$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b838612-a7c4-34ed-8d9a-26249548b1f1.roa File: 0b838612-a7c4-34ed-8d9a-26249548b1f1.roa (raw, json) Hash identifier: kSBYfuqgU/c86lrm1tVdCQlulgWXnof6AMEPLq7f930= Subject key identifier: FC:FA:3E:A9:C9:46:A3:CA:AE:A4:F6:67:26:68:D5:F0:0C:1A:FE:B1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0C1ECBDDB22656F20E649E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b838612-a7c4-34ed-8d9a-26249548b1f1.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 396543 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:cb:dd:b2:26:56:f2:0e:64:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=a8e0c694-6932-45e0-97b6-42b1dd37dc6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:25:07:11:0d:fd:5a:ed:04:75:d2:8e:b8:7f: a4:83:c3:f5:ad:4c:72:2c:62:0b:91:f5:29:c1:d3: b9:be:04:2d:52:38:14:44:c1:23:ca:35:a0:1a:ad: 3a:52:8e:b8:c1:7d:98:50:6d:12:23:da:e1:a9:d3: 85:e6:27:e1:d2:dd:ee:aa:ff:70:72:60:0d:6c:ad: 67:97:12:9d:4b:51:30:5e:60:da:6a:10:f7:b9:c2: 61:26:de:cd:38:c2:e8:c3:22:54:a2:66:59:c7:a8: 54:44:4c:1b:f0:60:b2:8c:5b:79:77:4c:b2:27:8f: fe:ad:83:95:02:d6:dd:5c:56:3e:e9:2e:36:f3:c6: 43:d6:bd:5f:ec:41:f8:c1:10:c6:a9:29:5c:09:3c: bb:52:e6:3b:58:3f:fd:7a:c5:1b:e1:20:48:2f:17: bd:c4:d1:1d:43:6b:76:ad:7b:06:35:df:4b:92:b9: 32:5b:ea:eb:17:ea:47:b5:e5:03:11:54:a7:48:3d: 74:7d:75:68:99:45:56:0e:72:2c:2a:af:be:e5:e7: 9d:94:17:cd:84:44:7b:47:8c:c0:98:ee:60:ed:d1: 8d:a0:79:da:80:22:78:d1:86:7b:22:fb:de:89:84: aa:1d:c6:d6:b4:c5:87:01:06:4e:fb:39:04:0a:95: ea:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FA:3E:A9:C9:46:A3:CA:AE:A4:F6:67:26:68:D5:F0:0C:1A:FE:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b838612-a7c4-34ed-8d9a-26249548b1f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:91:60:1e:49:8b:95:6f:d4:f7:1c:eb:65:d0:da:47:0d:47: 27:83:98:14:22:b8:45:99:f8:f3:21:08:b2:b2:36:d0:6e:be: a9:55:1d:42:4a:ba:78:ba:0b:a8:4c:70:63:1b:50:77:7e:0d: 07:55:c4:44:36:4b:32:fa:98:1e:4f:36:b5:57:a3:b2:9f:a4: 00:b3:97:4e:fc:88:43:7b:06:12:49:04:20:ad:8b:48:99:18: 89:3a:60:0a:34:ec:11:0a:92:5d:71:88:52:1f:63:8f:7a:4c: ca:ee:16:db:24:d3:dd:0a:28:08:de:81:b3:77:8f:0b:07:a4: fe:19:09:9b:2c:bd:bd:0e:11:7b:9b:16:a5:92:ef:50:33:bc: 05:a6:fc:02:63:53:38:c6:d0:93:54:7a:77:36:c4:9d:2e:9d: 09:ce:59:20:0f:df:8f:82:31:4d:60:ec:f3:2e:e7:ad:e5:32: 15:48:75:cc:74:87:ef:41:b7:33:d6:b8:75:e1:8f:04:df:0d: 97:57:35:5d:19:32:2f:f0:3b:7d:ee:c6:4f:ac:fd:83:30:b2: 78:a3:a1:da:b1:a7:f6:10:1b:e5:3e:39:9d:e9:dc:3e:ed:58: e6:b6:83:e7:75:c3:7a:df:31:f1:ae:99:c8:3c:27:81:4d:1a: 38:ea:7e:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHsvdsiZW8g5knoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk YThlMGM2OTQtNjkzMi00NWUwLTk3YjYtNDJiMWRkMzdkYzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSUHEQ39Wu0EddKOuH+kg8P1rUxyLGILkfUp wdO5vgQtUjgURMEjyjWgGq06Uo64wX2YUG0SI9rhqdOF5ifh0t3uqv9wcmANbK1n lxKdS1EwXmDaahD3ucJhJt7NOMLowyJUomZZx6hUREwb8GCyjFt5d0yyJ4/+rYOV AtbdXFY+6S4288ZD1r1f7EH4wRDGqSlcCTy7UuY7WD/9esUb4SBILxe9xNEdQ2t2 rXsGNd9LkrkyW+rrF+pHteUDEVSnSD10fXVomUVWDnIsKq++5eedlBfNhER7R4zA mO5g7dGNoHnagCJ40YZ7IvveiYSqHcbWtMWHAQZO+zkECpXqXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPz6PqnJRqPKrqT2ZyZo1fAMGv6xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGI4Mzg2MTItYTdjNC0z NGVkLThkOWEtMjYyNDk1NDhiMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeRYB5Ji5Vv1Pcc62XQ2kcNRyeDmBQiuEWZ+PMhCLKyNtBuvqlVHUJK uni6C6hMcGMbUHd+DQdVxEQ2SzL6mB5PNrVXo7KfpACzl078iEN7BhJJBCCti0iZ GIk6YAo07BEKkl1xiFIfY496TMruFtsk090KKAjegbN3jwsHpP4ZCZssvb0OEXub FqWS71AzvAWm/AJjUzjG0JNUenc2xJ0unQnOWSAP34+CMU1g7PMu563lMhVIdcx0 h+9BtzPWuHXhjwTfDZdXNV0ZMi/wO33uxk+s/YMwsnijodqxp/YQG+U+OZ3p3D7t WOa2g+d1w3rfMfGumcg8J4FNGjjqfmc= -----END CERTIFICATE-----Generated at Sat Jun 13 15:33:19 2026 by rpki-client