$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f26ebd92-94db-381a-b3b4-1fba365b2d75.roa File: f26ebd92-94db-381a-b3b4-1fba365b2d75.roa (raw, json) Hash identifier: L2+2mMP0gLjoBgG6ixbNU4r2qdipz1239WlH9JrMi6I= Subject key identifier: BF:CE:EE:6F:EC:00:87:C8:B5:24:D2:07:23:9D:34:53:93:4F:30:28 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64FBA5F7EE98D0B4A00264 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f26ebd92-94db-381a-b3b4-1fba365b2d75.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 396606 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:fb:a5:f7:ee:98:d0:b4:a0:02:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=661ac957-a277-4d41-a8df-5d5cef7f5fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:aa:5a:a1:50:45:98:de:e5:ea:06:bc:c4:72: 82:78:9a:c8:9b:b9:c1:93:4e:19:41:1d:de:ad:55: 27:a7:82:e1:ec:08:99:ab:72:93:e4:e8:62:7b:da: 33:15:ce:ee:6b:01:df:d0:ee:d6:6e:38:c3:93:b6: 97:04:65:aa:5b:ab:c1:9b:89:3d:95:3d:9e:8d:b9: 93:b3:8b:10:a6:a0:6d:0c:19:a5:a8:31:7c:c1:03: 7c:ad:0e:90:6e:17:52:5a:bf:29:d3:80:e3:86:17: ef:ef:ca:5e:ba:67:b6:a9:9e:ed:ea:b6:0b:78:e1: 60:f9:03:21:3b:09:ce:6b:82:e1:f5:a5:eb:42:ff: 81:18:2f:0d:0d:73:cb:7a:8a:d9:b2:87:f6:bf:56: e3:89:8b:b8:4b:5b:d7:99:19:12:dd:ad:0b:95:5e: 7a:da:72:f4:f5:60:7a:82:c9:fc:80:b0:00:f8:b7: 06:1e:0b:f6:d8:d7:a2:1a:74:3d:0a:c6:ca:4f:81: d5:a9:b7:be:12:7b:40:98:95:d5:91:4b:a4:35:ee: 6e:43:ca:3e:13:14:4b:8e:af:d3:95:1b:cb:25:30: 91:69:19:a4:d6:3e:1a:c4:e6:e7:39:1d:c9:fc:e3: 7a:94:16:0a:00:8a:a4:54:25:93:cc:d0:5d:7d:7c: 2a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CE:EE:6F:EC:00:87:C8:B5:24:D2:07:23:9D:34:53:93:4F:30:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f26ebd92-94db-381a-b3b4-1fba365b2d75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:68:4d:20:53:11:af:c9:d7:14:27:f8:39:ee:5f:fb:12:e3: 1f:c7:51:19:86:50:68:5e:74:4b:3d:de:38:7d:9c:4e:b4:17: 6d:b4:8a:07:24:23:88:af:50:77:65:10:64:53:84:b1:06:2b: 26:00:8b:25:b6:15:34:d7:b3:20:59:de:00:93:53:19:33:7b: 65:9f:ea:69:dc:ad:34:79:91:3c:6b:f4:d4:bc:db:ed:bf:84: b6:ad:84:55:41:2e:4f:87:8f:9a:56:72:51:22:7a:70:a9:df: 95:44:9f:03:3c:ff:55:b4:77:32:08:b5:47:94:00:06:b9:c2: 26:ff:84:8f:c7:9c:ff:4c:be:0f:46:34:f5:24:30:f7:f4:c5: 27:ff:be:6e:3d:bd:de:57:4e:d2:31:8a:11:ad:05:a2:ef:62: 16:7a:62:fe:c6:78:2e:74:56:6d:7b:ce:18:c0:47:9f:2c:f7: b2:c0:25:7a:10:70:d7:ce:20:3e:60:c6:23:47:f5:f9:0c:60: 83:a2:55:cf:51:e1:cb:b7:ac:f3:f6:3a:71:0a:8a:3c:c8:a0: d1:df:2f:7c:1c:9f:ab:3d:59:76:47:90:6b:95:78:b2:8f:62: 7f:84:90:a8:19:c9:24:67:7c:be:a9:2d:a5:73:1e:ec:46:1e: 7c:66:15:71 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZPul9+6Y0LSgAmQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NjYxYWM5NTctYTI3Ny00ZDQxLWE4ZGYtNWQ1Y2VmN2Y1ZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgapaoVBFmN7l6ga8xHKCeJrIm7nBk04ZQR3e rVUnp4Lh7AiZq3KT5Ohie9ozFc7uawHf0O7WbjjDk7aXBGWqW6vBm4k9lT2ejbmT s4sQpqBtDBmlqDF8wQN8rQ6QbhdSWr8p04Djhhfv78peume2qZ7t6rYLeOFg+QMh OwnOa4Lh9aXrQv+BGC8NDXPLeorZsof2v1bjiYu4S1vXmRkS3a0LlV562nL09WB6 gsn8gLAA+LcGHgv22NeiGnQ9CsbKT4HVqbe+EntAmJXVkUukNe5uQ8o+ExRLjq/T lRvLJTCRaRmk1j4axObnOR3J/ON6lBYKAIqkVCWTzNBdfXwqHQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL/O7m/sAIfItSTSByOdNFOTTzAoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjI2ZWJkOTItOTRkYi0z ODFhLWIzYjQtMWZiYTM2NWIyZDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBYaE0gUxGvydcUJ/g57l/7EuMfx1EZhlBoXnRLPd44fZxOtBdttIoH JCOIr1B3ZRBkU4SxBismAIslthU017MgWd4Ak1MZM3tln+pp3K00eZE8a/TUvNvt v4S2rYRVQS5Ph4+aVnJRInpwqd+VRJ8DPP9VtHcyCLVHlAAGucIm/4SPx5z/TL4P RjT1JDD39MUn/75uPb3eV07SMYoRrQWi72IWemL+xngudFZte84YwEefLPeywCV6 EHDXziA+YMYjR/X5DGCDolXPUeHLt6zz9jpxCoo8yKDR3y98HJ+rPVl2R5BrlXiy j2J/hJCoGckkZ3y+qS2lcx7sRh58ZhVx -----END CERTIFICATE-----Generated at Thu Mar 26 11:19:40 2026 by rpki-client