$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5972f5e-b33f-33a5-a006-0fb616a1c0b2.roa File: a5972f5e-b33f-33a5-a006-0fb616a1c0b2.roa (raw, json) Hash identifier: N9WFVq++VxhxAG9fitWv90jxg/66K+e6dy5SurOubdw= Subject key identifier: CE:B9:D3:51:C6:A8:34:9A:48:27:3F:74:69:68:7D:66:E8:4A:BD:2E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64F925C0DAD962D4DF5A10 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5972f5e-b33f-33a5-a006-0fb616a1c0b2.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 396578 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:f9:25:c0:da:d9:62:d4:df:5a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=31cec5bb-eaa4-4283-aca6-251f7b5ec526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:36:e0:8a:51:9d:0b:eb:cf:ce:a2:69:10:69: 37:04:89:d0:69:9e:db:1f:f3:99:d9:6d:e4:d1:31: bc:38:96:42:c3:15:3f:22:89:e7:83:b0:38:6d:4b: 9e:fd:1a:bb:50:40:49:d1:c5:38:c5:47:c6:8b:87: cd:be:a0:12:2d:eb:b2:b0:c8:fb:94:f2:2c:6a:05: 8a:fa:53:f8:44:cb:d9:0f:a0:30:89:d7:f6:c2:b9: 48:81:e0:37:fc:2e:d5:bc:55:35:15:c9:a1:3c:ba: 2d:e2:45:d7:ad:f3:5a:a8:12:43:0f:da:6c:3a:92: db:8f:38:9b:22:30:3b:b2:d4:fe:45:15:b4:0c:df: 35:56:bf:00:3b:b1:e2:c1:41:3a:42:53:ec:79:39: b1:f7:cf:7c:c4:b9:ff:4d:07:a4:f8:14:83:52:cb: 25:76:97:20:ee:5a:bb:ae:f7:fb:71:b4:91:7f:e0: d5:6b:a9:e2:fe:5d:c0:ac:24:05:07:e6:36:79:26: 6e:36:71:74:19:06:0c:c7:a0:3e:44:28:8c:9c:3b: 29:1c:21:d6:12:78:0b:e9:b9:f5:c3:0c:a6:2c:f6: 5c:a8:0a:47:c0:b1:ec:68:3b:e4:a3:ad:3e:db:43: e5:d9:c6:b7:80:c4:f0:5b:06:f9:a4:da:ca:ea:83: 88:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B9:D3:51:C6:A8:34:9A:48:27:3F:74:69:68:7D:66:E8:4A:BD:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5972f5e-b33f-33a5-a006-0fb616a1c0b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:15:38:76:03:7c:27:51:35:94:81:6a:de:5e:41:1c:b1:c5: d5:88:ef:d3:00:32:42:eb:71:1c:65:48:5e:a2:fd:19:97:ca: cf:bf:6c:1c:1e:c1:e4:5f:46:36:32:88:d4:b8:ca:68:f5:9b: b9:28:fa:7c:7c:e5:83:43:f7:fc:4b:29:30:60:b3:42:77:f4: 8f:d9:af:71:cf:6d:bf:64:85:5d:40:fd:01:aa:ed:e8:ad:ff: 55:c1:3d:e8:ed:17:4b:bc:6a:cf:08:34:d8:bf:80:66:70:3a: 89:12:c7:76:1e:9b:9b:4e:8f:c6:5d:cf:20:58:26:f3:24:b0: 83:94:b9:c6:0d:18:dc:7e:b6:ad:2e:8c:76:04:09:ec:0b:e7: e4:e7:b9:0a:46:a9:89:29:67:65:f5:f4:86:92:6b:4f:75:09: 11:37:df:f6:d6:b0:cd:5a:23:b7:43:46:55:73:80:bf:1c:63: cc:6b:3e:1f:28:b4:7f:ff:ad:48:68:f6:62:74:05:65:16:9a: 19:46:f0:14:f4:47:20:fe:1a:62:ca:a2:f4:cf:75:30:0d:bd: 3c:53:4b:1f:b0:29:0a:65:ee:ac:da:0a:c7:c6:37:09:52:67: 72:83:79:8e:61:fa:58:e3:90:24:2e:4b:16:cc:28:0f:11:3e: 23:7d:28:c7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZPklwNrZYtTfWhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk MzFjZWM1YmItZWFhNC00MjgzLWFjYTYtMjUxZjdiNWVjNTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTbgilGdC+vPzqJpEGk3BInQaZ7bH/OZ2W3k 0TG8OJZCwxU/Ionng7A4bUue/Rq7UEBJ0cU4xUfGi4fNvqASLeuysMj7lPIsagWK +lP4RMvZD6Awidf2wrlIgeA3/C7VvFU1FcmhPLot4kXXrfNaqBJDD9psOpLbjzib IjA7stT+RRW0DN81Vr8AO7HiwUE6QlPseTmx9898xLn/TQek+BSDUssldpcg7lq7 rvf7cbSRf+DVa6ni/l3ArCQFB+Y2eSZuNnF0GQYMx6A+RCiMnDspHCHWEngL6bn1 wwymLPZcqApHwLHsaDvko60+20Pl2ca3gMTwWwb5pNrK6oOIaQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM6501HGqDSaSCc/dGlofWboSr0uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTU5NzJmNWUtYjMzZi0z M2E1LWEwMDYtMGZiNjE2YTFjMGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAoFTh2A3wnUTWUgWreXkEcscXViO/TADJC63EcZUheov0Zl8rPv2wc HsHkX0Y2MojUuMpo9Zu5KPp8fOWDQ/f8SykwYLNCd/SP2a9xz22/ZIVdQP0Bqu3o rf9VwT3o7RdLvGrPCDTYv4BmcDqJEsd2HpubTo/GXc8gWCbzJLCDlLnGDRjcfrat Lox2BAnsC+fk57kKRqmJKWdl9fSGkmtPdQkRN9/21rDNWiO3Q0ZVc4C/HGPMaz4f KLR//61IaPZidAVlFpoZRvAU9Ecg/hpiyqL0z3UwDb08U0sfsCkKZe6s2grHxjcJ Umdyg3mOYfpY45AkLksWzCgPET4jfSjH -----END CERTIFICATE-----Generated at Thu Mar 26 14:27:05 2026 by rpki-client