$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fff0be8-15e3-31b3-8dfc-db5e58707e22.roa File: 4fff0be8-15e3-31b3-8dfc-db5e58707e22.roa (raw, json) Hash identifier: HYFeEduDXtLURTm/em4vSqhy32EuCmQy26gqVNsMVCQ= Subject key identifier: 97:74:0E:49:18:BA:6D:D7:6D:2F:0E:45:0A:C0:71:31:13:A8:37:B3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA3BFFAD5E45D9FBE45F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fff0be8-15e3-31b3-8dfc-db5e58707e22.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 396575 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:3b:ff:ad:5e:45:d9:fb:e4:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=0417ae39-27bd-4954-b2d1-5bae1b484047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f9:30:a9:cd:bc:25:bb:fb:88:0e:e8:63:dd: fb:8d:da:3a:06:aa:f6:55:92:70:8d:f1:e9:43:e6: c4:54:43:60:32:21:66:9d:3f:84:5c:06:10:30:cb: da:b3:66:3d:9a:d2:0e:bb:b4:d0:d0:41:91:b5:30: 82:3b:f1:bb:f8:ca:39:ba:8f:22:66:10:55:08:96: 33:27:9c:aa:b0:36:09:66:f6:c3:00:95:85:ea:cf: d9:6a:f2:84:11:27:e8:a4:b3:d3:17:17:cd:ba:bc: 22:68:f4:92:9d:4a:8d:36:5a:ff:9e:99:bf:01:55: 3b:cb:50:46:2f:94:b8:8a:c4:a9:23:ed:70:11:b3: 3b:8c:20:d8:ff:e6:8a:b7:5a:4d:5c:99:d4:1b:91: 15:4b:b0:93:1d:0f:00:17:4e:a5:bf:d2:18:98:0e: 9e:f0:b9:0b:8c:12:be:02:bb:f9:9b:3e:37:44:f1: c0:83:04:19:4b:f0:35:e7:52:06:94:bb:e9:f8:02: d5:16:15:f3:48:97:0e:47:75:96:9a:51:be:26:52: 2d:c7:1c:91:a5:ae:d1:a1:d6:85:f1:92:78:80:01: 01:83:57:24:22:a5:85:64:b3:7c:74:f9:81:d1:b1: c2:84:0c:89:9f:3f:e6:5e:d1:cf:c7:05:70:25:c5: 5e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:74:0E:49:18:BA:6D:D7:6D:2F:0E:45:0A:C0:71:31:13:A8:37:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fff0be8-15e3-31b3-8dfc-db5e58707e22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:83:7d:74:28:12:26:7c:36:d7:8c:88:10:a9:ad:78:d8:ee: 36:e5:16:d7:07:f5:31:1a:ac:72:3d:20:ed:da:30:b4:0b:e6: e4:98:ac:36:64:b1:7b:73:c9:e6:0e:7b:e8:cd:24:23:cf:32: 19:39:22:b9:98:fe:38:f6:28:15:3f:f5:53:73:61:e8:88:82: 90:7d:ef:e7:97:47:89:9f:b3:65:d6:a8:e0:ed:54:a4:31:91: 93:6d:0a:65:79:08:31:3a:0f:d3:99:20:3c:1f:4b:ea:ff:7f: 20:9a:39:cf:8e:ae:13:b3:a1:68:d3:77:0f:18:92:66:0f:c6: 6d:62:b8:e1:8a:0d:13:9a:63:b6:69:97:e3:3e:44:ae:0a:58: 74:f3:eb:04:19:1a:c4:93:0f:3d:e3:df:7f:70:47:44:e7:f1: fc:f8:ba:06:a5:2a:fa:7b:39:78:5c:7a:e1:95:8d:4f:e1:08: 28:78:88:51:4d:12:b5:95:ba:70:c7:05:6a:2e:bc:f3:45:31: 27:33:4f:3e:f5:1d:07:9a:87:f4:91:5c:1b:7a:e9:0b:32:b2: f0:20:3e:73:59:f3:c7:eb:30:7a:47:44:2e:af:9b:ec:56:72: a5:4b:f8:1b:2b:39:ae:9d:b1:39:89:f9:c2:c6:1a:79:1c:e2: 69:cf:f2:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jv/rV5F2fvkX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk MDQxN2FlMzktMjdiZC00OTU0LWIyZDEtNWJhZTFiNDg0MDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/kwqc28Jbv7iA7oY937jdo6Bqr2VZJwjfHp Q+bEVENgMiFmnT+EXAYQMMvas2Y9mtIOu7TQ0EGRtTCCO/G7+Mo5uo8iZhBVCJYz J5yqsDYJZvbDAJWF6s/ZavKEESfopLPTFxfNurwiaPSSnUqNNlr/npm/AVU7y1BG L5S4isSpI+1wEbM7jCDY/+aKt1pNXJnUG5EVS7CTHQ8AF06lv9IYmA6e8LkLjBK+ Arv5mz43RPHAgwQZS/A151IGlLvp+ALVFhXzSJcOR3WWmlG+JlItxxyRpa7RodaF 8ZJ4gAEBg1ckIqWFZLN8dPmB0bHChAyJnz/mXtHPxwVwJcVeHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJd0DkkYum3XbS8ORQrAcTETqDezMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGZmZjBiZTgtMTVlMy0z MWIzLThkZmMtZGI1ZTU4NzA3ZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6DfXQoEiZ8NteMiBCprXjY7jblFtcH9TEarHI9IO3aMLQL5uSYrDZk sXtzyeYOe+jNJCPPMhk5IrmY/jj2KBU/9VNzYeiIgpB97+eXR4mfs2XWqODtVKQx kZNtCmV5CDE6D9OZIDwfS+r/fyCaOc+OrhOzoWjTdw8YkmYPxm1iuOGKDROaY7Zp l+M+RK4KWHTz6wQZGsSTDz3j339wR0Tn8fz4ugalKvp7OXhceuGVjU/hCCh4iFFN ErWVunDHBWouvPNFMSczTz71HQeah/SRXBt66QsysvAgPnNZ88frMHpHRC6vm+xW cqVL+BsrOa6dsTmJ+cLGGnkc4mnP8nY= -----END CERTIFICATE-----Generated at Thu Mar 26 11:18:21 2026 by rpki-client