$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb5c2efc-e021-3217-80e8-26fe6b2974ff.roa File: bb5c2efc-e021-3217-80e8-26fe6b2974ff.roa (raw, json) Hash identifier: IvxRoPE8oD7tT84doCJii0G9n54+nzVWyGzw+y9lDeE= Subject key identifier: 41:C1:9B:FA:D0:25:1C:F4:9D:35:FF:E5:17:37:22:3C:C0:B5:74:F6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D4D5A80BB404A481442A2F980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb5c2efc-e021-3217-80e8-26fe6b2974ff.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 7342 IP address blocks: 216.87.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:80:bb:40:4a:48:14:42:a2:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=19d2c142-9953-4841-8ef0-3235c7ae870f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:84:9d:45:f1:08:31:1f:03:f8:5c:76:9c:c6: a1:21:d1:cf:d3:19:61:80:35:90:d5:87:78:26:2e: 51:90:93:24:eb:dc:d5:51:d1:e7:4f:27:af:5d:b2: 73:7f:53:9a:cb:69:ad:85:c7:99:96:c9:84:43:57: 33:cd:4b:72:43:f4:75:6f:65:61:f0:66:70:1c:1c: fa:39:40:0b:4f:7e:f4:4f:e3:b7:75:7a:0d:3a:fa: 27:b2:ee:4b:1b:1a:9b:57:9f:0f:48:36:c1:89:3a: 63:bd:4c:cb:33:91:fc:d1:29:8a:79:07:4c:a6:18: 8a:b2:81:8f:59:2a:74:5b:d0:f6:41:97:63:38:8d: 76:df:f1:00:2c:c1:95:73:ee:af:fb:30:c2:9d:0d: b6:36:cb:5f:6e:21:07:6a:22:30:0b:c2:be:e9:ba: ca:3f:7b:06:80:d6:17:ee:94:da:2a:03:26:45:41: d3:70:2b:a8:d0:d3:47:0a:2e:79:bd:ee:70:c2:60: ee:13:4e:eb:bd:01:4a:2a:30:03:97:ef:69:73:a7: 51:87:7f:fe:92:db:8e:37:fe:0d:42:bd:c9:3d:02: ac:50:4d:bd:3c:3a:28:0c:b8:8e:a4:80:19:79:28: 4c:89:b4:b8:ba:b1:6b:84:af:57:09:30:a8:ac:2d: 0d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C1:9B:FA:D0:25:1C:F4:9D:35:FF:E5:17:37:22:3C:C0:B5:74:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb5c2efc-e021-3217-80e8-26fe6b2974ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:fb:4b:0a:52:5b:0a:a2:98:e6:f0:8b:72:38:ea:e6:9d:9b: a9:5a:f4:4f:5f:64:f0:b7:da:4f:02:91:aa:92:45:37:9f:b8: 93:60:d9:1a:0a:25:c6:21:f0:2c:93:45:8d:3d:07:3d:f1:b5: 65:1d:10:22:c4:4b:78:b2:ca:05:78:30:0e:5f:93:4e:92:ef: 33:90:e3:06:b1:0f:a7:29:ee:de:c8:47:7b:0c:70:ae:ce:9e: c7:14:10:55:fb:65:fe:ce:98:fa:d9:d7:e9:f7:9b:fd:71:ef: d1:9e:76:5e:15:56:73:ca:dd:9f:a1:5a:5f:92:7b:cd:4b:11: 0a:ae:4a:69:dd:cc:99:5a:7f:66:a0:5a:b0:8f:d3:81:f3:fe: ad:e6:a0:e2:06:00:df:d7:ca:f3:35:d8:a5:ed:84:f9:7d:06: ac:0d:6d:79:9e:f8:9d:a9:a7:84:36:1b:dd:23:e9:39:9f:19: ad:e5:22:ba:b0:54:69:62:dc:af:47:10:94:f4:d0:3d:0e:b4: 4a:ce:2b:a4:aa:95:34:7b:04:53:08:a2:0d:28:cc:f1:99:43: 6e:20:a3:78:49:95:e6:ee:17:88:a3:26:e9:a5:cb:c0:6e:b0: be:74:89:52:64:c4:ad:6e:65:35:a4:8f:43:ff:f5:1e:7a:a3: 97:02:57:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWoC7QEpIFEKi+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk MTlkMmMxNDItOTk1My00ODQxLThlZjAtMzIzNWM3YWU4NzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYSdRfEIMR8D+Fx2nMahIdHP0xlhgDWQ1Yd4 Ji5RkJMk69zVUdHnTyevXbJzf1Oay2mthceZlsmEQ1czzUtyQ/R1b2Vh8GZwHBz6 OUALT370T+O3dXoNOvonsu5LGxqbV58PSDbBiTpjvUzLM5H80SmKeQdMphiKsoGP WSp0W9D2QZdjOI123/EALMGVc+6v+zDCnQ22NstfbiEHaiIwC8K+6brKP3sGgNYX 7pTaKgMmRUHTcCuo0NNHCi55ve5wwmDuE07rvQFKKjADl+9pc6dRh3/+ktuON/4N Qr3JPQKsUE29PDooDLiOpIAZeShMibS4urFrhK9XCTCorC0N1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHBm/rQJRz0nTX/5Rc3IjzAtXT2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmI1YzJlZmMtZTAyMS0z MjE3LTgwZTgtMjZmZTZiMjk3NGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FefMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABr7SwpSWwqimObwi3I46uadm6la9E9fZPC32k8CkaqSRTefuJNg2RoK JcYh8CyTRY09Bz3xtWUdECLES3iyygV4MA5fk06S7zOQ4waxD6cp7t7IR3sMcK7O nscUEFX7Zf7OmPrZ1+n3m/1x79Gedl4VVnPK3Z+hWl+Se81LEQquSmndzJlaf2ag WrCP04Hz/q3moOIGAN/XyvM12KXthPl9BqwNbXme+J2pp4Q2G90j6TmfGa3lIrqw VGli3K9HEJT00D0OtErOK6SqlTR7BFMIog0ozPGZQ24go3hJlebuF4ijJumly8Bu sL50iVJkxK1uZTWkj0P/9R56o5cCV4M= -----END CERTIFICATE-----Generated at Sun Mar 29 23:44:20 2026 by rpki-client