$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0fea01bf-4ec4-3c5e-bc01-51029a773988.roa File: 0fea01bf-4ec4-3c5e-bc01-51029a773988.roa (raw, json) Hash identifier: yENY5SvlK+EGLxQGExs07+n4z7246MeA4evvrt7pjLE= Subject key identifier: 3E:D8:54:A9:AC:D7:0C:13:C2:FC:CB:98:E4:BE:CC:A3:42:36:9D:E5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0C1ECA98F48113DAC895E260 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0fea01bf-4ec4-3c5e-bc01-51029a773988.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 36625 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:ca:98:f4:81:13:da:c8:95:e2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=d7ad6add-371e-46a1-aa58-a752636e2ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3a:84:53:8e:ad:ef:c3:e1:76:a1:56:33:40: ae:2f:e2:4b:d9:23:e0:6b:69:be:51:d1:cd:59:96: 73:44:79:f4:3c:4f:71:bf:48:51:2b:33:51:98:ee: 9c:5d:7f:45:54:ff:de:95:7f:6a:f1:f0:ed:0e:ca: a5:ee:d0:5e:2e:5e:16:fb:77:6b:6d:cf:43:27:e1: 2c:b4:ab:33:17:46:db:a6:2e:7e:83:2a:60:4a:b2: 63:49:16:58:38:8b:4e:73:e9:9f:7f:fc:24:6f:08: 4a:1c:79:46:23:77:3e:67:45:1d:44:26:09:68:71: 14:26:fa:9a:76:41:80:5c:aa:85:3d:c0:5f:67:28: d2:ef:c3:95:c8:68:11:1f:65:2e:a7:f3:b8:2d:d3: 8d:22:e8:c4:4e:4a:f1:28:e6:85:73:03:88:26:f0: 0e:27:96:3f:c6:cb:35:e6:b6:df:d0:48:90:ad:be: 9a:76:6a:43:9a:9d:c6:4a:2e:bf:ff:0d:ac:b9:bc: d5:61:b3:c9:d2:94:d2:ac:d9:63:a4:6c:88:a3:eb: 2f:37:3f:8f:01:cb:a6:43:cf:df:80:f8:d0:7b:a3: f6:76:f7:65:bb:88:91:59:f3:37:1c:a5:dd:70:44: bc:23:d1:1c:69:53:d9:d3:bf:2e:83:63:a4:8d:6c: 5e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D8:54:A9:AC:D7:0C:13:C2:FC:CB:98:E4:BE:CC:A3:42:36:9D:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0fea01bf-4ec4-3c5e-bc01-51029a773988.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:9a:06:0c:ce:c3:b5:ab:66:43:2a:d9:f8:30:29:e4:90:f1: 95:24:81:3a:2e:70:75:fd:ed:54:7f:dc:9c:2e:32:a8:f3:22: cf:22:c1:b8:40:a0:4a:bc:a2:c7:96:aa:32:67:cf:e8:ec:2c: 05:7e:7f:25:e6:fd:6b:24:ab:85:f0:3d:50:75:bc:3a:62:e9: 09:37:01:14:0c:22:65:4e:7a:94:26:4e:76:7d:36:c5:05:90: 2b:e5:35:9d:ee:2a:4c:db:6c:42:0d:67:42:db:8b:c2:25:c0: cc:12:1f:56:ba:69:66:6a:e4:08:e1:cd:0b:6f:4b:a3:53:d9: 97:34:5e:05:52:d9:70:7f:95:35:20:57:60:30:8c:57:8b:a8: dc:3d:65:18:fe:d7:85:22:b2:6b:01:06:c7:e1:4c:16:18:1d: 1f:d9:64:22:75:41:b4:29:1c:c4:d6:ec:9f:50:d2:b3:5c:eb: af:19:c8:96:d0:87:0a:e5:cf:da:45:b0:0c:1f:96:84:50:67: 52:3f:3a:0e:4b:68:0e:55:1e:ef:b8:97:44:98:07:fe:b1:76: 39:99:ac:f5:79:f4:91:07:58:1a:80:d6:ee:0e:00:77:9d:91: d2:58:f3:b1:5e:88:a0:b6:c2:30:85:c4:04:8d:e1:00:47:a8: 23:ec:28:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHsqY9IET2siV4mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk ZDdhZDZhZGQtMzcxZS00NmExLWFhNTgtYTc1MjYzNmUyZmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDqEU46t78PhdqFWM0CuL+JL2SPga2m+UdHN WZZzRHn0PE9xv0hRKzNRmO6cXX9FVP/elX9q8fDtDsql7tBeLl4W+3drbc9DJ+Es tKszF0bbpi5+gypgSrJjSRZYOItOc+mff/wkbwhKHHlGI3c+Z0UdRCYJaHEUJvqa dkGAXKqFPcBfZyjS78OVyGgRH2Uup/O4LdONIujETkrxKOaFcwOIJvAOJ5Y/xss1 5rbf0EiQrb6admpDmp3GSi6//w2subzVYbPJ0pTSrNljpGyIo+svNz+PAcumQ8/f gPjQe6P2dvdlu4iRWfM3HKXdcES8I9EcaVPZ078ug2OkjWxeKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7YVKms1wwTwvzLmOS+zKNCNp3lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGZlYTAxYmYtNGVjNC0z YzVlLWJjMDEtNTEwMjlhNzczOTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+aBgzOw7WrZkMq2fgwKeSQ8ZUkgToucHX97VR/3JwuMqjzIs8iwbhA oEq8oseWqjJnz+jsLAV+fyXm/Wskq4XwPVB1vDpi6Qk3ARQMImVOepQmTnZ9NsUF kCvlNZ3uKkzbbEINZ0Lbi8IlwMwSH1a6aWZq5AjhzQtvS6NT2Zc0XgVS2XB/lTUg V2AwjFeLqNw9ZRj+14UismsBBsfhTBYYHR/ZZCJ1QbQpHMTW7J9Q0rNc668ZyJbQ hwrlz9pFsAwfloRQZ1I/Og5LaA5VHu+4l0SYB/6xdjmZrPV59JEHWBqA1u4OAHed kdJY87FeiKC2wjCFxASN4QBHqCPsKKM= -----END CERTIFICATE-----Generated at Sat Jun 13 16:44:14 2026 by rpki-client