$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/53df2088-a379-353e-801c-3ce3dfbe27da.roa File: 53df2088-a379-353e-801c-3ce3dfbe27da.roa (raw, json) Hash identifier: QwSCRXV/U6d5HIPwvza6jXKg87snfaeGNbLisBX1BR0= Subject key identifier: 99:65:4E:AD:E9:A6:D8:3C:07:FA:29:1B:C8:A6:B9:DF:E0:D5:DA:BF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0C1EEADE0C3B71563F9CC620 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/53df2088-a379-353e-801c-3ce3dfbe27da.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 396605 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:ea:de:0c:3b:71:56:3f:9c:c6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=bc046bd6-0e23-49fd-b9f6-9f5159e4898b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:20:c8:2e:14:4d:5c:be:cf:49:af:10:05:f1: 4e:43:bb:aa:66:43:bb:db:6f:9a:af:73:91:45:cf: 66:60:87:c8:84:0e:e3:c0:82:ab:0a:50:e8:1b:2f: 93:54:26:67:62:eb:78:bf:c4:90:6f:67:c7:ed:a5: 60:72:3f:5b:de:33:d1:67:ff:c8:ed:cb:35:2c:b3: f0:ac:58:c9:12:7b:7a:f2:ed:d4:86:4c:fd:46:f8: bd:fa:af:f6:cc:da:b5:60:f9:7c:66:ec:71:ab:fb: 68:da:16:ef:a0:57:5f:d7:e4:97:2c:e0:2b:cd:fe: 3c:f9:35:5b:29:8f:09:6c:26:3c:87:22:7a:5f:1f: d0:6e:a5:1b:6a:80:6e:24:fa:93:9c:bf:51:c3:6e: 76:3b:fc:61:10:af:00:ab:b0:4f:eb:1f:6c:da:e8: 72:15:81:d3:41:18:ab:50:53:a7:29:f0:53:a0:16: 01:3b:ed:2a:bf:c2:c9:c6:09:1f:2f:5d:04:68:41: c4:33:42:cd:c7:15:4f:22:35:41:cc:86:bd:32:9e: 48:01:4a:b7:00:6c:ae:3c:57:5b:d7:6d:88:91:06: c8:b5:df:e7:32:b7:fc:fa:5e:a5:fc:07:36:67:fb: 21:a2:87:01:da:89:1c:ca:96:98:5f:5d:17:58:2d: ed:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:65:4E:AD:E9:A6:D8:3C:07:FA:29:1B:C8:A6:B9:DF:E0:D5:DA:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/53df2088-a379-353e-801c-3ce3dfbe27da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:57:32:69:a6:b3:9a:a5:9c:06:88:e3:49:b0:69:b8:2c:d3: 40:81:e4:9a:4e:f2:d2:33:a1:34:ec:20:73:dc:71:bc:2a:cf: 50:b8:f5:66:e0:ae:7a:9a:d2:8b:e7:99:53:b9:9c:ce:43:e6: 49:90:50:96:b2:bf:e0:31:0b:7a:7f:85:a5:b6:23:a5:da:7f: 4a:52:fa:a1:15:a6:a4:33:58:4c:62:ec:6b:43:ca:e9:93:f5: 65:fd:84:1a:c0:a2:9a:88:93:98:4c:cf:c4:1e:98:8d:58:82: 5b:5b:98:0c:4e:22:b7:26:34:39:f3:14:bc:c1:52:cc:b2:b3: dd:62:77:32:39:58:4b:f2:be:c8:12:03:7d:7a:39:f6:76:c8: 37:56:c1:51:70:8d:fa:06:d5:ab:79:89:36:fc:03:5b:7d:82: 1a:67:8e:58:c2:37:16:53:01:0f:3f:80:18:3d:45:9f:3b:74: cd:1f:70:7d:bb:51:08:50:6e:a5:75:a8:05:72:d4:d7:73:88: b6:cc:5b:13:90:98:3c:2e:49:61:86:86:6f:ac:74:2b:80:47: d2:c0:f5:8c:5d:12:b7:96:49:c6:89:cd:2c:cc:23:32:d6:83: 82:50:cd:ef:50:07:a8:34:6f:33:f9:bc:ac:11:68:3e:a8:aa: 94:74:3c:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHureDDtxVj+cxiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk YmMwNDZiZDYtMGUyMy00OWZkLWI5ZjYtOWY1MTU5ZTQ4OThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCDILhRNXL7PSa8QBfFOQ7uqZkO722+ar3OR Rc9mYIfIhA7jwIKrClDoGy+TVCZnYut4v8SQb2fH7aVgcj9b3jPRZ//I7cs1LLPw rFjJEnt68u3Uhkz9Rvi9+q/2zNq1YPl8Zuxxq/to2hbvoFdf1+SXLOArzf48+TVb KY8JbCY8hyJ6Xx/QbqUbaoBuJPqTnL9Rw252O/xhEK8Aq7BP6x9s2uhyFYHTQRir UFOnKfBToBYBO+0qv8LJxgkfL10EaEHEM0LNxxVPIjVBzIa9Mp5IAUq3AGyuPFdb 122IkQbItd/nMrf8+l6l/Ac2Z/shoocB2okcypaYX10XWC3tZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJllTq3pptg8B/opG8imud/g1dq/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTNkZjIwODgtYTM3OS0z NTNlLTgwMWMtM2NlM2RmYmUyN2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlXMmmms5qlnAaI40mwabgs00CB5JpO8tIzoTTsIHPccbwqz1C49Wbg rnqa0ovnmVO5nM5D5kmQUJayv+AxC3p/haW2I6Xaf0pS+qEVpqQzWExi7GtDyumT 9WX9hBrAopqIk5hMz8QemI1YgltbmAxOIrcmNDnzFLzBUsyys91idzI5WEvyvsgS A316OfZ2yDdWwVFwjfoG1at5iTb8A1t9ghpnjljCNxZTAQ8/gBg9RZ87dM0fcH27 UQhQbqV1qAVy1NdziLbMWxOQmDwuSWGGhm+sdCuAR9LA9YxdEreWScaJzSzMIzLW g4JQze9QB6g0bzP5vKwRaD6oqpR0PA8= -----END CERTIFICATE-----Generated at Sat Jun 13 15:07:38 2026 by rpki-client