$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3df57bc9-d27b-3891-85cf-f70a4d96b58b.roa File: 3df57bc9-d27b-3891-85cf-f70a4d96b58b.roa (raw, json) Hash identifier: pzPyUX/+uCNDNjnBUvYpm0qZ894kcWo5RgwWhSZV998= Subject key identifier: 9B:A3:61:61:F3:AB:1D:B2:5F:D2:6B:97:75:2C:78:E9:FF:74:0B:A7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA3B464410C3CB04ADB1C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3df57bc9-d27b-3891-85cf-f70a4d96b58b.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 396567 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:3b:46:44:10:c3:cb:04:ad:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=bba7500c-98e5-4d6f-a30d-c1ad7e312afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:60:ed:6e:ce:9c:dc:bc:7b:43:08:cc:0a:a1: bc:87:a0:4d:d0:a7:b6:4b:15:cf:eb:c4:a0:7e:ad: 4e:0d:35:cd:9c:90:58:82:f3:5e:15:5c:b4:3e:a3: 2a:cb:62:99:64:09:66:88:64:0b:ce:4d:13:e7:d6: 92:a3:ed:98:87:72:06:cc:b7:5b:79:fc:66:ca:a3: 9b:0e:7b:c9:f5:03:fa:4f:b3:91:1c:70:d3:1a:b6: 70:1c:3a:bf:5c:79:09:8e:d5:fe:8a:ed:b6:2d:0b: ff:c3:c0:e1:ac:88:20:83:69:af:89:51:05:af:50: 80:0d:eb:38:61:17:ff:ef:10:aa:56:f7:d9:da:54: 41:3b:2d:53:e3:7d:9c:56:2c:9c:46:d3:ac:14:40: e0:bd:f9:7c:6b:c4:18:5e:36:41:0c:2c:b2:9f:64: 42:90:10:dc:76:21:6f:9a:8d:f8:5c:9d:fc:16:0d: 11:bf:c7:87:ac:95:71:a0:68:be:76:69:4d:be:97: e7:11:2a:da:6d:1a:9d:a2:77:be:4c:d0:74:4f:8c: 6a:85:18:f0:52:5b:84:16:b6:b1:69:56:54:55:f7: ec:81:37:33:7a:47:6d:6b:c4:01:93:02:f2:fe:2a: d9:c5:00:93:18:25:ee:f4:7a:83:e8:9c:d7:3f:1a: 45:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A3:61:61:F3:AB:1D:B2:5F:D2:6B:97:75:2C:78:E9:FF:74:0B:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3df57bc9-d27b-3891-85cf-f70a4d96b58b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:aa:c4:e6:72:32:51:0b:1d:ce:f9:e2:23:22:a4:9e:88:2f: bf:2a:61:41:15:a2:e6:28:82:71:d3:82:c1:04:38:32:6c:21: 5c:3f:20:19:fa:7c:76:7d:2d:ae:75:71:ed:11:18:ba:4d:d4: 74:88:86:1d:ab:48:65:7c:33:fa:63:ea:f6:2e:18:76:9f:10: 10:95:b3:30:7a:f8:13:ed:a1:e5:4b:df:4c:ff:ed:1d:c1:c7: 9b:85:9b:a1:c4:2a:24:6c:07:04:f8:9e:81:1a:fa:10:ec:66: 65:1b:07:50:dc:26:ef:7e:22:10:86:4d:ef:e4:60:cc:a3:60: e7:4b:28:fa:cf:22:6e:8d:f0:3e:44:48:4e:2e:e1:af:ac:9c: 42:72:bb:a8:37:c1:29:80:25:af:3c:65:68:a4:63:1a:c1:ee: 15:3e:0e:78:6e:6b:6f:4f:e2:f1:06:da:d5:76:6c:29:2b:fe: fd:af:69:ac:28:e0:15:f7:27:4b:1e:b2:70:f2:95:cf:69:59: 9d:9d:61:77:7d:92:d1:75:3d:7e:44:f8:98:8e:c3:d1:69:b0: 57:5a:27:02:0e:9d:2c:e7:82:75:f6:13:6c:20:f9:15:df:4d: c9:31:d0:5f:81:67:bb:fe:44:9a:27:2b:db:c0:f1:2d:7a:e8: 6d:9d:4e:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jtGRBDDywStscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk YmJhNzUwMGMtOThlNS00ZDZmLWEzMGQtYzFhZDdlMzEyYWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmDtbs6c3Lx7QwjMCqG8h6BN0Ke2SxXP68Sg fq1ODTXNnJBYgvNeFVy0PqMqy2KZZAlmiGQLzk0T59aSo+2Yh3IGzLdbefxmyqOb DnvJ9QP6T7ORHHDTGrZwHDq/XHkJjtX+iu22LQv/w8DhrIggg2mviVEFr1CADes4 YRf/7xCqVvfZ2lRBOy1T432cViycRtOsFEDgvfl8a8QYXjZBDCyyn2RCkBDcdiFv mo34XJ38Fg0Rv8eHrJVxoGi+dmlNvpfnESrabRqdone+TNB0T4xqhRjwUluEFrax aVZUVffsgTczekdta8QBkwLy/irZxQCTGCXu9HqD6JzXPxpFvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJujYWHzqx2yX9Jrl3UseOn/dAunMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2RmNTdiYzktZDI3Yi0z ODkxLTg1Y2YtZjcwYTRkOTZiNThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaqxOZyMlELHc754iMipJ6IL78qYUEVouYognHTgsEEODJsIVw/IBn6 fHZ9La51ce0RGLpN1HSIhh2rSGV8M/pj6vYuGHafEBCVszB6+BPtoeVL30z/7R3B x5uFm6HEKiRsBwT4noEa+hDsZmUbB1DcJu9+IhCGTe/kYMyjYOdLKPrPIm6N8D5E SE4u4a+snEJyu6g3wSmAJa88ZWikYxrB7hU+Dnhua29P4vEG2tV2bCkr/v2vaawo 4BX3J0sesnDylc9pWZ2dYXd9ktF1PX5E+JiOw9FpsFdaJwIOnSzngnX2E2wg+RXf Tckx0F+BZ7v+RJonK9vA8S166G2dTo8= -----END CERTIFICATE-----Generated at Thu Mar 26 13:03:32 2026 by rpki-client