$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9124695-29d7-36ad-b3f4-9b8c1a5cb309.roa File: b9124695-29d7-36ad-b3f4-9b8c1a5cb309.roa (raw, json) Hash identifier: iptmajCA1FJphhzE4n+n+DwtbFZNgweG0nZwihVpEQc= Subject key identifier: 68:7B:6A:C5:DE:A7:C6:42:60:8C:43:A8:7F:FC:06:95:ED:4B:91:91 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA3D164B5700854DADFB40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9124695-29d7-36ad-b3f4-9b8c1a5cb309.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 36620 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:3d:16:4b:57:00:85:4d:ad:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=97721b35-8841-493b-ad52-be9625c426d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:43:54:98:22:8b:f7:fa:85:22:5e:1a:4b:72: 8d:92:fa:a2:33:b6:1b:d1:b2:15:87:e2:e9:d3:1b: c7:85:87:88:c3:d5:d3:47:fd:3f:4e:ce:85:19:fd: 5a:ab:36:5f:70:c2:7b:6a:84:87:6a:db:70:8e:93: bb:a2:f6:49:66:6b:4a:df:b4:00:2f:ce:53:d4:2e: 68:12:f3:0d:5e:67:91:f4:a8:e4:f2:98:08:29:0e: a5:5e:83:a6:4e:21:10:ee:6c:4c:44:e0:5b:69:12: df:96:20:35:69:37:17:f7:65:77:4b:ff:8b:d2:15: 00:5a:ff:66:a2:53:a8:b6:71:14:d8:6d:87:c9:c5: 0e:cd:92:65:e1:7b:39:84:76:30:06:eb:fc:94:ac: 43:73:de:5c:c6:d5:3a:02:96:5d:d8:f8:94:2b:1f: a6:e6:e5:85:a0:0b:f6:80:21:8e:51:e3:a1:d7:36: 16:b6:18:f7:15:cc:b8:d8:68:05:b0:cc:ec:1a:55: ca:e4:65:af:45:0c:88:bb:cc:b0:09:58:8a:08:9e: be:da:b0:fe:f2:45:5e:b9:b5:81:62:3d:a3:41:9b: 91:a8:c9:5c:8b:64:ac:55:70:c4:0c:a3:dc:13:9b: e3:f1:8f:bc:a8:12:be:47:84:53:ad:b6:2b:fe:cd: 20:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7B:6A:C5:DE:A7:C6:42:60:8C:43:A8:7F:FC:06:95:ED:4B:91:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9124695-29d7-36ad-b3f4-9b8c1a5cb309.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:b7:0a:d7:71:23:ce:19:a2:cd:eb:7a:30:b4:ff:7d:c1:32: 19:2b:1f:10:c9:ba:68:d9:74:c1:c1:d2:93:68:9b:1a:ef:cc: fc:86:9a:a7:eb:23:79:09:01:88:87:2f:6c:f5:c0:cc:7f:57: cc:98:ff:82:0b:a3:58:18:66:86:20:a6:b5:88:3b:ef:cf:d7: 32:d8:40:64:95:46:85:60:54:02:7f:70:34:7d:71:ba:40:32: 25:c1:8f:ee:66:12:8b:0f:c9:73:a0:39:5e:01:1b:f5:49:15: b9:43:46:d6:d1:a3:0a:63:52:0d:e4:1e:62:34:cf:55:1d:e6: e9:d1:49:fe:ee:c8:a3:56:7c:2c:dc:26:82:73:c8:b9:cc:d6: e2:89:80:38:d7:30:d2:4a:e0:ff:d0:66:09:98:0f:b7:4a:0e: 87:81:d0:33:5b:31:c6:01:c5:3f:25:0d:48:42:73:1a:43:db: ab:f9:c6:2e:95:3d:9d:a3:4f:c5:b0:56:12:00:40:28:71:fb: a5:d3:8f:f8:cb:21:8f:7e:12:20:ea:02:92:57:62:fe:63:54: f0:b3:85:12:4d:64:27:80:dd:15:13:09:e8:07:8c:1c:de:a7: 78:75:99:1b:db:4f:c7:d3:e6:27:f6:c8:48:3b:cb:59:b9:8b: 76:02:9b:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2j0WS1cAhU2t+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk OTc3MjFiMzUtODg0MS00OTNiLWFkNTItYmU5NjI1YzQyNmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvENUmCKL9/qFIl4aS3KNkvqiM7Yb0bIVh+Lp 0xvHhYeIw9XTR/0/Ts6FGf1aqzZfcMJ7aoSHattwjpO7ovZJZmtK37QAL85T1C5o EvMNXmeR9Kjk8pgIKQ6lXoOmTiEQ7mxMROBbaRLfliA1aTcX92V3S/+L0hUAWv9m olOotnEU2G2HycUOzZJl4Xs5hHYwBuv8lKxDc95cxtU6ApZd2PiUKx+m5uWFoAv2 gCGOUeOh1zYWthj3Fcy42GgFsMzsGlXK5GWvRQyIu8ywCViKCJ6+2rD+8kVeubWB Yj2jQZuRqMlci2SsVXDEDKPcE5vj8Y+8qBK+R4RTrbYr/s0ghQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGh7asXep8ZCYIxDqH/8BpXtS5GRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjkxMjQ2OTUtMjlkNy0z NmFkLWIzZjQtOWI4YzFhNWNiMzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIq3CtdxI84Zos3rejC0/33BMhkrHxDJumjZdMHB0pNomxrvzPyGmqfr I3kJAYiHL2z1wMx/V8yY/4ILo1gYZoYgprWIO+/P1zLYQGSVRoVgVAJ/cDR9cbpA MiXBj+5mEosPyXOgOV4BG/VJFblDRtbRowpjUg3kHmI0z1Ud5unRSf7uyKNWfCzc JoJzyLnM1uKJgDjXMNJK4P/QZgmYD7dKDoeB0DNbMcYBxT8lDUhCcxpD26v5xi6V PZ2jT8WwVhIAQChx+6XTj/jLIY9+EiDqApJXYv5jVPCzhRJNZCeA3RUTCegHjBze p3h1mRvbT8fT5if2yEg7y1m5i3YCm0M= -----END CERTIFICATE-----Generated at Thu Mar 26 17:21:08 2026 by rpki-client