$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/41328d87-851c-3912-8b20-d52c93ba2f95.roa File: 41328d87-851c-3912-8b20-d52c93ba2f95.roa (raw, json) Hash identifier: yhaUPM6WMFGUmkhDHjnCN0xjHObBgUGHyoYnwzVbg+U= Subject key identifier: E7:89:19:02:2A:E8:60:F0:7A:1F:0C:BF:8C:B4:C8:EC:BA:3C:C9:2B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA03747629457F13B15940 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/41328d87-851c-3912-8b20-d52c93ba2f95.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 397197 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:03:74:76:29:45:7f:13:b1:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=e7ff2efe-5123-4608-afe5-597f90ad0800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2a:f5:6c:d3:d4:fc:b5:fa:06:ef:dd:d7:a0: 5d:96:9c:a0:ce:15:77:6c:a1:b4:ad:8a:0b:52:66: 93:46:f5:af:e2:18:5b:05:f7:34:93:f9:03:26:29: bf:66:a0:36:b6:22:c8:f7:b1:d7:81:98:5f:47:32: 49:17:68:06:ea:a9:db:19:66:35:68:ad:60:00:e9: d2:1d:e6:ed:f5:3d:56:99:85:e5:d0:f9:ef:24:bb: 59:cc:d7:db:23:04:69:7f:4d:a8:34:b8:7c:74:cf: 40:57:ef:0d:54:1b:70:6b:08:2c:4e:5a:23:18:11: c4:a0:5e:39:3f:a8:dc:be:aa:a8:24:75:44:6e:01: 01:29:55:e8:07:96:ee:87:ba:21:1c:f8:2d:6f:8f: df:2f:ee:1d:18:00:7f:32:68:d4:ba:b7:ea:e8:82: d9:cc:7f:c1:03:bb:63:84:02:44:a3:f1:bf:23:f7: 00:fa:69:80:84:cf:eb:bf:9a:a1:b0:48:d4:89:e5: 4b:96:dd:48:f8:6a:4a:dd:b0:3b:c6:97:7e:56:6f: 1a:e5:4f:e3:64:1a:8a:ac:18:94:e8:98:95:78:71: 5b:eb:1b:62:57:9a:4e:6c:92:7a:a0:51:df:ba:49: 1a:5a:5a:8c:48:fb:01:f4:44:05:b3:34:f1:94:6d: 27:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:89:19:02:2A:E8:60:F0:7A:1F:0C:BF:8C:B4:C8:EC:BA:3C:C9:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/41328d87-851c-3912-8b20-d52c93ba2f95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:40:5b:5c:e9:cd:29:ea:2c:f9:49:97:45:73:c2:db:c8:b6: ea:d7:ad:1b:66:d0:c3:bb:d3:cf:28:8b:e8:e6:2f:35:13:c3: c3:0d:ca:31:ca:b1:0b:9f:13:25:22:a3:bc:91:aa:6d:9b:d0: 01:4c:c1:78:d7:30:51:69:13:fa:c7:ca:64:4b:53:29:ad:c6: e9:e8:ba:1d:4d:27:7d:4c:8c:49:83:6b:a4:c0:3b:fa:07:9b: 3d:a3:4b:49:75:4a:3b:62:aa:03:1b:c8:85:a2:5f:3c:74:1d: 87:5f:b8:0c:2c:5f:c7:d1:ba:f1:9d:8c:c3:3e:a9:a3:d7:52: 57:aa:57:38:42:90:a5:a3:64:8c:fb:90:05:06:85:6e:ca:eb: 88:c3:68:81:e9:11:2f:59:93:07:90:38:e3:61:a7:b5:79:7b: bb:08:bd:28:29:e0:67:ae:5f:84:70:90:68:b4:c0:d6:4e:a6: c4:57:60:8e:63:f7:51:22:7f:73:9e:08:8b:88:e4:6c:c8:36: b9:82:14:e2:bd:95:02:92:90:7f:13:a6:c0:ad:72:88:da:bb: 6d:3f:45:9f:44:15:02:ba:b4:8c:5c:81:5b:39:73:6e:36:20: 75:9a:8b:f1:83:e0:2d:2c:25:a4:e1:27:24:15:03:47:37:53: fa:ff:5a:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2gN0dilFfxOxWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZTdmZjJlZmUtNTEyMy00NjA4LWFmZTUtNTk3ZjkwYWQwODAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCr1bNPU/LX6Bu/d16BdlpygzhV3bKG0rYoL UmaTRvWv4hhbBfc0k/kDJim/ZqA2tiLI97HXgZhfRzJJF2gG6qnbGWY1aK1gAOnS Hebt9T1WmYXl0PnvJLtZzNfbIwRpf02oNLh8dM9AV+8NVBtwawgsTlojGBHEoF45 P6jcvqqoJHVEbgEBKVXoB5buh7ohHPgtb4/fL+4dGAB/MmjUurfq6ILZzH/BA7tj hAJEo/G/I/cA+mmAhM/rv5qhsEjUieVLlt1I+GpK3bA7xpd+Vm8a5U/jZBqKrBiU 6JiVeHFb6xtiV5pObJJ6oFHfukkaWlqMSPsB9EQFszTxlG0nqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeJGQIq6GDweh8Mv4y0yOy6PMkrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDEzMjhkODctODUxYy0z OTEyLThiMjAtZDUyYzkzYmEyZjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpAW1zpzSnqLPlJl0VzwtvIturXrRtm0MO7088oi+jmLzUTw8MNyjHK sQufEyUio7yRqm2b0AFMwXjXMFFpE/rHymRLUymtxunouh1NJ31MjEmDa6TAO/oH mz2jS0l1SjtiqgMbyIWiXzx0HYdfuAwsX8fRuvGdjMM+qaPXUleqVzhCkKWjZIz7 kAUGhW7K64jDaIHpES9ZkweQOONhp7V5e7sIvSgp4GeuX4RwkGi0wNZOpsRXYI5j 91Eif3OeCIuI5GzINrmCFOK9lQKSkH8TpsCtcojau20/RZ9EFQK6tIxcgVs5c242 IHWai/GD4C0sJaThJyQVA0c3U/r/Wqg= -----END CERTIFICATE-----Generated at Thu Mar 26 14:17:40 2026 by rpki-client