$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68a20c58-9a80-3699-b583-558702d23887.roa File: 68a20c58-9a80-3699-b583-558702d23887.roa (raw, json) Hash identifier: Q0sRkB2Oju5AxH0oa8MwYXED1l540wW2KyGWJuwK8P8= Subject key identifier: B3:40:FF:C1:A3:8B:7E:0D:B3:25:A5:CA:D7:45:D1:AA:E2:B9:5C:AC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA12D051E8C072B3154140 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68a20c58-9a80-3699-b583-558702d23887.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 20431 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:12:d0:51:e8:c0:72:b3:15:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=51393c22-12b9-44a7-80b2-6f53e5a41c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c4:20:69:fc:f4:7b:b3:1b:68:f5:e6:69:60: 19:12:4c:f0:79:78:ba:db:78:a1:bf:57:f2:ca:c4: e9:84:d9:bd:ca:d4:48:ad:5c:9c:2b:55:65:b9:fd: 69:e3:82:f4:58:89:77:74:59:b7:05:35:55:71:d0: e4:f9:a3:b8:ae:fb:d4:3b:09:f1:14:69:19:7d:1a: 49:ec:e6:ee:2b:62:73:71:b2:b2:ed:a2:f7:e7:49: d6:e9:fb:f0:b0:15:92:e0:53:7a:f0:fe:89:d9:b7: bd:31:8f:bf:24:fa:bd:b7:05:12:ba:94:ea:39:f4: 25:32:9c:55:72:41:f3:1e:55:43:c4:63:93:c0:96: ab:13:c3:7b:4e:8f:3e:76:a6:9a:7c:35:ca:23:3c: a4:9b:9b:00:d9:27:8c:95:e5:40:ce:03:a1:52:e3: 2f:57:a0:49:0a:f3:04:c5:a0:e1:ba:67:c4:73:92: ea:52:c7:43:76:d5:2f:86:0d:7b:cb:bf:0a:2b:41: 36:58:7f:a5:69:b1:49:94:32:23:50:68:b7:4c:89: d7:cc:7d:fb:a3:e6:21:86:22:8b:30:91:30:05:c3: 8d:7d:98:94:29:cc:40:b4:59:2a:14:5c:e3:fb:fd: b3:3c:97:f4:f3:a7:3e:3e:6b:a6:fd:f4:41:00:56: 8a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:40:FF:C1:A3:8B:7E:0D:B3:25:A5:CA:D7:45:D1:AA:E2:B9:5C:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68a20c58-9a80-3699-b583-558702d23887.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f2:fa:78:3d:3c:07:db:3d:e4:ae:cc:fa:e6:b6:f3:8f:8e: 75:98:f4:f6:7b:f4:37:a8:1b:d3:9d:74:90:9a:c0:ec:9d:c4: 77:4e:50:fb:c3:bc:4f:b4:f3:96:54:77:0b:26:e3:8f:07:b2: 95:83:4d:76:10:5d:6c:df:17:2e:10:ca:66:bd:08:78:69:f6: 60:3b:58:8f:59:a6:f4:3e:f3:a4:22:2e:8f:ed:91:10:8c:c8: 03:82:b0:95:6b:89:c7:82:11:93:68:8c:83:f0:76:c9:76:09: a2:42:fd:33:09:9b:cd:97:79:88:d2:0d:6c:cb:e5:c8:3f:fb: 3b:db:f0:fb:a7:fd:76:44:aa:87:e7:65:06:2a:0d:4d:04:de: c9:a2:66:8e:46:d5:2f:b7:32:cc:c3:19:ab:5e:85:3f:ba:47: b7:0a:2f:5a:75:9c:f1:79:80:2e:d0:b3:2b:73:1d:d2:10:f9: 6b:8a:7e:6d:d4:dc:91:a0:d2:8e:73:62:0b:bf:64:32:35:7f: b7:87:a0:f5:e6:01:0d:c6:b9:30:a4:e1:6b:df:17:24:ea:68: 63:a6:07:ff:c1:b7:2c:ac:52:e7:91:fb:ee:5d:e4:8f:62:69: 7b:0d:d8:df:92:58:d7:ea:9a:b3:2d:57:8a:8c:18:29:c4:a8: 53:47:16:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hLQUejAcrMVQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk NTEzOTNjMjItMTJiOS00NGE3LTgwYjItNmY1M2U1YTQxYzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncQgafz0e7MbaPXmaWAZEkzweXi623ihv1fy ysTphNm9ytRIrVycK1Vluf1p44L0WIl3dFm3BTVVcdDk+aO4rvvUOwnxFGkZfRpJ 7ObuK2JzcbKy7aL350nW6fvwsBWS4FN68P6J2be9MY+/JPq9twUSupTqOfQlMpxV ckHzHlVDxGOTwJarE8N7To8+dqaafDXKIzykm5sA2SeMleVAzgOhUuMvV6BJCvME xaDhumfEc5LqUsdDdtUvhg17y78KK0E2WH+labFJlDIjUGi3TInXzH37o+YhhiKL MJEwBcONfZiUKcxAtFkqFFzj+/2zPJf086c+Pmum/fRBAFaK8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNA/8Gji34NsyWlytdF0ariuVysMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjhhMjBjNTgtOWE4MC0z Njk5LWI1ODMtNTU4NzAyZDIzODg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDy+ng9PAfbPeSuzPrmtvOPjnWY9PZ79DeoG9OddJCawOydxHdOUPvD vE+085ZUdwsm448HspWDTXYQXWzfFy4Qyma9CHhp9mA7WI9ZpvQ+86QiLo/tkRCM yAOCsJVriceCEZNojIPwdsl2CaJC/TMJm82XeYjSDWzL5cg/+zvb8Pun/XZEqofn ZQYqDU0E3smiZo5G1S+3MszDGatehT+6R7cKL1p1nPF5gC7QsytzHdIQ+WuKfm3U 3JGg0o5zYgu/ZDI1f7eHoPXmAQ3GuTCk4WvfFyTqaGOmB//BtyysUueR++5d5I9i aXsN2N+SWNfqmrMtV4qMGCnEqFNHFnE= -----END CERTIFICATE-----Generated at Thu Mar 26 17:22:07 2026 by rpki-client