$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77ce4854-9903-3349-acd2-9089161d4f56.roa File: 77ce4854-9903-3349-acd2-9089161d4f56.roa (raw, json) Hash identifier: 2Q1IX4/oR2IDUKd8Ff5TxR9zfjvh66PaDhGEGNpOjv0= Subject key identifier: 2F:A9:C8:F0:01:04:2E:9B:BC:CA:2A:AD:D6:A0:F4:30:F7:AF:BD:26 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA3D668B59D65E37A7E200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77ce4854-9903-3349-acd2-9089161d4f56.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 396574 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:3d:66:8b:59:d6:5e:37:a7:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=68f1d375-3e01-4e7c-9610-6b2008da6397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:98:56:a2:ce:d0:f7:cc:34:55:1f:8a:d5:8b: 44:21:ab:d9:21:c9:3f:ae:aa:57:54:f7:eb:b5:5a: 07:7a:e6:cf:15:1c:55:8e:40:e2:93:30:a5:77:ef: 21:c1:9c:d6:0b:68:79:f3:5d:ff:c1:2c:46:d1:c8: ce:11:6e:ed:42:f6:21:83:eb:1b:e2:cb:9f:c1:cf: 83:ea:97:18:96:01:84:ab:19:d2:5b:87:c2:98:2a: 8c:4b:73:84:84:97:4d:2e:ed:56:d9:08:b5:dd:70: 75:2e:36:e6:fe:d1:80:ff:4f:7c:f8:0e:fc:f5:03: b8:fd:1b:78:57:ee:68:4b:86:7c:d3:09:51:21:21: 7b:de:a6:ec:96:d6:b8:55:5d:3a:65:9d:d6:a6:5a: 38:08:99:fb:e8:55:a9:da:0d:0e:29:85:6f:84:a3: 15:de:4b:4c:aa:18:e3:61:a8:4a:85:7e:74:0f:90: 57:6d:78:79:84:5e:9e:2b:a6:3d:98:95:40:96:c1: 48:48:f4:a9:62:da:53:ba:a5:c6:75:e1:f3:f5:1a: 1c:73:32:8f:e8:89:49:d9:12:0b:22:80:44:72:ba: 75:65:c7:61:f6:13:7d:c2:72:57:fd:96:77:5c:7b: 85:55:b6:3e:2e:f6:3a:8b:e6:50:e5:56:7e:dc:3b: e8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A9:C8:F0:01:04:2E:9B:BC:CA:2A:AD:D6:A0:F4:30:F7:AF:BD:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/77ce4854-9903-3349-acd2-9089161d4f56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:8c:72:ab:7a:88:7f:b9:61:a1:06:4e:90:7d:a3:17:fb:7c: 26:01:cf:28:72:b4:82:5c:dc:cb:86:66:da:a2:55:09:6e:df: f5:64:4d:73:62:ef:f4:49:79:82:2c:bb:ff:55:f0:24:01:30: 4d:d7:ab:3d:aa:85:8d:5d:6f:4a:e8:13:52:47:23:6e:eb:f5: ea:10:69:86:4f:3f:36:c4:e6:29:03:90:d9:5b:e8:4a:41:80: 1f:4c:a3:63:14:57:8f:7b:88:2c:2c:71:6b:f5:50:0b:35:ff: 71:3b:24:58:27:ac:53:f0:86:a9:5c:d4:7d:fa:e3:87:bf:1d: 28:7a:fe:f6:5b:40:19:f3:97:53:c7:d3:c4:07:80:fd:d5:5d: de:02:8b:bf:7a:69:58:96:c1:84:8c:eb:95:68:e0:77:c7:4a: d8:35:11:0a:3c:00:5b:e1:0e:74:8a:02:43:50:8a:17:fb:46: b7:01:15:35:54:c0:4b:33:20:82:1f:2e:4b:e6:b1:e2:6b:05: 3d:96:32:b0:5b:43:4b:d9:23:a5:43:2a:45:4d:67:9c:ee:ec: 6b:f0:f1:20:3a:a7:bc:56:52:db:f4:4b:7e:ae:ee:b9:77:fa: 25:f5:ea:1b:18:48:5a:95:f0:27:43:e8:6e:9a:a8:5f:c0:95: 92:f2:5f:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2j1mi1nWXjen4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk NjhmMWQzNzUtM2UwMS00ZTdjLTk2MTAtNmIyMDA4ZGE2Mzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJhWos7Q98w0VR+K1YtEIavZIck/rqpXVPfr tVoHeubPFRxVjkDikzCld+8hwZzWC2h5813/wSxG0cjOEW7tQvYhg+sb4sufwc+D 6pcYlgGEqxnSW4fCmCqMS3OEhJdNLu1W2Qi13XB1Ljbm/tGA/098+A789QO4/Rt4 V+5oS4Z80wlRISF73qbslta4VV06ZZ3Wplo4CJn76FWp2g0OKYVvhKMV3ktMqhjj YahKhX50D5BXbXh5hF6eK6Y9mJVAlsFISPSpYtpTuqXGdeHz9RocczKP6IlJ2RIL IoBEcrp1Zcdh9hN9wnJX/ZZ3XHuFVbY+LvY6i+ZQ5VZ+3DvoHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+pyPABBC6bvMoqrdag9DD3r70mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzdjZTQ4NTQtOTkwMy0z MzQ5LWFjZDItOTA4OTE2MWQ0ZjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeMcqt6iH+5YaEGTpB9oxf7fCYBzyhytIJc3MuGZtqiVQlu3/VkTXNi 7/RJeYIsu/9V8CQBME3Xqz2qhY1db0roE1JHI27r9eoQaYZPPzbE5ikDkNlb6EpB gB9Mo2MUV497iCwscWv1UAs1/3E7JFgnrFPwhqlc1H3644e/HSh6/vZbQBnzl1PH 08QHgP3VXd4Ci796aViWwYSM65Vo4HfHStg1EQo8AFvhDnSKAkNQihf7RrcBFTVU wEszIIIfLkvmseJrBT2WMrBbQ0vZI6VDKkVNZ5zu7Gvw8SA6p7xWUtv0S36u7rl3 +iX16hsYSFqV8CdD6G6aqF/AlZLyX/A= -----END CERTIFICATE-----Generated at Thu Mar 26 20:07:56 2026 by rpki-client