$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd455da0-bdef-3129-8691-c9920dae59f1.roa File: dd455da0-bdef-3129-8691-c9920dae59f1.roa (raw, json) Hash identifier: tE06qySeNxhBYaKilxmymhetcEazHDt1RnXQw86emaU= Subject key identifier: 62:A9:DA:8B:6B:A1:A3:7C:07:F3:03:CB:F4:98:7A:F0:F5:DC:54:9E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA38295A08C6449090A310 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd455da0-bdef-3129-8691-c9920dae59f1.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 397194 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:38:29:5a:08:c6:44:90:90:a3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=d32d5f38-1b4b-4d67-a70a-799f4025248a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:05:2b:01:69:fe:d0:68:6f:c1:fb:ae:2c:84: 97:e0:9a:a5:32:8e:08:e1:af:91:1f:ee:44:61:6e: 55:70:42:2f:69:94:81:70:db:82:dc:60:88:05:22: 12:22:3b:43:c0:4a:43:10:4d:32:53:01:9a:21:78: fb:73:85:2c:7d:e3:bb:d0:ba:a6:25:2f:1c:54:a1: bc:3c:f3:ad:20:85:41:58:56:d1:50:d3:70:fd:70: 2a:81:cc:09:df:13:9d:50:4c:cd:90:61:fc:06:5a: 6d:b0:15:08:8e:67:b2:ce:46:f1:a0:f6:cb:14:6a: c9:47:da:d1:e9:95:96:78:b2:2b:7a:1d:c4:53:a6: 1b:c1:7f:8b:7f:b2:cc:85:6d:c3:15:e2:bf:16:4f: 0f:15:5c:ef:99:09:ef:11:c1:cb:3f:1f:05:ea:ad: 0f:d7:f5:e5:4b:2e:1d:0b:b1:e8:6f:99:5e:f6:51: ad:64:d1:e5:c3:c1:c6:da:bc:8d:64:60:96:4c:aa: 18:6d:50:63:63:2c:7b:8f:29:64:62:69:d8:55:11: 4b:6c:4d:24:6a:87:bf:34:cf:79:a3:14:84:95:9f: a6:a2:ed:8d:df:04:0a:43:60:35:00:83:0d:68:1d: 99:fc:88:88:57:5b:43:9b:8f:61:f3:37:51:c8:4d: 96:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A9:DA:8B:6B:A1:A3:7C:07:F3:03:CB:F4:98:7A:F0:F5:DC:54:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd455da0-bdef-3129-8691-c9920dae59f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:bf:80:d2:17:32:86:e5:56:74:93:47:ab:53:ff:ea:75:cc: c5:55:35:e3:34:f2:c4:d7:84:4d:d1:cc:f2:4d:cf:1d:a9:7d: a2:b6:bd:fb:6f:10:b6:56:9d:7e:57:00:73:05:2c:76:9e:66: f7:44:5a:60:56:51:4a:0a:64:5c:fa:2c:d6:83:e8:9c:eb:52: 03:79:80:b4:76:a9:ec:ee:32:08:cb:7b:f7:55:09:d1:73:cd: e5:55:0e:e5:82:e7:5a:dd:3b:b8:d2:c3:99:3f:ff:83:5e:f1: f6:a1:c7:fd:c0:f6:d4:1a:29:13:a6:2b:88:80:ef:59:c5:81: 64:a2:d3:6d:ce:3f:29:1e:bd:b8:a4:49:d3:33:3a:11:e9:3e: 6a:db:85:88:b2:26:a6:8b:d8:7f:2e:88:35:60:0d:97:80:af: 1b:1f:87:a4:e8:da:c7:3a:c5:07:1e:39:3b:d2:a0:b2:28:24: 5e:3f:f3:2b:07:c3:59:81:b7:74:8f:a8:6a:2f:f8:65:ff:81: 6e:f2:ca:f3:57:10:25:a1:a3:41:b9:77:36:e9:70:21:1c:a7: 79:4b:57:35:6d:b9:4b:31:04:3f:0d:6c:b4:b1:1b:07:5b:40: 57:d0:5e:76:b9:72:3b:99:d7:3c:79:94:9e:e4:c0:84:08:7e: 84:fc:23:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jgpWgjGRJCQoxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZDMyZDVmMzgtMWI0Yi00ZDY3LWE3MGEtNzk5ZjQwMjUyNDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wUrAWn+0GhvwfuuLISX4JqlMo4I4a+RH+5E YW5VcEIvaZSBcNuC3GCIBSISIjtDwEpDEE0yUwGaIXj7c4UsfeO70LqmJS8cVKG8 PPOtIIVBWFbRUNNw/XAqgcwJ3xOdUEzNkGH8BlptsBUIjmeyzkbxoPbLFGrJR9rR 6ZWWeLIreh3EU6YbwX+Lf7LMhW3DFeK/Fk8PFVzvmQnvEcHLPx8F6q0P1/XlSy4d C7Hob5le9lGtZNHlw8HG2ryNZGCWTKoYbVBjYyx7jylkYmnYVRFLbE0kaoe/NM95 oxSElZ+mou2N3wQKQ2A1AIMNaB2Z/IiIV1tDm49h8zdRyE2WNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKp2otroaN8B/MDy/SYevD13FSeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGQ0NTVkYTAtYmRlZi0z MTI5LTg2OTEtYzk5MjBkYWU1OWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADO/gNIXMoblVnSTR6tT/+p1zMVVNeM08sTXhE3RzPJNzx2pfaK2vftv ELZWnX5XAHMFLHaeZvdEWmBWUUoKZFz6LNaD6JzrUgN5gLR2qezuMgjLe/dVCdFz zeVVDuWC51rdO7jSw5k//4Ne8fahx/3A9tQaKROmK4iA71nFgWSi023OPykevbik SdMzOhHpPmrbhYiyJqaL2H8uiDVgDZeArxsfh6To2sc6xQceOTvSoLIoJF4/8ysH w1mBt3SPqGov+GX/gW7yyvNXECWho0G5dzbpcCEcp3lLVzVtuUsxBD8NbLSxGwdb QFfQXna5cjuZ1zx5lJ7kwIQIfoT8I7g= -----END CERTIFICATE-----Generated at Thu Mar 26 14:18:10 2026 by rpki-client