$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa41c3e6-898a-3313-a156-1d95e18083a0.roa File: fa41c3e6-898a-3313-a156-1d95e18083a0.roa (raw, json) Hash identifier: /AXDGzFDisBCB0sX9piW5ridCPKs+IZesmefEV8Ie4Y= Subject key identifier: 13:64:88:82:F0:71:70:9F:10:A9:94:60:38:C2:23:D8:C7:53:06:5A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2D3F9B353148C12D582963C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa41c3e6-898a-3313-a156-1d95e18083a0.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 36627 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:9b:35:31:48:c1:2d:58:29:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=a2d5fb57-db68-40c1-8a1d-32e55126dc90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b2:35:55:15:b8:4c:13:c7:6f:09:fe:f6:8e: 61:ff:cc:9b:06:67:c3:39:67:5d:64:8a:cd:85:72: f8:58:13:b6:c5:3e:38:70:82:e9:ea:ba:ae:89:f8: e0:19:e5:6e:a6:7f:d7:7a:36:ea:b4:6e:f6:ba:8f: 56:d4:cd:65:c3:fc:0a:ab:8d:b2:13:b5:60:37:db: 26:da:97:b2:1f:28:11:fb:19:d0:34:90:e0:11:9b: 67:00:74:8a:07:12:e0:86:58:51:cb:58:84:19:b6: 49:ee:59:18:cb:7d:68:c2:e5:28:4f:a0:b8:f5:0c: 47:01:19:0b:0d:f8:7b:9c:48:7c:fd:c9:12:95:66: 31:88:76:5f:3d:b9:a2:43:66:1c:ac:9d:49:3f:35: 1c:36:bb:23:f2:09:6d:34:0a:12:e7:6e:4e:f5:b9: 8e:ac:9f:d5:02:c0:5e:83:f9:e7:bc:2c:75:87:dd: 69:4b:11:ae:c5:f7:2b:12:0b:f1:40:ee:dc:fa:a7: 0f:dd:e5:7e:60:2d:f4:f2:42:62:23:30:ac:87:78: da:44:0e:ec:3e:87:f5:6a:1c:cd:e7:fa:1c:fb:16: 3b:fc:67:8e:9d:61:fb:4b:15:e3:4b:b0:d1:17:53: 86:44:8d:3d:90:97:4f:fb:56:07:c5:99:a1:2a:1d: d8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:64:88:82:F0:71:70:9F:10:A9:94:60:38:C2:23:D8:C7:53:06:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa41c3e6-898a-3313-a156-1d95e18083a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:0a:71:fa:d4:a7:f6:cb:45:ed:ed:6d:03:bf:94:b9:00:a9: 3d:97:4f:89:b3:04:0c:e4:64:31:41:48:3c:dd:07:87:97:04: 36:9c:c4:66:8b:06:e6:8a:fe:d6:24:55:c9:37:0f:cf:4d:cf: fb:8c:bc:ff:08:64:17:02:ce:60:77:58:84:36:9b:a9:82:ba: a9:02:16:3c:5a:e5:35:81:e7:a4:ce:2e:ad:3b:da:1d:5e:89: db:93:36:17:35:e1:c2:e8:3e:a9:93:95:8f:15:8f:ec:a1:f1: 35:4c:89:7b:65:71:f2:82:3c:bf:7d:b5:37:88:4c:e5:d1:7c: 41:ee:42:83:2b:a3:56:d4:7b:85:c6:32:8d:76:55:d8:83:63: 50:6e:f7:ee:4f:b3:61:72:c2:d1:fb:8c:e8:9d:b9:bd:b7:28: 5d:5b:ee:dd:0a:ea:83:8a:d5:ba:11:e9:7a:ba:30:69:a2:b8: 91:5e:3e:20:18:86:fe:bc:53:86:7f:42:7a:4b:22:f7:8b:ad: 13:82:bc:83:da:c1:e5:ad:47:71:5b:ca:10:00:f3:f4:2a:b4: de:2a:d9:fc:c4:1b:98:94:a8:a5:ec:2f:8a:49:d0:c5:0a:ca: 74:2a:b8:22:28:f7:31:08:71:5f:f5:de:18:03:8e:2c:3f:9b: 1b:5c:a9:d8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0tP5s1MUjBLVgpY8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk YTJkNWZiNTctZGI2OC00MGMxLThhMWQtMzJlNTUxMjZkYzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrI1VRW4TBPHbwn+9o5h/8ybBmfDOWddZIrN hXL4WBO2xT44cILp6rquifjgGeVupn/XejbqtG72uo9W1M1lw/wKq42yE7VgN9sm 2peyHygR+xnQNJDgEZtnAHSKBxLghlhRy1iEGbZJ7lkYy31owuUoT6C49QxHARkL Dfh7nEh8/ckSlWYxiHZfPbmiQ2YcrJ1JPzUcNrsj8gltNAoS525O9bmOrJ/VAsBe g/nnvCx1h91pSxGuxfcrEgvxQO7c+qcP3eV+YC308kJiIzCsh3jaRA7sPof1ahzN 5/oc+xY7/GeOnWH7SxXjS7DRF1OGRI09kJdP+1YHxZmhKh3YqwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBNkiILwcXCfEKmUYDjCI9jHUwZaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmE0MWMzZTYtODk4YS0z MzEzLWExNTYtMWQ5NWUxODA4M2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB6CnH61Kf2y0Xt7W0Dv5S5AKk9l0+JswQM5GQxQUg83QeHlwQ2nMRm iwbmiv7WJFXJNw/PTc/7jLz/CGQXAs5gd1iENpupgrqpAhY8WuU1geekzi6tO9od XonbkzYXNeHC6D6pk5WPFY/sofE1TIl7ZXHygjy/fbU3iEzl0XxB7kKDK6NW1HuF xjKNdlXYg2NQbvfuT7NhcsLR+4zonbm9tyhdW+7dCuqDitW6Eel6ujBporiRXj4g GIb+vFOGf0J6SyL3i60TgryD2sHlrUdxW8oQAPP0KrTeKtn8xBuYlKil7C+KSdDF Csp0KrgiKPcxCHFf9d4YA44sP5sbXKnY -----END CERTIFICATE-----Generated at Thu Mar 26 13:52:15 2026 by rpki-client