$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fcad40e4-1236-30d7-8551-ef510c4fd729.roa File: fcad40e4-1236-30d7-8551-ef510c4fd729.roa (raw, json) Hash identifier: ssQcmHOtOl23UDJLlsdik4DA4izj99CBnEY+oPpGyU4= Subject key identifier: AB:99:79:C8:08:72:DA:7F:CA:15:5C:2E:8A:4D:12:37:DF:DA:1B:01 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2D3F96329908C42A0CFF7A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fcad40e4-1236-30d7-8551-ef510c4fd729.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 36618 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:96:32:99:08:c4:2a:0c:ff:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=92b8fc62-1a96-4bd8-b96f-fead85b63c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0e:1a:bf:a4:fd:90:a8:a5:19:3b:b2:f1:f2: d0:83:ef:a6:dd:c8:ab:f3:5d:69:95:23:37:99:b5: b5:c0:ef:75:94:bc:60:3e:17:c9:9a:fe:c2:39:b0: 45:03:d4:07:c5:5f:45:5b:0c:42:52:4e:bb:58:de: b3:e6:21:e5:8e:85:a5:a7:1a:a1:45:87:40:97:b3: f3:31:c3:6a:ec:7f:fc:a6:9e:c7:15:a7:d2:33:3e: 7b:3d:c8:da:f6:7b:bc:7d:15:32:cd:f8:10:df:55: e0:62:d8:9d:0d:30:60:37:e1:8f:30:75:7e:ab:b9: b6:83:0e:89:46:45:73:50:23:fc:6f:4c:fd:37:74: d4:11:16:82:7e:86:ac:0a:5e:74:aa:f4:82:be:de: 5f:e6:07:9d:52:0b:af:9a:1f:f8:95:9e:d6:04:e4: 41:90:71:51:f6:48:79:57:47:38:1d:26:3d:9f:7c: 84:5a:3b:c5:7e:a2:30:28:7d:63:18:29:91:88:ca: 39:de:0e:8f:57:8f:d9:ff:43:ea:39:ca:c3:e8:dd: 40:47:e7:da:7a:1f:1f:b6:5a:0f:7e:43:25:a8:80: a7:af:c8:63:20:3e:94:2b:15:c6:7e:98:81:8b:2c: 2e:c4:7f:c5:08:34:8e:91:89:85:5d:15:6d:df:45: e9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:99:79:C8:08:72:DA:7F:CA:15:5C:2E:8A:4D:12:37:DF:DA:1B:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fcad40e4-1236-30d7-8551-ef510c4fd729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:09:0e:1d:50:b3:cd:1d:ef:6b:71:1d:2a:a9:13:3a:8f:8a: a1:f5:41:c9:ab:37:2f:c4:ab:5d:03:18:6e:d3:f4:f9:e7:63: f9:bb:d9:ba:cb:0e:5e:18:3c:5c:9a:68:db:05:a9:c3:09:7e: 1d:d5:41:8d:0c:cb:23:6d:c9:c0:d0:3b:10:f1:14:2f:58:c9: 09:cf:70:09:cc:e5:52:b1:30:d0:c3:68:16:6f:32:75:52:ce: 70:18:56:99:51:d5:15:4f:4a:95:8e:b6:c4:d0:01:04:51:39: 41:eb:c7:f3:72:6b:79:5f:8e:4d:ae:42:a3:7a:c1:c6:b6:b2: e1:bd:b4:5e:4f:0c:42:1d:a4:97:e4:2c:27:bb:6f:8c:f6:9d: 4b:e2:2c:0c:c5:e0:f4:15:51:52:70:2e:56:92:9c:f3:b8:72: 53:24:c0:71:8f:09:8d:94:84:d5:40:77:9b:42:c6:70:28:e3: 65:47:c5:bc:c8:77:7b:6b:39:ac:76:a6:aa:b4:a4:8a:05:0b: 15:35:89:1a:70:dd:28:7d:e4:a0:7c:c9:8e:43:52:ad:42:f0: 52:5e:89:e0:c0:a6:a1:d5:25:9c:6e:bf:a5:24:0f:36:ac:ed: c6:86:1c:04:fc:1d:9b:6b:56:12:28:5e:e0:82:73:3b:97:ca: fc:11:1a:03 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0tP5YymQjEKgz/egAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk OTJiOGZjNjItMWE5Ni00YmQ4LWI5NmYtZmVhZDg1YjYzYzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA4av6T9kKilGTuy8fLQg++m3cir811plSM3 mbW1wO91lLxgPhfJmv7CObBFA9QHxV9FWwxCUk67WN6z5iHljoWlpxqhRYdAl7Pz McNq7H/8pp7HFafSMz57Pcja9nu8fRUyzfgQ31XgYtidDTBgN+GPMHV+q7m2gw6J RkVzUCP8b0z9N3TUERaCfoasCl50qvSCvt5f5gedUguvmh/4lZ7WBORBkHFR9kh5 V0c4HSY9n3yEWjvFfqIwKH1jGCmRiMo53g6PV4/Z/0PqOcrD6N1AR+faeh8ftloP fkMlqICnr8hjID6UKxXGfpiBiywuxH/FCDSOkYmFXRVt30XpRwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKuZecgIctp/yhVcLopNEjff2hsBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmNhZDQwZTQtMTIzNi0z MGQ3LTg1NTEtZWY1MTBjNGZkNzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCACQ4dULPNHe9rcR0qqRM6j4qh9UHJqzcvxKtdAxhu0/T552P5u9m6 yw5eGDxcmmjbBanDCX4d1UGNDMsjbcnA0DsQ8RQvWMkJz3AJzOVSsTDQw2gWbzJ1 Us5wGFaZUdUVT0qVjrbE0AEEUTlB68fzcmt5X45NrkKjesHGtrLhvbReTwxCHaSX 5Cwnu2+M9p1L4iwMxeD0FVFScC5WkpzzuHJTJMBxjwmNlITVQHebQsZwKONlR8W8 yHd7azmsdqaqtKSKBQsVNYkacN0ofeSgfMmOQ1KtQvBSXongwKah1SWcbr+lJA82 rO3GhhwE/B2ba1YSKF7ggnM7l8r8ERoD -----END CERTIFICATE-----Generated at Thu Mar 26 13:53:32 2026 by rpki-client