$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8572b75-cff9-35aa-b031-036f8f47dec8.roa File: f8572b75-cff9-35aa-b031-036f8f47dec8.roa (raw, json) Hash identifier: nxkvQuVPillx8ZKmFeh7sX0jMpCKl+LIZApOSZIYuP8= Subject key identifier: D4:04:33:F0:34:F2:2E:BE:00:90:90:24:73:5F:8E:E6:54:DE:9F:16 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64F931AE66AE8C4FBC3F20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8572b75-cff9-35aa-b031-036f8f47dec8.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 396590 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:f9:31:ae:66:ae:8c:4f:bc:3f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=463e7d57-b336-4cc6-81a9-4c93f06c4f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:57:28:e7:6b:88:b9:33:74:03:34:ee:af:6a: 03:b4:ef:07:ba:20:bf:dd:50:4d:dc:6f:5a:b6:14: e1:33:ae:49:cc:32:9d:a2:5e:fa:36:5c:da:29:8b: 11:cb:39:8a:75:c6:a5:b0:5f:e6:ee:b6:15:fe:4b: 74:64:f7:ad:15:2a:cc:ea:c8:9c:1a:a5:7e:8b:38: 8b:15:c5:ed:96:49:cd:d5:cd:5e:0c:a9:11:3d:89: 9a:bd:52:5d:34:fc:d4:eb:0e:e9:32:3a:28:f0:03: b4:2b:11:74:24:17:ea:4d:e0:01:c6:5e:f2:f6:45: 43:68:6e:4a:c7:fc:36:05:e0:5e:16:61:0d:4f:1f: e9:06:68:d1:ec:0a:f4:71:ab:11:8b:41:4d:70:b7: 6a:09:2e:5b:19:ad:65:28:a8:83:c5:89:67:06:77: 39:95:c5:6d:39:64:d1:ca:11:e0:68:04:c7:1d:e6: 83:60:11:90:e7:c5:86:b7:72:27:3f:4d:04:87:bc: 6f:3c:f0:03:f2:d1:61:24:5e:54:83:1b:35:1a:a2: 87:8a:0e:0d:4d:65:8d:be:5f:00:1d:39:1a:69:ca: d4:4f:01:01:b5:7f:b2:7e:6b:31:08:f4:00:67:05: ab:35:23:56:b9:8b:22:8b:41:48:f4:7a:2e:6e:00: f4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:04:33:F0:34:F2:2E:BE:00:90:90:24:73:5F:8E:E6:54:DE:9F:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8572b75-cff9-35aa-b031-036f8f47dec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:24:57:79:bd:69:16:80:ca:0a:d2:d5:22:13:47:a4:23:dc: 93:a2:59:46:89:07:91:2e:4a:95:65:08:aa:c9:67:98:83:6e: e2:f9:d7:38:5c:af:fd:f5:fc:e3:12:fd:47:fe:b3:ed:d0:01: 97:1b:0d:27:ee:38:42:9e:33:dc:ef:bc:24:16:af:a4:af:d6: 3a:f1:8a:f3:fa:aa:29:5c:87:e3:25:bf:db:8a:35:4c:4f:63: 04:b6:22:74:f5:0d:ba:76:6e:e0:b5:3a:d9:3f:32:25:30:8c: 63:c1:15:9a:22:ff:5b:cc:53:6e:68:9d:c1:18:af:76:13:da: d4:06:ad:57:d2:17:22:7c:eb:cc:d8:ab:1a:e9:bb:33:5c:32: 6f:8c:a4:04:7f:48:2f:93:08:57:60:d4:af:c7:28:f7:97:04: fe:00:2c:b9:aa:05:f3:17:45:98:a5:af:ab:7a:65:f6:50:0d: fd:f5:78:4c:5b:75:0e:8a:fd:3c:85:55:d3:79:81:99:d8:9c: cd:9d:43:11:bf:cb:c6:e1:71:ba:6f:7c:d6:72:b1:9c:a1:8a: 31:19:c7:54:76:e8:de:0e:b4:4a:41:9c:f2:a1:a9:fa:32:7f: b7:9e:1f:b9:c1:23:91:68:22:27:cb:4e:dd:73:5a:ee:e1:ae: 10:d9:71:7a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZPkxrmaujE+8PyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NDYzZTdkNTctYjMzNi00Y2M2LTgxYTktNGM5M2YwNmM0ZjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1co52uIuTN0AzTur2oDtO8HuiC/3VBN3G9a thThM65JzDKdol76NlzaKYsRyzmKdcalsF/m7rYV/kt0ZPetFSrM6sicGqV+iziL FcXtlknN1c1eDKkRPYmavVJdNPzU6w7pMjoo8AO0KxF0JBfqTeABxl7y9kVDaG5K x/w2BeBeFmENTx/pBmjR7Ar0casRi0FNcLdqCS5bGa1lKKiDxYlnBnc5lcVtOWTR yhHgaATHHeaDYBGQ58WGt3InP00Eh7xvPPAD8tFhJF5Ugxs1GqKHig4NTWWNvl8A HTkaacrUTwEBtX+yfmsxCPQAZwWrNSNWuYsii0FI9HoubgD0xwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNQEM/A08i6+AJCQJHNfjuZU3p8WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjg1NzJiNzUtY2ZmOS0z NWFhLWIwMzEtMDM2ZjhmNDdkZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBMJFd5vWkWgMoK0tUiE0ekI9yTollGiQeRLkqVZQiqyWeYg27i+dc4 XK/99fzjEv1H/rPt0AGXGw0n7jhCnjPc77wkFq+kr9Y68Yrz+qopXIfjJb/bijVM T2MEtiJ09Q26dm7gtTrZPzIlMIxjwRWaIv9bzFNuaJ3BGK92E9rUBq1X0hcifOvM 2Ksa6bszXDJvjKQEf0gvkwhXYNSvxyj3lwT+ACy5qgXzF0WYpa+remX2UA399XhM W3UOiv08hVXTeYGZ2JzNnUMRv8vG4XG6b3zWcrGcoYoxGcdUdujeDrRKQZzyoan6 Mn+3nh+5wSORaCIny07dc1ru4a4Q2XF6 -----END CERTIFICATE-----Generated at Thu Mar 26 11:19:48 2026 by rpki-client