$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d5ddc03-66c3-3afb-91bd-d4d3b11b0f78.roa File: 8d5ddc03-66c3-3afb-91bd-d4d3b11b0f78.roa (raw, json) Hash identifier: +LoW3blAODyii4mQzJ6bUZhUSviqT7MlqYKPanUzK38= Subject key identifier: 3A:0C:A6:BC:5D:C6:34:C7:78:6D:9F:F2:CA:50:B7:47:C1:0F:67:BD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA07BB8B2CCADB4142F100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d5ddc03-66c3-3afb-91bd-d4d3b11b0f78.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 396585 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:07:bb:8b:2c:ca:db:41:42:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=941049f5-9d49-474c-9a55-480f5658658b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:cf:04:ae:d1:d0:17:4f:c0:de:20:ff:99:64: da:e7:7b:ab:5a:ca:eb:87:2d:35:fc:75:26:d4:a7: 1f:25:e3:07:3c:fa:12:a3:ad:91:6b:5b:ba:70:09: 86:a6:b5:7b:1d:90:9a:15:07:02:51:0e:38:93:03: 83:71:9e:0b:ee:5e:39:6e:eb:ac:cc:15:28:35:bf: e6:ea:2e:a8:ee:19:6d:e2:ea:ea:6a:63:ab:e3:0d: 9e:74:2d:18:e6:1f:bb:8e:50:e4:b2:8a:f4:00:af: 11:db:af:39:df:8e:7d:04:42:fd:83:ee:6d:3e:b1: a4:2a:df:35:09:c1:47:a7:20:ca:91:bf:b4:02:3d: 26:9b:17:0f:b5:1c:23:e4:c1:24:52:96:b9:c7:d4: 64:55:2e:10:e3:c1:07:60:57:07:2f:9a:a8:18:93: fc:08:ea:ee:33:0e:14:45:cf:87:b9:d4:27:66:69: 27:11:4e:89:15:ed:52:25:68:b8:d1:ff:ce:c7:53: e1:67:3b:e3:19:3c:3b:51:4e:17:4a:b0:d1:ee:7d: 3e:c9:eb:01:58:be:51:6d:e7:40:29:2a:59:26:ad: 1d:c6:72:4e:59:63:69:54:92:d7:d9:3a:89:5d:28: c8:18:ad:d5:39:61:57:15:65:ba:6e:f5:c1:6b:46: a4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0C:A6:BC:5D:C6:34:C7:78:6D:9F:F2:CA:50:B7:47:C1:0F:67:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d5ddc03-66c3-3afb-91bd-d4d3b11b0f78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:f3:e6:52:4b:e4:b1:0b:38:cf:d9:04:8d:51:5c:eb:97:47: 50:66:b7:36:78:34:11:22:7b:14:4f:8c:1f:a5:11:83:b5:8c: cc:6f:ba:ec:d9:e2:f8:cc:52:0b:5a:8e:e5:5e:43:1b:fe:44: c0:cf:5e:42:92:bc:dd:15:60:82:11:64:b6:8f:31:88:31:2c: ec:9a:e1:3e:a8:9d:d2:68:87:de:fc:3a:86:bb:2e:c2:16:65: 1e:0d:91:38:7f:65:01:41:6c:f1:1a:a3:c6:82:99:f3:82:c2: 30:f3:f9:a4:e5:b9:21:76:91:85:97:81:79:c8:3e:6e:64:82: e3:25:ea:fc:b3:94:43:96:73:76:45:ff:25:94:ad:20:cb:b2: 18:13:8d:3d:ad:ec:79:f2:fa:6d:d4:c2:73:be:28:c1:cb:91: e1:f4:c2:9e:5f:06:d2:58:69:6e:16:17:46:b5:7f:bd:26:04: 9a:ba:85:62:6f:17:55:be:f2:45:fd:dd:1c:76:6f:87:9a:f4: 35:fa:68:ab:5e:fc:29:cb:82:e6:95:f4:1e:a9:a9:36:99:7b: 72:88:ff:8a:d6:ec:6c:2c:92:29:ba:de:93:a6:4f:f8:4f:0b: 49:97:89:c4:83:e4:e3:23:ea:cd:37:41:ca:c7:c8:e9:bd:0f: 6e:be:5e:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2ge7iyzK20FC8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk OTQxMDQ5ZjUtOWQ0OS00NzRjLTlhNTUtNDgwZjU2NTg2NThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA688ErtHQF0/A3iD/mWTa53urWsrrhy01/HUm 1KcfJeMHPPoSo62Ra1u6cAmGprV7HZCaFQcCUQ44kwODcZ4L7l45buuszBUoNb/m 6i6o7hlt4urqamOr4w2edC0Y5h+7jlDksor0AK8R26853459BEL9g+5tPrGkKt81 CcFHpyDKkb+0Aj0mmxcPtRwj5MEkUpa5x9RkVS4Q48EHYFcHL5qoGJP8COruMw4U Rc+HudQnZmknEU6JFe1SJWi40f/Ox1PhZzvjGTw7UU4XSrDR7n0+yesBWL5RbedA KSpZJq0dxnJOWWNpVJLX2TqJXSjIGK3VOWFXFWW6bvXBa0akLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoMprxdxjTHeG2f8spQt0fBD2e9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGQ1ZGRjMDMtNjZjMy0z YWZiLTkxYmQtZDRkM2IxMWIwZjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrz5lJL5LELOM/ZBI1RXOuXR1BmtzZ4NBEiexRPjB+lEYO1jMxvuuzZ 4vjMUgtajuVeQxv+RMDPXkKSvN0VYIIRZLaPMYgxLOya4T6ondJoh978Ooa7LsIW ZR4NkTh/ZQFBbPEao8aCmfOCwjDz+aTluSF2kYWXgXnIPm5kguMl6vyzlEOWc3ZF /yWUrSDLshgTjT2t7Hny+m3UwnO+KMHLkeH0wp5fBtJYaW4WF0a1f70mBJq6hWJv F1W+8kX93Rx2b4ea9DX6aKte/CnLguaV9B6pqTaZe3KI/4rW7Gwskim63pOmT/hP C0mXicSD5OMj6s03QcrHyOm9D26+XoQ= -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:50 2026 by rpki-client