$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6264ff68-36a8-30cc-b16d-61da0ff55c7f.roa File: 6264ff68-36a8-30cc-b16d-61da0ff55c7f.roa (raw, json) Hash identifier: y2c4qlkdyOiVcgLpLnzInwU3+zY8fQDHts2089c5GSw= Subject key identifier: 70:EC:2D:75:F3:85:47:84:09:9E:D6:D2:DA:51:3C:06:DB:46:D5:AF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA38FA9F03631724633DC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6264ff68-36a8-30cc-b16d-61da0ff55c7f.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 396595 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:38:fa:9f:03:63:17:24:63:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=c0bb1922-73fb-422e-804e-b011ed11ad92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:68:bb:cf:f8:b0:ad:0d:66:c6:5b:9b:cc:39: 4e:4e:1c:8e:0d:96:7c:5a:c5:72:cd:c7:25:9d:21: 94:39:4f:f1:4c:1a:2d:25:60:e9:5b:c7:82:a4:be: 18:c8:b4:6f:2f:06:d9:6b:b1:9e:0c:8f:c9:c7:79: c2:83:f5:0c:a0:73:21:2d:2b:d3:79:36:5e:07:2f: bc:50:50:c0:e0:44:db:76:82:a1:a0:16:33:53:58: 10:d9:ec:62:54:48:f9:5c:3e:c2:d0:f7:52:bb:e1: ea:e4:b4:c9:2f:4b:88:ef:51:c3:02:28:9f:03:c9: aa:86:85:3d:d4:29:dc:3f:cf:51:e8:59:c4:b6:7b: e1:98:eb:b8:0b:fc:b2:56:8b:4d:97:0d:72:3d:b5: 1a:a6:dd:ff:f5:e2:b0:2e:a3:ac:f2:29:b2:50:c3: 37:e4:c9:07:1f:29:60:33:8e:e9:c3:0e:d8:56:01: b7:fe:b5:7c:61:c6:f0:15:ba:36:ed:1b:82:2e:ac: 44:2e:c7:cf:84:e9:2e:db:98:40:13:b6:03:aa:f5: aa:6d:82:ad:7a:3f:e7:48:12:b7:ac:fa:3f:2d:88: 3d:a0:59:9d:dc:ee:ce:87:9c:e6:f8:7a:6e:22:71: da:80:e0:3d:d7:9a:9b:04:ac:28:29:97:5b:1a:01: 09:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:EC:2D:75:F3:85:47:84:09:9E:D6:D2:DA:51:3C:06:DB:46:D5:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6264ff68-36a8-30cc-b16d-61da0ff55c7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:48:2b:6d:33:e7:51:b0:5d:c7:fe:e6:e3:7d:38:4c:74:62: a7:7c:6b:22:15:27:fc:30:6d:b3:42:c7:9b:3b:21:89:10:fb: 2d:ba:10:cc:38:6e:55:0a:0b:f0:81:56:31:be:32:4d:f3:b4: 38:29:93:f5:2e:64:5e:70:9b:6c:25:e6:28:78:93:09:41:44: 75:ff:5b:44:ae:82:a7:0e:70:e1:02:b7:0a:06:56:35:31:cf: 03:57:5d:d5:2c:fb:3a:8b:64:4e:83:92:66:24:e7:94:cb:a8: 0f:d2:1b:57:ce:11:fb:65:f3:85:23:f7:27:db:c8:71:ef:51: 2a:a6:bc:17:e9:5a:2b:a6:56:55:5f:4a:7c:20:da:0c:b6:fa: 11:07:29:88:de:cd:38:cc:38:18:1b:ae:7e:08:a2:cd:da:b2: 45:36:1b:62:ce:18:fa:57:d7:18:c5:de:82:0b:65:10:41:2b: 0f:a4:00:a9:9b:37:7a:6a:01:14:8e:df:25:80:81:bb:af:e4: ec:22:1d:da:f4:08:d9:ac:8f:5a:7c:5c:e1:aa:78:2f:ba:49: c4:aa:4e:4d:44:79:03:a1:97:4b:b7:54:d9:43:96:fc:74:e3: 27:67:15:a6:31:58:47:af:fd:c9:f0:78:94:75:4d:63:e9:27: 98:fd:03:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jj6nwNjFyRjPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk YzBiYjE5MjItNzNmYi00MjJlLTgwNGUtYjAxMWVkMTFhZDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWi7z/iwrQ1mxlubzDlOThyODZZ8WsVyzccl nSGUOU/xTBotJWDpW8eCpL4YyLRvLwbZa7GeDI/Jx3nCg/UMoHMhLSvTeTZeBy+8 UFDA4ETbdoKhoBYzU1gQ2exiVEj5XD7C0PdSu+Hq5LTJL0uI71HDAiifA8mqhoU9 1CncP89R6FnEtnvhmOu4C/yyVotNlw1yPbUapt3/9eKwLqOs8imyUMM35MkHHylg M47pww7YVgG3/rV8YcbwFbo27RuCLqxELsfPhOku25hAE7YDqvWqbYKtej/nSBK3 rPo/LYg9oFmd3O7Oh5zm+HpuInHagOA915qbBKwoKZdbGgEJ8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDsLXXzhUeECZ7W0tpRPAbbRtWvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjI2NGZmNjgtMzZhOC0z MGNjLWIxNmQtNjFkYTBmZjU1YzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFIK20z51GwXcf+5uN9OEx0Yqd8ayIVJ/wwbbNCx5s7IYkQ+y26EMw4 blUKC/CBVjG+Mk3ztDgpk/UuZF5wm2wl5ih4kwlBRHX/W0SugqcOcOECtwoGVjUx zwNXXdUs+zqLZE6DkmYk55TLqA/SG1fOEftl84Uj9yfbyHHvUSqmvBfpWiumVlVf Snwg2gy2+hEHKYjezTjMOBgbrn4Ios3askU2G2LOGPpX1xjF3oILZRBBKw+kAKmb N3pqARSO3yWAgbuv5OwiHdr0CNmsj1p8XOGqeC+6ScSqTk1EeQOhl0u3VNlDlvx0 4ydnFaYxWEev/cnweJR1TWPpJ5j9A5M= -----END CERTIFICATE-----Generated at Thu Mar 26 11:33:39 2026 by rpki-client