$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbaa0446-f909-3304-888c-399fd80b7e85.roa File: bbaa0446-f909-3304-888c-399fd80b7e85.roa (raw, json) Hash identifier: XeiOqA53mEZ2lf518KDGJel/G3uz4jqYoBaxJ+1U3Jo= Subject key identifier: 58:14:8F:8E:71:99:75:4A:B8:7A:80:E6:48:77:2E:E7:20:4E:BE:50 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64F9E381E5479E536B5940 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbaa0446-f909-3304-888c-399fd80b7e85.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 396589 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:f9:e3:81:e5:47:9e:53:6b:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=ca04d0bb-76b7-4c95-bf14-fb9a89ad08fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b6:a3:d8:70:43:8c:25:bd:58:a2:d8:26:a9: 5a:97:80:9f:92:a9:db:e1:fa:16:e3:09:99:4b:9f: be:59:b5:24:49:68:4b:d5:49:23:4e:5e:00:54:74: 38:05:62:22:9c:61:28:87:90:f0:f2:1f:15:ae:91: 9d:9c:96:be:e0:6a:b0:90:70:f2:e3:af:61:db:4d: 82:39:c1:cf:ee:d7:f1:33:73:aa:95:09:e6:71:7a: cc:5b:c7:54:b5:d0:f9:ff:06:b6:1f:ef:ea:da:f2: 90:ab:6a:90:a0:3b:15:c4:d6:dd:26:46:d1:3d:70: 7c:71:ba:3c:82:3c:b4:7f:75:e5:71:6c:96:32:63: 6d:2e:a9:14:fe:3a:48:c2:58:75:6e:11:f2:09:9c: 60:48:56:f6:30:a5:88:57:bc:ff:19:11:1e:01:db: 87:60:6a:a7:dc:45:a1:f8:c6:39:56:f8:c6:f0:87: 70:90:ab:fe:f2:53:69:8a:30:b1:84:55:92:30:7b: 00:c5:46:70:fe:b2:4f:6e:9e:5e:10:8d:b3:ff:b1: 67:e7:8d:b7:a9:a1:b2:d9:3c:98:bc:d5:50:10:1a: 03:34:a6:a3:ae:6c:23:62:9f:b9:e6:00:5b:0c:4f: c1:99:8f:78:29:bb:45:f1:1f:b7:00:82:54:df:28: d5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:14:8F:8E:71:99:75:4A:B8:7A:80:E6:48:77:2E:E7:20:4E:BE:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbaa0446-f909-3304-888c-399fd80b7e85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:ae:17:03:67:e8:8f:3b:eb:31:66:ff:07:c2:19:f4:27:d1: c4:2e:56:9c:29:6f:23:99:72:ad:fa:0d:d4:df:3d:92:2c:0c: 2b:7b:cc:48:d6:e7:bf:27:62:59:72:a4:59:90:1c:0a:2f:9c: 31:12:72:ab:1a:a3:e3:8c:15:dc:14:58:c3:00:a9:0d:bb:bd: 13:79:7c:c7:1a:08:96:f4:ac:f7:30:b5:2d:65:13:dc:c3:2c: 47:06:e4:db:70:4d:0a:cf:94:55:bc:79:bb:7f:36:c8:28:1c: c9:e0:2b:eb:c2:1a:84:03:ce:cb:11:32:5f:ac:67:ad:c6:c2: 0a:be:cb:e6:bd:ce:6c:c9:67:ae:f3:b0:e0:01:4f:be:20:49: ae:79:5f:34:4e:d8:d9:e1:d4:d0:af:54:d9:a3:b6:7f:0e:a0: 06:56:b1:c2:7d:49:c3:ed:1b:42:5f:41:30:39:ce:1b:1e:4f: 2c:74:c5:36:02:75:34:ed:bc:7a:32:1f:5a:8e:e4:34:af:8e: 72:5c:71:18:77:11:44:24:57:f9:5e:69:4d:07:d6:fa:b9:17: f9:0d:6b:a4:0b:aa:03:a4:28:6d:c8:36:fc:d5:1a:b0:43:62: 40:3e:cf:7d:87:a0:0f:f5:a2:9b:66:d8:c5:95:a8:85:24:6b: bf:90:43:77 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZPnjgeVHnlNrWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk Y2EwNGQwYmItNzZiNy00Yzk1LWJmMTQtZmI5YTg5YWQwOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmraj2HBDjCW9WKLYJqlal4Cfkqnb4foW4wmZ S5++WbUkSWhL1UkjTl4AVHQ4BWIinGEoh5Dw8h8VrpGdnJa+4GqwkHDy469h202C OcHP7tfxM3OqlQnmcXrMW8dUtdD5/wa2H+/q2vKQq2qQoDsVxNbdJkbRPXB8cbo8 gjy0f3XlcWyWMmNtLqkU/jpIwlh1bhHyCZxgSFb2MKWIV7z/GREeAduHYGqn3EWh +MY5VvjG8IdwkKv+8lNpijCxhFWSMHsAxUZw/rJPbp5eEI2z/7Fn5423qaGy2TyY vNVQEBoDNKajrmwjYp+55gBbDE/BmY94KbtF8R+3AIJU3yjVxwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFgUj45xmXVKuHqA5kh3LucgTr5QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmJhYTA0NDYtZjkwOS0z MzA0LTg4OGMtMzk5ZmQ4MGI3ZTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCOrhcDZ+iPO+sxZv8Hwhn0J9HELlacKW8jmXKt+g3U3z2SLAwre8xI 1ue/J2JZcqRZkBwKL5wxEnKrGqPjjBXcFFjDAKkNu70TeXzHGgiW9Kz3MLUtZRPc wyxHBuTbcE0Kz5RVvHm7fzbIKBzJ4CvrwhqEA87LETJfrGetxsIKvsvmvc5syWeu 87DgAU++IEmueV80TtjZ4dTQr1TZo7Z/DqAGVrHCfUnD7RtCX0EwOc4bHk8sdMU2 AnU07bx6Mh9ajuQ0r45yXHEYdxFEJFf5XmlNB9b6uRf5DWukC6oDpChtyDb81Rqw Q2JAPs99h6AP9aKbZtjFlaiFJGu/kEN3 -----END CERTIFICATE-----Generated at Thu Mar 26 14:16:42 2026 by rpki-client