$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c02cd83b-d6b1-3163-843e-4214b67b87aa.roa File: c02cd83b-d6b1-3163-843e-4214b67b87aa.roa (raw, json) Hash identifier: +Y81cNupTRGwAba3mdGgRwuPIXnsjfnEZlwPcQTVyHw= Subject key identifier: B1:5C:9B:0D:D4:88:D4:5D:8C:A2:52:BB:A9:38:CB:82:2E:75:96:42 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2D3F9A3188DF70CAB8011C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c02cd83b-d6b1-3163-843e-4214b67b87aa.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 396612 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:9a:31:88:df:70:ca:b8:01:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=585a7155-d800-431d-b182-46bf57e0a9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ef:19:4c:9c:0c:eb:e1:39:3c:e7:cc:c7:cf: b2:d6:28:6d:84:2b:58:c4:cf:1b:1b:ac:94:29:d8: d3:2e:20:47:34:64:a8:c3:35:08:04:15:9c:89:49: 93:c5:f6:4f:c1:0a:6d:d6:72:78:b5:a6:e8:23:9d: f4:e7:fa:83:8e:9a:f1:d6:b0:0e:19:21:ba:a1:1d: 50:4f:b0:cf:13:ed:0f:57:76:3a:0a:e7:4f:e1:2b: bd:3a:db:ea:b4:51:f4:00:bf:f3:ee:2f:a7:84:16: f8:87:11:0e:c3:37:55:e5:42:a8:cb:9d:10:41:cc: b0:77:63:06:9c:d6:fa:ea:ed:8b:eb:ba:d5:07:8f: ab:ee:ae:61:ad:d0:21:63:02:12:6d:93:0f:1d:74: ce:a8:e6:8b:b0:eb:65:fc:e8:8a:54:a6:26:df:6c: c3:96:56:90:60:4f:ea:cd:02:87:83:7b:d2:07:60: 7b:c5:a8:00:52:b4:87:82:8b:ab:15:57:59:0f:cc: e9:16:75:a1:29:72:f7:3e:c6:47:b3:d3:fa:21:10: c4:e0:91:41:29:d3:e8:23:e1:ff:cb:e0:67:0d:3a: 4c:bc:48:fe:78:1e:83:84:2f:74:ce:58:9a:95:81: c5:31:0e:d8:fb:22:c7:65:cd:9d:a7:a7:aa:aa:9d: a4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:5C:9B:0D:D4:88:D4:5D:8C:A2:52:BB:A9:38:CB:82:2E:75:96:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c02cd83b-d6b1-3163-843e-4214b67b87aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:d9:95:1e:0d:6e:64:5c:ad:b9:c8:65:15:5e:28:12:3c:26: ca:51:a4:a5:94:ed:b4:be:7b:a7:04:27:e7:d6:e9:9d:63:bb: 5a:e4:45:d5:99:99:f1:af:46:1f:83:92:b9:27:09:35:32:06: 4e:59:a5:37:10:40:94:ea:5f:5a:ff:2e:54:a6:1a:53:0e:86: b4:f0:4a:60:35:42:70:ba:3a:3a:e6:66:f2:73:31:0d:3a:d2: 5a:e4:9c:69:4e:e4:26:bb:11:90:e1:2c:74:75:17:cb:e9:3a: 8b:0e:c3:6e:b7:88:af:83:e9:1e:9a:2b:ae:bf:16:ce:55:e1: 0e:da:80:7d:45:bf:d2:a2:be:a7:df:09:d5:6e:9b:8c:4e:3a: 94:ea:80:2e:84:b9:57:76:43:37:91:42:94:46:e3:33:a9:3c: 2a:1e:01:88:9e:eb:c4:3f:4d:cb:31:c9:6b:18:39:5b:fe:95: 88:93:d9:09:3d:42:5f:9e:b6:10:7c:9b:10:73:46:ef:e1:9a: 82:5a:cb:c7:e4:c5:70:18:db:8b:12:13:03:bc:c7:22:41:1c: 73:cf:97:6e:79:a5:2e:5f:b3:96:59:d5:06:19:c9:39:d3:09: f6:74:ba:80:91:10:7b:f0:bc:e7:8a:ea:cf:aa:53:3f:18:da: 98:a3:e4:82 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0tP5oxiN9wyrgBHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk NTg1YTcxNTUtZDgwMC00MzFkLWIxODItNDZiZjU3ZTBhOWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhe8ZTJwM6+E5POfMx8+y1ihthCtYxM8bG6yU KdjTLiBHNGSowzUIBBWciUmTxfZPwQpt1nJ4taboI5305/qDjprx1rAOGSG6oR1Q T7DPE+0PV3Y6CudP4Su9OtvqtFH0AL/z7i+nhBb4hxEOwzdV5UKoy50QQcywd2MG nNb66u2L67rVB4+r7q5hrdAhYwISbZMPHXTOqOaLsOtl/OiKVKYm32zDllaQYE/q zQKHg3vSB2B7xagAUrSHgourFVdZD8zpFnWhKXL3PsZHs9P6IRDE4JFBKdPoI+H/ y+BnDTpMvEj+eB6DhC90zlialYHFMQ7Y+yLHZc2dp6eqqp2kIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLFcmw3UiNRdjKJSu6k4y4IudZZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzAyY2Q4M2ItZDZiMS0z MTYzLTg0M2UtNDIxNGI2N2I4N2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAX2ZUeDW5kXK25yGUVXigSPCbKUaSllO20vnunBCfn1umdY7ta5EXV mZnxr0Yfg5K5Jwk1MgZOWaU3EECU6l9a/y5UphpTDoa08EpgNUJwujo65mbyczEN OtJa5JxpTuQmuxGQ4Sx0dRfL6TqLDsNut4ivg+kemiuuvxbOVeEO2oB9Rb/Sor6n 3wnVbpuMTjqU6oAuhLlXdkM3kUKURuMzqTwqHgGInuvEP03LMclrGDlb/pWIk9kJ PUJfnrYQfJsQc0bv4ZqCWsvH5MVwGNuLEhMDvMciQRxzz5dueaUuX7OWWdUGGck5 0wn2dLqAkRB78LzniurPqlM/GNqYo+SC -----END CERTIFICATE-----Generated at Thu Mar 26 13:52:33 2026 by rpki-client