$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95d47af1-a8f2-314d-a811-9e23e7952635.roa File: 95d47af1-a8f2-314d-a811-9e23e7952635.roa (raw, json) Hash identifier: N59sJByrwsfvDdsNKyn8VJmIbnVVxAswMAsDozNyJYE= Subject key identifier: 5C:BC:80:47:BD:01:CE:36:1B:AD:C3:1E:11:A7:1E:3C:53:B8:B6:8C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64FE7F19434BABF5DDA1D0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95d47af1-a8f2-314d-a811-9e23e7952635.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 396596 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:fe:7f:19:43:4b:ab:f5:dd:a1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=d09f0678-1a0a-451a-a56d-1cf1eb1a7335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0e:c0:07:15:ac:e7:ab:2e:d4:d6:c5:32:dc: be:da:be:5b:66:74:68:c0:f5:04:1a:c6:db:bf:33: 24:10:c3:fb:f8:05:ee:05:db:dc:5c:f1:90:9a:67: 33:66:7e:ed:32:d5:c3:25:6e:ea:84:ce:58:a7:99: 93:f2:e6:d4:ab:33:9e:8c:07:8e:e3:51:9c:a5:c9: c1:c0:c7:2e:11:f4:85:b6:08:8a:39:cf:2e:61:66: f8:a5:25:84:ca:57:36:51:e5:46:e5:e0:59:75:36: 3f:48:db:7c:df:72:9d:d1:a9:64:e7:79:65:1b:fd: 90:ee:75:b1:3d:f8:a8:44:d7:af:e5:94:bb:a3:97: ca:23:47:2a:53:78:70:40:f2:c4:89:b4:ad:08:e4: df:3f:b2:33:3c:e3:95:14:c4:b1:33:26:7c:15:33: 00:3d:db:e0:ce:4a:0a:69:20:02:7f:69:38:2c:3b: 16:ab:b5:89:95:c1:4f:0e:a2:7b:62:b8:a6:38:e8: 3d:31:9e:b2:3e:5e:e4:95:21:e5:99:32:a3:65:e8: 75:85:cb:de:b1:c6:3a:9a:01:66:cc:08:69:dc:9b: a3:d6:52:9d:d4:bb:2a:2b:c0:4a:e3:61:36:fc:ae: 60:b0:5f:bb:0e:97:8b:3f:5b:aa:ff:89:ae:bd:4e: 8a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BC:80:47:BD:01:CE:36:1B:AD:C3:1E:11:A7:1E:3C:53:B8:B6:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95d47af1-a8f2-314d-a811-9e23e7952635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:4c:2e:bd:a0:d1:87:db:05:f2:f4:29:8a:4b:6c:18:be:13: 2a:e4:e1:cb:02:5f:53:c1:23:a2:46:ac:a1:b0:bd:c9:59:03: bb:9a:1d:19:ca:b7:cc:9d:84:5d:af:ec:2c:69:43:e3:77:f7: ec:d7:58:f7:f3:be:55:35:52:49:f2:fb:c6:16:51:d1:1a:d9: 84:3e:d8:33:03:34:b1:e2:4b:b0:53:cd:2f:ab:2a:d0:38:f1: af:9c:6e:0c:13:de:00:4e:71:fe:aa:12:40:d6:ee:c7:75:cf: 3a:20:0c:71:a9:32:68:5a:ec:0b:e5:2d:49:7e:7b:6c:ce:74: 4a:a6:fb:81:77:30:4b:9d:d3:de:8a:5b:8a:02:b3:7e:02:58: af:9a:99:e6:b4:38:37:0c:d1:73:67:73:3e:54:dd:55:67:ad: 67:c0:fe:ad:57:41:91:39:90:19:10:b0:dd:e2:81:62:19:cf: 0b:35:e4:23:3c:88:5e:9f:bc:5d:d0:65:de:53:f3:e7:07:f2: 21:a8:ee:09:ff:94:37:53:f0:52:42:9a:b3:36:59:d0:27:18: 1a:72:b7:1d:b6:12:65:3c:cb:88:a8:42:1e:54:36:f3:44:b0: 98:3b:40:6a:6a:20:e7:87:c5:dc:19:7b:4b:c8:7b:40:62:8a: f3:14:88:fc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZP5/GUNLq/XdodAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ZDA5ZjA2NzgtMWEwYS00NTFhLWE1NmQtMWNmMWViMWE3MzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg7ABxWs56su1NbFMty+2r5bZnRowPUEGsbb vzMkEMP7+AXuBdvcXPGQmmczZn7tMtXDJW7qhM5Yp5mT8ubUqzOejAeO41GcpcnB wMcuEfSFtgiKOc8uYWb4pSWEylc2UeVG5eBZdTY/SNt833Kd0alk53llG/2Q7nWx PfioRNev5ZS7o5fKI0cqU3hwQPLEibStCOTfP7IzPOOVFMSxMyZ8FTMAPdvgzkoK aSACf2k4LDsWq7WJlcFPDqJ7YrimOOg9MZ6yPl7klSHlmTKjZeh1hcvescY6mgFm zAhp3Juj1lKd1LsqK8BK42E2/K5gsF+7DpeLP1uq/4muvU6KLwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFy8gEe9Ac42G63DHhGnHjxTuLaMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTVkNDdhZjEtYThmMi0z MTRkLWE4MTEtOWUyM2U3OTUyNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAETC69oNGH2wXy9CmKS2wYvhMq5OHLAl9TwSOiRqyhsL3JWQO7mh0Z yrfMnYRdr+wsaUPjd/fs11j3875VNVJJ8vvGFlHRGtmEPtgzAzSx4kuwU80vqyrQ OPGvnG4ME94ATnH+qhJA1u7Hdc86IAxxqTJoWuwL5S1JfntsznRKpvuBdzBLndPe iluKArN+AlivmpnmtDg3DNFzZ3M+VN1VZ61nwP6tV0GROZAZELDd4oFiGc8LNeQj PIhen7xd0GXeU/PnB/IhqO4J/5Q3U/BSQpqzNlnQJxgacrcdthJlPMuIqEIeVDbz RLCYO0BqaiDnh8XcGXtLyHtAYorzFIj8 -----END CERTIFICATE-----Generated at Thu Mar 26 11:17:48 2026 by rpki-client