$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d8d294fa-38aa-3b74-ac08-7094c84a655c.roa File: d8d294fa-38aa-3b74-ac08-7094c84a655c.roa (raw, json) Hash identifier: 6yIPQCU54dh0+j4OgMRtGOG3weqcRftZQj0aKiSWiAE= Subject key identifier: B2:50:CE:47:F6:54:90:02:B0:3B:04:7A:FC:1C:2F:EC:B3:63:54:86 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA3BA15C16EFEF5AC32B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d8d294fa-38aa-3b74-ac08-7094c84a655c.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 396586 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:3b:a1:5c:16:ef:ef:5a:c3:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=80a4ccc0-ffde-4518-a1e9-6d56f4bcece5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:37:46:7e:c5:20:46:9a:c2:5f:f4:0d:5b:12: 33:0c:ed:9c:a3:f9:ac:a4:59:67:0e:03:fe:99:e4: b1:9a:78:5a:c4:2b:50:e2:76:80:ae:a4:b5:16:d5: 0a:f7:69:f2:7b:19:5d:ee:a4:0d:88:c1:cc:4a:d3: 92:5d:ce:bd:e7:85:68:1b:e0:83:c6:aa:60:92:20: e3:5a:85:0a:0a:10:b5:bd:bb:5a:32:72:90:40:84: ff:38:8c:9b:e6:59:b6:7f:25:3c:e8:89:88:33:66: 91:6f:45:c2:5d:f0:e1:c2:de:08:f8:5d:d8:4c:81: fa:39:f1:bc:d1:b9:a3:d5:0b:14:24:b3:9e:8d:fe: 3b:c1:23:e2:26:87:c9:0e:eb:f0:5f:41:a9:a9:28: 84:e1:36:36:5b:96:29:bc:c6:ec:4d:cd:86:83:6a: 5f:b3:fe:f6:3f:c4:24:83:a5:9d:3f:c9:fd:42:38: 12:8c:21:7d:03:c5:59:ea:05:e6:10:68:27:77:65: 49:4a:06:78:5f:29:f6:73:a1:60:53:c4:2b:78:86: c5:5f:0b:fb:3d:d0:e2:5f:f7:36:46:e2:5c:ad:70: 9f:40:75:7b:11:35:83:47:91:ea:99:8c:7a:9d:72: 7a:45:55:31:39:dc:d8:90:45:5c:7c:a5:aa:40:1d: 04:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:50:CE:47:F6:54:90:02:B0:3B:04:7A:FC:1C:2F:EC:B3:63:54:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d8d294fa-38aa-3b74-ac08-7094c84a655c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:a0:4e:2b:11:8e:b1:9c:fa:aa:f2:8b:5e:94:f6:76:b8:7d: f3:1e:0f:2b:b3:4d:74:0c:da:04:3a:e0:c6:5e:4e:9d:7e:1c: 62:15:40:fe:2e:b2:fc:14:0b:3e:f6:a2:e1:88:f5:aa:72:8a: bb:24:df:34:fc:e8:0d:20:2e:42:fb:a2:cf:b0:b5:0e:d8:b7: df:11:9c:4a:00:c5:9a:05:c7:eb:34:07:e4:2d:cd:67:c9:8d: ae:a9:f6:ba:99:eb:8f:1b:bb:4d:1c:e9:e0:de:7b:c5:31:a0: 6b:57:bf:43:a3:13:6c:0f:cd:b1:70:8c:a4:d0:5a:52:8b:e0: 43:27:00:77:c9:c4:a7:11:8a:ec:8f:e5:7c:30:92:73:dc:34: fa:63:94:86:f6:48:e7:3c:3a:f7:0e:c3:17:22:ea:33:31:00: 8c:8c:65:6f:6d:ac:cb:d3:6f:2a:aa:db:12:37:01:ac:ac:a3: 62:f0:e5:cb:00:90:11:ab:ee:7c:4a:67:69:b1:0e:9f:db:b0: 57:82:4d:6e:75:b3:97:04:86:1c:63:73:b2:0f:ec:76:06:9b: e9:e0:4c:b7:05:5a:3a:fc:40:75:31:5c:9c:0f:f2:dc:17:88: d2:c4:de:7d:3f:cb:53:07:09:56:4c:51:04:23:37:72:5c:22: 57:da:98:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2juhXBbv71rDK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ODBhNGNjYzAtZmZkZS00NTE4LWExZTktNmQ1NmY0YmNlY2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjdGfsUgRprCX/QNWxIzDO2co/mspFlnDgP+ meSxmnhaxCtQ4naArqS1FtUK92nyexld7qQNiMHMStOSXc6954VoG+CDxqpgkiDj WoUKChC1vbtaMnKQQIT/OIyb5lm2fyU86ImIM2aRb0XCXfDhwt4I+F3YTIH6OfG8 0bmj1QsUJLOejf47wSPiJofJDuvwX0GpqSiE4TY2W5YpvMbsTc2Gg2pfs/72P8Qk g6WdP8n9QjgSjCF9A8VZ6gXmEGgnd2VJSgZ4Xyn2c6FgU8QreIbFXwv7PdDiX/c2 RuJcrXCfQHV7ETWDR5HqmYx6nXJ6RVUxOdzYkEVcfKWqQB0E4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJQzkf2VJACsDsEevwcL+yzY1SGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDhkMjk0ZmEtMzhhYS0z Yjc0LWFjMDgtNzA5NGM4NGE2NTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSgTisRjrGc+qryi16U9na4ffMeDyuzTXQM2gQ64MZeTp1+HGIVQP4u svwUCz72ouGI9apyirsk3zT86A0gLkL7os+wtQ7Yt98RnEoAxZoFx+s0B+QtzWfJ ja6p9rqZ648bu00c6eDee8UxoGtXv0OjE2wPzbFwjKTQWlKL4EMnAHfJxKcRiuyP 5XwwknPcNPpjlIb2SOc8OvcOwxci6jMxAIyMZW9trMvTbyqq2xI3Aayso2Lw5csA kBGr7nxKZ2mxDp/bsFeCTW51s5cEhhxjc7IP7HYGm+ngTLcFWjr8QHUxXJwP8twX iNLE3n0/y1MHCVZMUQQjN3JcIlfamAw= -----END CERTIFICATE-----Generated at Thu Mar 26 11:18:51 2026 by rpki-client