$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8b096047-e994-3ec3-9f8c-ffae6dff98a7.roa File: 8b096047-e994-3ec3-9f8c-ffae6dff98a7.roa (raw, json) Hash identifier: X7sdXlPKS8nIOZk1mjGgGLPxe/sXOgmvyNeOLR/qNNM= Subject key identifier: C9:BE:2B:AD:EE:73:16:37:1C:6D:BF:10:AC:5D:22:77:6F:41:8E:5A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64FAF3A79AD35F68483D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8b096047-e994-3ec3-9f8c-ffae6dff98a7.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 396583 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:fa:f3:a7:9a:d3:5f:68:48:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=6f1fb6bb-e8ab-40a2-9821-97a1c979f415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e5:64:b0:db:25:2b:00:cd:2a:f4:b5:28:7e: 2f:95:62:64:f6:43:8e:71:8e:6b:cf:f1:ca:87:1a: 3c:91:55:bd:db:1b:80:af:f7:71:c2:99:72:9d:3a: 70:ef:ed:c4:8f:63:1f:24:e5:aa:3c:bb:5e:80:69: 82:8f:be:5d:e7:1e:2d:24:d1:4a:60:ef:9e:ce:fd: f6:01:cc:b1:ef:4e:08:c1:86:55:b8:e8:11:ae:26: f8:72:27:be:3d:10:bf:93:eb:e5:c2:2c:68:eb:78: 67:5c:e7:7b:ee:02:af:e2:d9:f3:db:d7:e8:44:d4: 8e:f8:9b:dd:c7:f9:f6:e9:29:34:9e:fb:2d:e4:5c: 4c:e0:b4:bc:94:fd:6d:1c:c6:e9:78:a1:44:8c:ce: e7:d7:ce:ac:a9:3c:19:86:05:3d:a0:ee:81:ca:95: b9:24:1a:62:63:47:f8:3a:71:7a:e7:c4:2b:cc:70: d6:95:27:b4:b9:96:a5:13:b3:57:bd:ce:ed:c5:5d: f1:e4:85:47:76:71:31:74:b9:33:f9:61:04:b1:c7: 5b:18:4f:98:a1:0d:42:21:1b:03:3d:7c:21:95:43: a6:83:ae:76:19:83:4a:23:b1:97:2a:e6:4f:75:e6: 55:f7:d5:cf:0d:21:ae:99:ff:6e:59:69:b6:da:5a: 2d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BE:2B:AD:EE:73:16:37:1C:6D:BF:10:AC:5D:22:77:6F:41:8E:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8b096047-e994-3ec3-9f8c-ffae6dff98a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:1f:d5:ff:bb:b5:e6:a0:7f:a6:6e:a9:7c:9a:1e:04:fa:e8: 29:28:a9:d8:d7:12:52:88:98:6b:55:87:33:22:62:0a:ba:ca: 3d:ce:2f:6a:03:24:9e:47:98:4d:a3:5c:1c:d0:9c:db:f8:e4: f2:6e:4f:6f:d1:b4:da:71:84:9d:29:89:06:5b:96:5e:0c:a7: b5:77:34:ae:fe:72:fe:a7:b0:45:d2:e4:fd:9e:17:2b:a7:30: 36:7e:1f:7a:48:fd:b6:bc:f2:28:8a:a9:16:3e:3f:97:10:d6: a1:45:95:8a:be:7f:ea:49:67:a0:76:48:b9:df:f0:31:ba:07: f2:cd:e4:9a:a6:82:7e:54:c0:ca:04:6e:6d:8c:8f:7e:a5:a7: 15:7c:2b:31:f4:96:5f:bc:51:b8:0a:27:d3:fa:0b:b8:d4:a0: 21:1e:b1:e8:d4:db:dd:15:07:af:03:7c:2d:1d:e5:c4:a5:bc: 7e:d6:c4:ed:84:cc:65:5d:5f:17:cc:54:d6:dc:a0:a8:1f:27: 59:54:6e:5e:a0:46:a2:a7:4a:46:fa:33:6d:52:58:3c:73:f7: ce:11:ea:a1:f6:52:a3:00:a7:4d:3b:94:f2:52:55:d8:59:31: cf:0b:fb:18:2c:29:b0:08:d6:68:0d:c7:bf:3e:c2:59:e7:35: f8:3a:e1:19 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZPrzp5rTX2hIPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NmYxZmI2YmItZThhYi00MGEyLTk4MjEtOTdhMWM5NzlmNDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+VksNslKwDNKvS1KH4vlWJk9kOOcY5rz/HK hxo8kVW92xuAr/dxwplynTpw7+3Ej2MfJOWqPLtegGmCj75d5x4tJNFKYO+ezv32 Acyx704IwYZVuOgRrib4cie+PRC/k+vlwixo63hnXOd77gKv4tnz29foRNSO+Jvd x/n26Sk0nvst5FxM4LS8lP1tHMbpeKFEjM7n186sqTwZhgU9oO6BypW5JBpiY0f4 OnF658QrzHDWlSe0uZalE7NXvc7txV3x5IVHdnExdLkz+WEEscdbGE+YoQ1CIRsD PXwhlUOmg652GYNKI7GXKuZPdeZV99XPDSGumf9uWWm22lotNQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMm+K63ucxY3HG2/EKxdIndvQY5aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGIwOTYwNDctZTk5NC0z ZWMzLTlmOGMtZmZhZTZkZmY5OGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB4H9X/u7XmoH+mbql8mh4E+ugpKKnY1xJSiJhrVYczImIKuso9zi9q AySeR5hNo1wc0Jzb+OTybk9v0bTacYSdKYkGW5ZeDKe1dzSu/nL+p7BF0uT9nhcr pzA2fh96SP22vPIoiqkWPj+XENahRZWKvn/qSWegdki53/AxugfyzeSapoJ+VMDK BG5tjI9+pacVfCsx9JZfvFG4CifT+gu41KAhHrHo1NvdFQevA3wtHeXEpbx+1sTt hMxlXV8XzFTW3KCoHydZVG5eoEaip0pG+jNtUlg8c/fOEeqh9lKjAKdNO5TyUlXY WTHPC/sYLCmwCNZoDce/PsJZ5zX4OuEZ -----END CERTIFICATE-----Generated at Thu Mar 26 14:10:17 2026 by rpki-client