$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4929e82-06a7-3c2d-85b3-300947e9fa74.roa File: a4929e82-06a7-3c2d-85b3-300947e9fa74.roa (raw, json) Hash identifier: xceEHOoKuMTLzYX9CzkKG6O99C3EHV4uwFiOq5ZVOkQ= Subject key identifier: 93:7C:A7:97:B9:52:A0:FD:3D:53:16:7A:E4:AF:ED:C0:2B:CB:30:2A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2D3F9A6024A6B99B12204440 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4929e82-06a7-3c2d-85b3-300947e9fa74.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 397198 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:9a:60:24:a6:b9:9b:12:20:44:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=ac67efb2-60e6-47ae-bcf3-61f058bb97bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bb:33:c8:21:14:42:db:e9:4a:a0:4b:87:c5: bf:ca:e1:d6:3a:be:f9:80:b8:0d:94:a7:e1:4e:29: 77:d9:8f:97:83:71:86:95:cf:4f:d2:69:a0:2a:11: 36:39:21:e7:0e:c0:40:66:6c:7a:c6:9e:ed:4f:fe: a4:65:d1:46:9a:ec:86:3c:4b:fd:23:9b:85:de:0b: fa:9a:ad:06:5a:9a:a5:a9:b9:ad:3d:15:80:26:3e: 33:f2:0b:0c:be:99:e4:fc:7d:f4:61:f9:1b:81:2d: 72:a1:d1:59:3e:79:29:81:26:b5:38:26:0f:75:c3: b8:bc:44:13:0f:2b:f2:01:a3:50:e3:fe:a2:45:35: d5:2a:3a:9e:b2:5a:ab:4a:b3:dd:7e:a8:93:e4:5b: ae:75:89:83:68:a1:61:54:17:57:7a:bc:a3:df:2c: 76:eb:14:bf:6a:12:1c:25:2d:ab:1a:b1:22:3e:87: a5:30:d6:72:06:b2:f3:e8:64:08:ef:34:91:bc:e6: 7d:96:0e:bf:0a:d8:75:d9:99:e0:24:85:92:4b:10: c0:92:1d:86:4b:52:0c:8b:d6:0a:ad:02:0e:a9:00: 85:95:7f:9b:14:e9:e4:a8:ba:0b:a5:42:17:ff:b9: c8:e6:59:b8:3e:dd:fd:22:8f:2c:9d:5c:4f:cb:50: 97:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7C:A7:97:B9:52:A0:FD:3D:53:16:7A:E4:AF:ED:C0:2B:CB:30:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4929e82-06a7-3c2d-85b3-300947e9fa74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:21:1c:dc:e0:36:52:5a:17:26:4c:6f:d7:4a:6e:2f:52:96: 45:1b:a2:d8:57:2c:fe:c3:ae:41:bf:62:d7:de:7b:90:1d:60: ae:a4:fb:52:a8:7f:e1:3d:29:0d:d9:ff:a2:d3:0c:cd:be:ed: 26:6d:f2:74:0d:a2:58:f8:be:4f:33:51:77:b9:c7:43:c4:0f: 8e:16:97:91:fb:45:1f:2d:2c:aa:3e:5d:66:a6:eb:4e:36:cc: 5b:ff:b9:5c:ce:40:d4:9f:48:15:51:e1:26:af:ef:82:c5:0b: e9:0b:73:13:cc:31:dc:4f:30:98:c8:3c:11:11:8a:ea:e3:f2: 17:81:e1:50:19:28:fc:67:d9:2a:8f:c0:9b:04:2e:4a:37:17: 64:01:7c:92:cb:0a:1b:cb:7a:ab:ad:fd:41:c5:61:48:49:eb: 67:f9:25:57:c5:77:9d:d0:d1:1a:98:93:b1:42:61:3e:e8:22: 34:2a:a7:df:26:02:80:b8:fe:6b:9a:89:d2:07:f3:4b:de:6b: 89:31:82:89:94:78:0e:9d:9b:91:99:94:8b:4e:01:49:69:ec: 42:be:bf:3f:c6:cb:ae:c9:c3:3f:2e:95:e2:74:f2:92:60:2a: 1b:b1:1f:de:bf:33:04:e9:d5:48:38:a3:4e:9c:b9:eb:05:65: 3e:43:e8:20 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0tP5pgJKa5mxIgREAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk YWM2N2VmYjItNjBlNi00N2FlLWJjZjMtNjFmMDU4YmI5N2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrszyCEUQtvpSqBLh8W/yuHWOr75gLgNlKfh Til32Y+Xg3GGlc9P0mmgKhE2OSHnDsBAZmx6xp7tT/6kZdFGmuyGPEv9I5uF3gv6 mq0GWpqlqbmtPRWAJj4z8gsMvpnk/H30YfkbgS1yodFZPnkpgSa1OCYPdcO4vEQT DyvyAaNQ4/6iRTXVKjqeslqrSrPdfqiT5FuudYmDaKFhVBdXeryj3yx26xS/ahIc JS2rGrEiPoelMNZyBrLz6GQI7zSRvOZ9lg6/Cth12ZngJIWSSxDAkh2GS1IMi9YK rQIOqQCFlX+bFOnkqLoLpUIX/7nI5lm4Pt39Io8snVxPy1CXUQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJN8p5e5UqD9PVMWeuSv7cAryzAqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTQ5MjllODItMDZhNy0z YzJkLTg1YjMtMzAwOTQ3ZTlmYTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAdIRzc4DZSWhcmTG/XSm4vUpZFG6LYVyz+w65Bv2LX3nuQHWCupPtS qH/hPSkN2f+i0wzNvu0mbfJ0DaJY+L5PM1F3ucdDxA+OFpeR+0UfLSyqPl1mputO Nsxb/7lczkDUn0gVUeEmr++CxQvpC3MTzDHcTzCYyDwREYrq4/IXgeFQGSj8Z9kq j8CbBC5KNxdkAXySywoby3qrrf1BxWFISetn+SVXxXed0NEamJOxQmE+6CI0Kqff JgKAuP5rmonSB/NL3muJMYKJlHgOnZuRmZSLTgFJaexCvr8/xsuuycM/LpXidPKS YCobsR/evzME6dVIOKNOnLnrBWU+Q+gg -----END CERTIFICATE-----Generated at Thu Mar 26 23:02:30 2026 by rpki-client