$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28a883eb-63e2-3889-af76-c1c78c0659f0.roa File: 28a883eb-63e2-3889-af76-c1c78c0659f0.roa (raw, json) Hash identifier: /kjAx43bollpWWcfucXH1NZJCazlamSPZJH6lwsvnCU= Subject key identifier: DB:E2:A2:E2:E3:BC:A8:20:B4:66:68:E4:D6:B2:77:D5:44:92:88:6A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0D843606763A653AD26C9C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28a883eb-63e2-3889-af76-c1c78c0659f0.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 396564 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:36:06:76:3a:65:3a:d2:6c:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=8790ab0c-ebc5-4178-92e6-df9630fb0ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a6:dc:f2:04:ba:be:21:b8:26:f2:16:ce:b9: 0b:77:7a:e3:38:22:4a:69:62:0d:5b:ee:b4:89:55: b2:f5:7b:4b:1b:7d:b1:5a:77:1d:b0:4b:e4:bc:91: 94:9c:3b:6b:a3:b0:b7:57:79:66:d0:e1:c5:a7:15: a9:24:e5:ba:7a:d5:d0:94:53:58:2a:ee:00:94:c8: 50:78:bc:f6:06:b3:98:0e:4a:51:e5:e2:20:f2:c3: d8:2c:9d:e4:c9:8c:bc:13:74:72:51:ab:cc:a1:10: 42:39:3b:a5:a7:ea:74:a2:e3:44:0a:65:2b:81:89: b9:50:0e:76:32:d4:94:81:11:5f:d0:bc:33:1d:3d: 64:6f:33:4e:26:d3:a1:1c:e6:ac:b0:a2:28:73:2e: e3:9a:c1:ad:26:d3:6f:56:f6:8c:c1:af:c4:89:d6: 03:a6:78:cd:00:b2:5d:e9:71:f9:b9:07:03:5a:d7: 2d:f1:14:0f:55:77:f7:ca:b1:57:f8:f5:5c:1f:a7: c7:5e:59:96:46:3b:a1:1a:f9:83:cf:87:e8:7b:58: 11:a5:a7:1f:e9:22:5d:c5:cf:d3:41:6e:3c:ff:b6: 85:e2:86:28:48:2b:ba:72:3c:e5:aa:cc:7e:e7:ae: bd:44:6f:3d:cd:69:90:fc:df:fc:ba:b5:d4:d3:42: 51:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E2:A2:E2:E3:BC:A8:20:B4:66:68:E4:D6:B2:77:D5:44:92:88:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28a883eb-63e2-3889-af76-c1c78c0659f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:7e:1a:ba:d1:23:dc:0b:17:ab:c8:a8:23:c5:f0:a0:44:c5: 5b:48:6e:31:df:57:94:c7:29:bc:1d:ad:b1:96:b7:bb:9b:59: b3:1c:09:21:84:f6:6e:98:41:3d:0b:de:28:28:73:82:ae:65: 20:f6:9b:55:18:3c:06:89:e1:98:43:79:e9:6c:0f:99:e5:e2: c7:a5:c9:e4:f3:a4:52:fe:38:1c:eb:0e:05:04:5c:4c:78:2e: 2a:26:dd:5b:48:c0:93:25:46:a1:8e:d7:7f:01:a9:3a:11:7f: 31:3e:ca:21:e7:67:5b:16:d9:bd:b3:56:96:0d:5b:72:b5:cb: 03:73:58:85:7b:e5:16:62:b7:2c:8f:d7:8c:25:7b:88:9b:bb: 02:32:2c:84:6b:c7:4f:a5:dd:93:c8:bc:ea:32:84:58:d0:1e: a8:f4:a4:99:b8:a0:06:91:ca:0f:3b:32:13:1d:f7:ce:b9:bf: 55:90:3d:46:07:80:ba:45:76:18:14:1e:7e:f6:c0:4b:8d:ed: 60:62:ad:86:93:b4:5a:a1:3f:76:c6:98:3e:1b:ac:12:d0:c5: 73:11:1d:55:ad:49:ac:2a:65:71:95:56:9b:d5:47:51:3c:0a: 06:ac:43:e3:00:59:9c:ae:1a:b7:eb:35:41:2b:2b:7f:61:fc: 7b:26:87:7b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4NhDYGdjplOtJsnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk ODc5MGFiMGMtZWJjNS00MTc4LTkyZTYtZGY5NjMwZmIwY2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKbc8gS6viG4JvIWzrkLd3rjOCJKaWINW+60 iVWy9XtLG32xWncdsEvkvJGUnDtro7C3V3lm0OHFpxWpJOW6etXQlFNYKu4AlMhQ eLz2BrOYDkpR5eIg8sPYLJ3kyYy8E3RyUavMoRBCOTulp+p0ouNECmUrgYm5UA52 MtSUgRFf0LwzHT1kbzNOJtOhHOassKIocy7jmsGtJtNvVvaMwa/EidYDpnjNALJd 6XH5uQcDWtct8RQPVXf3yrFX+PVcH6fHXlmWRjuhGvmDz4foe1gRpacf6SJdxc/T QW48/7aF4oYoSCu6cjzlqsx+5669RG89zWmQ/N/8urXU00JRnwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNviouLjvKggtGZo5Nayd9VEkohqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjhhODgzZWItNjNlMi0z ODg5LWFmNzYtYzFjNzhjMDY1OWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQANfhq60SPcCxeryKgjxfCgRMVbSG4x31eUxym8Ha2xlre7m1mzHAkh hPZumEE9C94oKHOCrmUg9ptVGDwGieGYQ3npbA+Z5eLHpcnk86RS/jgc6w4FBFxM eC4qJt1bSMCTJUahjtd/Aak6EX8xPsoh52dbFtm9s1aWDVtytcsDc1iFe+UWYrcs j9eMJXuIm7sCMiyEa8dPpd2TyLzqMoRY0B6o9KSZuKAGkcoPOzITHffOub9VkD1G B4C6RXYYFB5+9sBLje1gYq2Gk7RaoT92xpg+G6wS0MVzER1VrUmsKmVxlVab1UdR PAoGrEPjAFmcrhq36zVBKyt/Yfx7Jod7 -----END CERTIFICATE-----Generated at Sat Jun 13 14:35:45 2026 by rpki-client