$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c33c85a0-bfdc-32e0-9aa5-abc99b377c1e.roa File: c33c85a0-bfdc-32e0-9aa5-abc99b377c1e.roa (raw, json) Hash identifier: IYspy6Riuteok37AalgaLLIsejzl5jQxr9MGQHh4xLE= Subject key identifier: 6A:54:DF:E9:75:CD:22:4A:5E:79:D1:1B:13:DE:8C:10:75:48:A8:9B Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584D3B34E3F5FA4A7F823ED04600 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c33c85a0-bfdc-32e0-9aa5-abc99b377c1e.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 33659 IP address blocks: 158.62.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:e3:f5:fa:4a:7f:82:3e:d0:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=7b5763d1-6d8e-4991-a6e3-8958aed37042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:13:cd:10:6b:0b:eb:68:eb:a4:da:24:ca:ed: f8:35:4d:22:6c:82:79:85:ca:7d:4f:fb:a9:96:4f: 30:fe:be:f2:f6:ac:bd:a8:11:fd:4b:11:cf:fc:86: 87:38:4c:19:6f:80:dc:6b:5b:b2:34:0b:46:68:07: 16:bd:4b:ea:4d:e4:51:dd:1b:cf:a9:29:eb:16:18: cf:6e:99:84:0d:62:a4:2b:01:69:ae:36:04:b2:76: f1:12:31:d7:81:77:00:27:0a:94:91:77:cc:63:90: 4a:37:39:49:cd:60:88:ee:0e:77:ed:03:32:a9:05: 51:b0:ea:70:de:15:a8:34:07:c6:ce:c7:9b:e9:e7: 71:47:34:70:68:79:2d:5f:8f:f4:ff:ac:d8:42:68: 6f:95:dd:d2:f9:f0:d3:29:ba:f6:f4:b1:06:d5:e7: 83:59:eb:ef:ee:0b:e5:e1:f1:ad:9e:fa:65:33:84: 90:a3:7f:10:ef:06:6b:58:7e:08:e7:3a:b2:ce:b3: b9:14:66:f1:4c:86:24:22:f9:5b:b4:df:87:40:ba: e7:55:d6:d8:e4:18:37:5b:26:9d:b7:54:b3:6a:bf: 3d:48:8a:3e:15:b7:cc:4a:65:05:b8:5e:51:20:99: 99:ad:f7:c7:91:66:98:43:65:1b:df:af:50:d5:61: cf:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:54:DF:E9:75:CD:22:4A:5E:79:D1:1B:13:DE:8C:10:75:48:A8:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c33c85a0-bfdc-32e0-9aa5-abc99b377c1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 158.62.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:75:9f:67:c5:38:f1:09:7f:21:9d:aa:42:24:eb:cf:98:79: 4a:d8:6c:18:3a:fd:d1:21:f9:93:95:64:60:a2:c4:76:d9:98: 8c:7d:d3:b5:bf:39:c3:1e:64:c4:2e:4b:d0:ee:a1:c4:fc:35: 4d:3a:43:ae:8a:f1:42:2b:41:81:a4:a4:9a:d5:6b:b3:8f:f5: ca:aa:d7:f3:d9:78:95:52:b0:15:75:66:19:6d:fe:c2:d0:6e: 70:1e:d5:16:4b:05:f5:f8:1c:13:b6:e5:d0:c0:a0:34:4b:74: 89:1f:c0:72:aa:ad:5a:87:e0:3e:8c:50:43:58:fa:ef:42:5e: f3:c8:52:5e:49:f4:0b:3d:82:78:8a:ee:59:a7:d9:d4:70:7e: 3b:37:2f:0f:87:fa:a6:3c:b2:fb:51:f5:b3:27:09:6d:3f:37: c4:cf:46:e7:5f:15:0c:c2:c6:79:c0:35:f3:b9:36:6c:33:9e: 09:d3:5f:d1:9d:4e:cd:11:6e:cc:94:63:cd:b3:f6:6c:b8:37: 27:3c:30:3c:ca:63:03:01:0c:ae:63:e4:70:8e:0c:ab:11:9b: 6d:28:f2:5a:6f:b5:0f:a5:81:4b:50:42:a4:26:e6:d9:e4:ce: a8:55:31:c8:d7:79:04:84:aa:e7:97:95:9e:52:d2:f1:fa:5c: b4:7c:aa:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NOP1+kp/gj7QRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk N2I1NzYzZDEtNmQ4ZS00OTkxLWE2ZTMtODk1OGFlZDM3MDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRPNEGsL62jrpNokyu34NU0ibIJ5hcp9T/up lk8w/r7y9qy9qBH9SxHP/IaHOEwZb4Dca1uyNAtGaAcWvUvqTeRR3RvPqSnrFhjP bpmEDWKkKwFprjYEsnbxEjHXgXcAJwqUkXfMY5BKNzlJzWCI7g537QMyqQVRsOpw 3hWoNAfGzseb6edxRzRwaHktX4/0/6zYQmhvld3S+fDTKbr29LEG1eeDWevv7gvl 4fGtnvplM4SQo38Q7wZrWH4I5zqyzrO5FGbxTIYkIvlbtN+HQLrnVdbY5Bg3Wyad t1Szar89SIo+FbfMSmUFuF5RIJmZrffHkWaYQ2Ub369Q1WHPWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpU3+l1zSJKXnnRGxPejBB1SKibMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYzMzYzg1YTAtYmZkYy0z MmUwLTlhYTUtYWJjOTliMzc3YzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA51n2fFOPEJfyGdqkIk68+YeUrYbBg6/dEh+ZOVZGCixHbZmIx907W/ OcMeZMQuS9DuocT8NU06Q66K8UIrQYGkpJrVa7OP9cqq1/PZeJVSsBV1Zhlt/sLQ bnAe1RZLBfX4HBO25dDAoDRLdIkfwHKqrVqH4D6MUENY+u9CXvPIUl5J9As9gniK 7lmn2dRwfjs3Lw+H+qY8svtR9bMnCW0/N8TPRudfFQzCxnnANfO5NmwzngnTX9Gd Ts0RbsyUY82z9my4Nyc8MDzKYwMBDK5j5HCODKsRm20o8lpvtQ+lgUtQQqQm5tnk zqhVMcjXeQSEqueXlZ5S0vH6XLR8qmE= -----END CERTIFICATE-----Generated at Thu Mar 26 05:55:29 2026 by rpki-client