$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/409745a2-a259-32e0-9c65-d389d0992fea.roa File: 409745a2-a259-32e0-9c65-d389d0992fea.roa (raw, json) Hash identifier: fwik4GfBudbf7IOxNwq+Z7Vfm03Aw6/V0dxlJNoL0/4= Subject key identifier: 11:63:05:64:A1:F7:99:F2:ED:0B:97:01:AE:B5:47:1F:4B:4C:F8:B7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0D8436DB76FA4C3656021970 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/409745a2-a259-32e0-9c65-d389d0992fea.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 397194 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:36:db:76:fa:4c:36:56:02:19:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=f2d46279-03a1-40c4-a9fa-b39f62f2d613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8f:c4:d6:11:bc:a1:8a:ad:87:28:d9:e7:48: 67:52:5f:9d:b9:49:23:82:06:ef:86:ae:40:0d:21: e3:f5:79:5b:83:a2:c1:fa:1b:fc:6c:02:a0:11:42: 56:00:50:52:aa:ef:fa:21:d3:36:31:6c:45:d1:c7: d5:1f:bb:ec:61:7a:fe:44:c8:bb:59:74:75:70:74: 35:f2:57:d1:f3:e3:34:15:ae:84:86:90:96:60:79: 36:d6:53:20:66:2c:f0:21:cd:7e:35:8b:96:89:67: 7b:02:43:4d:3d:bd:e4:29:7c:55:a4:45:af:07:a1: 84:1b:39:96:be:43:84:d7:62:d8:73:08:86:d9:92: 82:94:78:64:c3:08:b5:95:46:d8:50:7f:8f:9d:de: d2:85:ce:fc:10:25:63:e8:f3:f0:23:73:44:31:e7: e5:bd:eb:04:b9:49:c3:9e:5a:4c:5f:bc:9c:58:61: 73:42:c8:c6:20:bf:ab:ad:3b:11:01:dc:c1:2a:d2: 77:25:99:8f:99:85:07:b4:38:1e:e7:78:9d:bc:51: 68:5f:cf:71:f1:13:d8:ea:c2:ca:c0:70:60:a5:a6: ab:68:0f:0f:70:30:46:2d:09:84:56:b4:d8:d3:d7: 27:3d:16:05:ea:0e:47:df:ce:fa:f7:ba:70:0f:5e: ef:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:63:05:64:A1:F7:99:F2:ED:0B:97:01:AE:B5:47:1F:4B:4C:F8:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/409745a2-a259-32e0-9c65-d389d0992fea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e9:26:14:ea:14:ae:3d:83:af:33:b0:6c:2f:72:56:49:d0: f2:89:c4:37:d3:31:c6:f2:27:3b:b5:6e:95:f5:80:d5:8d:c7: ec:f1:8d:f5:a8:e0:e4:82:5b:e5:f4:35:d4:d6:d0:a5:bb:d3: 9b:de:27:34:eb:5c:82:19:b6:52:8e:8d:20:71:ff:65:a9:03: 7a:f0:57:e0:f7:b6:cd:4b:ec:57:f6:3b:f1:ee:cb:38:02:ab: d5:b6:91:5c:53:21:76:0e:12:c6:c8:54:54:d7:e4:06:3d:ad: 15:40:0e:b7:2c:a9:6d:55:9c:44:bb:84:5b:7f:66:6c:6d:f5: 5b:f6:a2:b2:1b:81:da:ce:78:e1:97:d3:ec:57:6c:2d:3f:64: 74:89:96:4a:1a:ef:55:67:b9:e3:3a:56:08:d0:2a:8f:d4:9c: cf:66:e9:92:6c:48:f1:5b:74:78:22:e7:26:c1:42:79:08:a2: e3:72:4e:aa:cf:40:8d:13:d5:8b:8b:12:8e:26:02:fe:ed:bc: d6:4f:df:8a:ac:d9:ad:5c:15:ab:45:8b:6e:b0:26:04:fa:0a: 22:4f:1f:38:3b:1f:89:a8:b7:03:ef:67:f8:00:b8:fd:52:95: 4d:e8:4d:a2:fd:e2:e0:72:2d:62:64:0c:2b:fc:73:52:bd:24: 03:17:55:3f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4NhDbbdvpMNlYCGXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk ZjJkNDYyNzktMDNhMS00MGM0LWE5ZmEtYjM5ZjYyZjJkNjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I/E1hG8oYqthyjZ50hnUl+duUkjggbvhq5A DSHj9Xlbg6LB+hv8bAKgEUJWAFBSqu/6IdM2MWxF0cfVH7vsYXr+RMi7WXR1cHQ1 8lfR8+M0Fa6EhpCWYHk21lMgZizwIc1+NYuWiWd7AkNNPb3kKXxVpEWvB6GEGzmW vkOE12LYcwiG2ZKClHhkwwi1lUbYUH+Pnd7Shc78ECVj6PPwI3NEMeflvesEuUnD nlpMX7ycWGFzQsjGIL+rrTsRAdzBKtJ3JZmPmYUHtDge53idvFFoX89x8RPY6sLK wHBgpaaraA8PcDBGLQmEVrTY09cnPRYF6g5H387697pwD17vHwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBFjBWSh95ny7QuXAa61Rx9LTPi3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDA5NzQ1YTItYTI1OS0z MmUwLTljNjUtZDM4OWQwOTkyZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBm6SYU6hSuPYOvM7BsL3JWSdDyicQ30zHG8ic7tW6V9YDVjcfs8Y31 qODkglvl9DXU1tClu9Ob3ic061yCGbZSjo0gcf9lqQN68Ffg97bNS+xX9jvx7ss4 AqvVtpFcUyF2DhLGyFRU1+QGPa0VQA63LKltVZxEu4Rbf2ZsbfVb9qKyG4Haznjh l9PsV2wtP2R0iZZKGu9VZ7njOlYI0CqP1JzPZumSbEjxW3R4IucmwUJ5CKLjck6q z0CNE9WLixKOJgL+7bzWT9+KrNmtXBWrRYtusCYE+goiTx84Ox+JqLcD72f4ALj9 UpVN6E2i/eLgci1iZAwr/HNSvSQDF1U/ -----END CERTIFICATE-----Generated at Sat Jun 13 16:01:07 2026 by rpki-client