$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d51efc8c-0e81-303a-8669-75bf3ad2e229.roa File: d51efc8c-0e81-303a-8669-75bf3ad2e229.roa (raw, json) Hash identifier: 1u24DcZxcIl2PHx3EW9uwOcDDavFL/pXycQuSpNdp7U= Subject key identifier: 7E:01:60:8C:35:7D:90:E5:4F:F7:9B:77:CB:D5:D6:9F:C8:FA:2A:17 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2D3F98AA20E0BF7DFBCBAD40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d51efc8c-0e81-303a-8669-75bf3ad2e229.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 396560 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:98:aa:20:e0:bf:7d:fb:cb:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=8d3f210a-9d3d-4c61-8122-9b50a8c2099e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:11:26:33:c3:0c:f1:55:6d:4c:23:64:94:e6: 01:f0:bd:8c:16:db:88:8c:05:45:a5:ef:de:a5:0a: 6d:81:96:26:4b:23:e0:24:03:f4:bb:e9:b5:ff:61: e1:95:87:e0:e6:44:a9:5e:db:5f:9f:5a:28:74:18: 54:b4:9a:16:59:78:c6:68:a9:38:b0:72:14:1f:41: 6c:5a:04:60:6e:a3:c2:92:b7:a8:e6:5b:8a:41:ad: c8:3f:5c:1a:5a:54:3f:88:19:f9:49:64:a6:6b:42: fc:ef:55:c6:26:59:33:cf:ee:f4:6e:6a:03:08:68: d9:47:4d:1c:86:a4:62:35:de:a4:55:15:64:55:47: cc:82:b4:83:f7:10:4e:4c:2f:04:a3:52:81:4a:d7: 31:ca:26:6c:0d:78:0a:91:36:ef:ce:c7:30:e8:14: b9:e7:c6:b3:ab:71:04:02:4b:c4:c2:4d:f2:90:a9: 15:b7:35:e6:65:88:fa:47:5a:a6:08:52:3e:8e:11: c1:ba:f1:55:30:5d:ba:d9:08:1b:d9:b7:3d:e3:68: 82:6b:95:71:c9:0a:2b:22:68:61:d8:02:c5:5b:f4: 94:4b:13:99:2f:42:71:26:b2:35:ba:ff:bd:a7:f0: 4b:ff:50:42:9f:23:6b:94:a0:7d:d5:6c:64:b2:7a: 80:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:01:60:8C:35:7D:90:E5:4F:F7:9B:77:CB:D5:D6:9F:C8:FA:2A:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d51efc8c-0e81-303a-8669-75bf3ad2e229.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:c6:75:0a:8d:6a:56:e9:2d:4b:8c:54:d9:0f:da:f9:ae:72: 0d:5c:e2:c9:59:10:88:19:3b:ff:a0:1b:f6:0c:c8:d8:00:ed: 3a:4d:0a:7e:e6:86:d8:02:2b:cd:d6:77:a0:85:b2:64:4d:b6: d7:1f:1a:d8:8d:14:28:67:c4:23:c9:cd:d4:34:5e:2a:06:a6: cc:a6:a6:aa:f3:9c:d1:06:f6:ae:9b:34:3c:39:b1:76:51:4f: e6:7b:97:41:c8:83:b9:8d:62:bc:48:03:55:5b:63:7d:f3:e1: df:85:e1:c1:ff:73:44:b8:4e:e3:d2:c2:4e:b0:ef:15:03:06: 7e:99:5a:cb:8e:c8:eb:2e:a2:c8:ab:61:f7:5d:af:57:c8:37: d6:24:e8:22:f6:7a:b7:64:ab:70:c2:36:5a:9d:9c:22:b4:cf: 5d:3a:3c:08:b0:0f:44:16:e1:0a:2f:5b:4d:34:4a:24:89:c1: 5a:27:db:8f:9f:99:27:8d:4a:ab:ed:f7:58:b7:7c:38:3d:57: 41:fa:a5:22:26:28:49:40:3b:0b:d3:12:0c:00:95:2a:89:d0: 98:60:a4:9b:3a:71:14:1e:49:30:7a:99:92:79:09:6c:16:c2: 32:d5:18:b5:06:2a:6e:a2:0b:98:40:e6:c6:de:11:fd:cc:ce: 39:d3:23:c6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0tP5iqIOC/ffvLrUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk OGQzZjIxMGEtOWQzZC00YzYxLTgxMjItOWI1MGE4YzIwOTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xEmM8MM8VVtTCNklOYB8L2MFtuIjAVFpe/e pQptgZYmSyPgJAP0u+m1/2HhlYfg5kSpXttfn1oodBhUtJoWWXjGaKk4sHIUH0Fs WgRgbqPCkreo5luKQa3IP1waWlQ/iBn5SWSma0L871XGJlkzz+70bmoDCGjZR00c hqRiNd6kVRVkVUfMgrSD9xBOTC8Eo1KBStcxyiZsDXgKkTbvzscw6BS558azq3EE AkvEwk3ykKkVtzXmZYj6R1qmCFI+jhHBuvFVMF262Qgb2bc942iCa5VxyQorImhh 2ALFW/SUSxOZL0JxJrI1uv+9p/BL/1BCnyNrlKB91WxksnqAgwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH4BYIw1fZDlT/ebd8vV1p/I+ioXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDUxZWZjOGMtMGU4MS0z MDNhLTg2NjktNzViZjNhZDJlMjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCExnUKjWpW6S1LjFTZD9r5rnINXOLJWRCIGTv/oBv2DMjYAO06TQp+ 5obYAivN1neghbJkTbbXHxrYjRQoZ8Qjyc3UNF4qBqbMpqaq85zRBvaumzQ8ObF2 UU/me5dByIO5jWK8SANVW2N98+HfheHB/3NEuE7j0sJOsO8VAwZ+mVrLjsjrLqLI q2H3Xa9XyDfWJOgi9nq3ZKtwwjZanZwitM9dOjwIsA9EFuEKL1tNNEokicFaJ9uP n5knjUqr7fdYt3w4PVdB+qUiJihJQDsL0xIMAJUqidCYYKSbOnEUHkkwepmSeQls FsIy1Ri1BipuoguYQObG3hH9zM450yPG -----END CERTIFICATE-----Generated at Thu Mar 26 11:19:20 2026 by rpki-client