$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d014df5-8b5f-34c3-a4b6-4fbe5b287033.roa File: 3d014df5-8b5f-34c3-a4b6-4fbe5b287033.roa (raw, json) Hash identifier: LJLxJJ86ce7KBInwY7hTDeG2RaVbUJpnGWQhBd41WM0= Subject key identifier: 8C:73:23:A0:AE:5B:81:70:1E:DF:C1:29:D6:F5:A1:48:A9:73:28:A9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA149018101B32DFA5F700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d014df5-8b5f-34c3-a4b6-4fbe5b287033.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 396572 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:14:90:18:10:1b:32:df:a5:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=5778adb3-5495-4bb9-a3a1-68e21b86f4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ba:8d:cb:7a:b7:54:2f:24:38:89:c6:6d:7a: f0:ca:e8:aa:37:e6:c2:76:dd:5f:fb:5f:b5:c3:00: e1:9b:af:c4:8e:fd:b6:04:f3:97:ed:cb:96:53:0b: 6f:64:d0:2d:6e:a0:85:df:4d:20:7a:34:07:4a:c2: c3:85:e0:0a:ae:c3:cb:1f:45:c6:61:75:dc:ad:14: 2d:4f:a9:dc:9a:2f:39:74:36:29:10:19:29:e8:73: af:44:53:c7:58:a5:30:88:0f:61:43:b9:39:c3:54: bc:91:df:d7:87:7b:f7:dd:38:1a:87:9b:9f:b2:73: 2a:b4:a6:ab:c7:f2:c7:24:7e:6c:1b:07:30:85:a6: 90:db:95:e1:8c:c5:64:83:d6:79:81:1b:32:6f:08: c1:42:98:e5:5c:b7:1c:1e:db:42:27:55:dc:e8:a4: 73:69:09:7e:60:43:97:90:02:07:03:5d:63:b8:5e: ad:da:a3:c1:dd:e1:8c:ba:00:57:73:48:7f:59:44: f8:75:47:fa:1f:7b:07:0d:2a:2c:94:b2:28:4a:5e: 27:85:be:dd:ff:44:2c:72:85:1e:6d:fa:3c:11:35: 19:c8:57:fb:51:7a:17:55:35:68:e6:4a:0b:6c:7a: 2f:43:0b:c3:8d:54:b6:fd:dc:d5:12:93:59:a2:56: 73:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:73:23:A0:AE:5B:81:70:1E:DF:C1:29:D6:F5:A1:48:A9:73:28:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d014df5-8b5f-34c3-a4b6-4fbe5b287033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c4:f5:6e:30:6d:59:3e:70:7b:c3:6e:6c:57:0e:e9:62:37: fb:2f:cf:80:95:23:a7:35:92:89:6f:a4:f8:21:6f:f6:08:7f: ae:49:54:2b:27:72:fa:fe:b1:d7:fa:18:68:cf:f1:23:23:25: 1f:c2:50:d3:c8:d6:a2:ee:1a:29:57:a5:b3:ea:a6:fc:a9:4e: 00:17:62:71:90:b8:35:ee:56:6a:fd:01:f6:a0:ed:cb:6a:63: ad:45:f9:f0:eb:8d:d8:64:7f:fb:b3:10:21:b3:fc:d0:25:92: 9b:89:56:04:cc:ff:17:67:4c:f5:f6:d8:7b:79:8e:e4:94:9f: c5:f0:61:08:f2:3c:6d:57:37:d0:a1:e7:b8:1f:b6:20:75:ad: e2:c8:74:8d:a1:f1:3e:f5:d9:db:d3:65:b5:d0:ca:a4:ef:0a: 83:ed:de:d4:47:be:01:f8:da:6a:d7:ad:bc:05:2f:b2:40:34: 5b:3c:65:b7:5c:f9:7c:67:d2:3e:45:47:27:e3:05:7b:be:00: fe:41:d6:2c:c8:33:d8:5e:7b:0a:0c:29:67:aa:3a:49:bc:7e: c1:53:0d:3e:ed:62:81:a8:97:5b:36:34:d4:cd:85:7c:ea:2f: 10:4b:4b:09:5c:2a:bc:84:09:c8:f8:3b:9c:dc:32:63:d9:4a: db:d2:4c:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hSQGBAbMt+l9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk NTc3OGFkYjMtNTQ5NS00YmI5LWEzYTEtNjhlMjFiODZmNGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLqNy3q3VC8kOInGbXrwyuiqN+bCdt1f+1+1 wwDhm6/Ejv22BPOX7cuWUwtvZNAtbqCF300gejQHSsLDheAKrsPLH0XGYXXcrRQt T6ncmi85dDYpEBkp6HOvRFPHWKUwiA9hQ7k5w1S8kd/Xh3v33Tgah5ufsnMqtKar x/LHJH5sGwcwhaaQ25XhjMVkg9Z5gRsybwjBQpjlXLccHttCJ1Xc6KRzaQl+YEOX kAIHA11juF6t2qPB3eGMugBXc0h/WUT4dUf6H3sHDSoslLIoSl4nhb7d/0QscoUe bfo8ETUZyFf7UXoXVTVo5koLbHovQwvDjVS2/dzVEpNZolZzIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxzI6CuW4FwHt/BKdb1oUipcyipMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2QwMTRkZjUtOGI1Zi0z NGMzLWE0YjYtNGZiZTViMjg3MDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjE9W4wbVk+cHvDbmxXDuliN/svz4CVI6c1kolvpPghb/YIf65JVCsn cvr+sdf6GGjP8SMjJR/CUNPI1qLuGilXpbPqpvypTgAXYnGQuDXuVmr9Afag7ctq Y61F+fDrjdhkf/uzECGz/NAlkpuJVgTM/xdnTPX22Ht5juSUn8XwYQjyPG1XN9Ch 57gftiB1reLIdI2h8T712dvTZbXQyqTvCoPt3tRHvgH42mrXrbwFL7JANFs8Zbdc +Xxn0j5FRyfjBXu+AP5B1izIM9heewoMKWeqOkm8fsFTDT7tYoGol1s2NNTNhXzq LxBLSwlcKryECcj4O5zcMmPZStvSTLE= -----END CERTIFICATE-----Generated at Thu Mar 26 18:47:31 2026 by rpki-client