$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/155b0e63-eb93-3d04-adee-d6347619e10b.roa File: 155b0e63-eb93-3d04-adee-d6347619e10b.roa (raw, json) Hash identifier: 5N4PNOt0bpmj1K/2h4/8S+FRloX1lOpmUR+kU4MNSfQ= Subject key identifier: 76:A1:00:2E:41:3A:A0:00:DA:79:57:3A:17:9E:FF:A9:41:C9:87:F0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA14573129E2BFDCF2C5C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/155b0e63-eb93-3d04-adee-d6347619e10b.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 396550 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:14:57:31:29:e2:bf:dc:f2:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=3be8ca5b-a3d4-4c95-8839-d7c8c36e0088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:be:58:00:8a:a7:6a:5c:ea:66:eb:5e:d1:e5: 1c:37:c2:f2:2f:25:ea:dd:59:24:19:72:d1:6d:3e: e4:e5:7f:ac:37:91:c2:67:03:9f:77:13:f8:35:a3: cc:98:7d:b2:a1:b7:7e:93:13:4d:91:1b:f8:5b:bf: fc:85:ff:0a:21:cb:f1:7f:dc:76:5a:3f:ca:02:25: 71:28:33:c1:8b:8a:73:f5:b3:e6:52:69:cf:23:48: 11:56:c0:35:d0:bc:ee:e6:83:81:e6:6c:2a:b3:29: 8d:ff:7b:e3:ba:12:3b:c9:0d:a0:30:38:69:44:84: 69:2b:ef:80:15:fb:77:ed:9f:74:2d:82:88:1e:b4: 68:b1:53:80:87:29:24:72:15:b3:a8:85:49:d5:e5: b9:8f:a3:24:f9:e0:2d:e5:3e:3e:5a:31:8c:87:ff: 37:5d:ab:52:42:5f:0e:54:0c:ea:e7:c9:de:3c:5f: 1d:49:75:c0:aa:47:03:8b:de:e0:29:3b:8a:78:cd: 41:95:b1:f7:40:c8:2f:55:7d:e8:42:ca:59:cc:dd: 6e:3b:0e:b4:2a:b5:1e:fe:51:59:5c:2f:55:5c:63: c9:07:9f:e4:49:fb:4e:8a:69:28:25:f3:56:dc:51: 62:a3:e5:28:40:74:59:54:4f:ff:e9:ac:63:d9:cb: 74:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A1:00:2E:41:3A:A0:00:DA:79:57:3A:17:9E:FF:A9:41:C9:87:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/155b0e63-eb93-3d04-adee-d6347619e10b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:b8:31:f0:5b:51:6e:4d:06:64:88:04:2e:df:79:4e:15:76: db:0c:3c:fe:14:d9:15:7d:d4:1d:1b:5d:45:04:0f:3c:cc:7f: 39:79:fd:2b:1d:3e:38:4d:e1:2a:aa:f7:b4:f8:7a:45:b0:ac: 95:e8:3c:6a:18:4f:1a:82:4f:2e:af:cf:da:2d:61:22:9c:b1: 68:8e:27:d8:9d:66:8b:a1:f5:59:9f:2d:d1:dd:2b:81:3f:4c: 7f:13:b8:28:ee:1b:a9:50:ff:2e:66:04:da:f1:af:6c:3c:d6: c5:21:68:8e:6e:60:29:b9:73:e0:aa:39:0e:a2:2f:74:3b:24: 04:25:87:20:f6:2f:f7:c8:f2:12:21:07:42:e1:c4:9d:73:ae: 64:a8:9a:5c:b9:8c:07:48:38:25:19:3c:6d:fc:98:75:39:46: 57:92:9c:bc:f0:b6:47:3f:15:a8:60:9d:ad:be:66:61:0d:6e: e7:ba:0e:61:52:25:70:6e:58:77:e2:7d:66:d9:55:15:5b:2d: e9:48:c6:8c:20:a0:ee:7b:53:ca:ab:9f:6a:2b:52:47:e9:62: 2b:b9:e8:3b:ca:6e:ef:cb:ee:e7:80:12:f1:aa:95:2b:93:16: e3:93:00:b3:08:e4:15:8e:0a:76:70:40:90:3b:f7:a2:88:91: 62:9b:3b:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hRXMSniv9zyxcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk M2JlOGNhNWItYTNkNC00Yzk1LTg4MzktZDdjOGMzNmUwMDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg75YAIqnalzqZute0eUcN8LyLyXq3VkkGXLR bT7k5X+sN5HCZwOfdxP4NaPMmH2yobd+kxNNkRv4W7/8hf8KIcvxf9x2Wj/KAiVx KDPBi4pz9bPmUmnPI0gRVsA10Lzu5oOB5mwqsymN/3vjuhI7yQ2gMDhpRIRpK++A Fft37Z90LYKIHrRosVOAhykkchWzqIVJ1eW5j6Mk+eAt5T4+WjGMh/83XatSQl8O VAzq58nePF8dSXXAqkcDi97gKTuKeM1BlbH3QMgvVX3oQspZzN1uOw60KrUe/lFZ XC9VXGPJB5/kSftOimkoJfNW3FFio+UoQHRZVE//6axj2ct0xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHahAC5BOqAA2nlXOhee/6lByYfwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTU1YjBlNjMtZWI5My0z ZDA0LWFkZWUtZDYzNDc2MTllMTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABm4MfBbUW5NBmSIBC7feU4VdtsMPP4U2RV91B0bXUUEDzzMfzl5/Ssd PjhN4Sqq97T4ekWwrJXoPGoYTxqCTy6vz9otYSKcsWiOJ9idZouh9VmfLdHdK4E/ TH8TuCjuG6lQ/y5mBNrxr2w81sUhaI5uYCm5c+CqOQ6iL3Q7JAQlhyD2L/fI8hIh B0LhxJ1zrmSomly5jAdIOCUZPG38mHU5RleSnLzwtkc/Fahgna2+ZmENbue6DmFS JXBuWHfifWbZVRVbLelIxowgoO57U8qrn2orUkfpYiu56DvKbu/L7ueAEvGqlSuT FuOTALMI5BWOCnZwQJA796KIkWKbO/k= -----END CERTIFICATE-----Generated at Thu Mar 26 12:57:45 2026 by rpki-client