$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77a0bb0d-51fa-33e7-ba63-77fce3f350da.roa File: 77a0bb0d-51fa-33e7-ba63-77fce3f350da.roa (raw, json) Hash identifier: DvlaTSsEoFQsxvSXwOzi+snAMD6jm/huQaOQurpNxYA= Subject key identifier: 6D:FD:33:A3:78:60:02:47:BE:EB:63:A9:FB:9E:81:06:A7:6B:D7:56 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA1235DA7F0EE2AE529F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77a0bb0d-51fa-33e7-ba63-77fce3f350da.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 36630 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:12:35:da:7f:0e:e2:ae:52:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=a06c3aee-e995-4ed1-bf16-ef668247775e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:54:6c:78:e4:70:71:ae:08:58:2d:55:ff:5c: 8f:2e:4f:97:62:28:7c:51:31:02:5d:88:49:6b:48: be:93:fb:2a:88:0d:b6:49:bb:93:0b:98:a3:4e:ed: 85:e6:8c:31:cc:14:1b:46:0d:16:b5:bd:0b:19:67: e2:97:19:77:37:f0:32:30:d2:3a:ca:a6:f8:78:5e: 29:96:65:5f:ee:4b:83:28:b0:ee:ce:0d:cb:52:19: b0:31:48:8d:96:e8:dc:07:e8:60:01:52:3a:f5:67: 22:ce:1e:61:d0:b9:66:92:6e:86:42:ae:5a:97:cd: b5:e5:38:47:88:a5:81:6b:87:0c:3c:24:4c:63:6a: 13:75:1f:04:5c:3c:91:79:e8:16:b4:6e:a7:c0:0e: 86:c5:14:aa:5f:e3:21:e0:3d:b7:5b:72:1b:8c:65: 84:ab:94:70:ff:12:e3:28:86:6e:f0:88:39:27:14: e7:7c:fb:5a:00:af:13:91:c2:a4:13:1d:fd:29:11: 18:a9:19:99:64:1a:69:c2:90:58:82:2f:53:66:61: 1b:b9:4d:c4:0a:dd:b5:33:a6:48:98:50:7c:5b:a0: 70:de:82:fe:e3:3c:68:5c:dd:af:1c:50:93:be:5a: 4f:5d:88:e1:46:1e:88:61:e8:a5:58:c2:bb:f8:2d: 03:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:FD:33:A3:78:60:02:47:BE:EB:63:A9:FB:9E:81:06:A7:6B:D7:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77a0bb0d-51fa-33e7-ba63-77fce3f350da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:de:e2:72:b4:f9:b6:17:35:3f:a9:df:4c:a9:bc:bb:cb:c2: 5c:89:80:c5:81:18:6a:33:28:69:e3:0e:b3:39:ac:fa:e2:cf: 39:c3:a6:03:07:b0:57:af:83:51:96:7e:11:9b:34:c3:8e:53: 56:ce:c3:90:d4:f1:58:5d:27:7b:9f:0a:38:c1:4e:88:96:e0: aa:c4:87:eb:4e:55:69:1f:0b:3f:3e:2b:60:3b:77:04:f0:8d: 4e:eb:b7:5d:6c:3f:1e:dd:a6:f2:c0:68:fe:05:d6:e2:6d:11: 2a:90:0b:61:26:84:ae:ed:87:ab:f4:d2:35:8e:5d:56:59:5c: 58:d0:f3:ed:5d:05:6b:b3:90:69:bc:a7:1d:88:4c:ca:e1:a0: a1:5b:b7:da:13:13:22:aa:9f:96:e7:87:3d:8e:35:37:b0:5a: a2:b6:a7:cf:8d:26:c5:36:bb:a5:7b:11:9a:9c:6f:62:53:3e: ed:06:0e:08:4d:7a:19:24:99:2a:f3:3e:23:19:77:00:da:94: 93:9b:7e:af:70:c2:d1:e0:64:19:88:4d:ee:c1:3d:1a:38:b7: 1d:54:ff:78:a0:ef:55:76:a3:e2:a5:05:60:03:18:d8:09:32: 2b:45:c5:5c:9f:3e:9c:6f:8a:fc:82:ac:7d:4d:84:54:fa:0e: 94:e2:fc:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hI12n8O4q5Sn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk YTA2YzNhZWUtZTk5NS00ZWQxLWJmMTYtZWY2NjgyNDc3NzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVRseORwca4IWC1V/1yPLk+XYih8UTECXYhJ a0i+k/sqiA22SbuTC5ijTu2F5owxzBQbRg0Wtb0LGWfilxl3N/AyMNI6yqb4eF4p lmVf7kuDKLDuzg3LUhmwMUiNlujcB+hgAVI69Wcizh5h0Llmkm6GQq5al8215ThH iKWBa4cMPCRMY2oTdR8EXDyReegWtG6nwA6GxRSqX+Mh4D23W3IbjGWEq5Rw/xLj KIZu8Ig5JxTnfPtaAK8TkcKkEx39KREYqRmZZBppwpBYgi9TZmEbuU3ECt21M6ZI mFB8W6Bw3oL+4zxoXN2vHFCTvlpPXYjhRh6IYeilWMK7+C0DOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG39M6N4YAJHvutjqfuegQana9dWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzdhMGJiMGQtNTFmYS0z M2U3LWJhNjMtNzdmY2UzZjM1MGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDe4nK0+bYXNT+p30ypvLvLwlyJgMWBGGozKGnjDrM5rPrizznDpgMH sFevg1GWfhGbNMOOU1bOw5DU8VhdJ3ufCjjBToiW4KrEh+tOVWkfCz8+K2A7dwTw jU7rt11sPx7dpvLAaP4F1uJtESqQC2EmhK7th6v00jWOXVZZXFjQ8+1dBWuzkGm8 px2ITMrhoKFbt9oTEyKqn5bnhz2ONTewWqK2p8+NJsU2u6V7EZqcb2JTPu0GDghN ehkkmSrzPiMZdwDalJObfq9wwtHgZBmITe7BPRo4tx1U/3ig71V2o+KlBWADGNgJ MitFxVyfPpxvivyCrH1NhFT6DpTi/EE= -----END CERTIFICATE-----Generated at Thu Mar 26 12:41:50 2026 by rpki-client