$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/acad70c8-b52e-33b2-8b46-0ffcd4799a67.roa File: acad70c8-b52e-33b2-8b46-0ffcd4799a67.roa (raw, json) Hash identifier: vznEVOinEkM1IcOwpuq1T5lVjrLuRzhTFXvvR04Z3qY= Subject key identifier: 31:A9:20:EA:91:79:8E:D0:9B:DD:B5:06:71:FA:19:AB:1F:A9:9B:8D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64FA8485BC10480BF05100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/acad70c8-b52e-33b2-8b46-0ffcd4799a67.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 19836 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:fa:84:85:bc:10:48:0b:f0:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=2fcfb20e-6ef7-4bc9-9e90-52a80def3ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:68:dd:de:3e:43:2e:73:cc:ba:27:4f:a4:13: 01:23:c8:11:e9:8f:07:1b:1b:d1:a9:d7:2a:b6:bf: 9f:72:a6:06:ba:57:c1:82:5c:56:74:a2:40:e8:9e: 04:f4:9d:06:b0:1a:d6:ce:70:90:3a:b6:ff:b5:27: b1:52:ca:f7:47:ba:d3:1b:5f:af:6e:e4:ce:bd:e4: 86:b7:4f:ba:bd:ab:c3:91:dc:29:4b:92:7d:63:b2: 41:13:d1:fd:93:8d:a2:19:49:8a:62:cb:7b:10:63: b6:c2:cd:63:13:19:69:76:c5:7c:6d:8a:31:d9:f8: 73:c8:69:be:02:f3:71:f3:c5:3a:72:7b:7b:93:ed: 5a:31:cd:88:f9:1f:6d:1b:f1:92:1e:7a:a2:a3:96: 4e:07:a1:34:3d:21:77:f8:93:cb:df:fd:93:80:30: a5:c5:1e:44:81:ab:ce:54:31:35:ed:da:2e:fc:eb: 38:29:ef:35:2e:16:25:7c:cb:1b:d1:4a:da:a6:1e: f4:7e:13:85:04:2b:1c:7f:34:3d:0c:9e:3f:8d:c4: 8f:c0:e2:e4:a5:fe:03:d7:66:fd:59:5f:57:6e:5b: 38:25:31:2a:be:8d:1e:55:cb:00:e6:8b:28:2b:8d: fa:41:2c:bc:ef:59:15:52:76:77:35:3f:60:fd:da: 08:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A9:20:EA:91:79:8E:D0:9B:DD:B5:06:71:FA:19:AB:1F:A9:9B:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/acad70c8-b52e-33b2-8b46-0ffcd4799a67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:d0:65:12:40:10:b0:6a:5c:44:d7:cf:d4:b4:22:4f:04:46: 6c:42:ce:c5:b4:5d:71:ad:4b:9a:fc:b8:eb:0f:9f:00:76:25: 8d:d9:ef:2d:88:f0:66:38:f4:50:9f:d9:81:36:36:73:aa:af: cb:b0:a9:05:88:90:e2:3e:1d:92:98:73:df:19:7e:ea:62:6f: 44:46:6c:bd:fd:12:d7:d6:f1:48:f9:0c:a8:a4:c4:42:a7:eb: 14:91:5c:da:40:cc:ab:16:1d:28:df:4e:07:11:b4:ec:26:3a: d5:93:e0:f0:54:86:f8:a2:67:f1:d0:35:45:69:a9:3c:d2:65: 76:e5:b0:17:86:d3:6e:ab:26:f2:34:8e:1a:77:fc:b7:0a:c6: 59:10:ad:d0:84:cf:bb:fc:ef:d8:dc:78:d1:97:e5:da:87:8d: 71:60:77:3a:e3:63:ab:5f:b9:c3:d3:df:92:00:2a:fc:95:fa: 95:a1:d6:9e:8b:4e:e3:cb:6c:6b:31:9f:15:5a:2f:65:96:d2: 27:45:1b:d1:f9:af:81:1c:c5:9a:9b:ec:d4:4c:74:d7:af:89: 95:a2:b0:f4:27:f4:b8:50:65:71:19:e1:5f:73:3a:46:44:d7: a8:df:3c:4c:be:63:fc:67:83:3e:b3:0f:c2:3c:81:ba:2d:e1: 52:f4:f5:10 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZPqEhbwQSAvwUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk MmZjZmIyMGUtNmVmNy00YmM5LTllOTAtNTJhODBkZWYzY2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGjd3j5DLnPMuidPpBMBI8gR6Y8HGxvRqdcq tr+fcqYGulfBglxWdKJA6J4E9J0GsBrWznCQOrb/tSexUsr3R7rTG1+vbuTOveSG t0+6vavDkdwpS5J9Y7JBE9H9k42iGUmKYst7EGO2ws1jExlpdsV8bYox2fhzyGm+ AvNx88U6cnt7k+1aMc2I+R9tG/GSHnqio5ZOB6E0PSF3+JPL3/2TgDClxR5EgavO VDE17dou/Os4Ke81LhYlfMsb0Uraph70fhOFBCscfzQ9DJ4/jcSPwOLkpf4D12b9 WV9Xbls4JTEqvo0eVcsA5osoK436QSy871kVUnZ3NT9g/doIHQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDGpIOqReY7Qm921BnH6GasfqZuNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWNhZDcwYzgtYjUyZS0z M2IyLThiNDYtMGZmY2Q0Nzk5YTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBT0GUSQBCwalxE18/UtCJPBEZsQs7FtF1xrUua/LjrD58AdiWN2e8t iPBmOPRQn9mBNjZzqq/LsKkFiJDiPh2SmHPfGX7qYm9ERmy9/RLX1vFI+QyopMRC p+sUkVzaQMyrFh0o304HEbTsJjrVk+DwVIb4omfx0DVFaak80mV25bAXhtNuqyby NI4ad/y3CsZZEK3QhM+7/O/Y3HjRl+Xah41xYHc642OrX7nD09+SACr8lfqVodae i07jy2xrMZ8VWi9lltInRRvR+a+BHMWam+zUTHTXr4mVorD0J/S4UGVxGeFfczpG RNeo3zxMvmP8Z4M+sw/CPIG6LeFS9PUQ -----END CERTIFICATE-----Generated at Thu Mar 26 16:00:15 2026 by rpki-client