$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab2304b2-cbba-35f3-be6a-e8b3747cdeec.roa File: ab2304b2-cbba-35f3-be6a-e8b3747cdeec.roa (raw, json) Hash identifier: e7pEd4dCMLz5FoS2/e7LTXL8WadHXciC76cAmbKx6J8= Subject key identifier: E9:E2:D2:90:6B:D8:D7:36:31:C7:03:C4:AC:3F:B6:56:F1:FC:2E:51 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2D3F98E8803DA1E9E59F8580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab2304b2-cbba-35f3-be6a-e8b3747cdeec.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 396540 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:98:e8:80:3d:a1:e9:e5:9f:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=8314fe7f-8244-494d-bb43-17ca89ad9da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:85:2a:29:c7:b3:1c:c3:a2:59:ee:fa:85:e9: 55:a8:f0:06:42:3c:60:29:69:9d:10:27:23:bb:e1: 21:86:76:16:1f:e2:a2:86:2f:48:df:22:90:12:bd: 52:fb:b6:c9:b1:cf:bf:d0:fb:79:c8:0d:dc:66:4f: 47:ee:a1:c8:39:8c:6c:c1:1d:0e:b6:5d:ad:9e:b1: a9:2f:ed:e4:6a:b2:eb:5e:0a:da:6f:43:47:27:45: b8:65:86:89:b5:7a:07:67:7a:91:06:82:b3:0b:a3: 1e:cf:f3:9b:74:e5:20:48:42:48:63:55:71:3b:9e: f5:72:38:57:21:c8:89:04:0d:28:e0:39:8f:c5:7e: ae:76:28:6b:7c:85:c8:91:2c:c0:a3:06:2a:37:06: 85:27:d9:78:3e:e2:d1:b3:1f:42:62:32:c8:4b:7e: 29:49:23:ff:86:a9:ad:e7:5d:62:58:69:d9:a1:89: 8c:a7:bb:18:fa:25:dc:c4:47:bb:d2:b2:88:9e:38: 97:c3:37:93:b9:31:bd:86:ed:29:7b:ca:f0:e0:a2: 88:ac:32:d8:45:11:03:9a:83:32:5e:fd:d2:11:f7: 06:fb:39:c3:be:c5:1a:20:06:cd:5d:ad:13:2f:68: 49:1c:4a:0b:e0:89:14:8c:9a:88:00:32:aa:05:0a: 6a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E2:D2:90:6B:D8:D7:36:31:C7:03:C4:AC:3F:B6:56:F1:FC:2E:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab2304b2-cbba-35f3-be6a-e8b3747cdeec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:11:c9:64:ba:4a:91:cd:bb:66:8c:47:fc:d6:f7:6a:6d:a7: 1b:02:47:ea:ba:9c:4c:c2:04:66:32:47:55:16:12:e2:9f:b7: 07:41:ba:dc:a5:73:f8:0b:34:30:9e:34:c7:ed:ce:b5:de:23: 74:76:28:f7:0c:ff:91:19:b7:1c:12:eb:7a:44:08:1a:e8:1d: 1b:38:34:3a:63:6b:30:3d:a3:0c:ee:b7:8f:be:51:34:dd:b5: 81:58:10:a7:08:f4:dc:0e:ba:17:9b:62:05:76:9d:5b:f8:34: 20:36:b7:aa:64:ce:68:ee:af:e6:5f:e3:e2:79:f5:a3:d5:94: 80:53:d3:f9:34:7a:ce:20:39:a4:d8:79:8a:b6:84:8e:56:81: c8:29:9a:02:a5:58:57:ce:77:57:07:8c:50:bd:a7:84:42:db: c2:26:d6:e8:9d:57:a7:1e:56:ba:65:92:92:e1:91:05:a4:db: f8:e3:22:7c:4a:2f:ca:ee:06:71:6e:49:a5:60:6f:0c:df:0b: 6d:7b:78:d5:e8:57:14:2c:22:68:60:8f:36:9c:8a:ba:94:11: 78:5a:27:aa:e8:65:59:c9:66:b9:27:8a:b6:e5:49:91:fa:5e: 64:00:18:b2:9e:65:33:bf:3b:bb:46:a8:57:32:c7:e4:62:29: 57:7b:6c:35 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0tP5jogD2h6eWfhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk ODMxNGZlN2YtODI0NC00OTRkLWJiNDMtMTdjYTg5YWQ5ZGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIUqKcezHMOiWe76helVqPAGQjxgKWmdECcj u+EhhnYWH+Kihi9I3yKQEr1S+7bJsc+/0Pt5yA3cZk9H7qHIOYxswR0Otl2tnrGp L+3karLrXgrab0NHJ0W4ZYaJtXoHZ3qRBoKzC6Mez/ObdOUgSEJIY1VxO571cjhX IciJBA0o4DmPxX6udihrfIXIkSzAowYqNwaFJ9l4PuLRsx9CYjLIS34pSSP/hqmt 511iWGnZoYmMp7sY+iXcxEe70rKInjiXwzeTuTG9hu0pe8rw4KKIrDLYRREDmoMy Xv3SEfcG+znDvsUaIAbNXa0TL2hJHEoL4IkUjJqIADKqBQpq9QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOni0pBr2Nc2MccDxKw/tlbx/C5RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWIyMzA0YjItY2JiYS0z NWYzLWJlNmEtZThiMzc0N2NkZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBTEclkukqRzbtmjEf81vdqbacbAkfqupxMwgRmMkdVFhLin7cHQbrc pXP4CzQwnjTH7c613iN0dij3DP+RGbccEut6RAga6B0bODQ6Y2swPaMM7rePvlE0 3bWBWBCnCPTcDroXm2IFdp1b+DQgNreqZM5o7q/mX+PiefWj1ZSAU9P5NHrOIDmk 2HmKtoSOVoHIKZoCpVhXzndXB4xQvaeEQtvCJtbonVenHla6ZZKS4ZEFpNv44yJ8 Si/K7gZxbkmlYG8M3wtte3jV6FcULCJoYI82nIq6lBF4Wieq6GVZyWa5J4q25UmR +l5kABiynmUzvzu7RqhXMsfkYilXe2w1 -----END CERTIFICATE-----Generated at Thu Mar 26 08:30:11 2026 by rpki-client