$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/3228cff3-5298-3d8d-906b-753248f47ed3.roa File: 3228cff3-5298-3d8d-906b-753248f47ed3.roa (raw, json) Hash identifier: uQYThGkxfWGiQnFXjMpNWVigv+I1+RNm0KHsvpY1IUU= Subject key identifier: E5:2D:4C:53:E5:A5:39:F7:46:95:31:6A:FE:AA:46:B6:AC:7A:D7:30 Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F4328584D4D5A3AE209DE329838B1C300 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/3228cff3-5298-3d8d-906b-753248f47ed3.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 150436 IP address blocks: 71.18.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:3a:e2:09:de:32:98:38:b1:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=63e4ac74-c205-4f10-9875-98b44ea7f596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:28:41:c6:93:29:d2:d6:1e:9b:66:20:23:ff: 61:66:70:e6:34:b5:71:f9:76:d1:f1:c1:d3:7e:c8: 08:15:41:36:ad:f2:d4:9f:db:4b:82:cf:5e:30:e3: c1:45:8f:fc:d5:3a:01:12:29:c3:72:91:2f:ca:db: 3e:e9:0a:65:75:61:0c:0d:2d:1c:90:9b:29:6a:b1: 43:0f:75:55:95:2b:17:92:95:48:9d:f4:aa:bf:20: 87:9c:9a:1d:8f:98:da:34:84:56:ea:94:dd:8c:1f: 50:22:8a:3b:28:1a:98:a5:b2:25:fd:b0:33:2c:b3: 76:db:de:08:94:57:48:b1:5a:06:ff:b8:e5:26:9e: b9:a9:4e:18:47:b4:73:5e:2a:b9:61:4d:b8:b2:b2: 58:9f:b2:eb:a9:8b:3a:ba:a0:0e:b6:13:67:e4:b8: 49:29:61:40:29:03:82:8e:c7:09:df:ef:45:97:c4: 1e:e9:03:af:3e:df:4e:57:2b:c7:a0:22:5f:c7:9a: f9:f0:8c:ab:cd:83:32:75:9b:ec:6f:17:e1:61:e1: 39:8e:7f:08:81:d3:dd:26:24:13:e4:24:39:20:7b: 00:09:7e:9c:77:3d:c9:22:49:eb:5b:9f:4c:b7:77: 2e:22:23:75:ff:7a:9f:98:77:18:af:d8:3a:eb:13: 3c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2D:4C:53:E5:A5:39:F7:46:95:31:6A:FE:AA:46:B6:AC:7A:D7:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/3228cff3-5298-3d8d-906b-753248f47ed3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 71.18.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:f1:3e:1b:8f:1d:b1:92:4c:49:5d:5f:75:63:7b:28:5b:b1: fa:09:96:7f:21:70:d1:01:bc:7b:c9:97:f0:b5:23:02:df:2f: 48:5e:dd:3a:f3:4a:f2:9c:39:36:1e:1a:ad:ba:f8:1a:c9:e5: ef:12:5b:c4:94:84:d4:5d:ca:89:af:90:a8:47:87:ad:4f:6b: 67:13:f4:61:97:6d:e7:a8:b4:97:c9:84:df:a0:2b:e3:f8:07: 71:45:d2:5b:10:1b:29:9c:7b:ae:97:f9:9d:da:42:a4:82:f6: 69:30:44:ba:10:79:f8:94:9e:c3:44:b6:97:4e:cf:07:d5:e7: d8:20:71:4b:e2:0e:55:3d:20:ad:da:d4:20:82:db:ea:bf:10: 4d:a5:bd:9d:c9:f9:3d:42:1a:b8:b2:1f:cb:74:cf:ce:c6:4c: f0:03:0f:ac:8f:a9:ba:bb:61:76:81:a3:ec:17:b9:61:44:8a: b9:33:17:61:bc:71:26:9b:e7:11:c9:ff:ee:a0:77:6c:3b:ba: 8a:3c:89:22:1a:69:08:34:43:61:c5:9c:3e:eb:7c:f3:b1:e7: 86:19:7b:25:fe:db:d9:09:82:b2:2e:ea:62:d7:9d:18:df:0e: 40:5b:f2:bc:1d:d2:62:3f:35:3b:08:93:4c:53:c4:27:f4:2f: 97:0f:77:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWjriCd4ymDixwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk NjNlNGFjNzQtYzIwNS00ZjEwLTk4NzUtOThiNDRlYTdmNTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuShBxpMp0tYem2YgI/9hZnDmNLVx+XbR8cHT fsgIFUE2rfLUn9tLgs9eMOPBRY/81ToBEinDcpEvyts+6QpldWEMDS0ckJsparFD D3VVlSsXkpVInfSqvyCHnJodj5jaNIRW6pTdjB9QIoo7KBqYpbIl/bAzLLN2294I lFdIsVoG/7jlJp65qU4YR7RzXiq5YU24srJYn7LrqYs6uqAOthNn5LhJKWFAKQOC jscJ3+9Fl8Qe6QOvPt9OVyvHoCJfx5r58IyrzYMydZvsbxfhYeE5jn8IgdPdJiQT 5CQ5IHsACX6cdz3JIknrW59Mt3cuIiN1/3qfmHcYr9g66xM8PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUtTFPlpTn3RpUxav6qRrasetcwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvMzIyOGNmZjMtNTI5OC0z ZDhkLTkwNmItNzUzMjQ4ZjQ3ZWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxLjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrxPhuPHbGSTEldX3VjeyhbsfoJln8hcNEBvHvJl/C1IwLfL0he3Trz SvKcOTYeGq26+BrJ5e8SW8SUhNRdyomvkKhHh61Pa2cT9GGXbeeotJfJhN+gK+P4 B3FF0lsQGymce66X+Z3aQqSC9mkwRLoQefiUnsNEtpdOzwfV59ggcUviDlU9IK3a 1CCC2+q/EE2lvZ3J+T1CGriyH8t0z87GTPADD6yPqbq7YXaBo+wXuWFEirkzF2G8 cSab5xHJ/+6gd2w7uoo8iSIaaQg0Q2HFnD7rfPOx54YZeyX+29kJgrIu6mLXnRjf DkBb8rwd0mI/NTsIk0xTxCf0L5cPd/c= -----END CERTIFICATE-----Generated at Mon Apr 6 15:30:37 2026 by rpki-client