$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa File: cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa (raw, json) Hash identifier: PBL/JTvJFMxfoBH9pUUeCHzqZsoaTVqZ0yKGTKDfSf4= Subject key identifier: 74:79:79:24:81:84:6C:EC:58:9F:42:7C:27:6E:CE:46:67:4A:6F:5C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2D3F987C945EFF9B84E96060 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 397204 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:98:7c:94:5e:ff:9b:84:e9:60:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=6d99e5cd-6874-4967-867f-41abf64ed64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b0:18:04:2d:43:3c:84:1a:1f:77:83:a2:a3: 1d:44:5a:2c:e6:06:d6:55:3d:a0:32:d8:78:28:9b: 07:ea:7f:4b:76:26:ba:d9:d2:2f:36:cd:41:f0:fb: f4:8e:3f:76:ec:5c:e5:38:35:e2:02:77:3e:ad:d2: 6b:aa:74:ac:a9:3c:68:0e:a4:83:4e:eb:a7:4c:00: 3e:f1:86:16:e7:98:1a:d9:11:4d:7d:2a:04:ab:b7: df:01:67:59:80:b7:89:cb:cd:cb:58:77:97:ba:5d: 05:79:71:5d:93:78:d8:3e:44:cb:6e:e0:ab:87:26: 15:eb:9d:f2:5e:e4:f6:48:12:86:44:f2:b4:15:f7: e3:4c:fa:41:4a:a4:f8:08:5e:66:d3:69:78:bd:29: 34:c1:52:16:06:c6:56:33:fa:67:e6:ce:1a:fe:f7: 34:be:3f:d0:67:e0:73:72:bb:e6:9b:5c:08:88:cc: 55:71:b7:1e:c4:e6:6a:05:a3:1d:4b:9c:c6:2a:c2: 37:d1:7d:21:0a:85:26:70:10:cf:d7:17:15:b0:08: d7:c8:eb:3e:ef:c2:94:9f:b7:3b:1a:13:08:b5:53: a0:a3:ac:86:45:90:6b:e8:7e:3c:78:dc:d0:c2:b0: 61:2e:14:b4:dc:65:1f:b3:f1:15:47:24:2c:37:9f: 74:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:79:79:24:81:84:6C:EC:58:9F:42:7C:27:6E:CE:46:67:4A:6F:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:25:d2:8c:d4:0c:10:a6:82:7a:cc:e6:77:04:6c:10:2a:93: 84:65:0b:11:24:46:3f:1f:2c:de:3f:a1:8c:3c:fc:d9:18:b3: 0d:5e:46:ba:ed:f2:df:1b:b7:ab:28:1d:32:20:bb:05:0e:1b: c0:d2:62:f8:e2:91:86:83:85:a7:2c:f3:8d:4e:6d:5e:71:22: 12:08:d6:97:44:c2:de:37:8a:7d:cc:d7:ff:df:af:12:31:7d: 69:95:45:5c:37:9a:d6:1e:18:86:f0:17:83:5d:03:46:fb:41: aa:37:38:9c:4c:b6:84:37:90:26:12:f2:d1:27:bd:de:73:eb: 84:95:13:5d:64:ae:26:ac:1a:c5:0f:6b:c5:8b:8e:9c:de:47: ca:63:d8:62:2f:19:0b:03:4e:42:de:02:d1:8d:1e:8a:1e:c0: 72:4f:00:b4:da:c0:fa:86:4d:4f:80:b2:00:5a:4e:67:30:94: b2:1a:fa:17:97:ac:c0:84:20:2e:35:55:c2:ef:33:25:56:85: c6:10:d5:68:a7:46:98:b7:5a:f0:16:de:a6:db:64:59:30:d3: 7a:dc:82:11:43:63:5b:2b:81:17:00:02:ef:13:71:ac:20:f1: e3:f1:2a:8e:f0:f5:f3:fa:2d:4e:b8:9b:8f:9a:ba:eb:c2:f5: 32:75:b5:d9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0tP5h8lF7/m4TpYGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk NmQ5OWU1Y2QtNjg3NC00OTY3LTg2N2YtNDFhYmY2NGVkNjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7AYBC1DPIQaH3eDoqMdRFos5gbWVT2gMth4 KJsH6n9Ldia62dIvNs1B8Pv0jj927FzlODXiAnc+rdJrqnSsqTxoDqSDTuunTAA+ 8YYW55ga2RFNfSoEq7ffAWdZgLeJy83LWHeXul0FeXFdk3jYPkTLbuCrhyYV653y XuT2SBKGRPK0FffjTPpBSqT4CF5m02l4vSk0wVIWBsZWM/pn5s4a/vc0vj/QZ+Bz crvmm1wIiMxVcbcexOZqBaMdS5zGKsI30X0hCoUmcBDP1xcVsAjXyOs+78KUn7c7 GhMItVOgo6yGRZBr6H48eNzQwrBhLhS03GUfs/EVRyQsN590LQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHR5eSSBhGzsWJ9CfCduzkZnSm9cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2YxYzhhMGEtOTFkOS0z ODVjLTk0YzYtMjk1ODJiNGYzNGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBgJdKM1AwQpoJ6zOZ3BGwQKpOEZQsRJEY/HyzeP6GMPPzZGLMNXka6 7fLfG7erKB0yILsFDhvA0mL44pGGg4WnLPONTm1ecSISCNaXRMLeN4p9zNf/368S MX1plUVcN5rWHhiG8BeDXQNG+0GqNzicTLaEN5AmEvLRJ73ec+uElRNdZK4mrBrF D2vFi46c3kfKY9hiLxkLA05C3gLRjR6KHsByTwC02sD6hk1PgLIAWk5nMJSyGvoX l6zAhCAuNVXC7zMlVoXGENVop0aYt1rwFt6m22RZMNN63IIRQ2NbK4EXAALvE3Gs IPHj8SqO8PXz+i1OuJuPmrrrwvUydbXZ -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:18 2026 by rpki-client