$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3d0ed94-a94d-384b-a208-cd45356f874c.roa File: d3d0ed94-a94d-384b-a208-cd45356f874c.roa (raw, json) Hash identifier: 9pfv08WTjf6GZYpw0MDOZSM7zIgNuZACzxXB7B4tcyk= Subject key identifier: 1A:4E:5A:F0:67:AA:98:2A:C6:53:6E:FC:AF:6A:20:68:DE:D1:72:8E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA3D375FDA96D391B12140 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3d0ed94-a94d-384b-a208-cd45356f874c.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 36623 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:3d:37:5f:da:96:d3:91:b1:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=d9a2977c-c20f-405f-9798-3981f36905a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:32:1e:c5:c8:37:e6:14:49:c4:d3:e7:b8: dc:9f:20:fa:7f:1b:c4:df:b8:6e:4a:08:e3:bf:17: 13:4f:d5:63:68:8b:be:5d:29:d9:03:d7:11:21:26: be:13:bc:41:8a:a0:cb:b5:90:e5:83:df:bf:e1:d8: 89:4e:47:94:c1:5f:b5:4a:94:f1:67:5e:46:97:27: f0:21:de:4f:4f:7a:26:be:32:d3:19:c1:1b:53:2f: d4:83:90:94:20:fc:64:c0:2a:f8:39:e3:17:8d:21: 09:48:40:b3:7f:a2:21:a8:67:21:ad:9f:47:8d:b6: 65:3f:bf:52:3d:03:61:bd:47:9d:06:ff:ca:50:f3: 5e:b3:5e:e2:bf:6a:1b:e0:df:58:3c:3d:84:b9:29: 7a:b1:76:27:85:a4:0a:41:9f:74:40:74:c8:5b:88: c9:6c:cc:35:ec:61:6c:ae:cd:15:01:58:a0:6f:d7: 31:f3:f4:fa:0d:fa:57:43:e2:29:9e:2a:27:bc:3e: 04:57:d7:91:d8:1f:db:ff:ab:fb:fe:1f:d3:06:70: fe:c6:45:63:17:43:ce:d8:33:b7:2e:da:10:a5:32: 4c:05:70:46:d4:da:4a:1e:a3:8b:c7:c0:36:83:ea: 98:d6:c0:22:3e:11:1b:88:fb:ed:76:7b:0a:4b:37: ba:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4E:5A:F0:67:AA:98:2A:C6:53:6E:FC:AF:6A:20:68:DE:D1:72:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3d0ed94-a94d-384b-a208-cd45356f874c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:5d:b5:7f:d9:93:fa:f9:61:c2:55:93:3f:7e:64:4f:e0:2f: 0f:61:2c:8a:74:17:35:1e:50:c0:32:27:c7:da:2e:1e:1a:fb: f2:e0:18:6b:66:88:71:33:90:d7:55:2d:a4:0b:d0:ac:7c:3d: b0:b5:cd:c8:3d:2c:c9:65:1e:43:15:a8:48:89:73:6c:2c:5e: e5:ce:bb:f9:05:17:58:47:d7:15:73:83:f1:c0:ea:da:db:5a: de:5d:13:6c:26:04:39:71:7b:9b:88:43:48:c4:7b:1f:c1:cf: 84:6b:70:3b:5e:d1:71:9e:ad:70:8b:42:3e:45:8d:c8:59:33: 71:f5:be:a0:6f:79:85:06:13:3b:8d:34:08:18:ac:ff:25:a3: b9:7a:bb:9e:c1:30:8b:6f:5c:ff:cd:a5:96:d7:3b:20:8b:45: c6:db:9b:12:44:46:78:8f:e6:75:95:66:53:2c:f2:3e:01:e4: 04:50:a7:83:78:02:df:a7:3b:4b:a4:d7:ae:b9:3c:16:bc:bd: 44:d5:b6:0c:3c:b4:68:f0:83:f7:b0:9c:a8:c1:53:1b:b9:fd: 54:1b:41:3a:91:bc:86:e7:0e:e7:97:04:70:27:0d:f5:52:1b: ee:8d:8e:e9:6b:b6:38:9e:68:11:ed:cb:ab:01:68:ae:1e:4c: 1e:20:5a:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2j03X9qW05GxIUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZDlhMjk3N2MtYzIwZi00MDVmLTk3OTgtMzk4MWYzNjkwNWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXEyHsXIN+YUScTT57jcnyD6fxvE37huSgjj vxcTT9VjaIu+XSnZA9cRISa+E7xBiqDLtZDlg9+/4diJTkeUwV+1SpTxZ15Glyfw Id5PT3omvjLTGcEbUy/Ug5CUIPxkwCr4OeMXjSEJSECzf6IhqGchrZ9HjbZlP79S PQNhvUedBv/KUPNes17iv2ob4N9YPD2EuSl6sXYnhaQKQZ90QHTIW4jJbMw17GFs rs0VAVigb9cx8/T6DfpXQ+IpnionvD4EV9eR2B/b/6v7/h/TBnD+xkVjF0PO2DO3 LtoQpTJMBXBG1NpKHqOLx8A2g+qY1sAiPhEbiPvtdnsKSze6oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpOWvBnqpgqxlNu/K9qIGje0XKOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDNkMGVkOTQtYTk0ZC0z ODRiLWEyMDgtY2Q0NTM1NmY4NzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5dtX/Zk/r5YcJVkz9+ZE/gLw9hLIp0FzUeUMAyJ8faLh4a+/LgGGtm iHEzkNdVLaQL0Kx8PbC1zcg9LMllHkMVqEiJc2wsXuXOu/kFF1hH1xVzg/HA6trb Wt5dE2wmBDlxe5uIQ0jEex/Bz4RrcDte0XGerXCLQj5FjchZM3H1vqBveYUGEzuN NAgYrP8lo7l6u57BMItvXP/NpZbXOyCLRcbbmxJERniP5nWVZlMs8j4B5ARQp4N4 At+nO0uk1665PBa8vUTVtgw8tGjwg/ewnKjBUxu5/VQbQTqRvIbnDueXBHAnDfVS G+6NjulrtjieaBHty6sBaK4eTB4gWo8= -----END CERTIFICATE-----Generated at Thu Mar 26 16:53:36 2026 by rpki-client