$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856f5693-c4d3-32ad-a9ff-f8a0f092265c.roa File: 856f5693-c4d3-32ad-a9ff-f8a0f092265c.roa (raw, json) Hash identifier: 5MOhEYJlQ/2zm95xHEDwRNR1FMVN/udODg4Oohp9z50= Subject key identifier: B5:B3:7F:81:D6:10:1D:E8:C2:59:E7:8B:61:82:93:65:32:D1:B5:FC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA360F9F2804C41BCC7200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856f5693-c4d3-32ad-a9ff-f8a0f092265c.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 397195 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:36:0f:9f:28:04:c4:1b:cc:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=d4115a94-b5d9-49ac-a55c-480cc42165a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:16:6d:56:65:82:70:f5:e2:ef:33:03:64:9c: bb:e7:70:92:15:93:2f:82:1e:5c:5a:5b:80:33:6f: ad:f9:cb:24:f0:2b:67:17:d7:b1:3d:34:65:a9:6c: f3:3c:c1:7d:9f:84:47:a0:17:1f:7a:3e:09:7c:b4: f5:18:bc:53:d5:04:2f:bb:d2:90:6c:98:95:9d:ba: e6:22:57:75:f9:59:83:df:0d:ae:30:f5:b5:60:6b: 72:e8:96:26:0e:07:0f:94:8e:0e:dd:76:5e:9f:f1: 1f:27:bc:9b:94:50:09:ed:15:be:1a:6c:8a:6a:18: 2b:3e:28:5c:fd:b4:64:56:5d:22:c4:1b:d5:0a:a3: b8:7f:e2:f9:5d:9e:26:20:1d:39:7f:72:e6:bb:29: 78:14:6b:e4:7b:37:b1:15:53:66:79:5f:e4:54:8b: c3:05:be:c5:5e:63:5a:b5:4b:f9:82:bd:f1:25:86: 96:f9:a2:48:c4:d8:e7:ec:66:cf:09:60:0b:3c:54: 19:44:56:3f:c3:df:e5:22:62:17:99:e9:3b:96:23: df:60:68:6d:4d:e6:f9:b6:da:a5:7c:7e:e8:dd:a1: 20:b5:df:a0:7d:3f:26:81:2c:2c:cb:36:39:6d:e7: d2:61:89:1c:2e:82:33:a2:44:b3:15:72:61:cc:75: 91:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B3:7F:81:D6:10:1D:E8:C2:59:E7:8B:61:82:93:65:32:D1:B5:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856f5693-c4d3-32ad-a9ff-f8a0f092265c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:bd:15:e8:aa:e5:ad:e7:ca:a8:35:25:d9:19:cb:f1:98:9b: 92:3f:f7:54:79:ab:40:61:82:85:d6:56:55:32:f7:20:0c:74: f2:db:f8:85:51:c3:f8:25:63:61:04:58:c9:eb:0e:7c:3d:4c: ac:e2:0f:8c:ad:57:78:11:ba:ed:b7:5d:db:3e:19:48:9a:3d: d4:a1:d4:2b:80:70:cf:93:84:56:7f:9c:cb:b9:08:53:cd:a0: 84:92:f8:cf:dd:11:be:72:26:ff:e9:96:dd:d4:b5:d9:39:7e: 46:92:67:bf:8a:b1:dc:11:eb:a7:e2:06:2e:45:e3:b7:15:02: 1a:f5:37:85:63:a6:a3:22:ee:6f:1f:2e:75:a6:4d:0f:ee:c7: f0:be:8e:04:9c:58:5c:f5:db:34:1a:00:b4:3b:7c:09:8c:24: f8:24:f1:c4:00:5c:d1:8c:34:04:24:60:60:a2:82:42:0e:d9: cb:56:d9:92:8a:85:28:24:c2:9d:23:c8:8a:9b:f4:bc:e6:98: a5:42:64:2a:df:2f:3d:92:1e:c0:de:af:1f:82:18:b0:92:84: c1:02:a0:5d:fc:ee:a7:f4:57:56:91:d2:87:f3:45:92:dd:3f: 60:40:ef:f4:bb:15:d3:f9:19:d9:a0:2c:35:54:d4:2c:69:f7: 5b:f5:e7:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jYPnygExBvMcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZDQxMTVhOTQtYjVkOS00OWFjLWE1NWMtNDgwY2M0MjE2NWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhZtVmWCcPXi7zMDZJy753CSFZMvgh5cWluA M2+t+csk8CtnF9exPTRlqWzzPMF9n4RHoBcfej4JfLT1GLxT1QQvu9KQbJiVnbrm Ild1+VmD3w2uMPW1YGty6JYmDgcPlI4O3XZen/EfJ7yblFAJ7RW+GmyKahgrPihc /bRkVl0ixBvVCqO4f+L5XZ4mIB05f3Lmuyl4FGvkezexFVNmeV/kVIvDBb7FXmNa tUv5gr3xJYaW+aJIxNjn7GbPCWALPFQZRFY/w9/lImIXmek7liPfYGhtTeb5ttql fH7o3aEgtd+gfT8mgSwsyzY5befSYYkcLoIzokSzFXJhzHWRGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWzf4HWEB3owlnni2GCk2Uy0bX8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODU2ZjU2OTMtYzRkMy0z MmFkLWE5ZmYtZjhhMGYwOTIyNjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEq9Feiq5a3nyqg1JdkZy/GYm5I/91R5q0BhgoXWVlUy9yAMdPLb+IVR w/glY2EEWMnrDnw9TKziD4ytV3gRuu23Xds+GUiaPdSh1CuAcM+ThFZ/nMu5CFPN oISS+M/dEb5yJv/plt3Utdk5fkaSZ7+KsdwR66fiBi5F47cVAhr1N4VjpqMi7m8f LnWmTQ/ux/C+jgScWFz12zQaALQ7fAmMJPgk8cQAXNGMNAQkYGCigkIO2ctW2ZKK hSgkwp0jyIqb9LzmmKVCZCrfLz2SHsDerx+CGLCShMECoF387qf0V1aR0ofzRZLd P2BA7/S7FdP5GdmgLDVU1Cxp91v15/4= -----END CERTIFICATE-----Generated at Thu Mar 26 11:39:23 2026 by rpki-client