$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da6da85c-d240-3bb3-8248-3a8de9713ce4.roa File: da6da85c-d240-3bb3-8248-3a8de9713ce4.roa (raw, json) Hash identifier: im+/ttWC2W/t7XB6pwlMXt/EbQtRYSFukCH8zHQEbJM= Subject key identifier: 7A:C3:8F:81:13:BA:C9:7E:63:C0:6D:92:50:65:7B:9A:3A:F0:AB:A2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA083FCAF0DBE0589D45C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da6da85c-d240-3bb3-8248-3a8de9713ce4.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 25485 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:08:3f:ca:f0:db:e0:58:9d:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=ba6566b6-025b-47e6-9b34-1b42d6d05107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:07:98:f0:e7:03:45:68:f5:10:2f:78:10:7b: 55:a2:f7:be:82:31:46:5a:ec:06:a6:0a:69:14:6e: cf:51:54:65:45:8e:8c:6e:a5:b5:95:36:6b:8d:82: 26:8e:af:ce:36:26:3f:eb:81:3b:ca:f6:20:e2:95: f8:2d:49:c6:e9:2d:11:00:37:60:44:25:2d:54:c4: ec:57:5e:07:f1:24:b5:87:46:ff:d6:02:eb:a3:96: 9b:2c:e0:c0:48:fd:4b:f1:bf:74:40:08:fb:86:ae: ac:ac:00:cf:a9:ff:45:1d:3f:b3:d0:e0:18:6d:8d: 43:90:b2:72:b8:3d:54:54:a8:a3:a2:b8:a4:b1:24: 8b:ba:0e:c2:dc:12:4b:dc:07:58:bb:32:b1:9d:89: 78:99:14:f4:5c:af:e6:52:02:af:5b:30:10:04:5f: 19:aa:c4:04:e6:a7:8d:37:5c:b2:54:0a:ee:7b:68: 28:40:be:64:1f:4f:a1:2a:e4:20:c0:a9:80:28:0e: 93:70:42:81:61:77:30:3f:99:f0:24:cf:81:08:0a: c5:5e:bd:d1:d4:ac:57:46:73:ac:91:6d:02:49:84: 23:28:55:63:24:cf:a8:ba:de:f3:fb:bd:ee:e5:9f: 4e:5d:3e:f3:64:de:e6:8d:d7:31:e5:1c:60:99:2b: 3b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C3:8F:81:13:BA:C9:7E:63:C0:6D:92:50:65:7B:9A:3A:F0:AB:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da6da85c-d240-3bb3-8248-3a8de9713ce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:18:a9:f8:ce:e3:96:ba:7c:db:9c:52:c2:47:57:ac:ca:88: 65:41:d7:f7:d6:76:cf:0a:6e:0a:ff:2f:6d:67:2d:33:68:d9: 99:79:80:2c:9f:2f:9b:05:1b:05:2d:29:d9:a9:73:05:cd:d1: 55:1e:70:df:69:3e:b5:7a:51:3a:64:83:73:35:90:9f:e4:05: 6e:89:fd:4d:77:0a:fa:f2:8d:ce:09:66:f1:f3:c1:85:b0:ea: df:e2:b7:d9:22:c1:07:a9:51:5a:39:05:e6:91:23:a9:19:c6: 1b:bf:41:ad:c1:18:7f:fa:ed:ce:5d:b2:37:c6:a9:82:be:07: d3:bb:5a:f3:50:ad:64:c3:48:6f:4c:2b:96:f5:cd:22:82:6b: 4d:fb:23:7a:89:94:74:aa:e8:be:c0:28:1c:b5:38:88:e1:cf: 00:72:66:c7:e8:1a:c6:b8:3d:83:e6:ba:c6:aa:36:ef:c1:67: 90:0d:cd:3d:bd:02:25:22:60:7c:60:7d:71:a6:00:21:32:4c: 54:84:1e:af:8a:6a:6f:69:bf:54:98:95:fd:af:3a:78:af:ba: e7:0c:72:f4:17:ad:bc:eb:c1:85:5c:e8:02:d5:cf:d4:bd:80: ba:21:30:b4:f6:ab:36:a3:93:a7:c3:68:47:1d:83:92:7c:b5: d6:ed:ca:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2gg/yvDb4FidRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk YmE2NTY2YjYtMDI1Yi00N2U2LTliMzQtMWI0MmQ2ZDA1MTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgeY8OcDRWj1EC94EHtVove+gjFGWuwGpgpp FG7PUVRlRY6MbqW1lTZrjYImjq/ONiY/64E7yvYg4pX4LUnG6S0RADdgRCUtVMTs V14H8SS1h0b/1gLro5abLODASP1L8b90QAj7hq6srADPqf9FHT+z0OAYbY1DkLJy uD1UVKijoriksSSLug7C3BJL3AdYuzKxnYl4mRT0XK/mUgKvWzAQBF8ZqsQE5qeN N1yyVArue2goQL5kH0+hKuQgwKmAKA6TcEKBYXcwP5nwJM+BCArFXr3R1KxXRnOs kW0CSYQjKFVjJM+out7z+73u5Z9OXT7zZN7mjdcx5RxgmSs7mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrDj4ETusl+Y8BtklBle5o68KuiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGE2ZGE4NWMtZDI0MC0z YmIzLTgyNDgtM2E4ZGU5NzEzY2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8YqfjO45a6fNucUsJHV6zKiGVB1/fWds8Kbgr/L21nLTNo2Zl5gCyf L5sFGwUtKdmpcwXN0VUecN9pPrV6UTpkg3M1kJ/kBW6J/U13Cvryjc4JZvHzwYWw 6t/it9kiwQepUVo5BeaRI6kZxhu/Qa3BGH/67c5dsjfGqYK+B9O7WvNQrWTDSG9M K5b1zSKCa037I3qJlHSq6L7AKBy1OIjhzwByZsfoGsa4PYPmusaqNu/BZ5ANzT29 AiUiYHxgfXGmACEyTFSEHq+Kam9pv1SYlf2vOnivuucMcvQXrbzrwYVc6ALVz9S9 gLohMLT2qzajk6fDaEcdg5J8tdbtyio= -----END CERTIFICATE-----Generated at Thu Mar 26 11:17:50 2026 by rpki-client