$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a011fb90-0047-30f5-a837-cab1b56549ab.roa File: a011fb90-0047-30f5-a837-cab1b56549ab.roa (raw, json) Hash identifier: mE5+ICIZQAswJwqfdqGwu77q3jAyeQ2lbYVWL2jRxak= Subject key identifier: E2:04:46:49:B1:FD:CD:9E:B1:6F:61:F9:9B:FC:7B:59:17:65:99:D6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64FEAD335AAD3F9FF8AD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a011fb90-0047-30f5-a837-cab1b56549ab.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 396551 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:fe:ad:33:5a:ad:3f:9f:f8:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=c8fffb85-69fa-4b93-a60e-5385e94d04f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:00:25:1f:45:ab:f0:94:ad:8e:41:6e:b1:69: 59:84:9a:18:37:d1:b0:32:14:4c:0a:c6:94:62:9f: d5:27:dd:f7:a7:0c:11:1e:61:0e:1f:53:9c:25:c7: b7:92:78:87:32:8d:af:3e:7d:db:b1:69:83:18:70: 4f:e5:0d:c5:2f:6f:22:c3:08:ea:84:e2:3b:78:dc: bc:3e:3d:20:08:89:bd:1c:1b:70:92:83:07:bd:0c: aa:3e:cb:9d:35:a2:1c:d5:ee:19:12:16:09:bc:1b: cf:03:45:64:9a:a1:b0:83:57:f6:ff:6f:fd:9b:6e: 99:38:89:6b:af:1c:3d:0e:2e:6d:bd:b5:cc:cb:07: 4d:32:3f:47:fe:c8:37:65:d9:31:ef:7f:9d:c1:72: cb:c8:5e:ba:84:28:6b:ed:33:77:3e:89:e7:9e:69: f1:99:85:86:66:7f:2c:20:f0:0c:45:1a:d1:cd:f9: 86:24:f2:0d:a3:f1:75:01:28:fb:c7:05:d6:2c:5d: e5:44:d9:ff:98:c3:95:dd:bf:7b:ba:57:ea:c2:6f: 4a:7c:cb:12:94:66:fb:72:17:d7:50:d3:fb:ad:7e: 1f:57:cb:91:31:d9:25:8a:dd:02:53:10:dc:1e:fc: 9f:ec:ac:8a:09:56:f7:a6:9b:18:c5:d5:2e:06:ad: 3b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:04:46:49:B1:FD:CD:9E:B1:6F:61:F9:9B:FC:7B:59:17:65:99:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a011fb90-0047-30f5-a837-cab1b56549ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:8f:fa:bb:5f:a7:7f:82:cf:b5:3e:ea:c1:f7:8e:3e:e5:ad: 21:ee:1a:0e:e6:16:c1:ac:60:c2:65:52:3f:00:08:b1:a9:6f: 27:5d:b3:3c:3b:3a:d3:bd:bc:72:fe:d9:04:5e:f8:4f:66:a0: 30:7c:59:1c:3a:9e:dc:6f:28:67:48:9b:d1:3b:05:51:bf:d7: d3:d3:87:7b:ff:b0:d3:04:6c:b6:aa:3a:2b:2a:3b:6a:5c:7e: 4d:ba:74:a3:9e:c3:fa:0c:33:e9:ff:6c:8d:27:20:d2:38:c0: f0:8a:01:45:f2:55:a6:a2:41:f8:ca:42:ed:98:de:7e:01:77: 39:56:4f:b7:04:c8:56:a6:41:a0:df:fb:5e:62:f2:ce:1a:b6: d5:7e:c5:f5:83:13:77:b1:d5:f2:d2:05:31:51:99:39:a2:d1: f7:f3:b0:51:47:83:53:66:da:cd:ba:20:29:78:92:fe:1d:e2: 00:8a:02:08:49:ed:98:86:ba:5e:0b:f1:ec:44:70:70:12:8d: 96:66:fc:2d:0a:93:35:2a:4e:21:2d:21:1d:ad:67:30:92:63: a5:9e:24:90:eb:0c:3f:04:02:5c:93:c9:52:02:f9:c3:a0:fc: 3c:e6:df:c6:8f:f8:46:28:85:bc:c6:6a:97:7a:80:5b:c3:5a: 59:12:9a:7b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZP6tM1qtP5/4rYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk YzhmZmZiODUtNjlmYS00YjkzLWE2MGUtNTM4NWU5NGQwNGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgAlH0Wr8JStjkFusWlZhJoYN9GwMhRMCsaU Yp/VJ933pwwRHmEOH1OcJce3kniHMo2vPn3bsWmDGHBP5Q3FL28iwwjqhOI7eNy8 Pj0gCIm9HBtwkoMHvQyqPsudNaIc1e4ZEhYJvBvPA0VkmqGwg1f2/2/9m26ZOIlr rxw9Di5tvbXMywdNMj9H/sg3Zdkx73+dwXLLyF66hChr7TN3PonnnmnxmYWGZn8s IPAMRRrRzfmGJPINo/F1ASj7xwXWLF3lRNn/mMOV3b97ulfqwm9KfMsSlGb7chfX UNP7rX4fV8uRMdklit0CUxDcHvyf7KyKCVb3ppsYxdUuBq07uwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOIERkmx/c2esW9h+Zv8e1kXZZnWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTAxMWZiOTAtMDA0Ny0z MGY1LWE4MzctY2FiMWI1NjU0OWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB5j/q7X6d/gs+1PurB944+5a0h7hoO5hbBrGDCZVI/AAixqW8nXbM8 OzrTvbxy/tkEXvhPZqAwfFkcOp7cbyhnSJvROwVRv9fT04d7/7DTBGy2qjorKjtq XH5NunSjnsP6DDPp/2yNJyDSOMDwigFF8lWmokH4ykLtmN5+AXc5Vk+3BMhWpkGg 3/teYvLOGrbVfsX1gxN3sdXy0gUxUZk5otH387BRR4NTZtrNuiApeJL+HeIAigII Se2YhrpeC/HsRHBwEo2WZvwtCpM1Kk4hLSEdrWcwkmOlniSQ6ww/BAJck8lSAvnD oPw85t/Gj/hGKIW8xmqXeoBbw1pZEpp7 -----END CERTIFICATE-----Generated at Thu Mar 26 11:15:59 2026 by rpki-client