$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/17e60318-be7d-3d91-9c8a-066e492f2c62.roa File: 17e60318-be7d-3d91-9c8a-066e492f2c62.roa (raw, json) Hash identifier: 9m5zlXAl/o8dZKAYnjQVBghaxIVR69hDynlaP4G9u64= Subject key identifier: AE:61:68:D3:28:88:98:36:C0:B4:19:C6:92:78:7B:9D:DC:26:75:58 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA11B67219B8CAFDF12C40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/17e60318-be7d-3d91-9c8a-066e492f2c62.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 396590 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:11:b6:72:19:b8:ca:fd:f1:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=80f81602-6157-4f23-846a-9436691a9df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:76:87:e7:b7:68:fd:60:64:73:68:c7:a9:92: 6d:16:39:5b:93:9f:74:a3:c0:51:1d:5e:d4:20:06: 52:6c:14:16:20:a6:2a:c6:0f:b7:f5:1a:50:56:be: c3:38:d8:fb:e7:ab:b6:f4:4b:2c:e7:e2:66:93:bd: 62:8e:ae:2c:8c:09:ea:dc:9a:ca:c1:d6:af:3f:16: 27:b7:88:92:d7:e1:2e:77:51:74:54:28:ce:f3:61: 2c:02:b9:d7:61:05:06:e6:85:4e:c0:fd:b5:ba:a5: f8:ae:c0:68:32:0b:07:ce:87:1f:d9:e1:17:f1:69: 89:0b:94:ea:b8:ea:e2:28:fd:36:cd:e4:95:76:32: 21:1f:56:30:43:61:61:b6:e4:bc:a0:28:4a:94:59: fc:6b:19:23:1e:2e:49:d3:8c:e9:70:0d:14:4e:20: 92:81:70:7c:e0:06:6e:69:2d:30:bc:85:38:bd:d8: a4:1f:c5:e1:b7:9b:8b:64:65:2b:02:bd:67:c9:95: fc:74:77:8c:44:d6:ac:01:59:6d:a3:4d:21:1a:44: 0a:de:74:ec:96:a5:cf:df:b0:9f:e8:a2:eb:48:27: 39:bc:ad:f4:98:a0:e6:e4:12:d8:dd:5d:a0:11:c2: 02:d9:80:74:5f:54:fd:06:c0:ba:5e:d6:3c:10:21: ce:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:61:68:D3:28:88:98:36:C0:B4:19:C6:92:78:7B:9D:DC:26:75:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/17e60318-be7d-3d91-9c8a-066e492f2c62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:5d:8d:3a:26:1b:30:9b:09:88:15:1d:ab:a1:8c:3c:f6:26: e7:d2:02:87:ff:82:10:d1:d6:94:36:74:4b:3b:81:48:e3:de: bc:3b:04:ea:98:c2:32:ff:b6:0c:7c:64:49:17:cf:fd:84:96: 74:28:03:67:af:52:d3:52:e2:02:97:53:e1:cd:66:2f:f1:3d: 79:d7:13:4b:9d:b6:4b:75:f7:d9:e2:b0:db:d3:2d:5e:4a:33: 17:ce:62:a7:a8:4e:6c:90:86:24:11:17:e6:1a:6d:d0:aa:d6: ed:e5:19:f2:f5:a8:2b:f1:ef:cf:9b:f6:1a:5f:f0:18:78:97: 96:63:9b:fb:ed:69:d5:93:ec:94:7b:b5:76:59:e3:db:7b:54: a3:e2:b6:19:71:c2:22:be:22:ad:c0:df:23:27:89:0a:7e:55: 2e:f0:1d:45:30:e7:9e:e8:66:eb:2b:28:4e:de:2b:ce:55:38: 9a:77:05:22:7c:b5:fc:de:ea:fe:a0:c6:92:f8:3e:17:c3:92: f3:f1:85:c0:23:a4:b1:e6:40:01:75:7f:4c:83:f6:5f:b2:51: ef:60:55:26:b0:30:a2:a9:bd:28:71:e6:2f:7e:80:1a:c2:34: b3:71:12:71:0a:1d:9b:11:ce:1e:c7:7c:fa:01:c9:0e:84:cc: fd:9c:e3:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hG2chm4yv3xLEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ODBmODE2MDItNjE1Ny00ZjIzLTg0NmEtOTQzNjY5MWE5ZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXaH57do/WBkc2jHqZJtFjlbk590o8BRHV7U IAZSbBQWIKYqxg+39RpQVr7DONj756u29Ess5+Jmk71ijq4sjAnq3JrKwdavPxYn t4iS1+Eud1F0VCjO82EsArnXYQUG5oVOwP21uqX4rsBoMgsHzocf2eEX8WmJC5Tq uOriKP02zeSVdjIhH1YwQ2FhtuS8oChKlFn8axkjHi5J04zpcA0UTiCSgXB84AZu aS0wvIU4vdikH8Xht5uLZGUrAr1nyZX8dHeMRNasAVlto00hGkQK3nTslqXP37Cf 6KLrSCc5vK30mKDm5BLY3V2gEcIC2YB0X1T9BsC6XtY8ECHOsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5haNMoiJg2wLQZxpJ4e53cJnVYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTdlNjAzMTgtYmU3ZC0z ZDkxLTljOGEtMDY2ZTQ5MmYyYzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVdjTomGzCbCYgVHauhjDz2JufSAof/ghDR1pQ2dEs7gUjj3rw7BOqY wjL/tgx8ZEkXz/2ElnQoA2evUtNS4gKXU+HNZi/xPXnXE0udtkt199nisNvTLV5K MxfOYqeoTmyQhiQRF+YabdCq1u3lGfL1qCvx78+b9hpf8Bh4l5Zjm/vtadWT7JR7 tXZZ49t7VKPithlxwiK+Iq3A3yMniQp+VS7wHUUw557oZusrKE7eK85VOJp3BSJ8 tfze6v6gxpL4PhfDkvPxhcAjpLHmQAF1f0yD9l+yUe9gVSawMKKpvShx5i9+gBrC NLNxEnEKHZsRzh7HfPoByQ6EzP2c4+E= -----END CERTIFICATE-----Generated at Thu Mar 26 12:57:47 2026 by rpki-client