$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4a8c576e-2136-3a2e-8425-173d38a4127a.roa File: 4a8c576e-2136-3a2e-8425-173d38a4127a.roa (raw, json) Hash identifier: rWJa5NqK6EZFYG8T/W+NHpbwAoKGJrNqyUWjgRVtZj4= Subject key identifier: 7F:57:F6:DE:E2:84:13:B3:47:DE:A1:61:EB:9B:82:DA:DC:B6:85:AF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D5243C4639C16C567B417A340 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4a8c576e-2136-3a2e-8425-173d38a4127a.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 0 IP address blocks: 69.36.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:c4:63:9c:16:c5:67:b4:17:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=f3cf18ff-7ef9-4109-bf28-cdfcc20dae77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:da:ad:42:14:c5:d4:43:8c:b5:95:fa:87:c3: 46:58:1a:80:b9:23:65:e4:56:e8:19:d5:b9:ab:55: 5e:3b:a5:56:c3:63:6e:42:ae:f4:18:d9:d2:39:85: 75:69:16:44:b4:2a:e1:a8:fc:a2:e3:19:e1:64:9f: 41:b8:b9:ac:33:c5:33:a4:f0:4e:6a:20:e0:c7:3d: 81:fa:c8:8f:c7:0a:f8:94:54:c5:38:80:ea:36:3b: f3:ce:af:72:3e:42:46:7b:c3:58:5f:79:e3:fb:40: 5b:8e:5a:18:61:85:c4:2a:c9:bf:5f:7b:c0:6f:6b: c2:cb:8f:dd:07:8c:77:98:a5:3e:15:f6:04:b6:aa: c2:45:f1:45:44:85:75:19:88:d9:aa:28:6a:05:ba: 57:cc:31:df:d6:56:e0:9a:bb:ca:6e:bf:7c:ce:13: 69:ec:bf:70:ec:d4:72:7f:4b:91:d5:72:a6:4e:66: c7:49:eb:80:09:95:5b:9c:73:08:f1:ef:05:d9:24: 06:c0:68:6b:ed:7b:75:68:47:d4:db:c1:ce:fe:b0: fb:f1:66:2a:a9:e1:f8:0d:43:8e:17:2c:f1:07:fe: bb:1f:e0:ad:c8:57:06:15:c2:4f:b9:f4:82:9b:f5: 08:bf:69:cb:2d:bf:56:f1:59:ce:2e:86:66:19:22: da:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:57:F6:DE:E2:84:13:B3:47:DE:A1:61:EB:9B:82:DA:DC:B6:85:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4a8c576e-2136-3a2e-8425-173d38a4127a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 69.36.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:0e:7e:a1:94:0a:50:9b:89:be:04:66:cb:d7:54:43:e4:e9: 92:a8:23:f6:5d:00:dc:94:5c:64:b7:fe:45:79:16:6a:e2:af: df:3b:b9:03:c4:85:58:8b:c2:8b:af:e5:b7:b8:0a:eb:00:8b: 74:2c:f7:99:3f:2a:a7:b9:84:d0:d4:73:77:e8:7d:b4:07:f8: 6e:7a:ea:cf:df:e9:1c:7b:4f:de:f0:97:d5:18:b5:af:7c:95: c2:da:1a:c0:98:7e:be:de:d6:13:dc:8b:fc:20:2d:10:84:7a: ca:a9:3b:6f:fd:ae:98:c1:6c:a6:9b:95:05:a7:6e:88:94:67: 05:35:eb:78:c1:d8:e9:cd:fa:19:ba:f5:9c:94:43:94:a7:de: f2:f4:e9:0b:0b:b4:b2:d4:3b:63:2e:b9:77:c1:ae:de:d8:e2: 03:53:84:77:25:70:6f:43:2d:0e:fa:25:56:21:55:fa:7b:d3: 47:2c:89:10:3b:e5:45:63:67:2d:4b:e3:f7:90:12:c5:62:1d: 98:9f:b5:e3:5a:4b:c1:90:c1:61:4e:9d:44:f0:a8:5b:9f:9c: af:5e:a4:59:31:83:c1:03:fe:63:7d:c4:16:0c:77:1f:00:1a: be:3a:9b:15:57:f1:e8:80:e4:7d:d4:23:8a:eb:f4:c4:7f:3d: e5:df:a2:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ8RjnBbFZ7QXo0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk ZjNjZjE4ZmYtN2VmOS00MTA5LWJmMjgtY2RmY2MyMGRhZTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39qtQhTF1EOMtZX6h8NGWBqAuSNl5FboGdW5 q1VeO6VWw2NuQq70GNnSOYV1aRZEtCrhqPyi4xnhZJ9BuLmsM8UzpPBOaiDgxz2B +siPxwr4lFTFOIDqNjvzzq9yPkJGe8NYX3nj+0BbjloYYYXEKsm/X3vAb2vCy4/d B4x3mKU+FfYEtqrCRfFFRIV1GYjZqihqBbpXzDHf1lbgmrvKbr98zhNp7L9w7NRy f0uR1XKmTmbHSeuACZVbnHMI8e8F2SQGwGhr7Xt1aEfU28HO/rD78WYqqeH4DUOO FyzxB/67H+CtyFcGFcJPufSCm/UIv2nLLb9W8VnOLoZmGSLaSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9X9t7ihBOzR96hYeubgtrctoWvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGE4YzU3NmUtMjEzNi0z YTJlLTg0MjUtMTczZDM4YTQxMjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSSdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgOfqGUClCbib4EZsvXVEPk6ZKoI/ZdANyUXGS3/kV5Fmrir987uQPE hViLwouv5be4CusAi3Qs95k/Kqe5hNDUc3fofbQH+G566s/f6Rx7T97wl9UYta98 lcLaGsCYfr7e1hPci/wgLRCEesqpO2/9rpjBbKablQWnboiUZwU163jB2OnN+hm6 9ZyUQ5Sn3vL06QsLtLLUO2MuuXfBrt7Y4gNThHclcG9DLQ76JVYhVfp700csiRA7 5UVjZy1L4/eQEsViHZifteNaS8GQwWFOnUTwqFufnK9epFkxg8ED/mN9xBYMdx8A Gr46mxVX8eiA5H3UI4rr9MR/PeXfok4= -----END CERTIFICATE-----Generated at Mon Mar 30 04:25:44 2026 by rpki-client