$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e3ab5968-a7d5-3749-8ecf-314686226a81.roa File: e3ab5968-a7d5-3749-8ecf-314686226a81.roa (raw, json) Hash identifier: rAIR4C1Z6rE2TPDjL6e64zEfhfhHZwRfBw5urwyU0sw= Subject key identifier: 60:F0:FE:CD:23:38:3C:90:7A:6A:37:23:46:D8:11:D4:98:AF:2D:F1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64FC3741F71961B2125EA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e3ab5968-a7d5-3749-8ecf-314686226a81.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 396562 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:fc:37:41:f7:19:61:b2:12:5e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=b3553e52-1811-4b6f-ba0c-ffbeea9810f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7a:2a:92:03:17:15:f0:b4:4e:7d:ab:ea:3b: 39:b0:3d:56:d6:95:f3:bd:ce:88:d9:e0:24:d2:2f: fb:82:d8:82:8e:82:cc:7b:7b:51:02:68:d7:a2:48: 38:f9:43:5a:d7:d7:be:f6:ad:65:ec:81:62:63:87: 4e:c7:d7:4e:3f:7a:cf:58:a6:0a:e9:b7:64:94:e9: b7:f5:e7:10:b2:4f:a3:b0:8e:c3:32:b6:91:da:ab: 54:1b:07:77:26:fe:ac:4f:10:5b:60:be:b2:d6:2e: 2f:b3:d4:d8:88:b5:78:2d:48:00:20:25:2f:a7:bb: 34:48:30:46:1b:ae:a2:f4:48:8d:26:ec:86:ae:76: 13:00:9b:d5:10:19:21:63:a5:5a:a9:9d:6e:3e:a3: 83:53:71:d0:f4:c2:72:09:ab:60:6b:9d:5a:53:66: 3d:c5:c4:97:a0:dc:68:ba:44:52:37:1d:35:b7:e6: 40:2a:be:3d:f6:f6:17:08:ee:d4:fc:9b:9f:43:0f: 92:8e:42:cf:a1:d5:93:87:40:0a:67:f6:68:56:8a: 75:f3:71:08:cb:b7:2d:ad:12:6f:10:f7:45:b5:f5: c1:de:8e:03:26:b7:aa:76:94:01:11:1e:62:de:76: ab:e4:06:ca:70:6a:ac:31:8f:81:7a:f3:48:5a:d8: 06:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F0:FE:CD:23:38:3C:90:7A:6A:37:23:46:D8:11:D4:98:AF:2D:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e3ab5968-a7d5-3749-8ecf-314686226a81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:89:da:1b:f2:e7:8b:ee:d3:6f:74:67:e5:df:ed:24:ec:f0: b7:b4:ea:da:5b:9a:b0:0b:88:e1:41:59:e6:00:e2:2d:ec:c0: 25:2a:c7:56:4e:2c:aa:2d:4d:7a:57:ef:04:bd:fb:81:00:27: 76:3c:4e:f6:ad:01:8c:1f:72:48:80:ab:ab:15:d2:5f:d1:82: c7:dc:69:a0:e7:b5:39:98:dc:b7:57:e8:9f:2b:d7:17:3a:7d: 09:c9:fb:73:55:52:7d:c8:3f:6c:2b:cd:60:f3:bc:83:73:38: 28:d8:b3:3a:1f:d0:cb:41:14:2b:11:d8:14:e5:3e:53:cf:24: 77:4c:bd:23:78:e7:05:ef:a4:7b:d0:2b:58:9d:ad:88:22:e9: 12:66:e1:88:d5:c6:07:f8:2a:2e:4f:e7:54:0f:25:68:7b:7a: bc:a1:e4:61:0d:e6:5f:63:3f:c1:b9:3d:94:6a:be:fe:45:3a: 8b:0d:dd:bd:3c:8d:ba:5b:d9:60:24:71:84:b6:30:48:4d:99: d6:7b:9e:6f:cb:5f:0c:6c:2c:46:85:ad:64:0b:b6:a6:8f:5b: ad:b3:50:a5:01:78:23:34:44:71:6a:5e:60:39:2b:f6:01:b8: f5:2b:66:31:ad:49:52:7a:03:e7:64:70:e9:ef:cc:f8:be:12: 49:a9:1a:8e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZPw3QfcZYbISXqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk YjM1NTNlNTItMTgxMS00YjZmLWJhMGMtZmZiZWVhOTgxMGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXoqkgMXFfC0Tn2r6js5sD1W1pXzvc6I2eAk 0i/7gtiCjoLMe3tRAmjXokg4+UNa19e+9q1l7IFiY4dOx9dOP3rPWKYK6bdklOm3 9ecQsk+jsI7DMraR2qtUGwd3Jv6sTxBbYL6y1i4vs9TYiLV4LUgAICUvp7s0SDBG G66i9EiNJuyGrnYTAJvVEBkhY6VaqZ1uPqODU3HQ9MJyCatga51aU2Y9xcSXoNxo ukRSNx01t+ZAKr499vYXCO7U/JufQw+SjkLPodWTh0AKZ/ZoVop183EIy7ctrRJv EPdFtfXB3o4DJreqdpQBER5i3nar5AbKcGqsMY+BevNIWtgG/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGDw/s0jODyQemo3I0bYEdSYry3xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTNhYjU5NjgtYTdkNS0z NzQ5LThlY2YtMzE0Njg2MjI2YTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAaidob8ueL7tNvdGfl3+0k7PC3tOraW5qwC4jhQVnmAOIt7MAlKsdW TiyqLU16V+8EvfuBACd2PE72rQGMH3JIgKurFdJf0YLH3Gmg57U5mNy3V+ifK9cX On0JyftzVVJ9yD9sK81g87yDczgo2LM6H9DLQRQrEdgU5T5TzyR3TL0jeOcF76R7 0CtYna2IIukSZuGI1cYH+CouT+dUDyVoe3q8oeRhDeZfYz/BuT2Uar7+RTqLDd29 PI26W9lgJHGEtjBITZnWe55vy18MbCxGha1kC7amj1uts1ClAXgjNERxal5gOSv2 Abj1K2YxrUlSegPnZHDp78z4vhJJqRqO -----END CERTIFICATE-----Generated at Thu Mar 26 13:00:59 2026 by rpki-client