$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/62a8da01-aa05-39dc-b60f-99811a175a77.roa File: 62a8da01-aa05-39dc-b60f-99811a175a77.roa (raw, json) Hash identifier: y1waGALxNvCFVsdJL3vN5DnZcQSOikhLHLMbt2UWiNs= Subject key identifier: D4:D5:F5:7F:A5:57:27:1F:F8:B8:AF:75:99:6E:BF:D3:8C:12:C7:64 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA38CD155043B1EA3B1A40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/62a8da01-aa05-39dc-b60f-99811a175a77.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 397200 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:38:cd:15:50:43:b1:ea:3b:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=e90602df-bbfe-4243-8bb1-a5ea122f6cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f1:6a:16:e7:83:67:a3:89:74:37:a5:15:12: c0:70:57:92:4e:cc:b1:ff:21:d1:95:93:bd:b1:59: fb:7c:97:62:11:2a:37:0b:e4:1c:10:74:56:34:52: 7c:6b:96:fa:47:e4:0a:2f:b4:47:94:13:97:0c:dd: 25:4e:45:39:b4:93:f8:0c:b6:6e:c4:c1:97:6f:ab: 5c:6b:ef:1c:fa:86:88:fc:9e:fd:9c:45:ec:c4:c5: 4c:91:14:75:7a:31:9f:99:61:60:66:9e:e6:67:81: fa:01:35:77:69:eb:c7:26:ea:dc:03:01:42:47:82: 0b:41:a0:7f:5d:0f:d0:f8:e6:79:29:16:3f:35:fa: 67:45:24:4a:aa:60:a2:ff:42:91:ac:23:db:b4:20: 87:ce:e3:d6:14:d4:db:b9:e2:e8:1d:16:f2:9b:48: 50:dd:a9:45:74:3f:22:ae:05:e0:f0:cf:db:c3:3a: 6b:38:38:d1:3b:2a:02:31:64:bb:68:ad:c9:ee:fc: 4b:53:cd:00:5c:ad:26:28:2f:c9:10:f5:7e:8c:c0: 92:a5:0c:52:64:e7:fc:c2:2a:61:4c:fa:f4:19:2f: 32:84:9d:a8:71:03:8d:02:0f:7d:f7:d8:6c:b7:a3: 9d:d7:fa:8f:09:78:35:31:f9:11:27:47:2d:99:3a: 05:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D5:F5:7F:A5:57:27:1F:F8:B8:AF:75:99:6E:BF:D3:8C:12:C7:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/62a8da01-aa05-39dc-b60f-99811a175a77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:8b:d3:6b:28:e9:2e:92:2b:49:e3:93:fb:5a:ad:5f:c9:9e: 95:a0:d5:2f:e8:aa:b7:12:ea:f8:af:8f:3f:ee:1e:67:6c:17: 60:a7:3c:9b:16:2c:a3:b6:28:1d:2f:cb:f4:41:ac:05:b2:9b: 4c:8f:43:c9:a2:d5:82:7c:7f:bd:c5:a2:d3:1f:ba:81:59:48: fb:6e:70:57:b6:66:df:66:ac:2c:18:16:0c:8e:77:a0:87:1b: a9:62:e2:ca:38:bc:6b:b5:3a:c7:61:11:54:77:61:e8:45:31: 0b:75:5d:13:22:4b:3b:39:79:a0:8c:0c:be:ed:fd:bd:30:39: bb:44:b1:16:a0:07:04:4a:37:8b:9a:61:81:f8:7e:bc:85:26: 0e:28:5b:30:ad:7b:ad:79:8c:f9:1d:c3:4f:75:1e:e3:88:72: 12:5e:14:bc:f9:09:6a:4d:48:75:a0:cf:1c:36:4e:78:ba:21: 13:83:73:9e:39:19:e6:e8:f2:94:2d:d5:08:9f:51:02:fa:04: 24:fc:5a:0b:c2:bd:9e:dd:79:19:a4:0c:45:43:e8:17:da:ce: 72:7a:25:e3:73:5e:08:39:82:9e:74:6a:eb:a9:e9:2d:a2:eb: 82:a2:d5:07:1f:cb:20:6f:fb:e2:5a:2e:b4:c0:05:56:cd:58: 50:b2:bd:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jjNFVBDseo7GkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZTkwNjAyZGYtYmJmZS00MjQzLThiYjEtYTVlYTEyMmY2Y2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPFqFueDZ6OJdDelFRLAcFeSTsyx/yHRlZO9 sVn7fJdiESo3C+QcEHRWNFJ8a5b6R+QKL7RHlBOXDN0lTkU5tJP4DLZuxMGXb6tc a+8c+oaI/J79nEXsxMVMkRR1ejGfmWFgZp7mZ4H6ATV3aevHJurcAwFCR4ILQaB/ XQ/Q+OZ5KRY/NfpnRSRKqmCi/0KRrCPbtCCHzuPWFNTbueLoHRbym0hQ3alFdD8i rgXg8M/bwzprODjROyoCMWS7aK3J7vxLU80AXK0mKC/JEPV+jMCSpQxSZOf8wiph TPr0GS8yhJ2ocQONAg9999hst6Od1/qPCXg1MfkRJ0ctmToFMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTV9X+lVycf+LivdZluv9OMEsdkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjJhOGRhMDEtYWEwNS0z OWRjLWI2MGYtOTk4MTFhMTc1YTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImL02so6S6SK0njk/tarV/JnpWg1S/oqrcS6vivjz/uHmdsF2CnPJsW LKO2KB0vy/RBrAWym0yPQ8mi1YJ8f73FotMfuoFZSPtucFe2Zt9mrCwYFgyOd6CH G6li4so4vGu1OsdhEVR3YehFMQt1XRMiSzs5eaCMDL7t/b0wObtEsRagBwRKN4ua YYH4fryFJg4oWzCte615jPkdw091HuOIchJeFLz5CWpNSHWgzxw2Tni6IRODc545 Gebo8pQt1QifUQL6BCT8WgvCvZ7deRmkDEVD6BfaznJ6JeNzXgg5gp50auup6S2i 64Ki1QcfyyBv++JaLrTABVbNWFCyvQo= -----END CERTIFICATE-----Generated at Fri Mar 27 06:13:34 2026 by rpki-client