$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e431389-36c2-35c4-a2ef-77849c8a28cd.roa File: 8e431389-36c2-35c4-a2ef-77849c8a28cd.roa (raw, json) Hash identifier: XqXolYcdOyA1Ey8PdczcsZVLLcicnCvVQjGZxjUo5Fg= Subject key identifier: C4:B5:2B:3E:EC:91:29:C8:DB:67:79:0F:02:A0:41:36:03:7A:D7:D1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA3B60CD746B5FE0E18190 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e431389-36c2-35c4-a2ef-77849c8a28cd.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 36632 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:3b:60:cd:74:6b:5f:e0:e1:81:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=0f84f2c9-ff17-471b-8448-e8a578e4f10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b2:17:a5:ad:a9:ae:89:b9:74:1d:fa:52:96: 7e:fc:90:8c:a4:db:2c:6f:78:f8:65:f6:d9:90:f6: 41:35:0b:0e:1d:f2:40:9f:cb:ad:3f:1f:9f:57:bc: 3a:03:8a:82:7c:fe:d7:45:80:3b:40:67:74:59:5b: fe:4f:c4:f8:23:33:33:4f:6b:d4:4b:f4:9e:7a:d2: f1:f8:e9:ee:df:9a:9c:2c:20:79:1e:8c:e9:3d:6c: 33:d2:5c:7b:69:b7:d4:64:e7:a4:c8:cf:d9:d3:d9: bf:cb:bd:7b:0e:28:66:25:71:7e:92:62:5b:7d:dd: cd:47:d6:d8:cd:a5:e5:5d:61:29:b6:7f:e6:5c:4c: c7:04:0f:62:81:32:4e:50:e6:88:e4:38:5e:4c:1d: a5:0d:f4:fe:0f:01:10:c6:85:56:e5:cf:48:dc:b2: 43:f8:c5:9f:be:bb:1d:c1:59:ce:2c:98:38:e8:07: ef:6c:bf:26:e7:2a:80:78:80:a2:32:2f:df:dd:12: 97:6c:c0:22:1c:2d:1d:b8:74:64:74:be:91:0e:13: 99:1d:7b:ee:9d:3f:21:bf:71:bd:45:4d:3d:6a:cc: 89:5f:70:c4:9d:3b:54:6e:cb:1d:8c:f1:9a:a7:9d: 40:1f:88:c1:05:b8:fe:db:4f:6e:0c:1f:29:86:f1: 00:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B5:2B:3E:EC:91:29:C8:DB:67:79:0F:02:A0:41:36:03:7A:D7:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e431389-36c2-35c4-a2ef-77849c8a28cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:01:5e:b0:6c:b2:80:9a:11:3c:92:4a:2e:3d:a0:b6:5d:d9: d3:94:3a:54:9f:13:27:6c:b2:d4:9c:a7:39:0f:2e:b4:f7:77: be:99:40:77:89:07:f0:6f:4b:71:3b:21:19:71:4f:6c:c8:10: e1:3b:6d:a8:c6:e6:aa:7b:3a:ac:5d:bd:34:77:84:b2:29:cb: 70:9d:cc:b3:6d:54:59:20:89:c5:50:70:54:19:88:93:81:e3: 67:c4:96:3f:97:80:35:cb:61:6f:61:a4:1b:35:34:57:15:61: 34:fa:4a:17:6e:4d:56:79:b3:a0:60:55:f8:96:b5:cb:46:d9: 77:02:c3:27:5e:34:47:ef:75:81:64:99:2e:62:ea:a5:64:2e: 6d:98:38:ad:51:93:37:02:89:22:ae:c4:6b:5f:22:23:37:f8: ff:d8:14:08:4e:b6:30:5d:75:86:28:08:5e:a2:85:6c:89:f9: 55:5f:dc:d9:fb:47:d0:79:22:b0:ec:d1:a9:8c:db:bd:73:6a: 2a:a6:b6:ff:a3:33:90:24:9e:db:f0:9e:58:3a:be:72:a5:93: ed:4a:0b:fc:ef:62:42:15:e7:e9:93:ca:28:fe:1c:b9:10:29: fb:f3:28:bd:85:a1:1f:59:b9:ee:74:7c:90:cd:51:64:60:0f: dc:13:5c:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jtgzXRrX+DhgZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk MGY4NGYyYzktZmYxNy00NzFiLTg0NDgtZThhNTc4ZTRmMTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8LIXpa2prom5dB36UpZ+/JCMpNssb3j4ZfbZ kPZBNQsOHfJAn8utPx+fV7w6A4qCfP7XRYA7QGd0WVv+T8T4IzMzT2vUS/SeetLx +Onu35qcLCB5HozpPWwz0lx7abfUZOekyM/Z09m/y717DihmJXF+kmJbfd3NR9bY zaXlXWEptn/mXEzHBA9igTJOUOaI5DheTB2lDfT+DwEQxoVW5c9I3LJD+MWfvrsd wVnOLJg46AfvbL8m5yqAeICiMi/f3RKXbMAiHC0duHRkdL6RDhOZHXvunT8hv3G9 RU09asyJX3DEnTtUbssdjPGap51AH4jBBbj+209uDB8phvEAgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMS1Kz7skSnI22d5DwKgQTYDetfRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGU0MzEzODktMzZjMi0z NWM0LWEyZWYtNzc4NDljOGEyOGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAABXrBssoCaETySSi49oLZd2dOUOlSfEydsstScpzkPLrT3d76ZQHeJ B/BvS3E7IRlxT2zIEOE7bajG5qp7OqxdvTR3hLIpy3CdzLNtVFkgicVQcFQZiJOB 42fElj+XgDXLYW9hpBs1NFcVYTT6ShduTVZ5s6BgVfiWtctG2XcCwydeNEfvdYFk mS5i6qVkLm2YOK1RkzcCiSKuxGtfIiM3+P/YFAhOtjBddYYoCF6ihWyJ+VVf3Nn7 R9B5IrDs0amM271zaiqmtv+jM5Akntvwnlg6vnKlk+1KC/zvYkIV5+mTyij+HLkQ KfvzKL2FoR9Zue50fJDNUWRgD9wTXF0= -----END CERTIFICATE-----Generated at Thu Mar 26 20:23:56 2026 by rpki-client