$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4/1a2222ab-efdf-3b3d-8ae6-7d398b840f66.roa File: 1a2222ab-efdf-3b3d-8ae6-7d398b840f66.roa (raw, json) Hash identifier: 1q53P4g5bIvBVvbC9n3g5o6KF0MVT6YUTq7Z60tnsAk= Subject key identifier: C6:41:5B:AF:4B:51:88:13:DC:1D:BE:17:35:C5:ED:7C:90:A5:E5:3A Certificate issuer: /CN=ae28425a-59dd-4da2-864c-2b324303abb4 Certificate serial: 010D0C9F4328584D5024E5F0A55ED4B2C5067CB0 Authority key identifier: 43:18:C3:87:2F:B6:7B:A0:1E:FD:88:8B:4F:BC:81:05:14:3D:BB:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4/1a2222ab-efdf-3b3d-8ae6-7d398b840f66.roa Signing time: Sat 28 Mar 2026 01:00:31 +0000 ROA not before: Sat 28 Mar 2026 01:00:31 +0000 ROA not after: Fri 26 Jun 2026 01:00:31 +0000 asID: 54794 IP address blocks: 216.235.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4/ae28425a-59dd-4da2-864c-2b324303abb4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4/ae28425a-59dd-4da2-864c-2b324303abb4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:50:24:e5:f0:a5:5e:d4:b2:c5:06:7c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae28425a-59dd-4da2-864c-2b324303abb4 Validity Not Before: Mar 28 01:00:31 2026 GMT Not After : Jun 26 01:00:31 2026 GMT Subject: CN=cef858ba-3ef0-433d-9d1e-f796cf1d89f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9c:ae:8b:27:95:b8:20:ae:b5:51:83:32:8f: 68:4a:63:28:05:c1:8e:5c:0d:27:28:7f:31:e7:69: 13:a7:f4:db:80:9c:c2:8c:1e:00:9c:d1:7b:e1:0b: ba:ef:88:ea:f5:92:7a:c3:02:9f:7d:c8:16:c6:01: f6:92:53:ed:64:79:9b:1b:90:9c:fd:f4:33:6c:35: 98:2d:ee:f3:0c:dd:80:4d:04:de:98:5c:56:e9:cb: 68:14:31:91:e7:ad:44:79:71:88:21:f3:b6:e0:c8: 65:3f:06:ac:2d:b7:6a:bf:1c:7c:0b:a0:0e:2d:2f: ad:26:a4:ec:61:bc:90:19:97:d2:65:9d:1d:bc:39: a3:11:02:01:13:e0:b9:83:de:26:2f:ae:97:f0:a7: 07:2c:78:52:d4:31:3a:e4:4c:b7:53:85:3a:cc:14: fd:d5:84:b4:d8:d8:d3:87:b0:ed:82:a8:87:ce:b7: e9:24:79:e3:5c:cb:d6:7c:0f:f7:35:02:f7:35:02: ed:d7:11:97:de:e7:51:5c:2a:5b:6a:ba:83:6a:f5: 38:76:77:5b:5d:0d:58:b1:be:72:31:8b:e0:ae:a8: a0:e4:8a:73:33:ec:21:6a:e1:d3:3c:22:0c:54:bf: 43:8c:b3:49:14:f9:75:f4:3f:0b:72:ee:8b:8b:d4: d1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:41:5B:AF:4B:51:88:13:DC:1D:BE:17:35:C5:ED:7C:90:A5:E5:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4/1a2222ab-efdf-3b3d-8ae6-7d398b840f66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4/ae28425a-59dd-4da2-864c-2b324303abb4.crl X509v3 Authority Key Identifier: keyid:43:18:C3:87:2F:B6:7B:A0:1E:FD:88:8B:4F:BC:81:05:14:3D:BB:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4.cer sbgp-ipAddrBlock: critical IPv4: 216.235.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:38:6f:32:65:78:49:c8:b2:8b:c8:a2:bf:c7:3e:96:d1:e5: 68:3d:47:b2:ee:7b:0a:55:15:d4:58:32:21:d9:c2:9c:b8:d3: cd:0a:2b:f2:62:a0:ed:88:a9:c2:81:d0:2e:d2:f3:ae:b8:d7: d8:a4:56:14:11:2d:af:b2:51:56:d8:e8:81:05:35:c8:5e:61: 51:86:34:b4:11:31:5e:d2:b7:7d:9e:0b:8c:d9:c8:5c:00:87: 6b:67:79:ed:6a:d1:0f:b7:81:2f:78:e5:84:93:73:87:71:6a: 73:77:9f:55:f9:67:76:3f:ee:15:39:89:19:34:91:30:10:a4: c4:e5:e6:0a:fd:5a:c8:ca:4b:83:f4:27:b1:bd:7f:a9:b9:4f: 01:f9:08:ab:eb:0f:93:e2:b7:7d:09:fc:43:06:9f:5f:d2:b9: c6:36:dd:09:79:a6:8e:86:19:3a:0e:cf:55:d9:0c:53:4a:b3: 89:b0:4e:f9:81:84:92:03:b1:73:8b:7c:89:fe:47:0a:b9:67: d4:3b:63:a4:9d:02:e4:e8:7a:3c:db:a8:11:98:c8:2a:65:88: fc:88:45:df:3a:47:d9:b6:bb:78:ad:f5:a4:fe:0c:68:66:70: 5b:eb:f7:15:8f:23:79:25:45:16:e2:46:2e:7f:e5:76:22:ca: c9:66:19:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1QJOXwpV7UssUGfLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWUyODQyNWEtNTlkZC00ZGEyLTg2NGMtMmIzMjQzMDNh YmI0MB4XDTI2MDMyODAxMDAzMVoXDTI2MDYyNjAxMDAzMVowLzEtMCsGA1UEAxMk Y2VmODU4YmEtM2VmMC00MzNkLTlkMWUtZjc5NmNmMWQ4OWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppyuiyeVuCCutVGDMo9oSmMoBcGOXA0nKH8x 52kTp/TbgJzCjB4AnNF74Qu674jq9ZJ6wwKffcgWxgH2klPtZHmbG5Cc/fQzbDWY Le7zDN2ATQTemFxW6ctoFDGR561EeXGIIfO24MhlPwasLbdqvxx8C6AOLS+tJqTs YbyQGZfSZZ0dvDmjEQIBE+C5g94mL66X8KcHLHhS1DE65Ey3U4U6zBT91YS02NjT h7DtgqiHzrfpJHnjXMvWfA/3NQL3NQLt1xGX3udRXCpbarqDavU4dndbXQ1Ysb5y MYvgrqig5IpzM+whauHTPCIMVL9DjLNJFPl19D8Lcu6Li9TRNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZBW69LUYgT3B2+FzXF7XyQpeU6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZTI4 NDI1YS01OWRkLTRkYTItODY0Yy0yYjMyNDMwM2FiYjQvMWEyMjIyYWItZWZkZi0z YjNkLThhZTYtN2QzOThiODQwZjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWUyODQyNWEtNTlkZC00ZGEyLTg2 NGMtMmIzMjQzMDNhYmI0L2FlMjg0MjVhLTU5ZGQtNGRhMi04NjRjLTJiMzI0MzAz YWJiNC5jcmwwHwYDVR0jBBgwFoAUQxjDhy+2e6Ae/YiLT7yBBRQ9u58wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZTI4NDI1YS01OWRkLTRkYTItODY0Yy0yYjMy NDMwM2FiYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADo4bzJleEnIsovIor/HPpbR5Wg9R7LuewpVFdRYMiHZwpy4080KK/Ji oO2IqcKB0C7S866419ikVhQRLa+yUVbY6IEFNcheYVGGNLQRMV7St32eC4zZyFwA h2tnee1q0Q+3gS945YSTc4dxanN3n1X5Z3Y/7hU5iRk0kTAQpMTl5gr9WsjKS4P0 J7G9f6m5TwH5CKvrD5Pit30J/EMGn1/SucY23Ql5po6GGToOz1XZDFNKs4mwTvmB hJIDsXOLfIn+Rwq5Z9Q7Y6SdAuToejzbqBGYyCpliPyIRd86R9m2u3it9aT+DGhm cFvr9xWPI3klRRbiRi5/5XYiyslmGeU= -----END CERTIFICATE-----Generated at Fri Apr 17 12:55:38 2026 by rpki-client