$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dec8aff1-90a6-3cdf-a094-ceacaf3020ab.roa File: dec8aff1-90a6-3cdf-a094-ceacaf3020ab.roa (raw, json) Hash identifier: qCzZD+pp3z5Grb1kHHKo+eyvWdbeMDoK5jJUIWVlaIs= Subject key identifier: 57:9E:77:75:E5:31:BA:2E:45:84:09:C9:CC:9A:28:72:05:8A:79:FD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA3985F416DE06DFC88F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dec8aff1-90a6-3cdf-a094-ceacaf3020ab.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 36624 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:39:85:f4:16:de:06:df:c8:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=38f6a4a3-936a-41ee-864c-885cd2562807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9f:e1:74:b5:78:48:a5:7f:90:2f:3c:bb:67: b8:46:29:00:7b:22:08:4c:1c:97:2e:99:18:5d:7e: aa:af:f0:e1:6f:43:9a:07:0a:f9:be:cf:37:27:95: 96:db:dd:82:bc:0e:fd:50:21:66:84:c8:c3:57:11: c4:f7:8d:28:b3:17:6f:08:06:d0:0d:62:67:7e:f0: 92:bf:56:2d:e2:4a:db:ae:c9:69:2d:b4:a6:26:64: 25:4a:3e:d7:c3:2e:4d:23:ba:25:ee:41:ec:8c:06: 4f:98:86:12:fa:07:ad:30:4e:07:be:6f:c0:ed:31: 78:73:a5:01:10:cf:a0:dc:3a:5d:1d:bc:e8:7b:4d: 4c:e4:64:ec:1a:1b:45:7d:cf:51:9b:7b:dc:b8:17: 01:3d:49:9c:8f:aa:0d:d6:8d:84:1c:69:80:87:b5: 25:22:07:59:63:5e:73:20:d8:85:30:c5:bf:da:0f: 48:28:69:36:84:57:99:b4:23:b8:a6:b4:99:8f:ba: 59:72:df:56:5b:5e:55:35:1b:8d:5a:9f:bd:52:8d: f8:ea:5d:d7:b5:e0:bf:05:a0:a9:38:cc:4a:57:5a: 31:94:d0:41:a4:71:da:9d:5e:74:33:90:5d:15:08: 74:0a:58:ac:92:a7:21:71:90:4f:f5:23:7d:a9:16: 48:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9E:77:75:E5:31:BA:2E:45:84:09:C9:CC:9A:28:72:05:8A:79:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dec8aff1-90a6-3cdf-a094-ceacaf3020ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:4f:c0:51:43:3b:bf:46:9e:f5:db:1f:ea:08:68:d4:d2:a3: b9:63:dd:5a:4d:0d:46:82:3e:07:5d:7e:98:85:14:0b:5a:0c: 0a:ee:ca:06:c4:00:26:02:ea:4b:03:c0:28:75:56:85:1f:c8: cc:84:fd:de:86:4c:24:29:14:aa:b5:a1:23:a5:3f:1f:a6:cb: 5c:88:ea:ad:e2:1b:c9:cf:c5:5c:f9:0b:33:0e:cf:f1:77:29: 8a:e7:07:dc:4d:22:7a:b8:23:64:49:d2:3c:05:55:d2:f8:3c: 83:0e:11:bb:57:d5:af:3b:7c:e7:76:6a:05:2c:89:78:9b:ae: 10:2a:86:f7:1c:71:c4:6d:9c:e0:8a:7d:0d:96:1a:81:dd:25: 12:d8:a9:91:f5:df:b7:1c:5a:39:db:eb:87:6e:ab:8a:16:1a: 3a:52:52:b1:96:8b:6d:d0:64:83:19:9f:04:3c:ac:4f:28:01: 7d:60:e1:a2:7b:ab:b0:d7:52:d2:54:07:be:e8:18:7b:79:26: c3:45:5c:25:2e:44:d6:ad:49:94:b0:ca:23:aa:5f:39:5f:f5: d8:b7:08:20:8d:11:8b:73:14:a0:32:ca:5d:8c:49:09:9b:15: dd:87:3d:48:ca:96:8f:1b:06:8a:df:69:6a:3b:68:e9:15:5d: c7:a1:10:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jmF9BbeBt/Ij4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk MzhmNmE0YTMtOTM2YS00MWVlLTg2NGMtODg1Y2QyNTYyODA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ/hdLV4SKV/kC88u2e4RikAeyIITByXLpkY XX6qr/Dhb0OaBwr5vs83J5WW292CvA79UCFmhMjDVxHE940osxdvCAbQDWJnfvCS v1Yt4krbrslpLbSmJmQlSj7Xwy5NI7ol7kHsjAZPmIYS+getME4Hvm/A7TF4c6UB EM+g3DpdHbzoe01M5GTsGhtFfc9Rm3vcuBcBPUmcj6oN1o2EHGmAh7UlIgdZY15z INiFMMW/2g9IKGk2hFeZtCO4prSZj7pZct9WW15VNRuNWp+9Uo346l3XteC/BaCp OMxKV1oxlNBBpHHanV50M5BdFQh0CliskqchcZBP9SN9qRZIywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFeed3XlMbouRYQJycyaKHIFinn9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGVjOGFmZjEtOTBhNi0z Y2RmLWEwOTQtY2VhY2FmMzAyMGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5PwFFDO79GnvXbH+oIaNTSo7lj3VpNDUaCPgddfpiFFAtaDAruygbE ACYC6ksDwCh1VoUfyMyE/d6GTCQpFKq1oSOlPx+my1yI6q3iG8nPxVz5CzMOz/F3 KYrnB9xNInq4I2RJ0jwFVdL4PIMOEbtX1a87fOd2agUsiXibrhAqhvccccRtnOCK fQ2WGoHdJRLYqZH137ccWjnb64duq4oWGjpSUrGWi23QZIMZnwQ8rE8oAX1g4aJ7 q7DXUtJUB77oGHt5JsNFXCUuRNatSZSwyiOqXzlf9di3CCCNEYtzFKAyyl2MSQmb Fd2HPUjKlo8bBorfaWo7aOkVXcehEK0= -----END CERTIFICATE-----Generated at Thu Mar 26 16:53:40 2026 by rpki-client