$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a337b93-2bde-3a00-b744-ddd192ba4d7d.roa File: 7a337b93-2bde-3a00-b744-ddd192ba4d7d.roa (raw, json) Hash identifier: akSJKEAJtDzt/6M6BdzMdYiSVzev+srVGdRA8n1x6Co= Subject key identifier: 7F:B1:B7:68:1C:6A:CA:F8:18:12:23:F9:AC:DF:56:4A:26:5F:29:C4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64F9D3CD29B3948ECB2100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a337b93-2bde-3a00-b744-ddd192ba4d7d.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 397194 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:f9:d3:cd:29:b3:94:8e:cb:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=4d71dbb9-cee5-4e7e-99dd-646404618c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:df:e8:74:2d:7b:f8:34:2c:90:79:7f:ed:99: 57:2c:99:41:d3:47:2c:59:7c:b7:3b:ad:5c:9f:25: fd:b5:cd:46:2b:b9:35:23:3b:5b:80:5e:0b:83:9b: 0e:ad:6a:7d:3b:10:13:13:27:72:d6:0c:68:34:29: 72:51:cc:4e:4d:d5:09:48:a4:2d:28:8f:dd:10:cc: bd:94:96:62:5d:9d:c7:19:d8:02:ff:28:5c:9b:9c: ba:12:6e:37:b4:85:8d:6b:e7:5d:d2:a9:67:d8:de: 02:7f:0c:90:a6:0a:d5:da:98:a9:98:8e:a2:8e:0f: 22:59:a2:9e:cf:88:ac:ab:e5:65:92:ee:ea:9b:8f: 60:42:c0:ea:08:fb:b2:0e:cc:d2:24:2d:9b:08:11: 7f:98:4a:17:84:d9:19:d3:79:e5:66:f8:b8:3f:ad: 8c:3b:5e:91:bd:ea:7e:04:50:07:4f:ea:7c:84:62: 0c:47:0e:28:61:2f:e7:fa:c5:6d:b4:ee:24:90:b9: f4:33:19:33:ba:34:e3:df:4e:1f:86:7d:99:7d:49: 1c:76:5c:af:bc:86:2b:ac:c7:3c:cc:b4:d3:e7:e3: 85:b8:6f:d3:b8:94:42:68:7d:67:56:45:d0:64:cb: 87:0d:51:85:af:eb:9f:57:0b:6f:00:ee:c3:4e:14: b1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B1:B7:68:1C:6A:CA:F8:18:12:23:F9:AC:DF:56:4A:26:5F:29:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a337b93-2bde-3a00-b744-ddd192ba4d7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:21:e4:e8:8c:1d:27:e8:76:f1:08:dd:99:44:41:2c:54:60: e2:9a:71:09:e2:b1:8a:0e:c5:e2:bb:9f:1f:f5:a2:cb:88:41: 85:6c:c0:7e:de:14:fc:a7:3e:e5:dd:ce:e4:b5:b1:eb:22:88: b9:e0:a4:04:d0:89:59:e5:59:bf:77:e0:8d:e5:d4:14:12:ec: f9:2f:e0:33:aa:1b:f4:8c:81:70:82:14:ff:bc:b0:93:18:f4: 9e:1b:64:73:66:46:70:e7:da:2f:9e:1d:9b:a8:6b:f7:39:3b: 47:dc:4d:32:1f:48:6d:c3:c9:00:73:e9:84:04:45:ff:3e:b2: 52:6a:db:fe:e3:0c:ec:16:3a:50:4e:8e:b1:eb:b5:d2:6a:0a: ad:2d:de:ab:4e:55:c1:0b:4f:59:e5:84:1c:5e:27:51:0b:11: 37:9b:b1:83:5d:8e:f2:6e:47:04:90:24:ef:c7:1d:74:84:e1: e9:f3:1c:18:1b:9c:5a:01:d9:97:38:21:ac:d2:1a:7c:93:cd: 1f:a9:a3:20:5b:b7:22:d2:fd:63:0b:0f:12:b4:75:ab:02:00: d0:8a:5a:d0:7b:85:cc:51:61:8b:af:b4:90:11:8c:c1:dd:01: 4b:74:5b:18:3b:f8:dd:66:ec:dc:5f:67:db:7c:20:a0:8a:b5: 87:b4:e4:80 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZPnTzSmzlI7LIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NGQ3MWRiYjktY2VlNS00ZTdlLTk5ZGQtNjQ2NDA0NjE4YzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAht/odC17+DQskHl/7ZlXLJlB00csWXy3O61c nyX9tc1GK7k1IztbgF4Lg5sOrWp9OxATEydy1gxoNClyUcxOTdUJSKQtKI/dEMy9 lJZiXZ3HGdgC/yhcm5y6Em43tIWNa+dd0qln2N4CfwyQpgrV2pipmI6ijg8iWaKe z4isq+Vlku7qm49gQsDqCPuyDszSJC2bCBF/mEoXhNkZ03nlZvi4P62MO16Rvep+ BFAHT+p8hGIMRw4oYS/n+sVttO4kkLn0MxkzujTj304fhn2ZfUkcdlyvvIYrrMc8 zLTT5+OFuG/TuJRCaH1nVkXQZMuHDVGFr+ufVwtvAO7DThSxkwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH+xt2gcasr4GBIj+azfVkomXynEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2EzMzdiOTMtMmJkZS0z YTAwLWI3NDQtZGRkMTkyYmE0ZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBYIeTojB0n6HbxCN2ZREEsVGDimnEJ4rGKDsXiu58f9aLLiEGFbMB+ 3hT8pz7l3c7ktbHrIoi54KQE0IlZ5Vm/d+CN5dQUEuz5L+Azqhv0jIFwghT/vLCT GPSeG2RzZkZw59ovnh2bqGv3OTtH3E0yH0htw8kAc+mEBEX/PrJSatv+4wzsFjpQ To6x67XSagqtLd6rTlXBC09Z5YQcXidRCxE3m7GDXY7ybkcEkCTvxx10hOHp8xwY G5xaAdmXOCGs0hp8k80fqaMgW7ci0v1jCw8StHWrAgDQilrQe4XMUWGLr7SQEYzB 3QFLdFsYO/jdZuzcX2fbfCCgirWHtOSA -----END CERTIFICATE-----Generated at Thu Mar 26 18:47:46 2026 by rpki-client