$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b8a7d75-9ca1-3d27-b2a9-9af887996899.roa File: 3b8a7d75-9ca1-3d27-b2a9-9af887996899.roa (raw, json) Hash identifier: jrwI99Env17RiJ154buGmEj2WUayaXLT783jVZcRCNo= Subject key identifier: 8F:C8:7D:2B:FE:EB:28:8E:2E:39:1F:36:01:DF:A0:AC:EE:D8:DA:7F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0C1EEEB9382F87B91FE3C740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b8a7d75-9ca1-3d27-b2a9-9af887996899.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 396552 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:ee:b9:38:2f:87:b9:1f:e3:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=a48f2565-1ae7-4c07-9cd3-e1bce66f8182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e7:a6:8a:c1:80:16:b3:65:db:99:bd:5d:52: 0a:72:7b:4f:b8:75:54:d1:18:f9:fe:e1:96:20:f0: 45:09:f2:e1:72:e7:e9:ed:08:57:51:11:bd:76:0f: 8f:7a:51:2c:f3:37:e4:09:e1:a6:10:91:cf:3d:bd: 68:27:0e:52:77:76:86:fc:0c:be:df:4f:c2:51:eb: 35:cd:88:e1:9f:2c:cf:44:3d:42:c2:e9:be:50:26: 29:c8:d9:5b:97:50:d9:ea:a2:e4:cb:8a:00:2a:d8: 3b:d3:30:fd:ce:df:ca:5c:96:b0:73:a4:a0:43:89: cd:7e:8a:1c:44:f8:6b:21:1d:07:d9:1c:ca:78:5b: 56:90:dd:3b:9c:06:7c:42:d5:b1:fb:61:7f:ed:c2: e6:35:f5:c8:f9:da:30:52:97:5f:41:61:d0:6d:bf: 78:22:73:50:34:9b:d3:79:f2:0d:08:95:6f:98:56: c1:36:91:6f:13:8e:50:76:f9:ea:b4:4c:4b:3a:ec: 88:d9:10:9c:07:23:4b:9b:01:28:73:f8:5a:4c:02: e6:b7:bd:47:75:91:47:5b:87:8d:42:f7:ac:3a:da: 4d:31:8e:19:2f:16:8b:84:82:76:f8:a6:35:08:d9: e3:b2:50:e5:5a:51:85:53:13:c7:28:e7:75:76:c1: b8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C8:7D:2B:FE:EB:28:8E:2E:39:1F:36:01:DF:A0:AC:EE:D8:DA:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b8a7d75-9ca1-3d27-b2a9-9af887996899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:7f:ae:b7:6f:22:76:8b:55:12:7e:e7:9c:4b:08:15:14:31: 96:9b:73:dd:8b:6a:db:6e:5f:15:17:6f:7a:b5:e0:65:9f:39: 3c:dd:ab:84:9b:aa:0f:11:15:8f:60:32:a6:2b:ad:48:7d:7f: 0d:ab:c8:59:4c:7c:87:57:9e:bd:fb:fb:0a:39:d3:78:b8:fb: 70:e3:25:64:e6:70:bd:57:71:32:dd:55:d2:78:e2:99:17:54: a6:b1:a4:f8:22:93:59:51:06:f1:53:22:27:8c:a8:9f:88:13: b4:d0:d4:d5:f4:a8:5d:b0:9e:11:ba:bd:85:8d:ff:29:cc:43: 02:dc:3f:b7:b7:b8:20:26:2a:f6:3b:ad:ca:58:1c:a8:03:22: 09:61:f3:eb:3a:67:99:74:27:be:d8:22:bf:44:6c:ec:cd:22: 31:c8:5b:a1:a3:55:45:6d:0f:c5:be:f6:50:f4:f6:e1:61:d7: 8a:f5:71:fc:b7:bb:e5:de:0c:48:b1:62:41:62:ea:12:60:0c: 2e:1f:69:46:a0:e0:a4:21:61:48:81:e4:90:64:03:10:92:13: 0e:c2:ba:15:e0:f7:f1:39:29:a0:3c:42:22:3d:c5:aa:d0:ef: 9a:55:3e:12:a7:d8:62:fb:f4:64:ea:f3:34:0b:8e:05:71:b2: 08:9a:55:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHu65OC+HuR/jx0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk YTQ4ZjI1NjUtMWFlNy00YzA3LTljZDMtZTFiY2U2NmY4MTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOemisGAFrNl25m9XVIKcntPuHVU0Rj5/uGW IPBFCfLhcufp7QhXURG9dg+PelEs8zfkCeGmEJHPPb1oJw5Sd3aG/Ay+30/CUes1 zYjhnyzPRD1Cwum+UCYpyNlbl1DZ6qLky4oAKtg70zD9zt/KXJawc6SgQ4nNfooc RPhrIR0H2RzKeFtWkN07nAZ8QtWx+2F/7cLmNfXI+dowUpdfQWHQbb94InNQNJvT efINCJVvmFbBNpFvE45QdvnqtExLOuyI2RCcByNLmwEoc/haTALmt71HdZFHW4eN QvesOtpNMY4ZLxaLhIJ2+KY1CNnjslDlWlGFUxPHKOd1dsG4awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/IfSv+6yiOLjkfNgHfoKzu2Np/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2I4YTdkNzUtOWNhMS0z ZDI3LWIyYTktOWFmODg3OTk2ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADV/rrdvInaLVRJ+55xLCBUUMZabc92LattuXxUXb3q14GWfOTzdq4Sb qg8RFY9gMqYrrUh9fw2ryFlMfIdXnr37+wo503i4+3DjJWTmcL1XcTLdVdJ44pkX VKaxpPgik1lRBvFTIieMqJ+IE7TQ1NX0qF2wnhG6vYWN/ynMQwLcP7e3uCAmKvY7 rcpYHKgDIglh8+s6Z5l0J77YIr9EbOzNIjHIW6GjVUVtD8W+9lD09uFh14r1cfy3 u+XeDEixYkFi6hJgDC4faUag4KQhYUiB5JBkAxCSEw7CuhXg9/E5KaA8QiI9xarQ 75pVPhKn2GL79GTq8zQLjgVxsgiaVVg= -----END CERTIFICATE-----Generated at Sat Jun 13 13:22:16 2026 by rpki-client