$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed6f3cf9-c205-3b41-b0d4-94ba90b28de5.roa File: ed6f3cf9-c205-3b41-b0d4-94ba90b28de5.roa (raw, json) Hash identifier: Ts0ac+bDIGd1GuOw5CKweSeEs9gAWpRZ61hewnIRYPQ= Subject key identifier: C4:5D:FA:96:C9:17:28:58:8B:6C:9A:77:C3:23:F7:77:D9:0A:42:3A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2BDA14B69566F4009E45B7D0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed6f3cf9-c205-3b41-b0d4-94ba90b28de5.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 32651 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:14:b6:95:66:f4:00:9e:45:b7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=22b641a2-6efc-4922-a1dc-e0233495f5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:de:c9:08:73:5e:97:7e:3a:f2:87:4c:97:d8: f5:2d:8d:1f:5e:e3:f4:8f:e2:e3:c1:2b:f1:79:12: ad:cd:a6:f3:12:2e:7c:e7:ca:25:43:f7:6a:cb:16: b8:fa:85:a1:d1:5a:06:91:75:d7:c1:51:5a:b9:84: 61:25:df:3b:03:62:99:4c:a8:ad:15:e3:60:ac:30: ca:f4:c7:15:cc:ab:20:f7:b8:7f:25:1f:8c:49:7f: 52:22:f9:be:6b:7f:06:9e:53:35:fe:07:e0:d9:07: bb:19:11:24:3a:3f:93:53:b0:3f:b0:4e:e1:4f:0a: 16:f4:f0:02:6f:5b:49:33:3f:ec:fc:57:55:02:3a: 1c:34:6f:6e:fb:bd:18:90:70:b1:59:fe:f1:ae:bc: c2:68:d0:08:96:35:39:30:41:75:d9:6f:fb:4c:e0: d1:59:a0:c9:c5:0e:f2:58:88:a7:b3:2a:6e:d7:b0: 2a:59:1c:b8:df:43:23:0e:ee:44:5e:b8:0a:ba:b2: bb:0b:b4:97:e5:be:a7:21:f6:f6:df:c9:af:99:b2: a8:4b:b0:dd:27:60:a4:40:e7:77:1e:76:cf:7e:02: 2b:4a:ca:fe:db:36:28:27:02:50:34:87:e7:07:0f: 2d:29:70:e3:77:71:84:f4:bc:41:b8:9a:e6:3a:27: f9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5D:FA:96:C9:17:28:58:8B:6C:9A:77:C3:23:F7:77:D9:0A:42:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed6f3cf9-c205-3b41-b0d4-94ba90b28de5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:e6:63:e4:16:7e:cf:86:a4:d2:22:0c:bf:19:e1:53:2f:ee: 95:c4:99:76:f9:46:94:33:f2:3b:ff:9f:4a:f4:ba:5a:14:1b: 70:9b:82:0c:45:37:a5:88:b2:46:fc:ef:62:97:aa:5a:c7:84: 1b:71:a8:f2:28:1b:f4:7b:9e:79:f8:32:ee:8e:24:f1:27:46: 21:4e:03:15:ea:56:a2:87:93:b6:8e:96:13:c4:00:b8:2e:2d: ef:65:ac:7d:81:95:49:6f:3e:e0:09:f1:3a:67:4b:37:e3:da: 0f:17:03:a9:6d:f2:c3:91:8e:8c:4c:20:dd:28:3f:04:d8:0d: 36:b6:c9:a9:49:dc:84:a2:55:43:4a:3f:3f:c2:77:f4:5f:6d: 2c:ca:fe:fb:44:db:39:1b:ee:18:6d:ea:00:1a:1b:28:58:54: 58:ff:08:26:ed:a1:2e:79:f3:c4:01:95:2e:a7:42:75:fb:30: 97:4a:a5:79:9b:a0:31:83:cb:11:c5:ed:c6:66:73:e6:5b:55: aa:47:b1:23:8f:0e:c0:b3:b6:65:9f:7b:4f:e2:0c:05:0d:ee: 8e:1e:cf:58:4a:56:64:ec:7a:6a:b0:00:7b:32:94:a8:e0:d9: 73:78:9a:f0:17:3a:24:f7:d5:15:e3:a7:74:86:55:d3:9b:58: 60:8a:89:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hS2lWb0AJ5Ft9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk MjJiNjQxYTItNmVmYy00OTIyLWExZGMtZTAyMzM0OTVmNWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm97JCHNel3468odMl9j1LY0fXuP0j+LjwSvx eRKtzabzEi5858olQ/dqyxa4+oWh0VoGkXXXwVFauYRhJd87A2KZTKitFeNgrDDK 9McVzKsg97h/JR+MSX9SIvm+a38GnlM1/gfg2Qe7GREkOj+TU7A/sE7hTwoW9PAC b1tJMz/s/FdVAjocNG9u+70YkHCxWf7xrrzCaNAIljU5MEF12W/7TODRWaDJxQ7y WIinsypu17AqWRy430MjDu5EXrgKurK7C7SX5b6nIfb238mvmbKoS7DdJ2CkQOd3 HnbPfgIrSsr+2zYoJwJQNIfnBw8tKXDjd3GE9LxBuJrmOif5HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRd+pbJFyhYi2yad8Mj93fZCkI6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWQ2ZjNjZjktYzIwNS0z YjQxLWIwZDQtOTRiYTkwYjI4ZGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPmY+QWfs+GpNIiDL8Z4VMv7pXEmXb5RpQz8jv/n0r0uloUG3CbggxF N6WIskb872KXqlrHhBtxqPIoG/R7nnn4Mu6OJPEnRiFOAxXqVqKHk7aOlhPEALgu Le9lrH2BlUlvPuAJ8TpnSzfj2g8XA6lt8sORjoxMIN0oPwTYDTa2yalJ3ISiVUNK Pz/Cd/RfbSzK/vtE2zkb7hht6gAaGyhYVFj/CCbtoS5588QBlS6nQnX7MJdKpXmb oDGDyxHF7cZmc+ZbVapHsSOPDsCztmWfe0/iDAUN7o4ez1hKVmTsemqwAHsylKjg 2XN4mvAXOiT31RXjp3SGVdObWGCKiVM= -----END CERTIFICATE-----Generated at Thu Mar 26 11:37:14 2026 by rpki-client