$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a159a91f-8956-3df2-8be2-9a8e8214d926.roa File: a159a91f-8956-3df2-8be2-9a8e8214d926.roa (raw, json) Hash identifier: eoXKp7jPoECVs+aE0ePyglo0mdPbfpoOvOxw7mpq8o4= Subject key identifier: F2:1F:E3:7F:33:61:03:27:3B:7E:3E:19:10:8D:73:12:12:AB:38:74 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64FC57CF63CC546E6A4200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a159a91f-8956-3df2-8be2-9a8e8214d926.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 397193 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:fc:57:cf:63:cc:54:6e:6a:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=8f4fa640-1c74-45bd-941e-b398e19618ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a6:05:0e:46:9a:44:64:72:27:f3:f5:a7:f7: a9:30:30:83:ba:22:3e:77:c4:4f:46:bc:5f:50:3f: f3:ea:81:86:96:ee:29:c5:bd:64:57:47:d6:d1:92: 39:d5:eb:46:7f:08:6f:44:94:f8:8e:87:b2:94:c8: 60:22:fe:8b:1e:67:9d:a1:e8:2e:2a:84:37:e5:05: f4:92:52:a8:ef:5e:bb:d2:50:01:ac:a3:1d:fb:18: 2a:ef:42:5f:4d:c3:5e:97:4c:69:d7:9a:24:47:05: 4c:94:0c:46:83:f3:43:55:8c:79:f6:8f:21:f5:21: 3e:2b:37:b4:bd:1b:73:14:34:0e:9c:2c:e9:a0:9a: 89:75:ec:1e:18:e3:0a:b4:81:83:dc:1b:dc:d2:93: 06:fb:d2:38:f2:84:a1:21:ca:fa:ee:f8:07:81:de: ac:34:02:21:eb:4a:4f:14:c7:de:e3:76:2e:69:1f: 25:12:92:80:4a:ce:56:8d:f0:3f:00:53:cb:21:a8: 1c:17:b7:7e:a6:cf:06:32:8f:f6:72:b2:5b:ba:86: 31:20:89:8b:c9:e6:24:f8:ac:d8:61:83:e6:e4:13: 54:62:9c:68:5a:06:f9:56:20:21:71:80:9d:83:50: bf:35:40:7d:8d:c9:74:00:7a:f5:96:a3:54:51:a6: a4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1F:E3:7F:33:61:03:27:3B:7E:3E:19:10:8D:73:12:12:AB:38:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a159a91f-8956-3df2-8be2-9a8e8214d926.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:86:f2:a5:5d:6e:52:e9:5c:b2:dc:e2:b9:bc:fd:ce:3b:92: cf:40:7c:65:e6:53:bb:18:d2:54:37:25:b3:27:01:d5:d0:8a: dd:e7:37:ca:70:d3:b3:8d:db:96:26:67:fc:cf:a5:cf:19:50: 0c:53:71:a0:9c:cd:84:7a:8a:d2:eb:d4:36:24:b4:97:65:26: 6b:4f:77:d8:f4:d8:9a:90:9b:43:2a:0b:58:23:c2:89:5b:e1: 14:8a:fd:7f:2b:0d:9d:6a:59:cb:28:5d:61:47:9c:53:45:d3: ce:96:68:94:ec:af:9d:51:39:5b:51:62:e1:f3:ee:30:13:cd: 9b:fd:c2:dc:d0:c4:5f:ba:fd:ec:88:ee:fe:d9:5a:1d:c0:31: 8a:fe:dd:0e:c1:b9:b6:ab:23:24:b3:b8:99:39:f4:f3:ba:0a: 27:f5:b8:ed:c6:5b:8e:2e:8f:d7:e9:26:42:5e:dd:1d:92:81: 7c:b8:dc:90:11:8c:21:c9:9a:90:61:8a:50:a9:09:73:af:bb: c3:39:89:95:52:82:78:35:e4:7c:5c:1e:e7:08:a8:3b:61:df: fe:c0:59:d2:4b:db:af:ae:b1:c8:c0:b7:15:9f:5a:f3:67:48: e3:00:23:66:b0:ae:ca:e7:b5:5b:ee:c4:10:94:81:d1:ec:56: f0:6d:48:4c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZPxXz2PMVG5qQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk OGY0ZmE2NDAtMWM3NC00NWJkLTk0MWUtYjM5OGUxOTYxOGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6YFDkaaRGRyJ/P1p/epMDCDuiI+d8RPRrxf UD/z6oGGlu4pxb1kV0fW0ZI51etGfwhvRJT4joeylMhgIv6LHmedoeguKoQ35QX0 klKo71670lABrKMd+xgq70JfTcNel0xp15okRwVMlAxGg/NDVYx59o8h9SE+Kze0 vRtzFDQOnCzpoJqJdeweGOMKtIGD3Bvc0pMG+9I48oShIcr67vgHgd6sNAIh60pP FMfe43YuaR8lEpKASs5WjfA/AFPLIagcF7d+ps8GMo/2crJbuoYxIImLyeYk+KzY YYPm5BNUYpxoWgb5ViAhcYCdg1C/NUB9jcl0AHr1lqNUUaakdQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPIf438zYQMnO34+GRCNcxISqzh0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTE1OWE5MWYtODk1Ni0z ZGYyLThiZTItOWE4ZTgyMTRkOTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCJhvKlXW5S6Vyy3OK5vP3OO5LPQHxl5lO7GNJUNyWzJwHV0Ird5zfK cNOzjduWJmf8z6XPGVAMU3GgnM2EeorS69Q2JLSXZSZrT3fY9NiakJtDKgtYI8KJ W+EUiv1/Kw2dalnLKF1hR5xTRdPOlmiU7K+dUTlbUWLh8+4wE82b/cLc0MRfuv3s iO7+2VodwDGK/t0Owbm2qyMks7iZOfTzugon9bjtxluOLo/X6SZCXt0dkoF8uNyQ EYwhyZqQYYpQqQlzr7vDOYmVUoJ4NeR8XB7nCKg7Yd/+wFnSS9uvrrHIwLcVn1rz Z0jjACNmsK7K57Vb7sQQlIHR7FbwbUhM -----END CERTIFICATE-----Generated at Thu Mar 26 11:19:02 2026 by rpki-client