$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21eaa185-fe7a-35e5-9482-4011ef5eef0c.roa File: 21eaa185-fe7a-35e5-9482-4011ef5eef0c.roa (raw, json) Hash identifier: 11O2QolGS4dMvcFMf2fYa8qtntKunEh8oQeA0gT6hzk= Subject key identifier: 96:C8:3C:F0:8F:A6:DA:1B:E4:B6:46:D1:F5:D1:2F:07:9E:79:97:11 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0C1EED97C1D398780BD7A700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21eaa185-fe7a-35e5-9482-4011ef5eef0c.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 396578 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:ed:97:c1:d3:98:78:0b:d7:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=ec83d685-0845-4940-8f4f-7deb44bccee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:71:73:f4:71:09:81:af:e6:4a:7e:56:6b:31: a9:d5:62:9a:d6:8d:9b:d4:02:de:3d:39:e8:a1:50: dd:f2:82:46:60:15:7e:51:7b:57:d7:e4:c8:56:9b: c2:d9:a8:a8:50:ac:b1:a7:b9:7e:66:df:37:0a:50: 45:40:3c:75:2b:d9:20:41:e3:d2:3a:c7:c7:dc:24: 9c:a4:14:f2:c9:d8:ac:26:54:d5:cb:9d:bf:f1:b0: 90:43:f0:17:7c:24:b7:68:84:f3:53:17:84:4c:64: 59:6c:1c:7c:05:08:ab:29:9c:59:0d:f1:79:65:c5: ff:c5:0d:10:85:0d:e5:d8:d6:88:7c:f2:d8:f8:85: 87:49:45:ab:1d:52:67:75:50:37:fc:30:46:8c:2c: 3e:a8:a4:ce:17:ad:c9:c2:b8:8f:6c:20:8b:db:d5: 6d:4e:2d:a8:28:79:41:82:3b:90:c3:fb:88:ca:67: e8:4d:ad:d9:3c:b1:8f:f5:58:ad:7f:69:16:8b:3a: 1f:55:bd:d1:ae:50:fe:8c:1f:58:28:93:55:b7:f5: c6:9f:68:49:fd:32:95:a5:52:19:d7:2a:74:8a:94: c2:87:c2:a9:5c:34:50:2f:e2:2f:7c:7f:fa:d9:ae: 6a:03:ec:46:a4:2f:c7:e7:bb:13:f5:44:86:c6:60: 3c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C8:3C:F0:8F:A6:DA:1B:E4:B6:46:D1:F5:D1:2F:07:9E:79:97:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21eaa185-fe7a-35e5-9482-4011ef5eef0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:c3:f1:64:39:ce:bb:34:5c:55:63:4d:96:45:68:72:f7:24: fd:18:39:8f:ef:a2:fb:6e:e4:a2:03:4e:c4:e8:e3:cd:71:d7: 34:1c:43:77:32:a2:eb:d7:16:cd:78:25:5a:91:d6:8e:97:09: 8d:7a:f9:ed:ef:22:e7:30:d0:09:56:ac:aa:e9:6b:3c:eb:cd: 14:9a:d9:37:07:ba:73:44:71:7c:f0:d6:07:d8:1c:ea:9d:07: ad:1f:7a:0e:87:71:91:7a:3c:45:be:50:8d:86:d9:b1:74:f7: 66:54:c5:85:2d:ce:3a:db:72:63:3a:31:08:a8:4a:3d:53:d6: e0:79:93:32:cf:9f:bd:2f:93:e3:a0:63:5c:2b:f8:20:79:a8: 1b:ff:12:7f:15:fd:b8:aa:4d:7e:d5:0d:22:98:23:99:bb:6b: b0:79:cc:ac:3b:fa:5c:33:36:f6:8c:89:07:cd:6e:cb:eb:2f: fb:ad:a3:31:f1:d5:dd:fc:9b:ea:32:10:e3:44:0c:a1:5b:96: df:61:1d:3c:c6:96:88:eb:af:85:39:30:63:01:82:ef:5e:95: 9c:70:89:1e:ec:0b:35:8c:e0:5a:d3:95:c7:d1:cb:28:57:3a: cb:ec:b7:5d:7f:97:e2:94:eb:e3:64:74:ef:54:a7:13:d9:bf: 1a:15:d1:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHu2XwdOYeAvXpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk ZWM4M2Q2ODUtMDg0NS00OTQwLThmNGYtN2RlYjQ0YmNjZWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HFz9HEJga/mSn5WazGp1WKa1o2b1ALePTno oVDd8oJGYBV+UXtX1+TIVpvC2aioUKyxp7l+Zt83ClBFQDx1K9kgQePSOsfH3CSc pBTyydisJlTVy52/8bCQQ/AXfCS3aITzUxeETGRZbBx8BQirKZxZDfF5ZcX/xQ0Q hQ3l2NaIfPLY+IWHSUWrHVJndVA3/DBGjCw+qKTOF63JwriPbCCL29VtTi2oKHlB gjuQw/uIymfoTa3ZPLGP9Vitf2kWizofVb3RrlD+jB9YKJNVt/XGn2hJ/TKVpVIZ 1yp0ipTCh8KpXDRQL+IvfH/62a5qA+xGpC/H57sT9USGxmA8tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbIPPCPptob5LZG0fXRLweeeZcRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjFlYWExODUtZmU3YS0z NWU1LTk0ODItNDAxMWVmNWVlZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfD8WQ5zrs0XFVjTZZFaHL3JP0YOY/vovtu5KIDTsTo481x1zQcQ3cy ouvXFs14JVqR1o6XCY16+e3vIucw0AlWrKrpazzrzRSa2TcHunNEcXzw1gfYHOqd B60feg6HcZF6PEW+UI2G2bF092ZUxYUtzjrbcmM6MQioSj1T1uB5kzLPn70vk+Og Y1wr+CB5qBv/En8V/biqTX7VDSKYI5m7a7B5zKw7+lwzNvaMiQfNbsvrL/utozHx 1d38m+oyEONEDKFblt9hHTzGlojrr4U5MGMBgu9elZxwiR7sCzWM4FrTlcfRyyhX Osvst11/l+KU6+NkdO9UpxPZvxoV0ZE= -----END CERTIFICATE-----Generated at Sat Jun 13 14:28:56 2026 by rpki-client