$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0fea01bf-4ec4-3c5e-bc01-51029a773988.roa File: 0fea01bf-4ec4-3c5e-bc01-51029a773988.roa (raw, json) Hash identifier: KTsP/YRsKmxWiBU1/YDDTlzMYsFtMfuEuPzmwpPbs7s= Subject key identifier: 04:E9:4C:E9:E1:F7:89:A9:3C:90:54:8A:45:69:3C:7C:53:43:0C:A2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA07680C5301E00453B400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0fea01bf-4ec4-3c5e-bc01-51029a773988.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 36625 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:07:68:0c:53:01:e0:04:53:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=e76ab20b-a158-444d-89bf-969331ad6209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9f:34:5f:fe:54:26:79:93:dd:af:68:0d:b5: 68:89:cd:47:b3:fb:fe:8d:48:15:32:e6:03:d3:9d: b2:b8:b3:03:73:b6:98:94:bb:43:61:69:ca:04:46: 35:a3:eb:9f:1f:41:58:07:96:26:5f:3e:11:c4:84: 14:d2:c3:ea:64:3f:3a:2b:94:1d:6e:a0:ab:1f:a7: f3:be:1e:7d:2e:5c:fa:fa:f4:09:15:72:4c:2d:58: 21:66:17:2d:60:cb:e4:70:00:7a:ef:87:7d:e9:a0: ff:78:1a:81:8a:da:c5:ad:2c:b5:72:d0:d0:9f:48: a1:18:e9:b5:4a:4e:66:70:2f:c9:fe:2f:b4:31:05: 87:3d:bb:e6:07:63:58:9d:4a:02:df:1d:f9:24:a1: e4:16:94:2a:8e:13:27:7a:75:05:0f:35:8e:54:1a: ba:14:6a:7a:3a:79:7c:89:03:02:4c:5b:78:df:6d: 8f:f9:39:e4:a8:9a:94:af:53:67:db:7b:b7:47:66: 35:60:f2:10:1b:c2:bc:91:fb:65:30:a4:d8:8f:c8: de:51:8a:4b:b8:8f:b0:b6:4d:8c:b4:94:7d:da:c9: 25:c6:10:e8:3a:bb:ba:f0:bf:60:ac:3d:0d:3a:fa: 82:d2:f9:bf:a5:2d:50:6c:61:f7:4e:01:7d:44:5e: 12:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E9:4C:E9:E1:F7:89:A9:3C:90:54:8A:45:69:3C:7C:53:43:0C:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0fea01bf-4ec4-3c5e-bc01-51029a773988.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:4c:c2:44:ba:82:bd:c5:47:a4:d7:71:8a:a4:55:ee:3b:70: 72:02:5c:7c:28:bb:f9:ae:54:ab:5c:04:51:94:d5:d4:8b:9c: cc:ef:84:b2:4d:db:f2:29:d9:2f:e6:72:71:fe:cb:0a:f2:33: 98:66:59:29:b6:ff:45:13:02:56:36:79:e4:7f:71:ab:8d:63: cd:51:fd:7c:24:8e:14:21:11:ea:47:27:92:08:e3:2a:cc:c8: 4e:2b:10:4b:e9:f1:3b:fa:ef:bf:37:d4:3d:31:89:64:0f:53: 49:11:a4:f0:9a:06:5e:36:8f:5b:77:e9:1c:fa:e2:f4:56:09: 8a:87:9c:6d:15:c1:3e:e5:93:1b:d5:2c:0e:8e:cf:1c:83:a9: fe:44:30:34:d1:d5:93:b4:40:83:4c:37:10:92:92:52:1c:60: 51:63:94:89:b4:4f:76:f5:44:97:f1:ef:bc:4b:4f:8d:80:f0: 9f:cb:42:4d:0b:35:5b:13:f1:57:84:15:a6:82:07:28:f3:65: d1:fe:c2:fe:f2:af:1d:22:c9:55:74:25:b1:2a:7d:b2:31:29: 6f:88:40:75:32:ea:16:0c:a9:cb:f7:8d:36:63:ff:dd:e5:0d: c0:44:67:14:5c:b2:3c:13:65:b1:3b:b1:ac:d2:f5:e4:53:14: a4:2f:ed:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2gdoDFMB4ARTtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZTc2YWIyMGItYTE1OC00NDRkLTg5YmYtOTY5MzMxYWQ2MjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp80X/5UJnmT3a9oDbVoic1Hs/v+jUgVMuYD 052yuLMDc7aYlLtDYWnKBEY1o+ufH0FYB5YmXz4RxIQU0sPqZD86K5QdbqCrH6fz vh59Llz6+vQJFXJMLVghZhctYMvkcAB674d96aD/eBqBitrFrSy1ctDQn0ihGOm1 Sk5mcC/J/i+0MQWHPbvmB2NYnUoC3x35JKHkFpQqjhMnenUFDzWOVBq6FGp6Onl8 iQMCTFt4322P+TnkqJqUr1Nn23u3R2Y1YPIQG8K8kftlMKTYj8jeUYpLuI+wtk2M tJR92sklxhDoOru68L9grD0NOvqC0vm/pS1QbGH3TgF9RF4SHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATpTOnh94mpPJBUikVpPHxTQwyiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGZlYTAxYmYtNGVjNC0z YzVlLWJjMDEtNTEwMjlhNzczOTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFMwkS6gr3FR6TXcYqkVe47cHICXHwou/muVKtcBFGU1dSLnMzvhLJN 2/Ip2S/mcnH+ywryM5hmWSm2/0UTAlY2eeR/cauNY81R/XwkjhQhEepHJ5II4yrM yE4rEEvp8Tv677831D0xiWQPU0kRpPCaBl42j1t36Rz64vRWCYqHnG0VwT7lkxvV LA6OzxyDqf5EMDTR1ZO0QINMNxCSklIcYFFjlIm0T3b1RJfx77xLT42A8J/LQk0L NVsT8VeEFaaCByjzZdH+wv7yrx0iyVV0JbEqfbIxKW+IQHUy6hYMqcv3jTZj/93l DcBEZxRcsjwTZbE7sazS9eRTFKQv7Qc= -----END CERTIFICATE-----Generated at Thu Mar 26 19:39:48 2026 by rpki-client