$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ebe38b68-a2f4-34a1-bd4a-9c388c40123e.roa File: ebe38b68-a2f4-34a1-bd4a-9c388c40123e.roa (raw, json) Hash identifier: +nl/UzK+lGFs4YJZUurU4iJhiZbLryWCIFMxjocFNOw= Subject key identifier: 78:12:20:60:E4:03:54:42:43:B2:92:87:C5:AD:0F:6D:6F:5E:A2:6C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2D3F9500D91739B6B5E4A600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ebe38b68-a2f4-34a1-bd4a-9c388c40123e.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 396585 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:95:00:d9:17:39:b6:b5:e4:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=6d08f286-4629-44db-a4bb-f015abcc3c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:81:36:b4:8b:44:cc:55:61:c6:29:b3:ab:38: ac:ec:43:7c:d3:8a:de:d9:07:ed:63:24:06:81:89: 0b:24:2b:52:84:f2:bd:92:f4:41:24:fc:bf:2a:4e: fd:da:76:34:78:db:c3:0f:80:02:34:b6:12:38:bd: 1e:4f:36:c1:d3:4c:0b:70:b3:39:1b:16:41:b1:3c: ba:10:36:99:54:18:15:c5:d7:5d:23:1d:c2:0c:85: 6b:f5:64:38:d8:96:1e:52:2f:60:32:b6:ac:75:a2: 95:4e:3e:39:9c:d5:c8:60:f6:ac:6b:3a:89:2b:f3: f0:1f:4b:b8:6a:95:94:cf:02:7e:35:d9:30:15:4b: 42:fd:38:4d:1c:4a:00:af:17:1c:2d:d7:97:28:34: 51:af:b5:e4:47:aa:54:40:50:f2:b2:c3:90:63:16: 55:f2:56:f7:10:c6:c1:a6:c0:a8:f1:f8:ee:ab:de: 27:30:1d:bb:96:75:ee:0e:20:72:2d:9f:22:2d:d8: 9e:99:7a:e7:56:26:26:45:b2:e0:d5:a3:ca:a2:17: 8f:1e:54:97:06:cc:90:99:da:d0:ec:0b:b5:e2:91: f4:65:00:1c:77:9e:15:e5:6b:dc:64:e6:63:5a:fb: f0:1d:da:99:36:db:89:5a:de:5f:68:58:16:9a:57: 43:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:12:20:60:E4:03:54:42:43:B2:92:87:C5:AD:0F:6D:6F:5E:A2:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ebe38b68-a2f4-34a1-bd4a-9c388c40123e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:83:96:a7:b0:47:04:35:f1:49:da:95:2e:27:5e:ef:0c:20: 2a:0b:e6:6a:36:08:a2:02:03:cf:75:5b:3c:3f:45:af:b4:26: 7e:d6:c0:1a:36:4d:d1:13:fd:8f:59:56:5d:11:73:c3:de:a8: f7:68:0c:f1:0f:48:e7:e7:fe:f7:0f:71:41:bb:d4:e4:92:68: d9:a6:5f:d0:cb:0e:2a:5a:87:d6:3b:62:03:ad:74:06:ce:49: 6f:d7:d6:15:1b:32:70:83:f6:ef:cf:ac:34:4e:6f:16:7a:08: 0c:b8:2b:7f:b6:6e:7f:b9:05:10:43:be:ef:80:f4:62:cf:11: d8:b0:61:d3:67:f8:73:f0:8b:bd:cf:62:91:35:6f:02:3a:5b: 42:06:8b:00:7e:2f:79:05:78:94:0c:d4:3c:e5:fe:3d:aa:8d: b7:65:98:d5:2b:54:19:48:d6:13:5f:9a:95:c3:7d:c0:ae:3f: 9c:5b:c4:e0:dd:d7:ce:9d:87:6e:7d:86:53:b8:f5:46:9f:6b: 6a:ad:5b:02:4e:e3:5f:c4:48:67:b3:7b:00:64:8e:93:18:eb: 65:35:54:7e:d7:bd:0b:5e:06:aa:8c:e2:c4:8f:3c:6e:7e:1c: 84:af:8e:49:2a:8b:ee:06:2a:47:2f:04:45:63:c3:50:a0:91: f8:03:38:1e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0tP5UA2Rc5trXkpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk NmQwOGYyODYtNDYyOS00NGRiLWE0YmItZjAxNWFiY2MzYzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4E2tItEzFVhximzqzis7EN804re2QftYyQG gYkLJCtShPK9kvRBJPy/Kk792nY0eNvDD4ACNLYSOL0eTzbB00wLcLM5GxZBsTy6 EDaZVBgVxdddIx3CDIVr9WQ42JYeUi9gMrasdaKVTj45nNXIYPasazqJK/PwH0u4 apWUzwJ+NdkwFUtC/ThNHEoArxccLdeXKDRRr7XkR6pUQFDyssOQYxZV8lb3EMbB psCo8fjuq94nMB27lnXuDiByLZ8iLdiemXrnViYmRbLg1aPKohePHlSXBsyQmdrQ 7Au14pH0ZQAcd54V5WvcZOZjWvvwHdqZNtuJWt5faFgWmldDKwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHgSIGDkA1RCQ7KSh8WtD21vXqJsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWJlMzhiNjgtYTJmNC0z NGExLWJkNGEtOWMzODhjNDAxMjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAVg5ansEcENfFJ2pUuJ17vDCAqC+ZqNgiiAgPPdVs8P0WvtCZ+1sAa Nk3RE/2PWVZdEXPD3qj3aAzxD0jn5/73D3FBu9TkkmjZpl/Qyw4qWofWO2IDrXQG zklv19YVGzJwg/bvz6w0Tm8WeggMuCt/tm5/uQUQQ77vgPRizxHYsGHTZ/hz8Iu9 z2KRNW8COltCBosAfi95BXiUDNQ85f49qo23ZZjVK1QZSNYTX5qVw33Arj+cW8Tg 3dfOnYdufYZTuPVGn2tqrVsCTuNfxEhns3sAZI6TGOtlNVR+170LXgaqjOLEjzxu fhyEr45JKovuBipHLwRFY8NQoJH4Azge -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:05 2026 by rpki-client