$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85837513-ea2c-3e1a-8794-e573969f9808.roa File: 85837513-ea2c-3e1a-8794-e573969f9808.roa (raw, json) Hash identifier: 0IKWrlzt4sEOqboJi+fN7FcZDSPxXkE0peGVbKbyXIE= Subject key identifier: 0B:9E:52:34:27:F3:66:60:1D:FD:EE:73:47:EC:EC:70:EE:2F:3B:97 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2D3F9A8C0E8E576409EBAD40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85837513-ea2c-3e1a-8794-e573969f9808.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 40717 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:9a:8c:0e:8e:57:64:09:eb:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=302e6582-38f1-4708-b6ac-a240f20a301d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:56:24:29:15:fb:b1:0f:c8:8c:cd:dd:a6:98: 80:43:e7:9f:cc:d7:01:9e:09:d8:3d:e4:94:37:8b: f8:27:12:ff:83:d9:77:8a:99:93:89:4a:8f:e9:4f: 5c:14:de:f4:cc:7d:2a:7c:4c:61:5e:78:99:82:51: 3a:f5:e9:f5:aa:ac:aa:38:ee:44:9c:8d:5f:43:be: 4f:18:c3:20:27:ab:4a:64:ca:bb:46:91:5b:a4:ab: 35:ba:24:31:0d:66:8c:c2:14:a6:4a:20:c4:7e:aa: 19:fb:2d:66:54:c9:93:45:69:ae:59:cc:97:f0:b8: 5e:10:f3:9c:ba:4c:d1:4a:bb:20:c6:5f:90:e7:fd: 24:f7:10:ef:3b:8f:d4:e3:1b:4e:95:4d:0f:b2:42: b9:05:b3:da:2e:93:bf:77:31:f7:a2:0a:0b:2d:27: 73:e5:e6:08:86:d1:24:6b:91:68:4b:ac:69:85:66: 5f:9f:33:2b:0f:23:46:3a:8d:32:a2:37:e3:53:56: e5:dc:99:25:da:6e:cd:5f:67:8d:12:63:98:20:69: e4:0e:09:f6:41:68:76:de:90:4c:f2:cd:89:b8:a3: e7:14:db:ea:2a:70:bd:b0:f0:04:aa:bc:94:db:8e: 2e:83:d2:56:03:0b:bb:05:49:cf:e6:c2:e9:fd:e9: d5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:9E:52:34:27:F3:66:60:1D:FD:EE:73:47:EC:EC:70:EE:2F:3B:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85837513-ea2c-3e1a-8794-e573969f9808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:b5:d2:23:ae:d7:cf:0d:21:c3:69:e1:ab:83:4d:26:b1:6e: 23:25:60:84:49:ff:14:c8:de:97:15:66:f8:9d:f9:63:31:d5: 7c:42:0f:0b:68:71:77:b9:ad:bc:b5:cc:83:68:ce:67:f5:4a: c2:4c:6a:9b:d0:b7:7e:64:b6:e9:7a:84:a1:da:a9:40:77:9b: f9:a0:30:d0:9a:64:a9:57:de:e6:d1:15:f7:1c:07:fb:e0:36: 04:2d:e2:8b:81:c5:61:64:b8:7d:68:5e:de:8d:ab:13:4b:b4: 62:c2:72:99:cd:8c:be:5c:83:43:c6:56:10:ac:c3:d6:77:7e: b6:78:53:2f:a4:d9:ab:aa:1b:26:77:1d:88:95:57:70:28:15: 9a:cb:41:15:f2:4d:c9:c6:e0:04:da:1c:b1:c1:67:71:ba:86: fe:f2:04:b3:9e:62:7c:ff:95:fc:36:7b:c4:1b:81:e1:2b:2c: f7:3d:0a:5e:10:64:e2:48:7a:56:9c:bb:c3:ee:b5:b4:a7:61: 06:73:ec:d3:46:43:dd:20:cc:35:48:4e:4f:b0:0c:72:c7:7b: 90:cd:62:36:d6:24:f0:e9:84:4d:a7:af:63:92:8d:a8:d3:63: 30:28:dd:99:32:05:e0:11:51:b3:46:05:c3:4b:95:8d:93:25: f4:85:12:87 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0tP5qMDo5XZAnrrUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk MzAyZTY1ODItMzhmMS00NzA4LWI2YWMtYTI0MGYyMGEzMDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFYkKRX7sQ/IjM3dppiAQ+efzNcBngnYPeSU N4v4JxL/g9l3ipmTiUqP6U9cFN70zH0qfExhXniZglE69en1qqyqOO5EnI1fQ75P GMMgJ6tKZMq7RpFbpKs1uiQxDWaMwhSmSiDEfqoZ+y1mVMmTRWmuWcyX8LheEPOc ukzRSrsgxl+Q5/0k9xDvO4/U4xtOlU0PskK5BbPaLpO/dzH3ogoLLSdz5eYIhtEk a5FoS6xphWZfnzMrDyNGOo0yojfjU1bl3Jkl2m7NX2eNEmOYIGnkDgn2QWh23pBM 8s2JuKPnFNvqKnC9sPAEqryU244ug9JWAwu7BUnP5sLp/enVjwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAueUjQn82ZgHf3uc0fs7HDuLzuXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODU4Mzc1MTMtZWEyYy0z ZTFhLTg3OTQtZTU3Mzk2OWY5ODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCItdIjrtfPDSHDaeGrg00msW4jJWCESf8UyN6XFWb4nfljMdV8Qg8L aHF3ua28tcyDaM5n9UrCTGqb0Ld+ZLbpeoSh2qlAd5v5oDDQmmSpV97m0RX3HAf7 4DYELeKLgcVhZLh9aF7ejasTS7RiwnKZzYy+XINDxlYQrMPWd362eFMvpNmrqhsm dx2IlVdwKBWay0EV8k3JxuAE2hyxwWdxuob+8gSznmJ8/5X8NnvEG4HhKyz3PQpe EGTiSHpWnLvD7rW0p2EGc+zTRkPdIMw1SE5PsAxyx3uQzWI21iTw6YRNp69jko2o 02MwKN2ZMgXgEVGzRgXDS5WNkyX0hRKH -----END CERTIFICATE-----Generated at Thu Mar 26 14:55:44 2026 by rpki-client