$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40867b8b-c324-3bde-b7f5-d6f24c3f9f9b.roa File: 40867b8b-c324-3bde-b7f5-d6f24c3f9f9b.roa (raw, json) Hash identifier: a9Ugvt/1vbvs0RL8ZAj+bAdke44ipCxekz5fEvslUkM= Subject key identifier: 02:27:F8:06:24:05:59:ED:61:FA:0D:B1:45:38:C4:16:7A:8A:E7:4A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA3AFA60585B66D073A700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40867b8b-c324-3bde-b7f5-d6f24c3f9f9b.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 36621 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:3a:fa:60:58:5b:66:d0:73:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=5c51c8c4-73b7-46a5-a711-eed1b317d077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:07:fa:6e:77:1e:80:9b:da:9a:53:1f:0a:91: 89:1a:b0:6f:8c:3d:61:20:e7:05:82:29:2a:8c:ef: 44:3f:87:0e:8d:f6:2f:98:f4:27:18:9c:30:2f:ca: a2:09:a0:59:3e:3b:0b:0b:ff:b1:de:2c:0b:09:f0: 41:d7:a4:ff:8b:70:81:7f:94:11:7e:a6:e3:01:9b: fd:7b:f9:a7:2f:2b:98:52:d5:d9:98:ca:2d:da:a4: 7c:5c:a1:0f:6c:a7:7a:c6:db:cd:68:ae:d3:c0:cf: 44:e3:f3:ca:69:0e:ed:49:17:68:bb:1e:3a:94:6c: a4:c7:78:4b:01:49:52:e2:7b:88:ee:c5:ed:a0:63: 3f:c3:a3:4c:c6:2d:34:76:43:7b:f5:09:af:7a:04: d7:7e:d2:ff:24:e0:18:14:fb:41:ea:71:1e:20:cf: aa:b4:72:e0:fc:09:1c:26:1a:5c:db:48:c5:22:7f: 31:46:a0:c9:e3:59:c1:d0:0b:4b:2a:71:ab:68:5b: 5b:7c:73:f0:20:f7:83:59:da:bd:94:04:ff:03:b3: 66:73:b7:8d:7d:99:ef:b8:19:a8:3b:8a:92:e5:30: ee:74:a5:e9:53:68:1b:17:de:61:ad:19:66:0d:46: a3:6f:0c:0a:42:c0:db:34:d1:d1:d7:5d:3f:c5:c2: 76:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:27:F8:06:24:05:59:ED:61:FA:0D:B1:45:38:C4:16:7A:8A:E7:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40867b8b-c324-3bde-b7f5-d6f24c3f9f9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ef:af:a0:f7:82:a9:34:69:4e:62:00:9b:6d:4f:2e:7a:12: a9:59:fa:a1:f8:f9:8d:24:ac:2d:b3:a5:7e:59:4e:fd:e6:ef: 48:0a:36:82:91:82:4c:22:04:85:24:11:7b:58:b7:e9:88:4f: 9e:90:c5:0f:d4:10:26:45:aa:c8:8d:34:8e:c3:32:b3:f8:a9: 05:af:31:0f:98:fc:24:99:7d:bd:19:21:42:fa:ab:a8:3b:ba: dc:39:ec:4a:46:74:cf:2e:97:80:df:82:6b:27:cc:16:be:52: ce:13:41:ba:80:60:ed:f5:d3:0a:0f:8a:1e:ee:74:08:ca:71: 85:07:32:6f:65:a5:d9:e5:fa:06:15:29:e5:44:32:45:d1:24: 9c:db:41:19:73:09:63:d7:14:e9:0e:93:5f:d2:e0:01:b0:3e: e7:9e:83:14:da:0d:05:d3:28:9d:8d:97:51:73:76:b1:e1:bd: 65:65:15:c0:8f:ae:2f:da:17:8e:a8:e4:b1:02:47:74:96:2f: a5:cf:58:e0:0e:a6:ec:d1:c8:03:1d:65:15:51:de:5c:be:f3: 03:3d:aa:86:24:ed:8a:50:4e:8f:5b:3a:84:2b:ce:ba:2b:0b: 01:68:5a:48:27:25:33:9a:96:90:8b:f4:f3:49:c4:f7:6c:6a: 5c:07:0b:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jr6YFhbZtBzpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk NWM1MWM4YzQtNzNiNy00NmE1LWE3MTEtZWVkMWIzMTdkMDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigf6bncegJvamlMfCpGJGrBvjD1hIOcFgikq jO9EP4cOjfYvmPQnGJwwL8qiCaBZPjsLC/+x3iwLCfBB16T/i3CBf5QRfqbjAZv9 e/mnLyuYUtXZmMot2qR8XKEPbKd6xtvNaK7TwM9E4/PKaQ7tSRdoux46lGykx3hL AUlS4nuI7sXtoGM/w6NMxi00dkN79QmvegTXftL/JOAYFPtB6nEeIM+qtHLg/Akc Jhpc20jFIn8xRqDJ41nB0AtLKnGraFtbfHPwIPeDWdq9lAT/A7Nmc7eNfZnvuBmo O4qS5TDudKXpU2gbF95hrRlmDUajbwwKQsDbNNHR110/xcJ25QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIn+AYkBVntYfoNsUU4xBZ6iudKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDA4NjdiOGItYzMyNC0z YmRlLWI3ZjUtZDZmMjRjM2Y5ZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrvr6D3gqk0aU5iAJttTy56EqlZ+qH4+Y0krC2zpX5ZTv3m70gKNoKR gkwiBIUkEXtYt+mIT56QxQ/UECZFqsiNNI7DMrP4qQWvMQ+Y/CSZfb0ZIUL6q6g7 utw57EpGdM8ul4DfgmsnzBa+Us4TQbqAYO310woPih7udAjKcYUHMm9lpdnl+gYV KeVEMkXRJJzbQRlzCWPXFOkOk1/S4AGwPueegxTaDQXTKJ2Nl1FzdrHhvWVlFcCP ri/aF46o5LECR3SWL6XPWOAOpuzRyAMdZRVR3ly+8wM9qoYk7YpQTo9bOoQrzror CwFoWkgnJTOalpCL9PNJxPdsalwHC2k= -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:41 2026 by rpki-client