$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd8a995e-ded4-3180-b959-a5098f3033df.roa File: dd8a995e-ded4-3180-b959-a5098f3033df.roa (raw, json) Hash identifier: LjXmhf442Ral98cwaGtzXMbjcsBXEmDPDASlVPG/YV0= Subject key identifier: BC:59:86:75:9A:43:AA:17:6A:E9:D8:A6:61:4F:99:5E:1E:8F:B3:37 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64FF26A2EA14BC3E9A2D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd8a995e-ded4-3180-b959-a5098f3033df.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 396544 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:ff:26:a2:ea:14:bc:3e:9a:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=ea2720ea-2f6a-485b-9d36-ea32b86b3f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f0:5a:0a:24:3a:55:b0:c6:ff:c8:28:41:c0: f2:c3:bd:5e:32:4b:4a:c0:43:a9:d9:63:96:eb:3b: c4:a8:f5:4c:cf:10:8f:41:10:4a:bc:3b:6c:39:d8: 0d:c1:25:df:60:6c:01:6c:51:7a:9e:a9:d6:8f:62: 2e:93:7a:38:e8:63:0e:0f:f1:95:89:0b:d2:e5:8e: 83:d4:bc:3f:85:22:03:89:07:03:4c:f5:71:3b:d2: 2b:ba:c4:6e:e9:8d:21:6d:38:2b:db:84:cb:88:82: 93:10:8b:4b:4a:90:b5:ed:00:c6:9a:56:e7:d1:aa: e3:53:e4:95:12:72:74:71:8c:be:f5:cb:87:00:ca: 60:dc:c0:39:39:8c:0b:3a:be:70:09:33:5f:46:56: af:76:44:81:7a:5a:b6:27:d6:ac:55:5f:55:02:70: 6b:b9:88:da:3a:8f:ce:22:de:33:3d:28:f0:69:0f: 5a:25:c8:78:43:0c:4e:a0:a3:c0:e9:b1:ef:c9:19: 9e:f5:f4:df:b1:12:92:91:9d:89:a1:d3:b5:22:8d: 8d:73:24:72:32:75:3e:04:85:10:92:0e:8c:56:9d: d0:5d:a9:d5:06:10:78:e0:39:d4:0f:b5:22:ab:62: 21:3f:42:d7:62:8a:0b:44:38:60:69:eb:52:f2:cd: 5c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:59:86:75:9A:43:AA:17:6A:E9:D8:A6:61:4F:99:5E:1E:8F:B3:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd8a995e-ded4-3180-b959-a5098f3033df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:0c:33:a3:d4:37:c8:02:ee:b1:60:7b:39:7d:58:cd:24:8e: 25:1d:d2:11:6f:70:98:e9:4e:3b:d5:be:39:5c:c2:d4:c1:d4: 41:a6:cb:77:0c:2f:f2:51:c2:f2:a9:2e:1d:fc:22:18:be:d7: 86:f5:0a:a6:c5:4c:90:1f:c0:df:c6:4f:a0:c3:8e:30:a9:ef: 2e:2f:e6:22:1f:b2:06:39:6d:24:d1:95:88:b7:29:2f:39:81: a7:43:8f:25:28:72:3f:13:ed:96:58:8e:09:ec:9b:9d:7d:bd: 23:c9:92:c5:f1:9c:df:5d:4f:fc:98:ff:b7:aa:77:ff:33:a1: b1:9d:72:bc:4f:e8:b4:12:66:4e:6e:32:25:2a:af:bb:44:f2: 92:ba:9e:8c:fa:0f:c9:13:78:83:89:f9:ec:ee:11:5d:89:0e: 83:da:37:a3:fd:de:31:11:7c:41:87:ef:b0:07:75:3c:84:0e: 4b:79:7e:5c:15:f6:99:40:32:59:89:7a:98:97:d7:34:5a:d7: 9c:e4:8c:62:eb:0a:b5:5c:7f:d4:45:bf:a6:0e:c5:cc:90:80: 87:0e:5d:1b:72:df:d6:56:0e:22:27:07:7b:93:2d:96:f3:95: 3e:51:ea:b6:6f:90:2b:30:c8:63:b3:d8:65:be:79:12:0c:4e: 49:ea:f5:2e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZP8mouoUvD6aLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ZWEyNzIwZWEtMmY2YS00ODViLTlkMzYtZWEzMmI4NmIzZjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvBaCiQ6VbDG/8goQcDyw71eMktKwEOp2WOW 6zvEqPVMzxCPQRBKvDtsOdgNwSXfYGwBbFF6nqnWj2Iuk3o46GMOD/GViQvS5Y6D 1Lw/hSIDiQcDTPVxO9IrusRu6Y0hbTgr24TLiIKTEItLSpC17QDGmlbn0arjU+SV EnJ0cYy+9cuHAMpg3MA5OYwLOr5wCTNfRlavdkSBelq2J9asVV9VAnBruYjaOo/O It4zPSjwaQ9aJch4QwxOoKPA6bHvyRme9fTfsRKSkZ2JodO1Io2NcyRyMnU+BIUQ kg6MVp3QXanVBhB44DnUD7Uiq2IhP0LXYooLRDhgaetS8s1cFwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLxZhnWaQ6oXaunYpmFPmV4ej7M3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGQ4YTk5NWUtZGVkNC0z MTgwLWI5NTktYTUwOThmMzAzM2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAFDDOj1DfIAu6xYHs5fVjNJI4lHdIRb3CY6U471b45XMLUwdRBpst3 DC/yUcLyqS4d/CIYvteG9QqmxUyQH8Dfxk+gw44wqe8uL+YiH7IGOW0k0ZWItykv OYGnQ48lKHI/E+2WWI4J7Judfb0jyZLF8ZzfXU/8mP+3qnf/M6GxnXK8T+i0EmZO bjIlKq+7RPKSup6M+g/JE3iDifns7hFdiQ6D2jej/d4xEXxBh++wB3U8hA5LeX5c FfaZQDJZiXqYl9c0Wtec5Ixi6wq1XH/URb+mDsXMkICHDl0bct/WVg4iJwd7ky2W 85U+Ueq2b5ArMMhjs9hlvnkSDE5J6vUu -----END CERTIFICATE-----Generated at Thu Mar 26 20:26:54 2026 by rpki-client