$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de711909-cd03-3946-8e5c-b3a1fa2db960.roa File: de711909-cd03-3946-8e5c-b3a1fa2db960.roa (raw, json) Hash identifier: l+uvCx/wC+Kc4hxCt8TC4yJyDgoEy5/7hu32yzuAAbc= Subject key identifier: E2:01:B0:D0:29:42:B8:0B:6D:6D:AA:82:D0:5A:DD:1F:3C:C0:70:3D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA095445AC91A230A27980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de711909-cd03-3946-8e5c-b3a1fa2db960.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 396609 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:09:54:45:ac:91:a2:30:a2:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=b28f2681-0e07-4de0-a2e2-805d2ab4a206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7a:e7:f2:36:5d:68:1c:c9:c7:36:a3:c3:52: 41:d3:ac:da:34:7a:34:83:cf:5c:af:52:54:ff:68: bb:5e:78:33:95:45:09:62:79:00:00:14:22:0a:a6: ad:a0:24:c1:4a:cb:2b:05:67:8c:91:b0:54:1e:42: dd:d2:d8:61:98:6a:47:d4:b7:8d:ef:a9:d7:0d:fa: e2:eb:06:97:7f:a9:1f:2f:27:76:b7:f5:ee:41:25: 87:b8:46:01:9c:1e:4d:77:df:66:4e:cd:20:d9:b1: 13:05:a0:b0:f5:1f:ad:da:c3:e2:96:73:01:73:f1: 0b:a1:80:37:e1:56:da:7a:4d:df:98:e8:6d:9c:bf: 0e:7a:11:f9:59:81:29:9e:02:a4:e3:bb:71:01:f2: 1b:34:ff:e5:b4:15:65:c6:f7:33:74:90:3d:a9:7f: 4d:20:40:46:79:22:15:cc:b4:f2:de:45:23:25:a1: d9:05:ee:49:14:cf:6c:af:0a:30:a7:14:d6:01:6b: b9:b2:22:68:a9:cb:89:47:9f:93:48:5f:c9:4c:fb: c0:04:45:b0:9d:4e:e2:24:5b:e2:59:ca:3b:8e:90: 8f:7b:1b:0c:d5:00:dc:c3:8f:f5:e7:28:7d:1b:bc: fb:73:f0:cc:2e:a1:65:ad:ad:a6:a5:07:cd:86:fa: 3c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:01:B0:D0:29:42:B8:0B:6D:6D:AA:82:D0:5A:DD:1F:3C:C0:70:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de711909-cd03-3946-8e5c-b3a1fa2db960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:4d:fe:af:b4:6d:09:97:cc:9a:68:4c:2c:9c:70:5f:22:f9: 3f:90:47:84:71:68:38:aa:a5:60:40:d1:a4:47:b9:f0:64:90: e1:fa:52:1b:f0:bb:fe:c8:a5:9b:33:a5:3f:eb:22:03:e9:5d: a0:d1:ea:2d:60:b4:9e:40:01:f5:86:4c:f0:c8:94:cf:a9:ff: 6b:5f:f1:db:b7:38:62:7f:29:6c:63:0f:e2:40:8f:1f:0c:5e: f3:b0:ad:95:3a:92:84:d5:88:3b:da:ec:98:ab:48:11:6e:84: 51:d9:09:ff:28:bc:71:78:8f:71:3f:4e:80:3c:58:2d:1a:3d: af:e4:36:c6:41:0e:35:cf:c7:0f:2e:5f:a7:43:62:1b:72:bf: 9b:31:ac:01:cb:0d:08:f0:d8:51:50:70:50:5e:e9:06:cf:b0: 26:b7:36:79:a9:a7:eb:77:2c:60:64:6b:18:7a:88:48:ac:58: 6a:d1:f6:d2:2b:a3:30:93:ca:a0:3a:f6:ef:56:a5:1d:4b:2c: 2e:0f:31:4a:d0:d8:77:d8:84:95:9d:43:70:93:25:e8:ba:d4: 1c:b7:05:85:8f:90:4a:26:d5:30:39:b1:50:13:e4:dd:07:7b: 50:1f:28:6b:63:c9:3f:2a:a8:6f:20:26:2f:38:d1:b5:6c:47: 26:81:b2:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2glURayRojCieYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk YjI4ZjI2ODEtMGUwNy00ZGUwLWEyZTItODA1ZDJhYjRhMjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13rn8jZdaBzJxzajw1JB06zaNHo0g89cr1JU /2i7XngzlUUJYnkAABQiCqatoCTBSssrBWeMkbBUHkLd0thhmGpH1LeN76nXDfri 6waXf6kfLyd2t/XuQSWHuEYBnB5Nd99mTs0g2bETBaCw9R+t2sPilnMBc/ELoYA3 4Vbaek3fmOhtnL8OehH5WYEpngKk47txAfIbNP/ltBVlxvczdJA9qX9NIEBGeSIV zLTy3kUjJaHZBe5JFM9srwowpxTWAWu5siJoqcuJR5+TSF/JTPvABEWwnU7iJFvi Wco7jpCPexsM1QDcw4/15yh9G7z7c/DMLqFlra2mpQfNhvo89QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIBsNApQrgLbW2qgtBa3R88wHA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGU3MTE5MDktY2QwMy0z OTQ2LThlNWMtYjNhMWZhMmRiOTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFN/q+0bQmXzJpoTCyccF8i+T+QR4RxaDiqpWBA0aRHufBkkOH6Uhvw u/7IpZszpT/rIgPpXaDR6i1gtJ5AAfWGTPDIlM+p/2tf8du3OGJ/KWxjD+JAjx8M XvOwrZU6koTViDva7JirSBFuhFHZCf8ovHF4j3E/ToA8WC0aPa/kNsZBDjXPxw8u X6dDYhtyv5sxrAHLDQjw2FFQcFBe6QbPsCa3Nnmpp+t3LGBkaxh6iEisWGrR9tIr ozCTyqA69u9WpR1LLC4PMUrQ2HfYhJWdQ3CTJei61By3BYWPkEom1TA5sVAT5N0H e1AfKGtjyT8qqG8gJi840bVsRyaBsgY= -----END CERTIFICATE-----Generated at Thu Mar 26 16:14:08 2026 by rpki-client