$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4b44afae-8815-3fcc-9da0-ba1b0bee3eba.roa File: 4b44afae-8815-3fcc-9da0-ba1b0bee3eba.roa (raw, json) Hash identifier: FaK9ZY5/BK906yYtOlbZIEbHHeRDuV+8Gbe2UkP2jOg= Subject key identifier: A4:3E:82:F5:28:C0:08:32:35:46:D0:99:D1:06:A4:65:CE:6C:A9:7A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0D843358B5484AD39CA98480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4b44afae-8815-3fcc-9da0-ba1b0bee3eba.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 396611 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:33:58:b5:48:4a:d3:9c:a9:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=0e8420ee-0efa-472b-af3f-54e592d7e146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:72:45:37:b5:78:6c:4a:de:6d:37:50:0d:60: 19:85:9b:56:84:3f:a4:9e:85:8b:9c:6e:c7:c7:0f: 97:1a:f2:62:4b:c2:21:86:53:aa:8d:9e:1b:9f:33: a1:cb:96:0b:ad:40:77:f3:62:5d:06:18:81:02:3c: 63:de:bf:ea:16:63:55:cc:b7:83:28:7c:08:0c:b3: d9:90:bf:dc:49:44:3b:5a:07:c4:9f:21:dc:c3:7d: 26:dc:a1:e4:26:be:3b:08:66:44:09:32:6e:ee:06: 03:5e:35:53:06:83:68:c8:43:a6:d3:0a:a8:05:44: 68:5a:2d:75:5f:7e:88:33:12:79:73:ef:9f:a9:11: 68:ae:bf:93:1c:db:9b:ce:cf:04:1d:72:52:0f:d6: 86:08:9f:92:b9:ad:ff:4a:ce:2a:02:35:c7:9b:fd: d8:6d:27:f9:19:21:3d:39:ed:0d:8d:d9:17:df:6a: f3:d0:91:37:6f:d4:3f:53:79:41:c0:d4:2b:18:d4: 76:1f:e1:6a:35:0d:a3:89:bf:3d:fa:a9:ed:d8:87: a6:bc:6e:10:0e:52:5a:4d:88:db:17:69:e3:a4:e4: 1f:61:db:6d:a5:0d:78:5d:43:f6:85:ac:c3:94:c5: 7d:16:73:a4:96:b4:37:9f:d6:0a:78:38:69:8a:4b: 79:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:3E:82:F5:28:C0:08:32:35:46:D0:99:D1:06:A4:65:CE:6C:A9:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4b44afae-8815-3fcc-9da0-ba1b0bee3eba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:4f:8c:f1:9e:a2:af:5c:04:51:6f:0a:b0:7a:24:af:c5:6a: ac:a4:12:ea:6c:48:51:04:b7:04:96:29:fe:f9:05:63:c9:53: c5:57:33:f9:76:e4:3c:e2:5c:63:45:ae:d7:9c:fa:fb:c4:01: 85:6d:39:32:68:91:1f:c4:14:2c:48:3e:22:eb:d8:b0:ff:e7: 26:1b:19:18:d4:ff:82:1d:4d:06:33:a1:eb:92:59:cd:a0:1e: 40:94:0d:6a:9d:19:ba:45:b5:05:02:53:9a:5f:3e:22:84:fb: 95:ee:af:64:e2:ca:58:64:e2:92:2f:85:8b:19:ec:cf:c2:19: a3:25:a4:30:26:21:a3:34:5b:fa:b1:c7:21:61:ca:7a:86:0d: 81:b3:f2:a3:c1:5f:85:3d:db:0a:34:0d:dc:ed:b6:db:2f:af: 58:bf:71:34:23:90:c7:30:ad:6b:66:6c:35:51:87:42:0a:c4: 4a:7b:76:24:8a:86:b3:15:26:e0:7b:e7:de:b1:f7:83:09:0f: 53:08:34:17:96:86:3f:7d:96:fe:7b:c3:36:27:0b:7d:31:0b: c7:31:8c:d7:99:c4:a0:12:40:af:68:bd:37:2e:aa:a8:ea:8e: 36:72:ea:e9:12:72:6c:cc:b0:27:7c:74:42:4c:05:02:ce:34: ed:0d:3e:89 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4NhDNYtUhK05yphIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk MGU4NDIwZWUtMGVmYS00NzJiLWFmM2YtNTRlNTkyZDdlMTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3JFN7V4bErebTdQDWAZhZtWhD+knoWLnG7H xw+XGvJiS8IhhlOqjZ4bnzOhy5YLrUB382JdBhiBAjxj3r/qFmNVzLeDKHwIDLPZ kL/cSUQ7WgfEnyHcw30m3KHkJr47CGZECTJu7gYDXjVTBoNoyEOm0wqoBURoWi11 X36IMxJ5c++fqRForr+THNubzs8EHXJSD9aGCJ+Sua3/Ss4qAjXHm/3YbSf5GSE9 Oe0NjdkX32rz0JE3b9Q/U3lBwNQrGNR2H+FqNQ2jib89+qnt2IemvG4QDlJaTYjb F2njpOQfYdttpQ14XUP2hazDlMV9FnOklrQ3n9YKeDhpikt5ywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKQ+gvUowAgyNUbQmdEGpGXObKl6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGI0NGFmYWUtODgxNS0z ZmNjLTlkYTAtYmExYjBiZWUzZWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAXT4zxnqKvXARRbwqweiSvxWqspBLqbEhRBLcElin++QVjyVPFVzP5 duQ84lxjRa7XnPr7xAGFbTkyaJEfxBQsSD4i69iw/+cmGxkY1P+CHU0GM6HrklnN oB5AlA1qnRm6RbUFAlOaXz4ihPuV7q9k4spYZOKSL4WLGezPwhmjJaQwJiGjNFv6 scchYcp6hg2Bs/KjwV+FPdsKNA3c7bbbL69Yv3E0I5DHMK1rZmw1UYdCCsRKe3Yk ioazFSbge+fesfeDCQ9TCDQXloY/fZb+e8M2Jwt9MQvHMYzXmcSgEkCvaL03Lqqo 6o42curpEnJszLAnfHRCTAUCzjTtDT6J -----END CERTIFICATE-----Generated at Sat Jun 13 14:48:39 2026 by rpki-client