$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49cde539-7f64-36cf-b1c6-0e56802eb3c4.roa File: 49cde539-7f64-36cf-b1c6-0e56802eb3c4.roa (raw, json) Hash identifier: aHXzqFWh1mT8Wt+7d4ROCmBMnVUvVbly7IYncPpo8x4= Subject key identifier: D0:6C:CD:17:C5:61:7B:AC:48:D0:05:D4:7C:79:B0:BB:32:55:2B:13 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA39304E280F9DE557F480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49cde539-7f64-36cf-b1c6-0e56802eb3c4.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 396596 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:39:30:4e:28:0f:9d:e5:57:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=87389fb3-9aa1-4254-9662-c06c5eeb426c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:80:a1:29:50:20:20:4b:60:2c:c3:8a:14:dd: 3f:aa:86:db:36:8e:e7:d8:dc:b8:15:6f:e9:92:5d: 27:39:2b:a1:f3:f9:85:5d:fb:23:93:f6:43:4e:61: e5:7e:3c:f6:c9:f1:ce:07:cb:38:ec:da:35:c5:e8: 52:7d:47:3c:0a:a1:41:f2:57:88:26:8b:5f:01:16: 03:25:d7:b5:de:07:0e:c9:00:e8:5f:08:d3:c0:7a: f6:92:de:3d:1d:23:09:b1:42:18:d4:c6:36:14:9c: 15:33:b4:7d:02:1e:08:6e:76:97:51:a5:58:d8:8f: ec:96:6f:6d:6d:24:1f:98:83:80:d1:9d:52:7b:c6: 43:e7:a5:bb:a8:5a:d7:55:66:b8:5a:d4:76:15:dd: a5:23:1c:9a:e9:fa:1e:b1:f8:57:f7:76:f9:4b:2f: 6a:b0:c6:73:cb:a6:80:9a:fd:3f:62:19:c0:fa:c0: 38:44:51:3f:d3:cb:c4:36:59:aa:9a:01:cb:0d:c4: 58:53:26:8c:6a:3b:df:23:64:5d:07:81:80:11:f9: 10:4e:9f:28:a4:80:7e:b3:ea:bb:9a:0b:a7:20:ac: 4c:df:82:a8:2d:a2:ca:56:b4:27:00:d6:fb:ce:c7: 3e:7b:16:8b:e1:17:09:ca:b8:90:e7:fd:0d:6e:20: 1c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:6C:CD:17:C5:61:7B:AC:48:D0:05:D4:7C:79:B0:BB:32:55:2B:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49cde539-7f64-36cf-b1c6-0e56802eb3c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ab:24:e8:ca:c2:02:37:02:27:a8:b8:d5:ea:9a:8e:f5:4a: 40:4a:19:c9:1d:ea:71:38:b8:25:9c:e6:36:1c:89:95:87:9a: c0:40:20:f0:cd:b8:3f:8d:32:09:6c:39:c0:e1:fd:3d:c1:d8: 92:da:6b:ac:3f:2e:73:a6:d0:a3:2c:6a:0c:aa:98:66:80:47: 13:ca:42:9f:fa:89:f3:92:e3:01:ac:af:46:cc:97:b2:01:8e: b6:a6:5d:5b:52:d3:9e:4e:65:99:85:8a:b6:c5:bf:cc:83:16: f8:1b:47:bb:96:26:ff:82:a1:71:dc:f7:d8:fb:e8:b3:01:2f: 2c:9d:0d:e8:82:c1:fc:0f:a8:b9:73:f6:54:e0:b2:23:0b:8c: 0a:c8:fa:e7:bd:86:4e:61:a9:0d:fa:df:f6:0e:f0:ed:1e:e0: 94:c4:ad:2e:72:a5:0f:16:5b:b9:d6:05:f2:46:2e:5b:7e:d4: af:b7:94:90:77:b6:cc:18:11:cf:58:46:f8:2f:3e:80:c9:df: 29:00:a2:8e:47:cc:91:61:87:fc:60:ed:b3:94:ea:bc:20:d8: e5:70:ff:80:e0:71:e9:b6:0f:c2:91:04:ab:d6:4e:4b:5a:20: e0:90:41:65:dc:18:bc:6e:d5:02:b4:e8:8c:bb:73:d9:a1:97: f7:72:e9:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jkwTigPneVX9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ODczODlmYjMtOWFhMS00MjU0LTk2NjItYzA2YzVlZWI0MjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIChKVAgIEtgLMOKFN0/qobbNo7n2Ny4FW/p kl0nOSuh8/mFXfsjk/ZDTmHlfjz2yfHOB8s47No1xehSfUc8CqFB8leIJotfARYD Jde13gcOyQDoXwjTwHr2kt49HSMJsUIY1MY2FJwVM7R9Ah4IbnaXUaVY2I/slm9t bSQfmIOA0Z1Se8ZD56W7qFrXVWa4WtR2Fd2lIxya6foesfhX93b5Sy9qsMZzy6aA mv0/YhnA+sA4RFE/08vENlmqmgHLDcRYUyaMajvfI2RdB4GAEfkQTp8opIB+s+q7 mgunIKxM34KoLaLKVrQnANb7zsc+exaL4RcJyriQ5/0NbiAcQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBszRfFYXusSNAF1Hx5sLsyVSsTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDljZGU1MzktN2Y2NC0z NmNmLWIxYzYtMGU1NjgwMmViM2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGrJOjKwgI3AieouNXqmo71SkBKGckd6nE4uCWc5jYciZWHmsBAIPDN uD+NMglsOcDh/T3B2JLaa6w/LnOm0KMsagyqmGaARxPKQp/6ifOS4wGsr0bMl7IB jramXVtS055OZZmFirbFv8yDFvgbR7uWJv+CoXHc99j76LMBLyydDeiCwfwPqLlz 9lTgsiMLjArI+ue9hk5hqQ363/YO8O0e4JTErS5ypQ8WW7nWBfJGLlt+1K+3lJB3 tswYEc9YRvgvPoDJ3ykAoo5HzJFhh/xg7bOU6rwg2OVw/4Dgcem2D8KRBKvWTkta IOCQQWXcGLxu1QK06Iy7c9mhl/dy6Sg= -----END CERTIFICATE-----Generated at Thu Mar 26 11:18:46 2026 by rpki-client