$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3452058a-98d8-35f5-9181-437d017e7520.roa File: 3452058a-98d8-35f5-9181-437d017e7520.roa (raw, json) Hash identifier: q6opltPfiGzkAifogu595TPLP++xlMGjKzgPpKGYa8c= Subject key identifier: 7D:C5:FE:F2:22:07:E0:85:78:35:54:1B:4D:D9:CF:DC:91:67:7C:68 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0C1EEC0BFDDABB5F7723F2C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3452058a-98d8-35f5-9181-437d017e7520.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 396613 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:ec:0b:fd:da:bb:5f:77:23:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=9b6d4342-2305-4852-b1c9-97be068732a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:46:16:c7:8c:75:74:38:04:c5:1a:3d:99:bd: a1:fa:72:cf:fe:71:f2:48:e3:98:42:de:58:81:19: 1b:1c:e4:d2:82:29:8b:99:d9:22:89:0a:39:a0:bd: a2:b1:8f:2a:27:dc:40:fb:37:34:05:ce:0f:4c:25: 7a:38:01:31:bf:a1:1d:be:da:ea:78:c5:ab:62:c1: 25:e9:4b:1d:27:e2:e5:73:2c:3d:e8:1f:a7:b0:6c: 74:41:d5:7c:e8:8b:6b:9c:9a:59:50:07:ce:50:2b: f7:a4:9a:3d:41:12:2b:44:54:bd:ec:45:22:28:76: d6:41:05:4b:0f:23:29:d3:dc:d2:02:d8:4e:15:d4: cf:07:39:6c:45:0e:06:6f:1a:3f:38:b4:0a:0a:78: f4:2d:7c:02:4c:65:00:9e:b5:0e:91:bc:7a:cf:e6: 78:4c:17:53:cd:3f:10:ef:ba:c1:48:43:95:e0:24: 24:23:d6:15:d2:f8:f4:a2:4c:8f:7b:9b:cd:fe:2a: 0c:97:c0:96:99:16:29:58:f5:d2:53:c1:bb:41:96: dd:b5:1a:e4:0a:e5:69:f1:6b:7f:02:7b:42:d8:4e: 96:d1:91:44:28:d3:10:f0:92:c8:85:3a:b1:28:9d: 19:d4:26:2b:ca:8c:d2:ce:ce:f6:62:c6:9f:f8:3c: 99:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C5:FE:F2:22:07:E0:85:78:35:54:1B:4D:D9:CF:DC:91:67:7C:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3452058a-98d8-35f5-9181-437d017e7520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:75:f6:de:74:ea:cc:48:3a:53:f2:dc:2b:5e:aa:4e:e2:9f: b3:d8:c3:c8:31:74:f0:bc:c6:35:23:4a:f3:8f:cf:73:e5:cc: c3:c9:70:3e:72:8c:53:62:bd:d0:6b:65:9f:24:c7:5f:a4:43: b0:2b:a3:57:2c:cc:29:aa:7e:bd:cd:74:8c:3f:7d:e7:93:f6: 2e:01:6a:e7:28:ca:82:7d:d1:0e:ea:c9:fc:37:d8:5f:fa:99: a6:68:3c:2b:90:64:81:01:37:6f:0c:36:72:19:20:22:3d:d1: 47:b0:75:cc:7d:8e:8b:5c:7d:1f:86:a9:59:a9:99:18:76:1d: 52:61:3e:87:e5:ad:79:f9:77:cd:37:c9:2d:66:98:2b:ac:c2: e3:be:22:87:08:ab:5f:bd:a8:e4:f0:81:c5:64:ec:5b:5d:57: 71:d5:a0:41:5d:62:38:84:d9:6b:20:48:57:21:1e:83:60:34: 73:6c:54:e1:51:aa:02:e9:62:f5:ce:dd:82:39:cd:b5:69:1a: a2:5a:9b:74:cb:d4:55:4d:1e:31:70:f8:90:5c:c3:bb:ee:d7: 98:8e:8c:b5:dc:c2:2d:f9:9f:1a:bc:d0:45:83:59:24:f2:63: c4:a6:37:19:ad:4d:7b:31:d0:25:e0:64:0e:fe:19:40:ac:e6: 09:42:10:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHuwL/dq7X3cj8sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk OWI2ZDQzNDItMjMwNS00ODUyLWIxYzktOTdiZTA2ODczMmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUYWx4x1dDgExRo9mb2h+nLP/nHySOOYQt5Y gRkbHOTSgimLmdkiiQo5oL2isY8qJ9xA+zc0Bc4PTCV6OAExv6EdvtrqeMWrYsEl 6UsdJ+Llcyw96B+nsGx0QdV86ItrnJpZUAfOUCv3pJo9QRIrRFS97EUiKHbWQQVL DyMp09zSAthOFdTPBzlsRQ4Gbxo/OLQKCnj0LXwCTGUAnrUOkbx6z+Z4TBdTzT8Q 77rBSEOV4CQkI9YV0vj0okyPe5vN/ioMl8CWmRYpWPXSU8G7QZbdtRrkCuVp8Wt/ AntC2E6W0ZFEKNMQ8JLIhTqxKJ0Z1CYryozSzs72Ysaf+DyZHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3F/vIiB+CFeDVUG03Zz9yRZ3xoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzQ1MjA1OGEtOThkOC0z NWY1LTkxODEtNDM3ZDAxN2U3NTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF119t506sxIOlPy3Cteqk7in7PYw8gxdPC8xjUjSvOPz3PlzMPJcD5y jFNivdBrZZ8kx1+kQ7Aro1cszCmqfr3NdIw/feeT9i4BaucoyoJ90Q7qyfw32F/6 maZoPCuQZIEBN28MNnIZICI90Uewdcx9jotcfR+GqVmpmRh2HVJhPoflrXn5d803 yS1mmCuswuO+IocIq1+9qOTwgcVk7FtdV3HVoEFdYjiE2WsgSFchHoNgNHNsVOFR qgLpYvXO3YI5zbVpGqJam3TL1FVNHjFw+JBcw7vu15iOjLXcwi35nxq80EWDWSTy Y8SmNxmtTXsx0CXgZA7+GUCs5glCEAA= -----END CERTIFICATE-----Generated at Sat Jun 13 16:29:22 2026 by rpki-client