$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/904ceba7-b579-3c99-8cd9-888809197be5.roa File: 904ceba7-b579-3c99-8cd9-888809197be5.roa (raw, json) Hash identifier: oPrgfk5lVjj5g5wwOpiFnQ55+Y1SluXaj4hXgR3iHkU= Subject key identifier: 65:42:C6:BF:E1:C7:F9:CE:7D:0B:DB:8B:00:D9:3D:5B:9D:D2:FB:39 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64FB82C5D1C3A9D86BC800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/904ceba7-b579-3c99-8cd9-888809197be5.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 396603 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:fb:82:c5:d1:c3:a9:d8:6b:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=b3199b3a-264f-4a56-ad1c-cb2a138f1f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:19:a7:7f:db:e5:87:70:1d:3c:64:d5:eb:c4: b5:38:d8:15:df:42:16:1b:d5:de:74:4e:10:ca:e3: 95:88:64:a0:ee:c6:4c:48:f1:80:3a:10:11:81:54: 40:5f:ba:bd:c7:7a:29:36:ca:52:67:17:32:de:d9: 7c:48:2f:92:ca:91:43:08:d5:3b:dc:94:83:3f:89: 9b:ad:73:d8:16:48:24:e5:53:68:73:b8:92:a7:5e: b3:bc:13:5f:d2:3e:bf:a1:69:28:a1:e8:63:6a:4b: 5f:01:be:2e:00:5a:72:ef:17:7e:f7:43:6d:96:ce: 12:8d:32:b4:0b:a7:5e:36:1e:44:67:b7:08:cc:2b: 01:ed:4c:4d:a0:1f:3d:d9:bb:fa:4e:c7:bb:35:f3: e3:49:47:c0:70:3f:84:d3:3e:ef:f3:9d:fe:04:bc: d4:12:7b:8e:a5:22:87:8f:6e:77:8e:06:3d:c6:ec: c0:0a:3e:5b:82:8c:ae:de:48:ae:30:64:89:b2:f2: 24:36:3a:8c:f8:e2:6b:a4:56:6a:ef:7c:68:70:ea: 3e:ba:47:33:98:85:72:e1:c0:73:92:22:50:65:b2: 25:92:9c:f1:b8:4c:07:29:53:13:7c:fc:bc:61:d5: 15:10:dd:5a:41:2f:72:e0:f1:3a:a4:44:2e:8c:ba: af:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:42:C6:BF:E1:C7:F9:CE:7D:0B:DB:8B:00:D9:3D:5B:9D:D2:FB:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/904ceba7-b579-3c99-8cd9-888809197be5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:47:2f:be:0a:cc:35:4b:ff:ef:b0:eb:d2:5c:e2:51:f9:ac: 23:55:58:6d:31:92:bd:ca:01:53:7e:29:99:56:a0:42:42:9b: 4f:ea:d9:ee:6e:8b:cf:b0:dc:c9:cf:3b:a2:12:89:5f:41:a2: d0:d1:1f:05:68:76:1d:e0:af:4b:71:94:49:4f:c6:ed:80:69: 7e:db:b8:45:0e:85:d2:3e:4a:07:b7:d2:fb:c9:cf:48:6e:8c: 9f:f3:52:e9:5d:af:dd:d3:cb:a6:bc:86:be:2d:6f:2d:fe:60: 8a:28:e0:c4:b9:4b:74:6f:02:f5:9a:f6:2b:84:a0:ec:61:dd: b6:07:5e:31:eb:65:9b:d7:2f:07:b4:96:38:4c:95:3e:13:ef: b9:6b:20:e8:fe:ae:bd:8c:4f:7e:49:3f:5d:13:31:55:a8:3a: 01:51:4d:e9:b8:d0:f2:04:dd:3b:14:c2:28:99:f5:92:94:47: 14:03:18:d3:3c:42:7c:86:4e:df:1a:45:f9:f3:c3:57:87:7b: 5e:5b:48:1c:f9:3d:8a:f4:69:48:cb:41:12:e1:45:c3:d5:c1: 36:bd:63:45:f1:75:dc:93:b5:71:64:5e:8c:2f:7a:8d:d0:1c: 05:02:ff:12:5c:d0:d7:48:f0:21:57:56:02:15:84:1a:d7:db: c9:81:fc:f2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZPuCxdHDqdhryAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk YjMxOTliM2EtMjY0Zi00YTU2LWFkMWMtY2IyYTEzOGYxZjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRmnf9vlh3AdPGTV68S1ONgV30IWG9XedE4Q yuOViGSg7sZMSPGAOhARgVRAX7q9x3opNspSZxcy3tl8SC+SypFDCNU73JSDP4mb rXPYFkgk5VNoc7iSp16zvBNf0j6/oWkooehjaktfAb4uAFpy7xd+90Ntls4SjTK0 C6deNh5EZ7cIzCsB7UxNoB892bv6Tse7NfPjSUfAcD+E0z7v853+BLzUEnuOpSKH j253jgY9xuzACj5bgoyu3kiuMGSJsvIkNjqM+OJrpFZq73xocOo+ukczmIVy4cBz kiJQZbIlkpzxuEwHKVMTfPy8YdUVEN1aQS9y4PE6pEQujLqvUwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGVCxr/hx/nOfQvbiwDZPVud0vs5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTA0Y2ViYTctYjU3OS0z Yzk5LThjZDktODg4ODA5MTk3YmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBdRy++Csw1S//vsOvSXOJR+awjVVhtMZK9ygFTfimZVqBCQptP6tnu bovPsNzJzzuiEolfQaLQ0R8FaHYd4K9LcZRJT8btgGl+27hFDoXSPkoHt9L7yc9I boyf81LpXa/d08umvIa+LW8t/mCKKODEuUt0bwL1mvYrhKDsYd22B14x62Wb1y8H tJY4TJU+E++5ayDo/q69jE9+ST9dEzFVqDoBUU3puNDyBN07FMIomfWSlEcUAxjT PEJ8hk7fGkX588NXh3teW0gc+T2K9GlIy0ES4UXD1cE2vWNF8XXck7VxZF6ML3qN 0BwFAv8SXNDXSPAhV1YCFYQa19vJgfzy -----END CERTIFICATE-----Generated at Thu Mar 26 20:27:14 2026 by rpki-client