$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3452058a-98d8-35f5-9181-437d017e7520.roa File: 3452058a-98d8-35f5-9181-437d017e7520.roa (raw, json) Hash identifier: 6QqB5F44nDWnfl87e2LgEhgFBkYzYR4HapTFqcSdZZU= Subject key identifier: B0:29:C1:F2:E5:02:25:EB:00:AE:72:2D:E6:C5:CE:74:D3:CC:05:C8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA38A47347605AF0634400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3452058a-98d8-35f5-9181-437d017e7520.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 396613 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:38:a4:73:47:60:5a:f0:63:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=da9a20b1-c97b-4778-8eba-c5d40278ff08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:22:0d:6c:82:0c:64:72:f5:e1:a7:b0:1d:84: d3:02:15:b3:1d:e7:be:7b:e8:ee:3a:f8:ea:13:cc: 26:9d:9d:33:c0:0b:51:f7:c4:e9:52:09:6f:2d:20: 73:78:7b:d3:05:5c:95:05:67:c3:7b:d5:5e:ac:cd: 58:3e:48:47:2f:67:bf:ba:2a:e4:28:14:49:1a:c1: 9d:88:56:21:21:32:ba:ed:80:20:f5:35:53:84:69: 03:b7:6f:7e:b3:87:29:40:30:f4:98:8b:2d:90:26: 4c:06:ac:8f:aa:6f:f5:e2:5d:b2:ee:d5:fc:d4:6c: 92:35:8c:43:37:4c:01:2e:30:25:99:ba:1c:b5:4e: e6:b7:c3:d9:87:91:5e:26:9a:dc:4b:32:98:0e:6d: d8:fb:73:f4:e5:41:6c:37:34:ca:cb:e3:47:fa:63: 5e:ff:c2:77:bb:3a:95:e1:5c:ba:74:5a:4f:12:31: fc:32:9d:ef:92:ae:33:02:6b:4d:dc:40:a7:b9:73: 7e:c1:65:ea:00:4e:5c:56:dd:7a:fd:61:3d:72:77: a6:58:79:3e:c3:f4:39:bb:89:ad:ad:20:75:4e:3e: d7:94:56:8f:ec:57:8d:19:50:d8:e8:64:04:88:e7: 2f:77:e0:97:c5:e2:09:84:3a:ee:42:7f:b2:c3:27: 3c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:29:C1:F2:E5:02:25:EB:00:AE:72:2D:E6:C5:CE:74:D3:CC:05:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3452058a-98d8-35f5-9181-437d017e7520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ce:c2:00:66:cd:d7:23:08:2e:7d:93:02:ca:a0:ad:f3:d1: 3a:05:cc:c3:e1:57:08:20:15:87:0f:2b:57:d1:2e:48:5d:d5: 03:dd:60:03:24:6d:91:e8:4b:1e:e2:c4:ef:b8:7f:0b:6b:30: 66:69:a4:5f:37:bc:46:70:f7:b3:b0:71:4e:9d:01:3a:1a:be: 39:fa:fd:62:1d:7e:89:e1:a4:f5:83:64:85:ef:75:c6:20:d0: 6f:b9:4c:ac:db:e7:6d:f2:bd:33:8b:42:ef:57:85:34:8d:74: a0:6a:83:cf:9f:94:7e:34:5e:17:2e:2b:2a:74:26:8d:9c:23: d6:04:2e:3d:c9:6b:1e:9a:b7:b5:02:4a:cc:d2:12:35:55:da: 12:1d:1f:be:4c:c6:4e:c1:5e:1c:c5:96:d7:c0:c8:a8:1d:e7: dd:b7:82:ee:1c:88:64:78:31:26:06:77:4b:c1:86:7c:4b:83: 5b:28:5f:c9:86:ef:17:37:d4:9f:86:da:19:4b:9c:1b:8d:e7: 25:26:c8:95:a6:a2:e2:b9:37:18:78:84:56:69:cb:df:7f:7d: ba:69:31:ba:68:03:0a:ee:52:2c:49:c8:05:23:a6:08:ba:c5: 32:8b:76:ce:dc:6c:f5:fb:80:b7:0f:69:3d:22:ae:7d:ab:5e: e1:0c:ee:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jikc0dgWvBjRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZGE5YTIwYjEtYzk3Yi00Nzc4LThlYmEtYzVkNDAyNzhmZjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSINbIIMZHL14aewHYTTAhWzHee+e+juOvjq E8wmnZ0zwAtR98TpUglvLSBzeHvTBVyVBWfDe9VerM1YPkhHL2e/uirkKBRJGsGd iFYhITK67YAg9TVThGkDt29+s4cpQDD0mIstkCZMBqyPqm/14l2y7tX81GySNYxD N0wBLjAlmboctU7mt8PZh5FeJprcSzKYDm3Y+3P05UFsNzTKy+NH+mNe/8J3uzqV 4Vy6dFpPEjH8Mp3vkq4zAmtN3ECnuXN+wWXqAE5cVt16/WE9cnemWHk+w/Q5u4mt rSB1Tj7XlFaP7FeNGVDY6GQEiOcvd+CXxeIJhDruQn+ywyc8FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLApwfLlAiXrAK5yLebFznTTzAXIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzQ1MjA1OGEtOThkOC0z NWY1LTkxODEtNDM3ZDAxN2U3NTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDOwgBmzdcjCC59kwLKoK3z0ToFzMPhVwggFYcPK1fRLkhd1QPdYAMk bZHoSx7ixO+4fwtrMGZppF83vEZw97OwcU6dAToavjn6/WIdfonhpPWDZIXvdcYg 0G+5TKzb523yvTOLQu9XhTSNdKBqg8+flH40XhcuKyp0Jo2cI9YELj3Jax6at7UC SszSEjVV2hIdH75Mxk7BXhzFltfAyKgd5923gu4ciGR4MSYGd0vBhnxLg1soX8mG 7xc31J+G2hlLnBuN5yUmyJWmouK5Nxh4hFZpy99/fbppMbpoAwruUixJyAUjpgi6 xTKLds7cbPX7gLcPaT0irn2rXuEM7k8= -----END CERTIFICATE-----Generated at Thu Mar 26 18:01:08 2026 by rpki-client