$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4a4ff76-1b74-3eee-b223-f6c4ab223e2a.roa File: a4a4ff76-1b74-3eee-b223-f6c4ab223e2a.roa (raw, json) Hash identifier: TosAeM9YkxFvu1EBUg4mb3G5P/AlyKWOEKWcreLvihg= Subject key identifier: 12:B9:76:17:3F:CF:45:79:46:C1:B2:7A:04:96:29:5F:C7:EC:A8:53 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA04E37E9825B4DA807980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4a4ff76-1b74-3eee-b223-f6c4ab223e2a.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 397208 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:04:e3:7e:98:25:b4:da:80:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=d05fb4bf-56bd-40ee-9b8a-97c4487a5b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:80:e8:7f:5c:59:02:4c:ae:a1:8b:10:ad:f2: 7c:7c:74:eb:fa:3f:61:73:f4:1d:67:57:03:f2:55: 8c:51:ca:9d:38:06:a2:17:ae:8f:0d:b7:93:5a:00: 89:73:0a:17:16:0e:f6:89:08:65:a3:49:49:29:73: 8e:ee:21:cb:6a:49:14:fc:9f:45:3b:c0:0c:de:dd: 16:d5:cc:a0:88:9e:74:8c:72:9e:e3:03:96:8c:ef: 78:1d:54:ea:7f:16:ef:20:31:4a:01:2d:21:20:3e: 23:45:f6:98:95:e9:c7:8d:8d:15:af:5f:41:17:2f: ef:2b:58:70:1f:15:27:0a:5f:ed:44:38:ad:68:24: 69:a5:81:18:88:f7:ce:7d:ba:05:10:98:29:78:1c: 0e:96:83:65:90:36:62:dd:76:2b:34:e6:4f:aa:39: 30:d1:b1:86:31:a0:20:dc:12:57:f7:25:b9:4c:37: 03:7a:cb:44:7f:c9:60:ec:27:1e:86:43:39:0a:dd: 3a:9a:76:e2:95:a7:e7:9c:0b:1b:ae:8a:3b:3e:3a: eb:d0:6e:f2:c3:e6:0f:ea:90:8c:2d:2e:bd:1a:06: 1d:e4:72:1f:a6:22:14:10:93:17:d1:d4:7a:c6:cb: 45:53:ed:ae:fb:7e:42:10:20:4a:d5:45:41:27:82: c4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B9:76:17:3F:CF:45:79:46:C1:B2:7A:04:96:29:5F:C7:EC:A8:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4a4ff76-1b74-3eee-b223-f6c4ab223e2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:28:07:a0:d2:9b:20:65:c3:d0:f2:6a:f5:10:7b:c0:82:1e: fd:7e:09:21:12:2e:86:c5:e9:61:c3:0b:dd:95:82:4a:53:cc: 1e:47:45:9f:1c:72:f5:9b:cc:c1:8c:59:cd:2f:92:db:47:54: 80:bf:00:f0:e5:b4:b3:20:45:e4:93:e0:70:89:d2:a2:6c:86: fd:75:1c:e8:b9:c1:d5:93:c5:44:0d:f3:41:47:d2:60:a7:b7: ad:47:f0:34:4c:bf:e8:f5:85:43:5b:83:65:5f:5f:09:f7:cf: 1d:dc:b9:13:d8:eb:46:77:f9:12:ff:90:db:70:c4:46:a5:de: 79:a6:fa:f5:65:82:3c:27:3c:4a:4f:f5:3b:90:12:70:04:0e: 1a:48:40:8f:b9:61:31:31:0d:e3:d9:da:56:a9:7a:7f:ff:87: c8:3e:7c:22:54:a0:ef:9c:4c:55:f1:23:48:8f:e9:70:e2:61: 53:77:13:a6:e0:69:24:ae:38:6d:77:d5:95:8f:fc:7c:1e:87: 65:26:39:75:c2:6d:01:cd:db:dc:8c:7d:a2:99:05:2f:7f:68: ea:ed:e1:6f:77:58:a4:fb:b5:8a:f7:4c:c2:67:2e:c9:ef:4f: ba:fc:25:35:42:34:3d:ae:45:9b:54:08:89:41:46:7e:f1:39: 7e:0a:76:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2gTjfpgltNqAeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZDA1ZmI0YmYtNTZiZC00MGVlLTliOGEtOTdjNDQ4N2E1YjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIDof1xZAkyuoYsQrfJ8fHTr+j9hc/QdZ1cD 8lWMUcqdOAaiF66PDbeTWgCJcwoXFg72iQhlo0lJKXOO7iHLakkU/J9FO8AM3t0W 1cygiJ50jHKe4wOWjO94HVTqfxbvIDFKAS0hID4jRfaYlenHjY0Vr19BFy/vK1hw HxUnCl/tRDitaCRppYEYiPfOfboFEJgpeBwOloNlkDZi3XYrNOZPqjkw0bGGMaAg 3BJX9yW5TDcDestEf8lg7CcehkM5Ct06mnbilafnnAsbroo7Pjrr0G7yw+YP6pCM LS69GgYd5HIfpiIUEJMX0dR6xstFU+2u+35CECBK1UVBJ4LECwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBK5dhc/z0V5RsGyegSWKV/H7KhTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTRhNGZmNzYtMWI3NC0z ZWVlLWIyMjMtZjZjNGFiMjIzZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMoB6DSmyBlw9DyavUQe8CCHv1+CSESLobF6WHDC92VgkpTzB5HRZ8c cvWbzMGMWc0vkttHVIC/APDltLMgReST4HCJ0qJshv11HOi5wdWTxUQN80FH0mCn t61H8DRMv+j1hUNbg2VfXwn3zx3cuRPY60Z3+RL/kNtwxEal3nmm+vVlgjwnPEpP 9TuQEnAEDhpIQI+5YTExDePZ2lapen//h8g+fCJUoO+cTFXxI0iP6XDiYVN3E6bg aSSuOG131ZWP/Hweh2UmOXXCbQHN29yMfaKZBS9/aOrt4W93WKT7tYr3TMJnLsnv T7r8JTVCND2uRZtUCIlBRn7xOX4Kdn0= -----END CERTIFICATE-----Generated at Thu Mar 26 11:15:59 2026 by rpki-client