$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a57ef3f6-66a3-3c7d-9c97-1fe5d6a438d2.roa File: a57ef3f6-66a3-3c7d-9c97-1fe5d6a438d2.roa (raw, json) Hash identifier: 3dR4CmIMMib0pY6P5Cqgczrj6dz7AMR77d8iUvQCfC0= Subject key identifier: B4:3E:9D:6D:AE:86:56:0A:F7:1C:41:94:B7:EA:63:EE:6C:07:4D:AF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2D3F9B471022D6F2A3F413E8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a57ef3f6-66a3-3c7d-9c97-1fe5d6a438d2.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 36624 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:9b:47:10:22:d6:f2:a3:f4:13:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=244a75dd-52bb-46f0-b61b-381c9cdbdd4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e3:4d:b2:ab:4d:5c:6b:e0:97:67:a3:96:d9: 1c:ce:af:92:84:32:4e:99:56:e5:dd:a9:56:7c:08: f6:6b:aa:4a:85:5a:08:73:d1:3f:46:75:1e:ba:a8: cd:d3:9c:44:ba:9e:85:78:f3:c4:b4:0d:d5:41:dc: 41:f2:c6:d3:bd:aa:75:53:39:83:c8:cb:9e:e5:ef: 04:26:5f:93:f2:d3:f9:5e:c0:8f:eb:d3:ad:e3:76: 45:ba:0f:b5:92:76:7a:33:80:46:db:2b:f2:84:93: b0:99:cc:db:7e:45:3d:1d:cb:bd:e1:d2:3d:dd:af: 3d:2d:5e:37:96:69:87:46:1b:2f:31:ad:63:78:cf: 6f:90:1e:ff:1d:9a:e0:6c:71:04:33:df:83:3a:07: b6:a0:26:4d:99:95:5a:0e:31:f2:ec:8e:2d:44:c8: 84:fb:70:ec:a7:3f:b2:5d:6f:55:57:69:58:c2:65: 8b:d5:a3:78:d0:1d:4f:ab:23:ac:b8:82:ba:25:a6: f3:9c:9c:42:24:e3:8b:63:6a:33:fa:13:04:99:d2: 82:36:11:35:88:1e:bb:80:e6:df:3e:f0:f9:fe:a8: 9b:b5:08:99:b3:4d:37:f7:bc:5c:89:b6:cc:15:eb: f2:38:7f:06:52:d4:10:bf:99:aa:1a:e0:4c:92:d9: 99:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3E:9D:6D:AE:86:56:0A:F7:1C:41:94:B7:EA:63:EE:6C:07:4D:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a57ef3f6-66a3-3c7d-9c97-1fe5d6a438d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:88:f1:f4:2f:43:d4:e8:f4:42:ec:4e:66:1d:6a:ed:a8:ff: 67:73:ce:79:37:91:53:a0:ce:4e:f0:49:b4:c6:c9:b0:8f:78: c8:3c:9a:69:72:86:24:41:e5:0b:15:f3:11:21:e9:1e:ed:0c: 36:70:8e:23:1a:1f:32:9a:47:cd:19:96:69:98:44:bd:04:32: 2f:f9:a9:ab:89:ad:8e:90:3b:f0:51:2e:79:ba:df:c0:ca:93: ac:bf:49:be:45:8e:33:98:36:12:75:40:6a:2a:c3:9e:5b:c5: 82:47:e4:19:d9:56:21:4d:17:0a:78:5e:26:ba:5b:50:ae:ac: ea:65:68:18:1c:db:ce:6c:4e:81:20:2b:09:b7:bf:43:ab:79: 20:bc:c9:d9:35:1b:22:96:24:4d:17:99:aa:28:0d:2a:ae:f5: 95:fb:1c:80:55:3d:8d:f5:a6:ce:89:8f:cc:ba:aa:c1:19:82: 61:52:ee:0c:61:66:e8:07:5b:c4:01:07:41:63:b6:1a:b1:48: df:9a:b4:15:87:37:8a:73:2c:0c:5d:1b:06:d7:39:85:78:74: 97:dc:70:23:69:8a:37:e2:6e:83:a5:65:48:2b:f1:c8:de:39: 28:50:73:33:da:3e:05:1e:27:80:86:44:de:63:71:cb:bf:8f: 57:d0:f6:31 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0tP5tHECLW8qP0E+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk MjQ0YTc1ZGQtNTJiYi00NmYwLWI2MWItMzgxYzljZGJkZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheNNsqtNXGvgl2ejltkczq+ShDJOmVbl3alW fAj2a6pKhVoIc9E/RnUeuqjN05xEup6FePPEtA3VQdxB8sbTvap1UzmDyMue5e8E Jl+T8tP5XsCP69Ot43ZFug+1knZ6M4BG2yvyhJOwmczbfkU9Hcu94dI93a89LV43 lmmHRhsvMa1jeM9vkB7/HZrgbHEEM9+DOge2oCZNmZVaDjHy7I4tRMiE+3Dspz+y XW9VV2lYwmWL1aN40B1PqyOsuIK6JabznJxCJOOLY2oz+hMEmdKCNhE1iB67gObf PvD5/qibtQiZs00397xcibbMFevyOH8GUtQQv5mqGuBMktmZFwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLQ+nW2uhlYK9xxBlLfqY+5sB02vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTU3ZWYzZjYtNjZhMy0z YzdkLTljOTctMWZlNWQ2YTQzOGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBUiPH0L0PU6PRC7E5mHWrtqP9nc855N5FToM5O8Em0xsmwj3jIPJpp coYkQeULFfMRIeke7Qw2cI4jGh8ymkfNGZZpmES9BDIv+amria2OkDvwUS55ut/A ypOsv0m+RY4zmDYSdUBqKsOeW8WCR+QZ2VYhTRcKeF4multQrqzqZWgYHNvObE6B ICsJt79Dq3kgvMnZNRsiliRNF5mqKA0qrvWV+xyAVT2N9abOiY/MuqrBGYJhUu4M YWboB1vEAQdBY7YasUjfmrQVhzeKcywMXRsG1zmFeHSX3HAjaYo34m6DpWVIK/HI 3jkoUHMz2j4FHieAhkTeY3HLv49X0PYx -----END CERTIFICATE-----Generated at Thu Mar 26 13:51:07 2026 by rpki-client