$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0a6f69b-c79e-3aa6-a29f-e16557be8984.roa File: d0a6f69b-c79e-3aa6-a29f-e16557be8984.roa (raw, json) Hash identifier: CMYN94vuSlk8B5kd52PlKiQKsyDNgmF+FVfPOf0Gs/w= Subject key identifier: 3B:74:58:19:04:CE:10:37:DF:45:79:07:B3:27:0F:2C:B0:EB:CC:86 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2D3F956521D6A68E08D368C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0a6f69b-c79e-3aa6-a29f-e16557be8984.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 397197 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:95:65:21:d6:a6:8e:08:d3:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=a1722c39-fcf0-462c-a601-db0fc3c1f407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9d:ea:b7:6a:73:26:6a:15:34:22:8e:27:f1: b1:1e:91:f7:bd:82:6e:68:74:dc:81:a1:f5:f9:41: 15:a5:5f:3a:19:b7:37:af:9b:c8:f8:eb:72:43:2b: 47:81:c1:6b:2c:e4:f0:e4:44:d0:d5:77:b6:24:fb: eb:5d:a3:2f:82:ea:e0:ee:c5:7c:95:92:77:15:ae: 7a:1e:cc:7f:cd:f3:55:84:03:35:de:74:95:12:44: 01:c0:7f:13:08:54:52:f5:99:a8:1e:d6:1e:07:d3: c9:48:9c:eb:d5:15:80:52:2d:15:41:17:ee:78:82: 17:90:0a:38:76:54:d9:da:a3:5a:d3:1f:0c:e6:af: 4f:4a:ef:ce:c2:0b:c8:c1:1d:6e:ba:e3:b0:3d:25: 07:04:89:2d:4c:06:5f:ac:f6:75:9c:85:56:2b:76: 7a:c6:71:e7:a7:d4:26:b4:4a:8a:32:92:22:ab:d7: 1e:6f:24:30:f2:e5:87:eb:77:6f:c9:af:06:39:43: 57:a4:19:3e:2d:a4:6e:26:73:88:7a:47:43:6a:86: f3:22:62:93:98:c2:95:eb:7c:f7:e7:0e:09:18:c7: e2:66:0c:80:84:e4:22:70:a3:c0:4b:e5:47:37:99: 5f:27:ea:35:85:f8:91:7c:5f:47:7b:8c:5c:11:72: 5f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:74:58:19:04:CE:10:37:DF:45:79:07:B3:27:0F:2C:B0:EB:CC:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0a6f69b-c79e-3aa6-a29f-e16557be8984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:24:5c:ac:b5:3b:1a:0e:30:46:e5:af:e4:c4:05:e1:e2:16: 0a:55:6f:58:60:47:d2:5b:51:6b:9e:19:6e:60:48:39:21:72: cd:9e:36:7a:f7:ce:fa:b1:de:c1:75:2d:b2:2e:53:d7:6f:fd: 97:01:6f:29:c7:ff:7e:0a:62:15:b8:dd:62:b2:b5:a2:b2:cc: 52:12:39:d8:1f:18:f9:5e:0f:1c:26:f8:6b:ff:30:97:89:df: 5b:00:a5:16:a7:f8:2c:d2:be:b9:5e:c1:6a:f7:94:9e:b3:17: c9:40:f1:f2:51:02:79:4e:ac:be:7b:b9:a2:92:22:9b:42:21: bd:f8:94:00:7e:c5:ec:49:1a:81:52:77:a9:fa:92:c7:4d:80: ef:9d:16:dd:cc:8b:ba:36:27:2b:77:14:16:fc:59:6d:f5:6a: db:48:8f:cc:90:43:a9:f2:af:de:1a:03:dc:8b:b9:df:73:3d: 43:d0:a3:13:7d:d2:2e:84:6b:92:4e:2b:4f:f1:fb:74:99:f6: 5d:ef:70:21:4c:5c:7d:76:f8:ba:6d:60:e1:15:85:8c:8c:b4: d1:b6:4c:d0:76:31:51:4c:ca:24:d5:5d:e0:53:26:e0:e6:dc: 99:8f:33:1c:a8:a9:e3:36:41:44:93:bb:b7:81:7e:b7:a3:41: 48:3a:f6:02 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0tP5VlIdamjgjTaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk YTE3MjJjMzktZmNmMC00NjJjLWE2MDEtZGIwZmMzYzFmNDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr53qt2pzJmoVNCKOJ/GxHpH3vYJuaHTcgaH1 +UEVpV86Gbc3r5vI+OtyQytHgcFrLOTw5ETQ1Xe2JPvrXaMvgurg7sV8lZJ3Fa56 Hsx/zfNVhAM13nSVEkQBwH8TCFRS9ZmoHtYeB9PJSJzr1RWAUi0VQRfueIIXkAo4 dlTZ2qNa0x8M5q9PSu/OwgvIwR1uuuOwPSUHBIktTAZfrPZ1nIVWK3Z6xnHnp9Qm tEqKMpIiq9cebyQw8uWH63dvya8GOUNXpBk+LaRuJnOIekdDaobzImKTmMKV63z3 5w4JGMfiZgyAhOQicKPAS+VHN5lfJ+o1hfiRfF9He4xcEXJfnQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDt0WBkEzhA330V5B7MnDyyw68yGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDBhNmY2OWItYzc5ZS0z YWE2LWEyOWYtZTE2NTU3YmU4OTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA2JFystTsaDjBG5a/kxAXh4hYKVW9YYEfSW1FrnhluYEg5IXLNnjZ6 9876sd7BdS2yLlPXb/2XAW8px/9+CmIVuN1isrWissxSEjnYHxj5Xg8cJvhr/zCX id9bAKUWp/gs0r65XsFq95SesxfJQPHyUQJ5Tqy+e7mikiKbQiG9+JQAfsXsSRqB Unep+pLHTYDvnRbdzIu6NicrdxQW/Flt9WrbSI/MkEOp8q/eGgPci7nfcz1D0KMT fdIuhGuSTitP8ft0mfZd73AhTFx9dvi6bWDhFYWMjLTRtkzQdjFRTMok1V3gUybg 5tyZjzMcqKnjNkFEk7u3gX63o0FIOvYC -----END CERTIFICATE-----Generated at Thu Mar 26 14:10:03 2026 by rpki-client