$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a89c9e8a-d20b-32d1-9596-cd15ec57c075.roa File: a89c9e8a-d20b-32d1-9596-cd15ec57c075.roa (raw, json) Hash identifier: H+lSwtz/AOCQmmVlrvEmKSanQImxXzYigvCGpucqi94= Subject key identifier: 79:93:7A:D9:A7:72:DE:27:83:0C:F6:80:B8:A6:BB:9A:73:75:DF:9D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA0853D4AF4644B4A66820 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a89c9e8a-d20b-32d1-9596-cd15ec57c075.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 36619 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:08:53:d4:af:46:44:b4:a6:68:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=28cd53d4-ab58-455a-90bb-349dd069c6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d5:63:10:e7:2c:a8:5e:9b:98:46:66:e6:7f: 94:d5:b1:f9:61:fc:5c:05:b8:83:02:75:68:73:8f: 31:1a:fe:37:bc:e5:ce:80:6d:62:b5:c6:31:b2:6a: c0:2e:47:e6:64:a0:e2:43:c0:b0:2c:55:92:5d:12: 8d:fb:c3:c5:4d:80:9a:f8:8d:1b:88:01:52:8e:8b: f5:20:91:e8:48:f6:cb:a5:70:b8:f7:82:3e:e2:10: c1:02:ff:15:a3:f1:0b:d1:f2:47:26:a9:3b:92:a5: a2:39:b3:e0:b2:3f:0c:50:43:fe:53:bd:c7:26:88: be:11:76:ee:d4:7d:04:06:50:8d:22:28:40:68:3f: 56:11:70:e5:c9:bd:bf:f3:02:79:83:02:2c:71:4d: 5c:50:60:4e:2e:75:90:29:4f:a7:53:79:c7:89:73: 6b:09:3f:67:bd:b0:34:de:61:38:6d:f5:4d:9e:94: 39:cc:06:27:3d:59:2b:cf:de:21:9e:02:88:db:a8: 8e:b8:7c:8f:c7:4b:e8:dd:a6:e1:40:69:96:ad:1c: ac:fe:ec:04:d2:fc:9b:d1:e8:b0:9e:55:25:0c:6c: fb:07:84:08:9b:f6:64:30:64:50:79:dc:9b:69:4b: 39:cc:a3:87:ab:8b:6b:a0:69:47:66:73:de:bf:33: af:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:93:7A:D9:A7:72:DE:27:83:0C:F6:80:B8:A6:BB:9A:73:75:DF:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a89c9e8a-d20b-32d1-9596-cd15ec57c075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:ef:f6:9d:bc:e7:c0:cf:2b:0b:13:3d:2c:0a:5f:1b:49:b0: 30:3a:fd:d0:a4:fe:d6:4f:11:09:c3:99:a7:5c:f2:67:e5:32: 12:88:7e:87:19:c1:53:74:e7:e0:3f:b8:fb:81:97:31:33:ca: ef:eb:e4:74:c5:7b:cb:78:50:61:4b:6d:2c:90:2a:ed:54:2b: dc:df:8b:e4:1e:98:2c:10:e7:ec:37:4b:c1:23:d2:f4:6d:cc: 24:f7:28:32:ed:72:49:6f:26:0e:4a:a5:56:e7:38:79:bc:17: 8b:b1:40:23:5e:63:c0:b9:a5:0d:b2:31:60:29:6f:b6:1e:7d: fc:17:01:12:56:15:18:34:18:66:e2:34:05:19:95:f4:43:a9: 6a:0a:27:46:ac:2b:cd:32:33:58:a4:13:09:02:43:57:98:14: d4:12:f3:16:21:12:33:fc:11:be:e0:3f:82:69:27:7a:d7:10: 74:5e:eb:6d:5a:46:b0:dd:f4:e4:8f:9c:e3:79:e1:5e:28:ae: 7e:ad:b1:6f:c5:57:7e:84:2e:c1:f3:e6:0d:ec:30:63:20:58: 51:63:d9:80:24:0d:7a:88:43:1a:6e:9f:3f:c2:c0:2b:81:e2: 03:40:2b:28:be:74:dd:51:77:c8:2c:7d:7c:67:20:26:4e:90: 67:6c:91:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2ghT1K9GRLSmaCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk MjhjZDUzZDQtYWI1OC00NTVhLTkwYmItMzQ5ZGQwNjljNmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdVjEOcsqF6bmEZm5n+U1bH5YfxcBbiDAnVo c48xGv43vOXOgG1itcYxsmrALkfmZKDiQ8CwLFWSXRKN+8PFTYCa+I0biAFSjov1 IJHoSPbLpXC494I+4hDBAv8Vo/EL0fJHJqk7kqWiObPgsj8MUEP+U73HJoi+EXbu 1H0EBlCNIihAaD9WEXDlyb2/8wJ5gwIscU1cUGBOLnWQKU+nU3nHiXNrCT9nvbA0 3mE4bfVNnpQ5zAYnPVkrz94hngKI26iOuHyPx0vo3abhQGmWrRys/uwE0vyb0eiw nlUlDGz7B4QIm/ZkMGRQedybaUs5zKOHq4troGlHZnPevzOvLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmTetmnct4ngwz2gLimu5pzdd+dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTg5YzllOGEtZDIwYi0z MmQxLTk1OTYtY2QxNWVjNTdjMDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPv9p2858DPKwsTPSwKXxtJsDA6/dCk/tZPEQnDmadc8mflMhKIfocZ wVN05+A/uPuBlzEzyu/r5HTFe8t4UGFLbSyQKu1UK9zfi+QemCwQ5+w3S8Ej0vRt zCT3KDLtcklvJg5KpVbnOHm8F4uxQCNeY8C5pQ2yMWApb7YeffwXARJWFRg0GGbi NAUZlfRDqWoKJ0asK80yM1ikEwkCQ1eYFNQS8xYhEjP8Eb7gP4JpJ3rXEHRe621a RrDd9OSPnON54V4orn6tsW/FV36ELsHz5g3sMGMgWFFj2YAkDXqIQxpunz/CwCuB 4gNAKyi+dN1Rd8gsfXxnICZOkGdskdw= -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:10 2026 by rpki-client