$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/83cfed4d-8de9-35f2-81c3-7acee3be45a5.roa File: 83cfed4d-8de9-35f2-81c3-7acee3be45a5.roa (raw, json) Hash identifier: Q6hHXTnxEIRrzleYH08Yp4A4N0kg4O3z6KLrRwhlx7I= Subject key identifier: DD:73:62:07:25:44:5C:30:52:C8:12:B3:71:D5:C2:3E:41:87:8B:FE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA1586BE2AEAD44A978036 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/83cfed4d-8de9-35f2-81c3-7acee3be45a5.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 20172 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:15:86:be:2a:ea:d4:4a:97:80:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=74d2a7bc-8f1c-4cad-9fa7-254b35d47638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:73:79:23:80:fa:4e:6e:ed:67:06:14:34:6d: 8c:fa:98:48:ff:b6:0c:b4:f5:ed:e8:ea:5a:b1:85: 1f:3f:f2:41:81:e1:47:0b:ec:5a:b7:ad:2f:de:e7: 66:80:5b:2b:84:ec:dc:ea:a0:7d:c9:be:37:a3:0a: c6:79:bd:3b:85:96:7f:2d:4f:4f:99:85:e1:af:15: 06:3e:26:6a:0d:7a:17:b8:78:af:63:ba:cf:66:37: 3f:a2:5e:4d:8b:4d:9a:e5:48:e3:2b:e8:5d:93:4e: 9f:6d:04:f0:b9:1c:1b:40:52:d8:ee:ed:77:08:92: 9c:4c:5e:9d:0c:75:a1:be:ad:f9:6f:e3:37:99:c0: 61:3b:1a:cf:01:53:be:ac:ee:a3:10:50:51:de:e7: e7:52:48:aa:5e:25:7d:df:c8:71:9c:8b:d7:43:44: f5:d8:35:9a:d7:a3:4e:41:44:3a:ef:49:66:2e:5f: 36:2d:85:89:7b:a9:48:4f:74:2b:7a:c4:5f:db:db: 76:59:b6:50:a2:dd:34:be:a8:90:89:5e:74:58:93: 53:0e:1e:a8:e2:d6:17:16:c1:5a:99:35:f2:93:3e: 26:7c:1d:7b:f1:54:7e:b3:54:ee:82:88:46:e7:72: 35:cd:4c:53:73:b0:e8:d7:63:bd:5f:b8:26:8a:2e: 90:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:73:62:07:25:44:5C:30:52:C8:12:B3:71:D5:C2:3E:41:87:8B:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/83cfed4d-8de9-35f2-81c3-7acee3be45a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:70:e9:4f:87:d2:ca:11:e4:42:0d:ba:05:84:67:0b:65:d9: 90:fb:28:f0:d1:53:23:19:65:77:d5:e5:6c:9b:4c:ef:3a:8c: ab:69:8c:c4:d1:06:0a:d9:d4:8e:72:1e:4e:90:7c:21:ed:1c: 9c:a6:b4:64:c3:68:e8:ea:e2:23:ff:dd:d6:77:ad:98:26:da: 47:7b:d4:2b:d1:01:2b:8d:91:3d:82:8e:d1:5f:35:e1:10:26: b2:fa:fd:e7:f4:df:86:cc:aa:bc:78:df:f6:a2:16:7e:dd:74: 1a:06:15:18:a1:ee:83:3c:df:c9:57:69:0c:77:ca:d1:07:64: d3:ba:1b:93:0f:98:fa:fc:b0:bc:fe:82:6e:e2:0e:4e:4a:40: 02:55:19:41:0e:1b:02:e7:35:18:61:2b:34:49:29:e1:33:c9: 52:2a:a9:dc:a0:cd:69:66:68:42:bf:20:c3:cc:ed:f4:eb:2d: 56:d1:fb:5c:f8:b7:0c:d7:ad:4d:f7:13:83:c2:9d:e3:3c:34: f9:12:01:44:5b:40:7a:59:3c:9e:cc:7b:88:c3:ae:7a:5a:05: 24:be:5a:21:3f:61:de:9c:1d:52:90:f5:b0:b7:92:ab:e0:a0: c7:74:e9:ba:ba:65:0b:b4:70:74:e9:fc:50:e5:48:d0:83:d4: 8d:94:f7:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hWGvirq1EqXgDYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk NzRkMmE3YmMtOGYxYy00Y2FkLTlmYTctMjU0YjM1ZDQ3NjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXN5I4D6Tm7tZwYUNG2M+phI/7YMtPXt6Opa sYUfP/JBgeFHC+xat60v3udmgFsrhOzc6qB9yb43owrGeb07hZZ/LU9PmYXhrxUG PiZqDXoXuHivY7rPZjc/ol5Ni02a5UjjK+hdk06fbQTwuRwbQFLY7u13CJKcTF6d DHWhvq35b+M3mcBhOxrPAVO+rO6jEFBR3ufnUkiqXiV938hxnIvXQ0T12DWa16NO QUQ670lmLl82LYWJe6lIT3QresRf29t2WbZQot00vqiQiV50WJNTDh6o4tYXFsFa mTXykz4mfB178VR+s1TugohG53I1zUxTc7Do12O9X7gmii6QcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1zYgclRFwwUsgSs3HVwj5Bh4v+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODNjZmVkNGQtOGRlOS0z NWYyLTgxYzMtN2FjZWUzYmU0NWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJw6U+H0soR5EINugWEZwtl2ZD7KPDRUyMZZXfV5WybTO86jKtpjMTR BgrZ1I5yHk6QfCHtHJymtGTDaOjq4iP/3dZ3rZgm2kd71CvRASuNkT2CjtFfNeEQ JrL6/ef034bMqrx43/aiFn7ddBoGFRih7oM838lXaQx3ytEHZNO6G5MPmPr8sLz+ gm7iDk5KQAJVGUEOGwLnNRhhKzRJKeEzyVIqqdygzWlmaEK/IMPM7fTrLVbR+1z4 twzXrU33E4PCneM8NPkSAURbQHpZPJ7Me4jDrnpaBSS+WiE/Yd6cHVKQ9bC3kqvg oMd06bq6ZQu0cHTp/FDlSNCD1I2U9wQ= -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:45 2026 by rpki-client