$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c723e1b7-9fb8-30cc-8b5e-1bbf3da6e66a.roa File: c723e1b7-9fb8-30cc-8b5e-1bbf3da6e66a.roa (raw, json) Hash identifier: SXQyn0NZunsr4IQdTy3YbsaK9Kv+njQ7T4By3Ptk3n0= Subject key identifier: 57:3D:14:D5:EC:4E:88:4E:00:3D:B9:86:F5:83:23:2E:41:D6:5D:DB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64FCCB400A1DD439774590 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c723e1b7-9fb8-30cc-8b5e-1bbf3da6e66a.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 36623 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:fc:cb:40:0a:1d:d4:39:77:45:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=fa1f6ee9-495b-4eb1-9727-06fccd81b4c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9f:f8:a0:b1:0f:2f:9e:e9:df:d4:98:a5:1c: 9f:64:f8:17:f1:53:81:07:03:25:0b:26:4b:f9:60: ae:20:3a:9c:33:b0:5b:49:fe:71:db:b8:5c:fd:c2: 1a:38:57:68:59:dc:fe:3a:7d:f8:7b:10:58:ca:22: 86:80:03:0a:ac:3e:74:33:1d:f7:17:a1:30:c9:2d: f5:5a:57:fb:5b:cf:39:7b:99:cf:79:c9:6f:91:b0: cc:8a:f6:b1:3a:1b:86:fb:57:48:e6:61:8d:96:dc: 84:42:cd:90:5c:50:b5:65:b9:68:76:56:a2:d3:3d: 71:37:dd:65:b0:32:9a:f8:39:db:cf:55:c5:8f:0e: 9c:6a:86:5a:6c:24:01:6c:32:d7:ae:e4:1f:17:44: 5d:82:07:1c:3b:7f:e8:ef:2d:12:09:1f:be:ec:ea: 12:f1:84:ea:c6:51:56:af:ef:b7:d9:a8:d9:30:e1: 2e:f6:4f:af:41:40:91:2c:0a:57:f3:74:a0:2b:9c: b9:63:71:b2:da:40:8b:88:c7:92:08:ac:32:69:ce: 37:81:2c:27:81:b6:bc:74:91:a1:9f:a9:cf:d2:bc: b9:47:24:c9:e0:c4:81:51:37:90:7c:8a:8e:21:1a: e1:4a:8e:39:f1:59:3d:a1:91:67:04:78:eb:90:b5: 75:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3D:14:D5:EC:4E:88:4E:00:3D:B9:86:F5:83:23:2E:41:D6:5D:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c723e1b7-9fb8-30cc-8b5e-1bbf3da6e66a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:c2:65:ba:41:ea:f8:ce:65:f3:ef:04:75:82:79:b6:24:a8: 3a:c2:56:f8:c8:99:c2:89:8f:d5:3f:dd:2c:24:cc:ed:01:49: 43:fc:bc:19:17:62:d1:15:be:27:c1:0c:82:8f:7c:1c:92:3a: 0e:b3:b5:7b:b0:84:52:9f:97:e3:14:3d:aa:e4:d5:11:9e:04: 46:0d:3f:cf:f5:c4:54:34:cf:27:44:67:e0:04:36:14:7d:61: b5:31:e9:5e:b9:e4:e3:9f:69:c7:73:e4:63:07:54:de:9f:b5: 2b:bc:7f:79:a8:35:bb:d7:2f:92:b1:7c:12:84:59:65:7f:e3: b4:1a:c3:65:05:e2:c0:fd:06:d9:34:15:02:2a:2e:df:bf:32: 1a:97:d2:5d:18:df:ad:62:1b:f1:d5:4d:ac:6c:48:6c:3d:4f: 33:76:b9:b1:24:7a:d4:e3:0f:80:1c:60:6f:b2:8c:c4:0d:d5: a6:dc:40:17:8f:13:43:ea:51:92:0a:b3:f2:ea:19:34:89:bd: b4:2e:d2:8b:87:6f:af:72:5e:04:e1:7c:29:b8:9d:a7:fd:e4: cf:93:5b:f3:25:00:7a:41:dd:d4:0e:77:29:16:63:c9:36:33: 8e:87:6a:91:3b:36:17:c1:ae:9d:fa:b7:2b:d3:0f:5e:75:a4: d5:93:4e:3e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZPzLQAod1Dl3RZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ZmExZjZlZTktNDk1Yi00ZWIxLTk3MjctMDZmY2NkODFiNGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5/4oLEPL57p39SYpRyfZPgX8VOBBwMlCyZL +WCuIDqcM7BbSf5x27hc/cIaOFdoWdz+On34exBYyiKGgAMKrD50Mx33F6EwyS31 Wlf7W885e5nPeclvkbDMivaxOhuG+1dI5mGNltyEQs2QXFC1Zblodlai0z1xN91l sDKa+Dnbz1XFjw6caoZabCQBbDLXruQfF0RdggccO3/o7y0SCR++7OoS8YTqxlFW r++32ajZMOEu9k+vQUCRLApX83SgK5y5Y3Gy2kCLiMeSCKwyac43gSwngba8dJGh n6nP0ry5RyTJ4MSBUTeQfIqOIRrhSo458Vk9oZFnBHjrkLV1TwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFc9FNXsTohOAD25hvWDIy5B1l3bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzcyM2UxYjctOWZiOC0z MGNjLThiNWUtMWJiZjNkYTZlNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAYwmW6Qer4zmXz7wR1gnm2JKg6wlb4yJnCiY/VP90sJMztAUlD/LwZ F2LRFb4nwQyCj3wckjoOs7V7sIRSn5fjFD2q5NURngRGDT/P9cRUNM8nRGfgBDYU fWG1MeleueTjn2nHc+RjB1Ten7UrvH95qDW71y+SsXwShFllf+O0GsNlBeLA/QbZ NBUCKi7fvzIal9JdGN+tYhvx1U2sbEhsPU8zdrmxJHrU4w+AHGBvsozEDdWm3EAX jxND6lGSCrPy6hk0ib20LtKLh2+vcl4E4XwpuJ2n/eTPk1vzJQB6Qd3UDncpFmPJ NjOOh2qROzYXwa6d+rcr0w9edaTVk04+ -----END CERTIFICATE-----Generated at Thu Mar 26 13:51:10 2026 by rpki-client