$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a470a0a7-32d7-3bb8-be68-42d66277d66d.roa File: a470a0a7-32d7-3bb8-be68-42d66277d66d.roa (raw, json) Hash identifier: kUqhTnqQ2ZoWkQSeBuHsrSQ57zZ6Q5S25HMS9FqhGoo= Subject key identifier: 68:AD:2D:65:29:3F:07:5A:57:BC:1F:46:0E:11:35:E2:29:80:7E:93 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA39949AC42DE7CAE7D380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a470a0a7-32d7-3bb8-be68-42d66277d66d.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 396611 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:39:94:9a:c4:2d:e7:ca:e7:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=5a829ff9-eb41-4c75-8167-b95060546231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c7:fc:d6:74:56:97:b9:97:ee:60:ab:5d:5b: 75:43:be:76:5d:60:3e:0e:71:86:fa:27:ff:1d:45: a6:e0:a8:f8:c8:6a:1a:d8:21:20:9e:39:71:33:73: c3:57:a7:fc:c1:4f:03:ac:b2:b1:79:b1:71:e8:67: a7:2c:51:0a:fb:64:ab:44:5a:7e:87:07:1b:51:d3: e5:48:a6:74:d5:da:87:c4:cb:9e:7d:3b:62:51:01: ed:ac:71:33:22:05:e3:9d:b8:4d:c3:f4:c8:8b:04: 02:85:65:0c:a7:6a:1f:c1:fe:6b:4b:cc:3b:2c:16: 0a:1d:1c:c9:d1:86:44:35:bf:1f:b9:96:02:7b:bd: 3d:f8:06:52:30:a6:ee:7d:60:82:88:89:69:f1:ca: 85:2a:9a:8f:4e:a6:af:68:22:53:00:34:75:27:97: 4e:00:0c:39:ca:8b:c3:1c:2a:40:78:17:61:e1:7b: 29:bd:bc:96:66:9e:9f:13:11:15:f8:d2:6c:ae:93: 41:6d:3a:0c:2e:0e:27:c1:7e:be:8a:47:98:9f:c5: 3e:62:11:41:79:a2:34:4c:5a:9c:8d:de:96:32:5b: c8:06:63:63:44:73:3d:53:58:25:3f:af:0c:10:f6: 3a:b7:6a:c9:0e:25:90:96:bc:e4:5d:76:95:4c:83: 32:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AD:2D:65:29:3F:07:5A:57:BC:1F:46:0E:11:35:E2:29:80:7E:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a470a0a7-32d7-3bb8-be68-42d66277d66d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:50:7c:1c:73:0d:1a:2a:e7:c8:65:71:5f:93:63:31:82:04: ff:f4:86:dd:ba:10:56:cd:99:4b:41:13:43:4a:16:5b:28:6b: f5:a0:66:09:64:00:68:be:6f:42:fe:a6:12:1d:58:4b:f5:2d: 10:5c:8e:09:05:cf:28:c2:01:ee:88:e0:90:f8:b9:4c:a6:57: 53:ea:fc:a9:0a:cc:f1:ef:a3:c7:f1:0c:61:97:38:93:4c:06: 10:10:cd:bb:32:35:15:63:84:d2:a9:48:99:94:30:c6:a5:f2: d2:c0:60:6d:6c:b8:a2:db:06:ab:69:5f:01:66:13:38:eb:8d: 9c:47:87:13:55:ad:91:0d:ee:7d:e8:90:ad:16:74:ea:57:a7: 69:37:83:05:2b:00:7c:35:3c:32:f9:22:b9:0b:7e:8d:56:76: 93:11:cb:61:85:bf:de:96:35:76:dc:2a:a3:dd:2b:14:3c:df: 0a:29:e2:db:0e:1d:03:90:24:d9:6c:4d:f7:07:ce:e6:61:f2: ae:69:27:fb:eb:3e:cd:78:dc:85:78:93:22:f7:42:20:a2:6a: a4:12:f9:4d:4b:b5:c5:32:34:2c:8a:b3:e8:64:da:eb:c9:8c: f0:ea:08:70:72:c8:58:29:0f:0c:d9:2f:7d:10:a0:d1:73:6a: 4c:f4:d1:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jmUmsQt58rn04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk NWE4MjlmZjktZWI0MS00Yzc1LTgxNjctYjk1MDYwNTQ2MjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMf81nRWl7mX7mCrXVt1Q752XWA+DnGG+if/ HUWm4Kj4yGoa2CEgnjlxM3PDV6f8wU8DrLKxebFx6GenLFEK+2SrRFp+hwcbUdPl SKZ01dqHxMuefTtiUQHtrHEzIgXjnbhNw/TIiwQChWUMp2ofwf5rS8w7LBYKHRzJ 0YZENb8fuZYCe709+AZSMKbufWCCiIlp8cqFKpqPTqavaCJTADR1J5dOAAw5yovD HCpAeBdh4XspvbyWZp6fExEV+NJsrpNBbToMLg4nwX6+ikeYn8U+YhFBeaI0TFqc jd6WMlvIBmNjRHM9U1glP68MEPY6t2rJDiWQlrzkXXaVTIMyHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGitLWUpPwdaV7wfRg4RNeIpgH6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTQ3MGEwYTctMzJkNy0z YmI4LWJlNjgtNDJkNjYyNzdkNjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZQfBxzDRoq58hlcV+TYzGCBP/0ht26EFbNmUtBE0NKFlsoa/WgZglk AGi+b0L+phIdWEv1LRBcjgkFzyjCAe6I4JD4uUymV1Pq/KkKzPHvo8fxDGGXOJNM BhAQzbsyNRVjhNKpSJmUMMal8tLAYG1suKLbBqtpXwFmEzjrjZxHhxNVrZEN7n3o kK0WdOpXp2k3gwUrAHw1PDL5IrkLfo1WdpMRy2GFv96WNXbcKqPdKxQ83wop4tsO HQOQJNlsTfcHzuZh8q5pJ/vrPs143IV4kyL3QiCiaqQS+U1LtcUyNCyKs+hk2uvJ jPDqCHByyFgpDwzZL30QoNFzakz00eY= -----END CERTIFICATE-----Generated at Thu Mar 26 14:18:23 2026 by rpki-client