$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae9d93bd-57f0-3713-9db1-f7158d8cca61.roa File: ae9d93bd-57f0-3713-9db1-f7158d8cca61.roa (raw, json) Hash identifier: X+LWwj+0vXcYAMZaqJ1rVTnqPhEuFB2ES6T6damSoUw= Subject key identifier: 92:AE:81:D5:AD:06:5F:CF:71:42:EF:E5:24:B4:30:47:4E:D4:5E:84 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2D3F9AF397B30CC9F060B320 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae9d93bd-57f0-3713-9db1-f7158d8cca61.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 20362 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:9a:f3:97:b3:0c:c9:f0:60:b3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=602c3cc3-de45-401b-8902-b018db1987b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:37:f5:5b:d3:00:27:2d:23:21:c9:74:23:f7: ca:04:40:f5:86:95:1b:78:32:b1:f5:3e:72:86:ca: 46:4c:ed:34:c0:b7:07:52:2e:20:22:35:86:c0:f4: 0a:77:42:c7:bd:71:9a:df:d8:2d:0d:01:8a:e7:7e: 29:7e:83:e6:9b:b2:db:f8:d4:eb:ee:e7:03:fa:46: a7:f2:90:03:20:e2:a0:ff:08:13:26:1d:56:16:1d: 94:ff:f5:c8:87:68:58:68:9b:61:9d:15:1e:5e:6a: 92:33:d7:04:b3:85:36:03:18:fa:99:ce:09:54:73: 63:a6:8a:df:65:76:8a:1b:ba:28:f0:7a:0e:e7:c8: 94:05:0a:ba:30:0b:9e:8f:4b:fb:cf:0b:31:55:94: 81:35:42:c2:1e:4d:10:da:67:95:1b:1a:d0:b1:b4: 8d:2d:9d:a1:f1:4c:d8:3d:24:86:fe:bc:5b:87:17: eb:c5:38:b8:2c:d7:85:ee:ff:30:35:98:98:24:32: 25:cd:ff:0f:9c:95:f8:bf:ba:43:0e:99:5f:6d:e0: 82:0b:6f:99:01:fc:b5:cc:0f:6f:82:2b:44:b6:6e: 81:50:9d:1b:01:d8:88:bd:e2:79:b3:ef:2c:61:24: 7c:0d:b9:25:6f:56:a7:96:cc:2a:18:8c:dd:a3:b9: 6f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AE:81:D5:AD:06:5F:CF:71:42:EF:E5:24:B4:30:47:4E:D4:5E:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae9d93bd-57f0-3713-9db1-f7158d8cca61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:c7:9e:73:2e:cd:57:56:44:d0:40:84:30:fd:55:f7:41:56: 0a:4f:ce:34:e5:5d:c2:c0:7e:f3:83:43:ed:e0:1c:8b:30:3f: 7d:f6:53:74:0b:c1:e3:38:c2:7c:5c:24:00:1a:86:61:0b:03: af:93:5e:e9:25:6d:d0:22:0f:27:78:b8:07:d1:9c:e3:a7:e5: 02:77:90:24:14:e5:e0:30:04:3e:d1:ad:a4:68:08:f7:2e:0d: 79:9d:c2:ea:3d:5b:ab:c3:ba:f5:3d:46:22:22:0d:bb:3f:d6: 5f:86:e6:7c:ca:b2:53:60:24:0f:f2:d2:84:df:d5:12:14:47: 9f:0f:51:54:1e:4f:b9:8d:c0:29:96:d1:81:f3:b7:fe:9d:15: 14:66:bb:e1:1f:68:06:36:75:7c:46:b5:ff:51:8b:c5:4b:9f: 2e:a2:a4:2b:92:8a:a9:71:c7:f9:2b:57:1f:ea:c7:e0:3b:7b: 1a:6f:e1:98:01:97:a9:03:58:b8:cc:43:b8:b4:c3:e5:8f:62: 42:5c:6c:24:0a:d3:f5:34:b2:a6:de:a8:de:31:98:79:38:a7: ca:ad:fb:d6:f5:9e:6b:14:66:33:11:06:9e:cb:52:dc:c3:0b: 69:55:1a:a7:e0:44:36:fd:2f:ac:4b:ae:11:03:b8:04:4b:ad: 56:b6:96:b6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0tP5rzl7MMyfBgsyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk NjAyYzNjYzMtZGU0NS00MDFiLTg5MDItYjAxOGRiMTk4N2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzf1W9MAJy0jIcl0I/fKBED1hpUbeDKx9T5y hspGTO00wLcHUi4gIjWGwPQKd0LHvXGa39gtDQGK534pfoPmm7Lb+NTr7ucD+kan 8pADIOKg/wgTJh1WFh2U//XIh2hYaJthnRUeXmqSM9cEs4U2Axj6mc4JVHNjporf ZXaKG7oo8HoO58iUBQq6MAuej0v7zwsxVZSBNULCHk0Q2meVGxrQsbSNLZ2h8UzY PSSG/rxbhxfrxTi4LNeF7v8wNZiYJDIlzf8PnJX4v7pDDplfbeCCC2+ZAfy1zA9v gitEtm6BUJ0bAdiIveJ5s+8sYSR8Dbklb1anlswqGIzdo7lvLQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJKugdWtBl/PcULv5SS0MEdO1F6EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWU5ZDkzYmQtNTdmMC0z NzEzLTlkYjEtZjcxNThkOGNjYTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBox55zLs1XVkTQQIQw/VX3QVYKT8405V3CwH7zg0Pt4ByLMD999lN0 C8HjOMJ8XCQAGoZhCwOvk17pJW3QIg8neLgH0Zzjp+UCd5AkFOXgMAQ+0a2kaAj3 Lg15ncLqPVurw7r1PUYiIg27P9ZfhuZ8yrJTYCQP8tKE39USFEefD1FUHk+5jcAp ltGB87f+nRUUZrvhH2gGNnV8RrX/UYvFS58uoqQrkoqpccf5K1cf6sfgO3sab+GY AZepA1i4zEO4tMPlj2JCXGwkCtP1NLKm3qjeMZh5OKfKrfvW9Z5rFGYzEQaey1Lc wwtpVRqn4EQ2/S+sS64RA7gES61Wtpa2 -----END CERTIFICATE-----Generated at Thu Mar 26 16:05:31 2026 by rpki-client