$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b2233f1-a54f-37cc-beaf-2acda7a3f4ac.roa File: 9b2233f1-a54f-37cc-beaf-2acda7a3f4ac.roa (raw, json) Hash identifier: aNRCoNksyiCwXnL1El59IgYmatN7mE+f69csn1UNepY= Subject key identifier: FA:63:02:A5:97:A5:37:AA:B8:7B:94:EC:47:02:76:94:A0:3B:84:78 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64FBF5B4FE9FE205F49300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b2233f1-a54f-37cc-beaf-2acda7a3f4ac.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 36618 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:fb:f5:b4:fe:9f:e2:05:f4:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=43391371-2b9c-44a8-a91d-5348873038d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d2:11:9a:0f:fa:34:20:95:c1:d8:ac:37:e7: 92:a0:7a:4a:8b:10:4a:04:0d:33:0f:32:c5:bd:4b: e3:b0:1f:ce:e6:ea:98:41:dc:8b:a1:00:6b:75:64: c7:bd:85:ce:23:8e:ef:cb:46:dd:a3:3c:0e:a0:28: 2d:3d:f8:93:db:e2:6f:94:30:33:ca:11:69:c7:2a: c9:b4:a8:3d:1f:e8:57:7e:49:98:68:a9:a7:e4:20: bc:1e:22:9d:29:89:e6:47:41:d7:2e:31:15:49:9c: 66:30:59:3b:1a:b7:8e:a2:ef:76:7b:43:e6:32:3f: ad:a4:98:36:0f:94:0c:d4:d1:37:29:1d:28:6d:f8: fe:71:a2:8e:eb:e5:ab:2b:7b:62:d1:6c:90:c2:46: 1e:47:50:d0:9d:dd:2d:4f:ae:00:fb:dd:59:35:03: a7:40:26:c5:f3:87:33:5c:47:5f:52:22:35:49:a9: 17:a0:9d:fb:ca:97:4d:9e:a7:63:91:18:bb:af:3e: 39:2b:06:b0:6c:73:2e:5d:45:36:a4:a3:bb:3c:d7: 48:db:4f:4c:52:29:2a:f3:04:f1:63:1f:ac:10:c0: c1:67:b3:b9:7a:14:be:68:4b:8e:ae:9f:c1:d4:62: ef:55:21:df:5e:cc:50:65:82:14:e0:9d:c9:1c:6d: de:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:63:02:A5:97:A5:37:AA:B8:7B:94:EC:47:02:76:94:A0:3B:84:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b2233f1-a54f-37cc-beaf-2acda7a3f4ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:bf:f4:14:3b:0d:0d:38:a2:45:d9:04:2c:dc:a1:60:96:db: 81:8e:4f:ac:28:17:44:ee:6a:0d:e5:1a:4c:3b:57:fa:76:99: 90:a1:e6:88:9e:22:9a:90:c4:f2:f1:ab:f3:0d:06:4e:f3:c0: a9:34:13:38:a0:ff:67:72:f3:3f:a7:30:38:1d:7d:18:5b:e2: d5:ba:b1:81:3a:0b:26:1c:25:40:c2:d0:45:00:8c:46:d1:90: c3:8d:48:5f:3e:02:4c:ad:58:3f:fe:84:2a:e8:91:37:f1:82: 49:e0:a6:92:46:c4:ad:7e:1d:5a:a6:cf:9d:7f:27:85:21:a4: f9:a5:e3:a9:36:d4:c2:1e:b0:02:07:93:d8:9e:46:aa:3b:12: 0e:1e:7e:bd:38:6e:80:80:53:4f:3e:d4:69:fa:a0:d7:10:9d: 35:e8:ed:69:17:0c:d1:35:42:99:e9:20:eb:07:c5:73:5d:ce: 2e:35:72:15:73:99:38:d0:e7:42:53:a8:d3:17:c4:85:bd:38: 7c:1f:e8:3d:65:3e:29:5a:4e:e4:01:1e:e0:e1:a8:32:e7:51: c9:33:2a:60:a8:0f:60:d5:d6:8f:0d:8e:df:83:91:e1:9d:b3: eb:34:d7:2f:d9:28:7d:99:2f:b0:6a:90:4c:16:8c:e1:d8:f2: b9:fd:eb:2e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZPv1tP6f4gX0kwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NDMzOTEzNzEtMmI5Yy00NGE4LWE5MWQtNTM0ODg3MzAzOGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdIRmg/6NCCVwdisN+eSoHpKixBKBA0zDzLF vUvjsB/O5uqYQdyLoQBrdWTHvYXOI47vy0bdozwOoCgtPfiT2+JvlDAzyhFpxyrJ tKg9H+hXfkmYaKmn5CC8HiKdKYnmR0HXLjEVSZxmMFk7GreOou92e0PmMj+tpJg2 D5QM1NE3KR0obfj+caKO6+WrK3ti0WyQwkYeR1DQnd0tT64A+91ZNQOnQCbF84cz XEdfUiI1SakXoJ37ypdNnqdjkRi7rz45KwawbHMuXUU2pKO7PNdI209MUikq8wTx Yx+sEMDBZ7O5ehS+aEuOrp/B1GLvVSHfXsxQZYIU4J3JHG3esQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPpjAqWXpTequHuU7EcCdpSgO4R4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWIyMjMzZjEtYTU0Zi0z N2NjLWJlYWYtMmFjZGE3YTNmNGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAPv/QUOw0NOKJF2QQs3KFgltuBjk+sKBdE7moN5RpMO1f6dpmQoeaI niKakMTy8avzDQZO88CpNBM4oP9ncvM/pzA4HX0YW+LVurGBOgsmHCVAwtBFAIxG 0ZDDjUhfPgJMrVg//oQq6JE38YJJ4KaSRsStfh1aps+dfyeFIaT5peOpNtTCHrAC B5PYnkaqOxIOHn69OG6AgFNPPtRp+qDXEJ016O1pFwzRNUKZ6SDrB8VzXc4uNXIV c5k40OdCU6jTF8SFvTh8H+g9ZT4pWk7kAR7g4agy51HJMypgqA9g1daPDY7fg5Hh nbPrNNcv2Sh9mS+wapBMFozh2PK5/esu -----END CERTIFICATE-----Generated at Thu Mar 26 13:51:04 2026 by rpki-client