$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/41328d87-851c-3912-8b20-d52c93ba2f95.roa File: 41328d87-851c-3912-8b20-d52c93ba2f95.roa (raw, json) Hash identifier: wLBQD5PzOG+iRSYIl8KtJ0q4C1vE3gmUEPOvKnfgWv0= Subject key identifier: 89:99:70:D6:86:D8:B9:67:BA:43:88:63:66:34:0D:47:BF:D9:6F:B7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0C1EC832381FE1B830BEF1C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/41328d87-851c-3912-8b20-d52c93ba2f95.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 397197 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:c8:32:38:1f:e1:b8:30:be:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=cf99446e-b0a1-4341-af40-ec8e81d58bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d8:a0:75:ad:b6:6f:ae:21:39:bf:3e:9d:f6: 47:2e:90:8f:5a:2a:aa:07:a8:8c:20:0d:a4:97:3c: ab:de:29:dc:da:32:3d:8b:0f:b3:37:b7:60:1b:b4: 80:5d:8a:65:83:1d:56:99:c7:dd:5e:d2:fe:7d:6f: a6:36:1a:c7:ac:82:a0:1c:8c:4d:80:a7:bb:04:17: c0:76:8a:9d:b3:8e:22:0b:d6:18:1d:14:3b:98:e2: 4b:8a:50:28:6a:0e:c8:87:c4:35:5f:d3:f9:95:2e: e0:51:d3:31:3c:3b:96:d5:42:21:c1:ea:ca:39:45: aa:05:df:f1:06:71:16:f0:67:22:03:7c:e2:a5:01: 9a:25:ec:eb:6b:26:44:84:bb:3a:c5:52:fb:9f:4f: a8:53:49:90:16:c5:2c:07:17:f7:9f:dc:6e:e8:99: be:a2:5e:64:d9:a7:54:e9:2b:65:d4:be:e5:ae:04: b2:78:44:e6:8c:c5:2f:4b:1a:88:bf:7a:be:08:80: 12:14:e4:8c:b5:63:bc:e6:a7:b9:c9:74:29:6c:55: a4:00:8d:09:b3:a0:56:3e:8a:13:30:2a:28:63:70: 85:21:70:bc:48:ea:e7:34:75:cf:fa:8b:4f:cd:79: 23:cf:b6:51:ba:78:87:9d:cf:ac:f5:fb:38:dd:72: 8e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:99:70:D6:86:D8:B9:67:BA:43:88:63:66:34:0D:47:BF:D9:6F:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/41328d87-851c-3912-8b20-d52c93ba2f95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:41:b7:30:33:d8:fc:97:5f:ff:83:c9:7a:3c:c5:4c:12:ed: 66:41:95:1b:9e:e3:94:60:13:58:93:8d:1c:49:55:8b:66:8e: 6e:0b:68:41:9a:0b:09:8d:23:c4:9c:9b:a8:67:96:4f:3d:98: 37:e0:8d:ae:8b:2e:72:53:79:b0:e2:c7:60:ef:d0:29:3c:6c: a2:46:fc:c9:7a:87:52:00:f1:06:32:84:63:fa:53:f0:c7:74: d5:02:a3:58:99:e5:71:d6:94:70:3b:90:f0:ce:4e:ce:7f:35: 8a:6c:bd:69:62:7c:23:b9:e5:7f:3e:b1:d6:42:ed:e0:48:4d: f8:d3:9e:c8:1e:c7:25:16:80:01:8c:f9:f1:8e:e7:b5:ec:ab: fc:22:c4:ed:b9:cb:1f:25:35:d3:b2:e3:b5:eb:d6:ed:14:9f: 5e:8a:58:e6:b0:3a:8e:ce:49:1b:07:f3:9c:da:85:46:b1:27: d4:93:81:b0:f6:05:cb:c1:0c:52:6a:a8:dc:b5:53:17:f8:6d: 8e:33:8c:bc:84:b4:37:1c:e6:12:ca:38:52:4e:15:1d:e4:a7: bb:8c:55:8d:9d:91:8b:78:38:0c:0c:a3:72:8c:ae:eb:93:b9: cc:cc:4c:e8:8a:cc:af:fd:fb:5b:86:74:96:9a:80:c7:a3:91: 84:93:7a:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHsgyOB/huDC+8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk Y2Y5OTQ0NmUtYjBhMS00MzQxLWFmNDAtZWM4ZTgxZDU4YmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNigda22b64hOb8+nfZHLpCPWiqqB6iMIA2k lzyr3inc2jI9iw+zN7dgG7SAXYplgx1WmcfdXtL+fW+mNhrHrIKgHIxNgKe7BBfA doqds44iC9YYHRQ7mOJLilAoag7Ih8Q1X9P5lS7gUdMxPDuW1UIhwerKOUWqBd/x BnEW8GciA3zipQGaJezrayZEhLs6xVL7n0+oU0mQFsUsBxf3n9xu6Jm+ol5k2adU 6Stl1L7lrgSyeETmjMUvSxqIv3q+CIASFOSMtWO85qe5yXQpbFWkAI0Js6BWPooT MCooY3CFIXC8SOrnNHXP+otPzXkjz7ZRuniHnc+s9fs43XKOtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImZcNaG2LlnukOIY2Y0DUe/2W+3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDEzMjhkODctODUxYy0z OTEyLThiMjAtZDUyYzkzYmEyZjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJBtzAz2PyXX/+DyXo8xUwS7WZBlRue45RgE1iTjRxJVYtmjm4LaEGa CwmNI8Scm6hnlk89mDfgja6LLnJTebDix2Dv0Ck8bKJG/Ml6h1IA8QYyhGP6U/DH dNUCo1iZ5XHWlHA7kPDOTs5/NYpsvWlifCO55X8+sdZC7eBITfjTnsgexyUWgAGM +fGO57Xsq/wixO25yx8lNdOy47Xr1u0Un16KWOawOo7OSRsH85zahUaxJ9STgbD2 BcvBDFJqqNy1Uxf4bY4zjLyEtDcc5hLKOFJOFR3kp7uMVY2dkYt4OAwMo3KMruuT uczMTOiKzK/9+1uGdJaagMejkYSTesM= -----END CERTIFICATE-----Generated at Sat Jun 13 14:58:52 2026 by rpki-client