b:52: 8e:9b:ff:f8:fb:7b:45:05:3d:63:3d:be:60:f0:cd: 0f:cf:fc:de:e7:c7:cd:94:d3:11:bf:f0:6e:b6:9a: fb:f4:06:e6:9d:fc:d6:e9:20:03:51:97:eb:9d:b2: 3a:bc:3e:6f:57:0c:74:e5:70:75:34:e5:62:52:42: b4:58:e1:44:24:18:c2:52:17:91:9c:e7:34:ef:19: d0:47:08:e9:95:41:c3:8c:f4:9f:07:c0:4f:1e:6f: 3d:cc:7d:f1:bc:ca:ac:57:08:e6:29:33:74:e8:1b: de:ed:65:43:8a:c0:37:f3:dc:b0:2c:a1:ea:c3:04: a1:cb:0b:11:93:a4:94:27:57:ea:ea:cb:63:72:b8: ae:17:38:7f:a2:fe:25:10:57:9b:ed:3e:e2:68:ec: 63:bd:c0:fd:f2:1b:70:79:70:93:33:a7:40:c5:74: 55:ab:28:d0:52:2d:f1:5d:0f:64:7e:e6:7d:db:46: 61:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4C:E8:4B:25:9D:02:D2:72:2C:D1:77:0A:74:1E:19:1C:16:14:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66b13ed7-7352-3459-92da-5bf7d3131e63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:50:67:c0:e0:b5:09:10:d4:ae:8e:78:b3:8c:ab:a8:db:ff: 93:6f:9a:47:97:15:50:fb:af:12:6a:e6:b4:88:12:93:f3:b3: 3d:ad:35:81:e0:71:10:62:01:4d:c4:7f:8b:e4:d8:3d:f5:83: b1:94:fc:f0:f0:e7:f3:f0:1c:3f:99:bc:36:02:d1:11:88:05: 39:74:b9:09:62:1a:54:05:19:60:b4:94:a3:84:54:17:83:0c: c7:f5:85:b3:6a:b5:71:b7:bf:5b:55:a1:bb:e7:f5:45:f2:2c: fd:f8:5c:9c:25:6a:6f:83:c5:f7:80:67:b8:3e:7a:b7:91:e2: 18:bd:c9:98:be:a2:b0:a3:a1:70:46:c9:81:e3:47:8b:bb:63: f1:6c:57:34:fe:2a:45:55:9d:58:2c:9d:54:c6:9c:3b:27:d1: 5a:16:e1:14:ff:05:47:00:88:4a:cb:dc:5e:f8:f3:0b:c8:86: b5:50:69:2a:e3:d7:b1:96:7a:cf:32:55:07:92:19:40:38:83: d8:81:3c:0a:39:70:0f:70:91:2d:f7:55:20:a9:05:e5:96:8f: f5:af:c6:c9:a3:e4:ab:b0:f6:46:e1:2c:14:25:f1:16:b9:e2: f2:d9:64:18:49:7c:ee:ab:f0:f4:6a:af:4d:5b:d7:fa:8e:4c: 78:73:80:d8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0tP5lMMtmda+HHATwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk NmFlZjM5MGYtZjdiNC00YWFhLTk2ZWQtZTVhYjViZDkwYWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCMPlIG41JebR6l2a+gyqcRkTxNDeaWq8BhF zCB7i/nM0Bm1TvHexX825MlQupALIu6Gmf19pF/uGfR1YkI6448r+olBu0dyC1KO m//4+3tFBT1jPb5g8M0Pz/ze58fNlNMRv/Butpr79AbmnfzW6SADUZfrnbI6vD5v Vwx05XB1NOViUkK0WOFEJBjCUheRnOc07xnQRwjplUHDjPSfB8BPHm89zH3xvMqs VwjmKTN06Bve7WVDisA389ywLKHqwwShywsRk6SUJ1fq6stjcriuFzh/ov4lEFeb 7T7iaOxjvcD98htweXCTM6dAxXRVqyjQUi3xXQ9kfuZ920Zh/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCpM6EslnQLScizRdwp0HhkcFhRdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjZiMTNlZDctNzM1Mi0z NDU5LTkyZGEtNWJmN2QzMTMxZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZUGfA4LUJENSujnizjKuo2/+Tb5pHlxVQ+68Saua0iBKT87M9rTWB 4HEQYgFNxH+L5Ng99YOxlPzw8Ofz8Bw/mbw2AtERiAU5dLkJYhpUBRlgtJSjhFQX gwzH9YWzarVxt79bVaG75/VF8iz9+FycJWpvg8X3gGe4Pnq3keIYvcmYvqKwo6Fw RsmB40eLu2PxbFc0/ipFVZ1YLJ1Uxpw7J9FaFuEU/wVHAIhKy9xe+PMLyIa1UGkq 49exlnrPMlUHkhlAOIPYgTwKOXAPcJEt91UgqQXllo/1r8bJo+SrsPZG4SwUJfEW ueLy2WQYSXzuq/D0aq9NW9f6jkx4c4DY -----END CERTIFICATE-----Generated at Thu Mar 26 17:21:11 2026 by rpki-client