$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9834368-3afb-3de0-a734-5a2768c2ae3f.roa File: e9834368-3afb-3de0-a734-5a2768c2ae3f.roa (raw, json) Hash identifier: QfVfw7p8Z9YItgp6Akg1rf/tQxJiI1lCT7c9orwESt8= Subject key identifier: B6:2E:A9:5D:79:99:77:E7:7C:46:31:C0:A3:DC:11:4B:16:31:C0:40 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64FD1F45F542BD387C41E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9834368-3afb-3de0-a734-5a2768c2ae3f.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 36628 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:fd:1f:45:f5:42:bd:38:7c:41:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=7d5ba70d-e627-4336-bd0b-2affa3be6fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f5:ff:b7:e1:99:e7:2b:7d:18:e3:c6:92:9f: 75:eb:49:ab:7e:bc:1c:a3:34:b9:c3:3f:fb:2d:cf: 48:90:41:58:a5:48:69:52:94:77:15:83:1a:00:70: db:23:bd:25:4e:d9:23:25:32:4a:19:fb:41:d5:50: fa:7f:0f:53:d6:94:06:cc:2d:e9:2e:20:7d:b1:43: 15:80:63:cb:78:02:df:9f:1e:13:f3:a8:a1:83:ee: a6:38:58:41:a7:b9:21:ac:e7:66:4c:6c:74:e7:0d: 7a:8f:11:70:ba:52:62:68:84:19:d9:15:98:f0:75: b9:0c:45:0c:33:db:21:e8:90:76:80:0e:26:e6:33: f2:60:73:c8:3e:89:43:03:9b:5f:02:ea:18:34:ae: dc:55:3b:d5:fa:1e:62:c1:23:eb:39:45:27:ce:29: f3:c9:bc:a4:f8:06:00:93:c8:4e:76:41:2b:20:29: e9:59:bd:f9:93:5c:48:64:7e:65:a5:31:28:6d:2e: 91:1a:f8:c6:f8:60:ed:11:bc:2e:24:26:e6:fd:c7: 22:8e:a1:07:df:ae:13:5b:8b:51:ed:68:72:f2:6d: e6:0c:70:61:30:0e:f2:73:67:93:b7:32:e2:c6:4e: 56:6b:f4:a1:3e:b4:6b:5d:c9:7e:c4:f7:38:a3:64: 82:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2E:A9:5D:79:99:77:E7:7C:46:31:C0:A3:DC:11:4B:16:31:C0:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9834368-3afb-3de0-a734-5a2768c2ae3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:b8:e7:6a:67:c1:aa:5c:e3:cd:43:e2:56:7b:27:32:f8:e0: 9e:9b:67:3c:c2:74:e8:87:9e:64:b9:7f:2f:11:74:e7:65:2b: d7:24:33:00:a6:db:52:1b:f6:47:d1:3d:95:9e:29:46:93:bf: 2b:e2:cc:f4:14:df:8b:aa:1b:21:2e:ba:2d:2e:f1:49:9e:d6: ad:cc:98:12:d2:5a:95:19:6d:f2:f8:04:5b:44:0c:48:49:ff: c9:9c:d7:e9:03:99:2c:b9:9a:38:a6:df:13:db:5e:c3:0d:d2: da:fe:db:43:cc:c5:d7:06:89:08:d5:dd:ea:97:4b:a4:e3:48: cc:e8:8c:40:ee:bc:1b:2b:6d:50:fa:fc:d1:18:62:13:1b:c7: 84:22:7c:12:ab:3e:28:3e:44:ca:ab:f4:d5:31:e7:03:83:5b: 3a:68:df:7d:f3:df:ae:81:08:5c:15:6b:dc:70:ea:94:0e:71: 7c:73:9c:ed:62:94:aa:52:40:54:c8:36:f1:04:0a:13:1f:1e: e7:89:a2:a4:e3:2e:9a:61:ea:7a:ff:bb:f8:5c:12:6d:03:55: e9:5a:0c:2e:ec:49:3c:28:9b:03:f6:91:d7:8d:f5:77:a1:df: 46:0a:6c:6c:e3:4a:b1:dc:14:90:e4:4d:e8:ad:ee:2b:20:42: f6:2e:6d:d9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZP0fRfVCvTh8QeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk N2Q1YmE3MGQtZTYyNy00MzM2LWJkMGItMmFmZmEzYmU2ZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPX/t+GZ5yt9GOPGkp9160mrfrwcozS5wz/7 Lc9IkEFYpUhpUpR3FYMaAHDbI70lTtkjJTJKGftB1VD6fw9T1pQGzC3pLiB9sUMV gGPLeALfnx4T86ihg+6mOFhBp7khrOdmTGx05w16jxFwulJiaIQZ2RWY8HW5DEUM M9sh6JB2gA4m5jPyYHPIPolDA5tfAuoYNK7cVTvV+h5iwSPrOUUnzinzybyk+AYA k8hOdkErICnpWb35k1xIZH5lpTEobS6RGvjG+GDtEbwuJCbm/ccijqEH364TW4tR 7Why8m3mDHBhMA7yc2eTtzLixk5Wa/ShPrRrXcl+xPc4o2SCqQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLYuqV15mXfnfEYxwKPcEUsWMcBAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTk4MzQzNjgtM2FmYi0z ZGUwLWE3MzQtNWEyNzY4YzJhZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA/uOdqZ8GqXOPNQ+JWeycy+OCem2c8wnToh55kuX8vEXTnZSvXJDMA pttSG/ZH0T2VnilGk78r4sz0FN+LqhshLrotLvFJntatzJgS0lqVGW3y+ARbRAxI Sf/JnNfpA5ksuZo4pt8T217DDdLa/ttDzMXXBokI1d3ql0uk40jM6IxA7rwbK21Q +vzRGGITG8eEInwSqz4oPkTKq/TVMecDg1s6aN9989+ugQhcFWvccOqUDnF8c5zt YpSqUkBUyDbxBAoTHx7niaKk4y6aYep6/7v4XBJtA1XpWgwu7Ek8KJsD9pHXjfV3 od9GCmxs40qx3BSQ5E3ore4rIEL2Lm3Z -----END CERTIFICATE-----Generated at Thu Mar 26 20:26:51 2026 by rpki-client