$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa File: af8f6829-25f2-342c-8e95-5e209025a010.roa (raw, json) Hash identifier: FUN9+IF3VlVYhdkdM121Gf9Cjp1bxvOk7jglyypl5LI= Subject key identifier: C3:9B:3A:E0:12:DB:CC:92:09:10:08:E5:71:96:5B:07:DE:6F:BA:AC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2D3F96F0DCB902D6FEA8DC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 20431 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:96:f0:dc:b9:02:d6:fe:a8:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=708bfe66-5df2-4f65-85f4-f422bd550a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0d:c4:b0:b0:bd:85:08:2e:c3:ee:d1:a1:12: 70:4b:d5:1d:83:6a:3c:40:58:6d:f4:00:5c:d5:5f: 65:be:1e:c4:ae:ab:69:67:5b:8b:50:41:4d:77:69: c4:2b:0f:54:19:ce:22:66:85:80:55:f6:fc:bf:59: b1:37:db:25:75:7a:ed:b1:30:fb:0e:ba:e8:7c:9a: 85:44:e5:a6:b8:49:c3:9a:da:f8:98:a7:fd:34:7f: e5:1b:f1:8a:96:b3:50:b4:8a:8f:52:3a:31:92:15: 27:8a:f4:f6:b2:5b:36:fd:f6:8c:11:75:72:d4:3d: 16:80:4c:cb:60:3a:d7:1c:6a:0e:56:1a:8d:54:6e: e2:48:12:7a:ed:c1:a3:3c:cd:85:2b:0f:e3:ce:02: 38:35:d9:ad:5e:fe:f2:37:7f:87:1d:bd:a3:5a:f9: 4a:5e:7a:54:1e:f5:54:4b:74:b9:af:1a:4d:d9:ba: 59:54:72:56:22:e8:df:53:98:29:94:32:7f:b9:ed: cc:2e:9e:18:d3:66:83:e1:83:90:c8:af:9b:6f:70: 8c:a4:a4:f4:76:b1:bc:13:63:13:b3:27:2f:eb:45: 16:e3:f1:e4:89:6d:e6:7d:90:ba:14:16:b4:7c:6e: 1f:35:fe:3b:8f:d4:92:17:4b:58:24:97:ed:0f:6d: 0c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9B:3A:E0:12:DB:CC:92:09:10:08:E5:71:96:5B:07:DE:6F:BA:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:4a:ce:f6:97:c8:f3:0e:cd:68:7f:0c:10:e6:2f:38:f8:b8: cc:f0:6c:bc:06:fd:41:aa:a5:65:eb:66:61:9c:6b:2c:df:5a: 01:02:b1:4f:62:09:ce:00:bd:d1:4f:19:dc:5e:96:15:6a:02: ed:1b:e1:85:b8:00:38:19:02:0f:38:8a:d5:74:14:6b:f4:16: 4b:88:96:4d:17:72:de:57:52:ac:1b:43:1c:17:fc:af:2f:d5: 62:61:26:23:01:f0:be:af:60:1a:97:9f:71:9a:93:7a:3e:3a: 25:b3:ec:7c:7e:c9:2f:26:f2:88:76:46:c1:bf:f1:2e:d3:78: c5:1d:89:5a:6f:30:03:fa:b5:25:ea:0f:9a:c2:b9:cf:91:81: 54:5c:e7:b5:ba:d3:8d:e2:18:e0:05:ac:72:01:59:51:17:93: 98:eb:a8:46:33:f7:51:7d:2c:ea:f9:5c:71:80:4a:8f:c6:67: 56:72:2b:9c:fb:e4:09:c7:2d:5d:7a:08:43:9d:50:06:c8:eb: 58:63:31:67:57:72:9a:a7:fe:e8:e2:56:9d:75:3a:1b:03:d4: ec:64:2a:84:f4:79:ee:16:cd:ef:d6:8b:6c:62:16:29:53:fb: 32:58:a5:0d:9c:2a:8f:25:11:36:ab:60:1f:3a:c6:88:81:02: 71:0e:87:35 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0tP5bw3LkC1v6o3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk NzA4YmZlNjYtNWRmMi00ZjY1LTg1ZjQtZjQyMmJkNTUwYTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA3EsLC9hQguw+7RoRJwS9Udg2o8QFht9ABc 1V9lvh7ErqtpZ1uLUEFNd2nEKw9UGc4iZoWAVfb8v1mxN9sldXrtsTD7DrrofJqF ROWmuEnDmtr4mKf9NH/lG/GKlrNQtIqPUjoxkhUnivT2sls2/faMEXVy1D0WgEzL YDrXHGoOVhqNVG7iSBJ67cGjPM2FKw/jzgI4NdmtXv7yN3+HHb2jWvlKXnpUHvVU S3S5rxpN2bpZVHJWIujfU5gplDJ/ue3MLp4Y02aD4YOQyK+bb3CMpKT0drG8E2MT sycv60UW4/HkiW3mfZC6FBa0fG4fNf47j9SSF0tYJJftD20MTQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMObOuAS28ySCRAI5XGWWwfeb7qsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWY4ZjY4MjktMjVmMi0z NDJjLThlOTUtNWUyMDkwMjVhMDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQApSs72l8jzDs1ofwwQ5i84+LjM8Gy8Bv1BqqVl62ZhnGss31oBArFP YgnOAL3RTxncXpYVagLtG+GFuAA4GQIPOIrVdBRr9BZLiJZNF3LeV1KsG0McF/yv L9ViYSYjAfC+r2Aal59xmpN6Pjols+x8fskvJvKIdkbBv/Eu03jFHYlabzAD+rUl 6g+awrnPkYFUXOe1utON4hjgBaxyAVlRF5OY66hGM/dRfSzq+VxxgEqPxmdWciuc ++QJxy1deghDnVAGyOtYYzFnV3Kap/7o4laddTobA9TsZCqE9HnuFs3v1otsYhYp U/syWKUNnCqPJRE2q2AfOsaIgQJxDoc1 -----END CERTIFICATE-----Generated at Thu Mar 26 17:21:10 2026 by rpki-client