$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0bfd918-56d6-3e11-a3c0-43db32c6ef1a.roa File: a0bfd918-56d6-3e11-a3c0-43db32c6ef1a.roa (raw, json) Hash identifier: KHs+GWMDKW3YVZh0XOsszblkRgcafTd8kOTrR+LmC6w= Subject key identifier: EB:81:23:CB:D5:79:63:AC:A9:89:06:E9:69:C1:1D:09:E9:20:12:1E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA3C966257047725607300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0bfd918-56d6-3e11-a3c0-43db32c6ef1a.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 396571 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:3c:96:62:57:04:77:25:60:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=9d5fad92-f7fb-4af2-8b7a-13ac20ef512a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ab:ab:7a:53:d5:b7:88:5f:3a:79:6f:0d:27: b8:e2:3f:7d:e9:50:5b:fa:73:50:e6:76:30:12:13: 97:47:1d:1f:83:03:88:64:30:7f:c8:8d:96:a9:ee: 13:38:26:5e:71:38:0a:a6:5e:f9:57:a5:99:87:32: bf:34:35:06:7f:e8:20:fc:32:9f:9a:ce:87:34:66: 50:b3:8e:96:e1:24:b9:b6:96:d2:4c:5b:a2:9a:58: ef:60:5d:d2:8b:61:99:2f:19:82:93:5e:44:b5:57: c6:77:4e:39:26:01:9f:55:0b:9a:cd:ed:a9:cd:04: 01:a6:c4:15:1f:71:a3:48:9a:28:63:29:71:dc:65: 25:3c:11:3a:3a:54:4f:64:fc:1c:27:3c:36:ba:23: d3:4d:fa:30:45:02:e0:6a:bc:9a:1a:aa:17:87:9e: b4:46:39:17:dc:9d:79:ce:25:f3:cb:1e:88:31:35: 18:5f:0b:18:8a:18:5e:fa:98:03:71:2e:d1:7c:5e: 42:6c:de:17:67:85:03:33:a1:dc:6c:09:90:93:59: d9:c8:7e:43:47:d4:39:eb:2e:33:03:74:53:88:2d: 68:a3:62:8b:71:bd:d2:6a:92:bb:f2:d6:3f:65:cd: 13:44:8e:9f:56:6a:7c:d4:95:82:a0:c3:cb:35:99: ef:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:81:23:CB:D5:79:63:AC:A9:89:06:E9:69:C1:1D:09:E9:20:12:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0bfd918-56d6-3e11-a3c0-43db32c6ef1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:3c:95:09:bd:3c:0d:a1:be:8a:ef:9a:ad:14:fc:a1:25:d0: e9:cd:b9:01:45:f5:96:35:87:c4:cb:c6:a0:5d:47:a8:3c:5a: 49:37:80:ec:1c:bc:c0:ba:02:41:62:84:ef:b9:30:7b:f4:13: 8f:3e:85:49:85:e1:90:74:c3:5b:43:35:04:bc:80:59:6c:65: 88:7c:31:73:01:0b:68:a9:08:c3:bb:5a:af:7e:de:aa:30:fd: 8a:a1:14:24:8e:b3:76:86:bc:d7:40:12:6c:70:c8:46:10:e7: 29:2f:ba:5b:bd:62:b7:c6:e5:87:ef:c2:4e:bc:a2:bc:45:3b: ce:2a:ad:be:45:d4:07:0d:d4:d8:b3:e0:55:11:30:e8:6f:4c: a6:22:04:eb:6f:71:1d:f6:ff:84:35:d4:c8:23:78:7e:0b:fb: 07:1b:0a:87:15:75:bd:db:ca:60:cc:9b:08:18:16:6e:ee:02: 98:3f:82:c6:55:58:6f:fb:11:7f:76:3a:a4:ce:5a:7a:01:4d: 26:0b:e3:f8:8c:49:34:27:eb:7f:ff:7b:8e:5f:f5:41:01:7b: d6:2b:82:b4:f7:fb:e9:a7:d6:2c:0c:f2:dd:61:a3:9b:3f:e8: 20:1e:be:4e:e0:c3:5c:03:01:3b:29:46:77:bc:45:70:a2:3f: 2c:0f:c7:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jyWYlcEdyVgcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk OWQ1ZmFkOTItZjdmYi00YWYyLThiN2EtMTNhYzIwZWY1MTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKurelPVt4hfOnlvDSe44j996VBb+nNQ5nYw EhOXRx0fgwOIZDB/yI2Wqe4TOCZecTgKpl75V6WZhzK/NDUGf+gg/DKfms6HNGZQ s46W4SS5tpbSTFuimljvYF3Si2GZLxmCk15EtVfGd045JgGfVQuaze2pzQQBpsQV H3GjSJooYylx3GUlPBE6OlRPZPwcJzw2uiPTTfowRQLgaryaGqoXh560RjkX3J15 ziXzyx6IMTUYXwsYihhe+pgDcS7RfF5CbN4XZ4UDM6HcbAmQk1nZyH5DR9Q56y4z A3RTiC1oo2KLcb3SapK78tY/Zc0TRI6fVmp81JWCoMPLNZnvjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuBI8vVeWOsqYkG6WnBHQnpIBIeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTBiZmQ5MTgtNTZkNi0z ZTExLWEzYzAtNDNkYjMyYzZlZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEc8lQm9PA2hvorvmq0U/KEl0OnNuQFF9ZY1h8TLxqBdR6g8Wkk3gOwc vMC6AkFihO+5MHv0E48+hUmF4ZB0w1tDNQS8gFlsZYh8MXMBC2ipCMO7Wq9+3qow /YqhFCSOs3aGvNdAEmxwyEYQ5ykvulu9YrfG5Yfvwk68orxFO84qrb5F1AcN1Niz 4FURMOhvTKYiBOtvcR32/4Q11MgjeH4L+wcbCocVdb3bymDMmwgYFm7uApg/gsZV WG/7EX92OqTOWnoBTSYL4/iMSTQn63//e45f9UEBe9YrgrT3++mn1iwM8t1ho5s/ 6CAevk7gw1wDATspRne8RXCiPywPx4g= -----END CERTIFICATE-----Generated at Thu Mar 26 11:18:44 2026 by rpki-client