$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd0d4123-7088-3c8b-99b5-ced7e667305b.roa File: bd0d4123-7088-3c8b-99b5-ced7e667305b.roa (raw, json) Hash identifier: 2CXcCvECNm7P3p/74u7U28/zemjkTwELn2cvFRUFVG8= Subject key identifier: B4:5D:B1:13:9B:93:88:61:A3:84:46:95:ED:97:7E:E8:3E:F1:F8:7D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64FB1175609A81AC9B6600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd0d4123-7088-3c8b-99b5-ced7e667305b.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 396581 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:fb:11:75:60:9a:81:ac:9b:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=f094694d-9480-457b-9fc7-777797ec62e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1e:0a:93:84:ee:ec:96:91:fc:c8:ea:3f:a9: 4a:e2:c2:b0:12:53:ef:5d:ed:07:fd:1d:bd:34:52: d1:19:a3:38:88:87:5e:dc:35:3f:b1:5e:5a:09:b7: 6d:65:5d:4e:53:b8:8a:00:ce:66:ba:bd:b4:91:c6: bb:7c:d9:ed:46:a5:6b:8c:d7:1d:6b:cf:ea:e0:5a: 48:78:91:01:14:08:18:22:75:73:77:39:b9:d1:a4: c5:88:0b:66:50:31:1f:40:56:8f:de:b7:18:9b:bc: 97:fb:f5:2f:82:05:f9:44:78:68:60:3b:6e:30:d9: 75:7a:09:c4:d5:fa:12:21:ad:a2:b1:11:4c:7b:2c: 90:ec:78:1a:29:a0:a7:af:86:b1:91:84:4f:d9:45: 52:cd:3a:14:24:86:44:0d:4c:de:df:0b:bd:7c:1b: 7e:ea:5f:a4:d6:a3:a7:bc:55:db:0c:6e:71:d7:f1: 09:82:40:05:28:b4:3d:7f:ba:33:5f:f2:2a:ab:56: 30:3e:2d:97:3e:1b:39:c6:60:36:97:10:dd:b5:0b: e4:f8:fc:ee:b4:f3:84:a9:16:60:37:01:22:ee:70: b7:0f:9b:ff:07:a7:92:24:e5:b7:e3:86:68:c1:2e: ba:0a:53:2b:9e:03:d1:cd:ae:80:e0:69:bb:17:94: 01:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:5D:B1:13:9B:93:88:61:A3:84:46:95:ED:97:7E:E8:3E:F1:F8:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd0d4123-7088-3c8b-99b5-ced7e667305b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:6c:df:5f:31:bb:12:11:e5:b5:5f:0f:06:7f:41:af:96:ff: b3:41:37:90:e1:49:78:38:0f:95:77:1d:2b:92:85:70:83:b3: e7:76:e2:f7:2d:45:c3:1d:08:b9:d4:c2:2d:0c:74:99:ba:d6: fe:5c:40:93:fb:72:79:63:4f:c6:7a:21:a3:8e:95:ce:b0:95: c9:64:e1:ff:49:1d:dd:42:1e:30:81:b4:f1:b1:fd:15:1f:a6: 3e:b4:9a:c6:dd:d2:9c:35:99:98:fe:00:88:fb:b9:99:59:57: 64:ef:f4:4d:5a:31:70:57:b5:40:6b:3a:9e:be:69:ae:45:c2: c5:e5:b8:41:57:19:44:b2:44:d7:d6:01:58:b1:d1:b6:35:6d: 79:ac:85:82:da:18:9d:86:fc:ba:48:68:a5:2f:1c:fa:3a:b5: 04:ca:32:82:72:17:6f:1a:cc:f2:af:59:60:b8:9d:d1:c2:38: b2:8a:49:51:28:0f:76:b5:8c:15:6f:25:3f:b1:70:49:76:9f: 63:d0:6a:15:b0:55:2d:69:70:44:59:95:a7:e7:e7:07:49:ac: e7:14:83:cb:c1:79:e7:5c:24:75:d2:b8:6d:a3:53:8e:46:3a: ed:3c:13:0e:b5:dc:4c:1d:04:0a:d1:0b:8c:36:72:0f:03:51: cc:f4:bc:bd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZPsRdWCagaybZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ZjA5NDY5NGQtOTQ4MC00NTdiLTlmYzctNzc3Nzk3ZWM2MmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R4Kk4Tu7JaR/MjqP6lK4sKwElPvXe0H/R29 NFLRGaM4iIde3DU/sV5aCbdtZV1OU7iKAM5mur20kca7fNntRqVrjNcda8/q4FpI eJEBFAgYInVzdzm50aTFiAtmUDEfQFaP3rcYm7yX+/UvggX5RHhoYDtuMNl1egnE 1foSIa2isRFMeyyQ7HgaKaCnr4axkYRP2UVSzToUJIZEDUze3wu9fBt+6l+k1qOn vFXbDG5x1/EJgkAFKLQ9f7ozX/Iqq1YwPi2XPhs5xmA2lxDdtQvk+PzutPOEqRZg NwEi7nC3D5v/B6eSJOW344ZowS66ClMrngPRza6A4Gm7F5QBgQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLRdsRObk4hho4RGle2Xfug+8fh9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmQwZDQxMjMtNzA4OC0z YzhiLTk5YjUtY2VkN2U2NjczMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB7bN9fMbsSEeW1Xw8Gf0Gvlv+zQTeQ4Ul4OA+Vdx0rkoVwg7PnduL3 LUXDHQi51MItDHSZutb+XECT+3J5Y0/GeiGjjpXOsJXJZOH/SR3dQh4wgbTxsf0V H6Y+tJrG3dKcNZmY/gCI+7mZWVdk7/RNWjFwV7VAazqevmmuRcLF5bhBVxlEskTX 1gFYsdG2NW15rIWC2hidhvy6SGilLxz6OrUEyjKCchdvGszyr1lguJ3RwjiyiklR KA92tYwVbyU/sXBJdp9j0GoVsFUtaXBEWZWn5+cHSaznFIPLwXnnXCR10rhto1OO RjrtPBMOtdxMHQQK0QuMNnIPA1HM9Ly9 -----END CERTIFICATE-----Generated at Thu Mar 26 10:49:53 2026 by rpki-client