$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6e97a691-7a09-3ee4-aa3e-4622bf085ab9.roa File: 6e97a691-7a09-3ee4-aa3e-4622bf085ab9.roa (raw, json) Hash identifier: IqFYE+puHUCvkwAL6891MrYSW3yHvhl/K6Jwq0uwcvU= Subject key identifier: 5A:E5:1F:0A:1D:D6:D1:D4:02:18:19:51:93:C5:A5:82:12:ED:7B:20 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2D3F97EC6D09FD05F9BE1A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6e97a691-7a09-3ee4-aa3e-4622bf085ab9.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 396591 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:97:ec:6d:09:fd:05:f9:be:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=e4e8af4e-7de2-4df9-b564-bf31b9025fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b6:b0:f4:ba:60:72:92:bc:f0:c6:20:52:c6: 8b:a6:56:f3:19:95:db:1b:d3:45:b7:fa:66:cb:4d: 22:85:7c:83:5d:89:1f:8c:03:c5:b0:74:c2:a7:09: cd:0d:b6:45:9e:42:10:01:fe:4f:5c:52:e3:04:e9: 51:2d:c4:72:75:33:c9:5d:ca:17:d9:ed:57:0c:08: c7:70:43:fa:c9:f6:d2:c5:e6:39:bb:fe:b9:59:34: 36:0e:26:0d:c4:d7:77:29:c8:4a:5e:9b:d3:3a:f7: 9a:c4:c1:c0:55:4c:72:2b:a4:be:71:34:c4:eb:78: c2:9d:b5:a7:21:fd:43:bb:bb:9d:57:06:23:f8:85: 07:23:8d:c0:f8:cb:d6:31:89:28:1e:49:41:96:81: 62:f2:fc:2e:0f:dd:1d:d6:02:a7:ec:e8:e9:73:2b: a4:f2:68:72:87:68:2b:0d:46:7e:5a:c3:5f:44:5f: d5:81:13:38:d5:e6:8b:1c:8b:dc:c2:70:ab:97:4d: 76:d4:dc:81:70:dd:44:15:69:39:96:16:a0:45:72: fd:c5:bd:6b:26:14:d2:07:7b:c9:de:bc:7a:47:94: 25:f5:09:d9:c3:8b:71:d2:60:94:c8:03:03:79:4e: 20:73:3b:41:43:4d:92:ff:3d:a9:2e:fa:2e:a5:93: 65:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E5:1F:0A:1D:D6:D1:D4:02:18:19:51:93:C5:A5:82:12:ED:7B:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6e97a691-7a09-3ee4-aa3e-4622bf085ab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:36:5b:1c:a5:62:0d:14:22:a9:03:0d:61:ea:9e:87:50:50: 29:8a:25:ac:6d:91:f3:f8:f9:ac:3d:b7:22:b2:68:03:d1:15: 4b:db:e4:02:fa:f4:bb:33:1a:c2:80:71:73:a6:53:3b:75:01: 53:60:43:d9:e7:3e:7d:69:e9:9a:7d:79:57:a4:17:d1:34:37: 56:c9:8c:5f:7e:05:86:ad:9a:b4:c2:e4:64:32:07:7a:eb:8c: 76:a4:53:91:fe:92:e1:e1:50:94:a4:67:47:7b:24:99:ef:02: 9c:3c:81:3e:23:f3:1d:59:61:5c:48:00:65:9a:ad:eb:f3:51: c5:b9:a0:41:21:27:74:ac:9a:95:83:19:96:83:95:66:29:97: a6:fe:13:c9:95:f0:0c:c7:85:f2:6e:0a:f1:52:e3:79:40:4e: 4e:8d:2d:23:ed:5e:e2:5a:99:9e:5f:4a:56:28:a0:e0:ef:72: a8:78:e2:b8:9b:d9:f5:b7:42:87:d4:93:91:3d:c7:45:1b:28: ed:06:46:e1:33:00:3e:ef:70:7c:39:83:39:8a:c6:23:7f:b2: a2:1b:38:98:10:92:ad:cd:f2:1d:43:50:fa:75:bd:9c:7c:0e: 5f:e3:17:c3:01:ce:6c:8b:1a:b5:4d:f0:7b:43:1f:64:63:fd: 65:7b:95:a8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0tP5fsbQn9Bfm+GoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk ZTRlOGFmNGUtN2RlMi00ZGY5LWI1NjQtYmYzMWI5MDI1ZmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgraw9LpgcpK88MYgUsaLplbzGZXbG9NFt/pm y00ihXyDXYkfjAPFsHTCpwnNDbZFnkIQAf5PXFLjBOlRLcRydTPJXcoX2e1XDAjH cEP6yfbSxeY5u/65WTQ2DiYNxNd3KchKXpvTOveaxMHAVUxyK6S+cTTE63jCnbWn If1Du7udVwYj+IUHI43A+MvWMYkoHklBloFi8vwuD90d1gKn7Ojpcyuk8mhyh2gr DUZ+WsNfRF/VgRM41eaLHIvcwnCrl0121NyBcN1EFWk5lhagRXL9xb1rJhTSB3vJ 3rx6R5Ql9QnZw4tx0mCUyAMDeU4gcztBQ02S/z2pLvoupZNl2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFrlHwod1tHUAhgZUZPFpYIS7XsgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmU5N2E2OTEtN2EwOS0z ZWU0LWFhM2UtNDYyMmJmMDg1YWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBENlscpWINFCKpAw1h6p6HUFApiiWsbZHz+PmsPbcismgD0RVL2+QC +vS7MxrCgHFzplM7dQFTYEPZ5z59aemafXlXpBfRNDdWyYxffgWGrZq0wuRkMgd6 64x2pFOR/pLh4VCUpGdHeySZ7wKcPIE+I/MdWWFcSABlmq3r81HFuaBBISd0rJqV gxmWg5VmKZem/hPJlfAMx4XybgrxUuN5QE5OjS0j7V7iWpmeX0pWKKDg73KoeOK4 m9n1t0KH1JORPcdFGyjtBkbhMwA+73B8OYM5isYjf7KiGziYEJKtzfIdQ1D6db2c fA5f4xfDAc5sixq1TfB7Qx9kY/1le5Wo -----END CERTIFICATE-----Generated at Thu Mar 26 20:26:48 2026 by rpki-client