$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd6c0aea-9f81-3979-91b8-7a645a4bb690.roa File: cd6c0aea-9f81-3979-91b8-7a645a4bb690.roa (raw, json) Hash identifier: oiiEVZdy+y4Jy/oO1F6wG3tBIYBXafZf8Y0i8S1KT9Y= Subject key identifier: CE:F6:9B:2B:C0:AF:1C:70:C6:BA:AF:F8:E4:5B:99:A0:CE:3E:85:92 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64FE9105064098A0F67400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd6c0aea-9f81-3979-91b8-7a645a4bb690.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 396560 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:fe:91:05:06:40:98:a0:f6:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=59a5a475-febd-415b-b15c-748328b5c4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a2:52:51:07:fd:57:17:25:83:34:6b:2f:d9: 64:c1:16:17:8d:2c:c6:f6:77:a6:49:ff:6a:83:c0: 1b:b1:c2:46:a8:04:23:d4:21:8b:cd:cc:4f:40:bf: 84:b8:ba:e9:ba:4a:8b:60:f9:b6:68:60:1f:a7:6d: fd:87:3a:89:8a:88:5e:d1:2f:b4:2e:8a:7b:c2:97: 6c:50:b2:a4:7a:a3:c3:54:2f:7c:03:ca:e1:da:30: a1:ac:ee:e2:a7:c6:11:83:c2:f4:22:6a:53:49:9b: 1e:38:19:dd:65:cd:0a:8e:4c:75:28:9d:dc:03:30: d3:40:f4:59:1e:f8:67:87:98:47:1f:db:45:34:20: 29:93:92:8a:ee:95:3a:49:01:97:84:64:e0:f4:47: 6f:77:72:ef:4d:87:59:13:86:1e:91:6a:42:96:87: 2c:98:4c:60:ad:45:eb:66:a2:01:7c:7f:ac:83:cc: b7:57:56:f6:30:10:9e:f2:08:f7:36:5d:52:b7:47: 62:6b:70:69:62:46:bb:70:6e:a7:6b:20:36:c5:31: b0:e7:f9:19:35:09:12:01:d7:c6:8e:f9:ec:b0:50: f3:2d:6b:3d:10:61:74:9a:f2:00:fd:e8:b1:8d:06: db:e5:c7:13:14:ab:9c:2a:3b:98:b7:cf:2e:d9:b4: 7e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F6:9B:2B:C0:AF:1C:70:C6:BA:AF:F8:E4:5B:99:A0:CE:3E:85:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd6c0aea-9f81-3979-91b8-7a645a4bb690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:0b:9a:9c:33:70:33:77:7c:78:3a:f4:c6:bc:a9:f2:68:be: 92:2b:03:32:a4:47:39:a5:55:2e:9d:08:bc:3f:fb:a1:cf:1e: c0:2d:2e:a5:09:43:3c:fb:36:3a:40:c8:14:72:5e:70:bb:01: 71:5e:8e:e0:0e:45:a1:73:9b:fc:ec:27:e3:09:17:f0:51:c6: e3:76:2a:4c:e9:40:94:88:d3:ff:27:74:79:1e:9b:a1:e4:db: 8c:54:14:a5:5f:e3:e6:ce:ad:61:b0:c8:83:bd:34:a1:c2:86: 6f:ce:38:b8:7f:e6:ed:d4:36:6a:e8:bf:dd:2e:05:80:e8:4a: 21:a6:b0:81:c2:e9:5c:a3:0b:3d:03:f6:84:b7:3d:60:55:f2: 22:b4:b7:da:58:ad:b3:41:e7:01:47:09:85:3e:f1:d5:b3:41: 95:11:c9:35:2c:6c:29:91:be:18:41:6f:3f:8f:c7:e4:0c:82: 1a:ee:b1:60:f1:fd:f3:65:df:b2:c0:ab:2b:d1:2d:5f:2c:0b: 11:8f:95:67:98:19:e0:5d:53:0e:88:3e:1a:32:0e:02:a1:7b: 56:31:8f:1d:54:fa:7b:97:ac:4c:8e:25:ca:5c:06:d1:9e:85: 89:55:4d:55:12:08:66:98:58:4a:62:e1:be:8d:0e:c2:ef:52: 94:a8:0c:cd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZP6RBQZAmKD2dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NTlhNWE0NzUtZmViZC00MTViLWIxNWMtNzQ4MzI4YjVjNGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqJSUQf9VxclgzRrL9lkwRYXjSzG9nemSf9q g8AbscJGqAQj1CGLzcxPQL+EuLrpukqLYPm2aGAfp239hzqJiohe0S+0Lop7wpds ULKkeqPDVC98A8rh2jChrO7ip8YRg8L0ImpTSZseOBndZc0Kjkx1KJ3cAzDTQPRZ Hvhnh5hHH9tFNCApk5KK7pU6SQGXhGTg9Edvd3LvTYdZE4YekWpClocsmExgrUXr ZqIBfH+sg8y3V1b2MBCe8gj3Nl1St0dia3BpYka7cG6nayA2xTGw5/kZNQkSAdfG jvnssFDzLWs9EGF0mvIA/eixjQbb5ccTFKucKjuYt88u2bR+CQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM72myvArxxwxrqv+ORbmaDOPoWSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Q2YzBhZWEtOWY4MS0z OTc5LTkxYjgtN2E2NDVhNGJiNjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJC5qcM3Azd3x4OvTGvKnyaL6SKwMypEc5pVUunQi8P/uhzx7ALS6l CUM8+zY6QMgUcl5wuwFxXo7gDkWhc5v87CfjCRfwUcbjdipM6UCUiNP/J3R5Hpuh 5NuMVBSlX+Pmzq1hsMiDvTShwoZvzji4f+bt1DZq6L/dLgWA6EohprCBwulcows9 A/aEtz1gVfIitLfaWK2zQecBRwmFPvHVs0GVEck1LGwpkb4YQW8/j8fkDIIa7rFg 8f3zZd+ywKsr0S1fLAsRj5VnmBngXVMOiD4aMg4CoXtWMY8dVPp7l6xMjiXKXAbR noWJVU1VEghmmFhKYuG+jQ7C71KUqAzN -----END CERTIFICATE-----Generated at Thu Mar 26 11:16:09 2026 by rpki-client