$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b688fb27-59e5-374c-8e3c-13d611990324.roa File: b688fb27-59e5-374c-8e3c-13d611990324.roa (raw, json) Hash identifier: VFvYL+iftUzjhRx7ZPthu+wnJ0PJzvo3Bc37zn0AZhA= Subject key identifier: F9:1B:B0:20:37:5A:2A:88:5D:D5:9B:DB:4D:AE:B8:F0:55:95:0B:2E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64F95AE7760B78C11E1380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b688fb27-59e5-374c-8e3c-13d611990324.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 396574 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:f9:5a:e7:76:0b:78:c1:1e:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=fe71b94f-c5cb-49ad-b961-7333c59502f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:95:aa:c3:90:de:e0:b5:7e:70:bd:dd:45:21: 14:02:a3:30:ba:88:4f:ea:ae:7b:6e:0e:f9:9e:e2: b8:9a:25:e7:e3:ee:f7:1a:d4:90:52:f6:c2:cb:ff: ab:d6:64:d7:5f:c2:46:8c:46:c2:94:79:e6:74:db: 27:45:d8:85:0c:a6:df:9a:d5:33:34:62:79:c1:bb: 2b:b5:5f:c6:46:2e:3d:83:28:ad:6b:04:6a:70:18: 3b:60:c2:26:b3:b2:c4:0c:a7:da:c7:64:c6:e2:13: 14:cf:c3:30:46:fa:4a:35:d8:8f:1f:b5:cb:22:dc: 81:13:4c:83:3f:5a:19:7e:32:23:2d:7b:c9:07:02: 6c:3f:39:a3:0b:28:1e:33:60:02:d4:2f:bd:f1:34: 36:d5:3a:12:2d:f5:cc:7d:21:b0:4b:1d:79:e6:b8: 73:3d:b8:59:76:ff:14:39:9e:a1:1f:d4:34:84:6d: 47:79:9b:d9:9c:69:0d:e8:77:71:c3:65:35:23:f3: 46:ed:7a:89:ce:2e:5f:a3:58:79:e6:ed:4e:43:6c: cb:27:fc:4f:f1:cb:a5:a0:98:37:84:7d:c4:1d:d9: 39:07:cc:cb:a2:53:76:d6:11:3c:d6:95:07:9b:51: bc:c6:40:71:84:f9:6c:d5:65:0e:56:3c:c7:c2:68: 42:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1B:B0:20:37:5A:2A:88:5D:D5:9B:DB:4D:AE:B8:F0:55:95:0B:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b688fb27-59e5-374c-8e3c-13d611990324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:4c:58:62:19:4c:2b:06:5a:bd:d8:62:14:2c:f7:42:5e:9e: dd:36:84:6b:a4:d6:57:a9:ff:b4:86:34:e1:40:76:7e:63:65: 64:03:75:f6:18:88:64:eb:f9:63:08:ce:cf:52:63:b9:d4:84: 01:c9:8f:64:66:f0:d1:55:f9:d2:a8:41:b6:b9:8f:c4:f7:8b: 0c:60:bd:d9:cb:08:bf:7d:d3:e7:67:61:b1:d6:63:8f:92:d6: a1:c5:9e:c5:ed:c1:f9:9f:ea:f5:0c:ac:6f:3a:9d:a7:20:bc: 0b:82:74:00:e4:13:00:35:50:3e:ee:7e:85:5e:fc:db:fa:82: 27:89:d4:5b:a2:bb:a4:42:97:8a:eb:b5:ff:ce:9b:2d:87:7a: 4d:40:1a:c1:7d:a8:81:9a:b4:c1:43:65:7d:b8:e8:58:2c:ff: e0:7c:dc:6e:47:08:32:33:80:cc:57:cb:e2:18:31:77:3e:b8: 6d:b9:97:01:94:97:8b:2b:61:26:a6:77:18:d7:49:04:63:8d: a8:41:a9:6b:1c:7c:d6:51:65:b4:c6:b8:e6:e5:78:b3:1a:30: a1:70:6e:7a:6a:3f:c3:0a:16:af:5c:5d:66:23:06:3e:20:e9: 67:b6:91:e4:86:cd:ae:73:5e:18:3a:13:77:47:99:4b:6f:5e: 30:bd:08:57 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZPla53YLeMEeE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ZmU3MWI5NGYtYzVjYi00OWFkLWI5NjEtNzMzM2M1OTUwMmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5Wqw5De4LV+cL3dRSEUAqMwuohP6q57bg75 nuK4miXn4+73GtSQUvbCy/+r1mTXX8JGjEbClHnmdNsnRdiFDKbfmtUzNGJ5wbsr tV/GRi49gyitawRqcBg7YMIms7LEDKfax2TG4hMUz8MwRvpKNdiPH7XLItyBE0yD P1oZfjIjLXvJBwJsPzmjCygeM2AC1C+98TQ21ToSLfXMfSGwSx155rhzPbhZdv8U OZ6hH9Q0hG1HeZvZnGkN6Hdxw2U1I/NG7XqJzi5fo1h55u1OQ2zLJ/xP8culoJg3 hH3EHdk5B8zLolN21hE81pUHm1G8xkBxhPls1WUOVjzHwmhCzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPkbsCA3WiqIXdWb202uuPBVlQsuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjY4OGZiMjctNTllNS0z NzRjLThlM2MtMTNkNjExOTkwMzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBoTFhiGUwrBlq92GIULPdCXp7dNoRrpNZXqf+0hjThQHZ+Y2VkA3X2 GIhk6/ljCM7PUmO51IQByY9kZvDRVfnSqEG2uY/E94sMYL3Zywi/fdPnZ2Gx1mOP ktahxZ7F7cH5n+r1DKxvOp2nILwLgnQA5BMANVA+7n6FXvzb+oInidRborukQpeK 67X/zpsth3pNQBrBfaiBmrTBQ2V9uOhYLP/gfNxuRwgyM4DMV8viGDF3PrhtuZcB lJeLK2EmpncY10kEY42oQalrHHzWUWW0xrjm5XizGjChcG56aj/DChavXF1mIwY+ IOlntpHkhs2uc14YOhN3R5lLb14wvQhX -----END CERTIFICATE-----Generated at Thu Mar 26 13:57:49 2026 by rpki-client