$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b6e2b9b-c826-3954-9ca5-830cd33019da.roa File: 1b6e2b9b-c826-3954-9ca5-830cd33019da.roa (raw, json) Hash identifier: cWxEIiQZueMzFKopQHh/aQEVjXf5z4qkP4FsGdxgPfU= Subject key identifier: C2:8A:0C:87:4F:A9:91:2C:94:33:B4:CC:81:39:90:2F:AE:45:74:06 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0C1ECB29289759092FAF2A40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b6e2b9b-c826-3954-9ca5-830cd33019da.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 396583 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:cb:29:28:97:59:09:2f:af:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=97f77e4c-bd84-4aad-a783-db345eed9f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e3:b1:5b:4f:53:27:5b:19:16:97:6a:38:6f: 32:66:34:93:da:48:4f:42:e3:21:cc:d3:2d:ab:76: 4a:00:10:cf:c3:15:1d:c5:30:51:d3:46:3c:56:64: 3a:ca:b5:d3:7a:2c:57:22:e3:1a:68:e5:ec:3d:75: d0:cc:0a:c5:06:75:66:01:16:70:c2:b0:f1:15:db: 84:42:e8:a7:94:f5:53:d2:86:21:d4:19:fe:d2:1b: 66:91:ed:20:48:6b:1b:5b:c3:40:e0:36:41:ac:19: 5e:de:24:a0:5e:d0:a2:90:07:5e:22:35:60:33:4c: c2:44:43:1a:79:97:0f:f7:64:ec:1b:a7:cd:12:f1: fe:7f:ff:e0:e0:97:1e:1e:53:a7:9a:9e:87:12:29: 44:01:27:81:b7:5c:23:ed:40:f1:b2:3b:86:7f:78: 2f:26:f8:66:aa:11:56:ad:3a:4a:70:64:5c:de:fd: 6a:2a:4f:ea:63:c3:5a:1f:c8:cc:62:1a:75:21:37: 7a:b0:6c:1c:92:46:77:5f:89:ed:32:3a:94:3d:4b: 53:44:77:5a:23:65:12:61:10:5e:4a:dc:25:ce:4f: 74:d9:23:c3:9c:f5:94:68:4f:00:6f:61:15:8c:62: c1:d7:80:c4:d5:bf:2d:dd:ee:55:5e:d5:1f:46:af: 60:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:8A:0C:87:4F:A9:91:2C:94:33:B4:CC:81:39:90:2F:AE:45:74:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b6e2b9b-c826-3954-9ca5-830cd33019da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:98:da:15:98:32:78:89:33:c6:73:11:55:c4:4f:8c:8a:68: ac:4d:28:0c:75:e6:85:cc:12:7c:4c:2a:78:71:4b:f1:c2:5c: 97:e3:c3:b9:da:53:00:50:a1:6e:a3:1a:bd:e9:cb:71:c5:dd: 9f:e2:99:81:25:93:53:31:b9:4c:6f:4b:f9:ed:09:e7:77:e0: 75:fb:20:8b:65:fc:c9:ca:90:89:ec:ad:c8:01:fa:71:99:a9: 68:03:10:50:b8:82:06:15:99:d4:b9:61:49:e4:44:d1:74:18: ef:28:7f:e8:69:5b:65:05:56:c7:c0:97:2d:8e:2e:a0:46:84: 9b:7a:16:78:56:2a:31:b0:5b:5a:87:a2:a9:02:8d:7a:2e:be: c1:8c:a2:3c:ad:86:d3:e2:a6:5b:eb:ca:59:ff:a7:4b:5f:63: 82:14:30:cd:78:7b:ae:f1:df:00:ee:a4:1e:88:9f:96:80:42: 98:81:f3:95:0b:6a:f7:bd:c4:eb:e6:f9:1f:1b:bf:01:02:ed: c7:72:f5:f4:ee:43:b6:4f:7f:93:55:ee:1a:a7:57:e6:36:c1: de:1b:09:74:49:95:96:d0:bb:70:78:83:a0:65:b4:39:90:f7: 51:02:da:2e:c4:98:aa:bd:82:46:60:02:8b:5f:99:7d:eb:f5: 5f:93:98:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHsspKJdZCS+vKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk OTdmNzdlNGMtYmQ4NC00YWFkLWE3ODMtZGIzNDVlZWQ5ZjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeOxW09TJ1sZFpdqOG8yZjST2khPQuMhzNMt q3ZKABDPwxUdxTBR00Y8VmQ6yrXTeixXIuMaaOXsPXXQzArFBnVmARZwwrDxFduE QuinlPVT0oYh1Bn+0htmke0gSGsbW8NA4DZBrBle3iSgXtCikAdeIjVgM0zCREMa eZcP92TsG6fNEvH+f//g4JceHlOnmp6HEilEASeBt1wj7UDxsjuGf3gvJvhmqhFW rTpKcGRc3v1qKk/qY8NaH8jMYhp1ITd6sGwckkZ3X4ntMjqUPUtTRHdaI2USYRBe Stwlzk902SPDnPWUaE8Ab2EVjGLB14DE1b8t3e5VXtUfRq9gQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKKDIdPqZEslDO0zIE5kC+uRXQGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWI2ZTJiOWItYzgyNi0z OTU0LTljYTUtODMwY2QzMzAxOWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGY2hWYMniJM8ZzEVXET4yKaKxNKAx15oXMEnxMKnhxS/HCXJfjw7na UwBQoW6jGr3py3HF3Z/imYElk1MxuUxvS/ntCed34HX7IItl/MnKkInsrcgB+nGZ qWgDEFC4ggYVmdS5YUnkRNF0GO8of+hpW2UFVsfAly2OLqBGhJt6FnhWKjGwW1qH oqkCjXouvsGMojythtPiplvryln/p0tfY4IUMM14e67x3wDupB6In5aAQpiB85UL ave9xOvm+R8bvwEC7cdy9fTuQ7ZPf5NV7hqnV+Y2wd4bCXRJlZbQu3B4g6BltDmQ 91EC2i7EmKq9gkZgAotfmX3r9V+TmEs= -----END CERTIFICATE-----Generated at Sat Jun 13 14:26:49 2026 by rpki-client