$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aae1681-a715-398d-93e4-ba01ef68fe79.roa File: 5aae1681-a715-398d-93e4-ba01ef68fe79.roa (raw, json) Hash identifier: OYjc79a9yr4g/RH80LVn12cFSewsHdlts7emHVbWyCU= Subject key identifier: 15:40:EA:4E:46:5C:6C:0B:81:94:9F:3F:40:05:6E:09:0C:D5:6D:67 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0D8434D88360B3E834847B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aae1681-a715-398d-93e4-ba01ef68fe79.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 36616 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:34:d8:83:60:b3:e8:34:84:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=d2b495f7-23d5-4c50-bd37-ed2925acbbeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:6c:40:ed:a8:44:0e:c1:79:9e:cd:19:60:15: fb:9c:86:85:7a:06:c1:fb:55:2a:08:ef:b5:3e:0a: a8:94:77:e3:43:62:51:7c:ad:45:df:43:e5:6d:9a: ce:be:dd:ef:e1:81:3d:6e:ce:41:fd:eb:5e:34:25: 57:d8:cc:bf:1b:cf:c1:90:ee:5f:16:63:00:24:a2: 59:00:46:97:09:6d:22:cd:4e:87:f9:0c:5c:b1:74: 3a:33:6d:10:c4:95:0e:4b:80:b1:4f:d2:cb:b6:08: 30:1d:47:7b:d2:87:c8:c7:a4:73:41:eb:7b:44:c0: 13:3c:af:76:43:9e:77:4e:ea:6c:36:a4:5b:d3:a3: 56:0a:74:3f:e3:be:ab:0b:a1:54:ea:c6:cf:d4:15: 95:4f:cf:94:32:36:cc:b4:c8:51:6a:97:43:65:a0: 56:8f:8c:09:ed:17:d1:72:ef:51:83:54:93:df:85: c9:d7:76:df:bf:58:8c:1f:7a:0b:cb:74:fa:a6:ce: f2:b4:db:a8:2f:ac:52:3c:f9:3f:36:fb:ef:66:c5: 19:44:39:27:fd:e8:a2:fc:1b:e6:6d:a9:8c:df:f4: d1:0f:59:87:db:7e:19:fd:89:b7:1e:90:98:a6:4d: 00:d9:25:8d:68:10:27:9c:41:98:da:40:be:e4:53: 67:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:40:EA:4E:46:5C:6C:0B:81:94:9F:3F:40:05:6E:09:0C:D5:6D:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aae1681-a715-398d-93e4-ba01ef68fe79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:0e:e0:a3:05:4c:d2:7b:e0:d9:ca:f2:fb:de:4c:27:90:f0: bd:3f:b0:16:a1:24:35:fb:a8:69:d7:fa:cb:21:52:a2:10:dc: c7:9d:02:b6:e5:01:da:4c:19:57:e7:d3:f1:f4:ea:3c:a1:44: 03:0e:3b:77:c1:a3:1f:55:99:38:a6:67:05:fb:11:40:1b:5a: 0b:22:78:7f:44:32:ee:e1:1c:51:04:c1:f4:49:9b:63:fc:7b: e7:ea:32:ee:76:79:98:52:72:90:81:45:d1:de:81:11:42:88: c0:de:8b:c5:4c:02:4b:b0:c7:5b:09:82:e3:7b:46:be:f1:87: 5b:d9:ac:77:30:b8:0b:75:c9:68:ac:f9:d5:d4:57:03:7d:94: 54:23:2c:7b:17:02:91:37:b0:21:c0:7a:37:01:db:32:5c:0d: 04:4b:48:1c:9e:3d:96:cd:ab:85:7a:08:6e:50:4c:d4:b6:5a: d0:7e:e5:ad:f5:75:41:6c:c8:17:3e:3e:41:07:27:3d:68:d2: 95:6d:3b:f1:31:55:d6:1f:29:98:91:e8:12:54:7f:f7:29:3b: 5c:ce:07:7c:30:b5:63:8f:86:d9:95:8a:e9:83:23:b1:a8:86: 86:af:70:ec:28:b8:97:cf:2c:13:ce:a3:1e:39:b7:72:69:2a: 22:2e:52:77 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4NhDTYg2Cz6DSEewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk ZDJiNDk1ZjctMjNkNS00YzUwLWJkMzctZWQyOTI1YWNiYmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8WxA7ahEDsF5ns0ZYBX7nIaFegbB+1UqCO+1 PgqolHfjQ2JRfK1F30PlbZrOvt3v4YE9bs5B/eteNCVX2My/G8/BkO5fFmMAJKJZ AEaXCW0izU6H+QxcsXQ6M20QxJUOS4CxT9LLtggwHUd70ofIx6RzQet7RMATPK92 Q553TupsNqRb06NWCnQ/476rC6FU6sbP1BWVT8+UMjbMtMhRapdDZaBWj4wJ7RfR cu9Rg1ST34XJ13bfv1iMH3oLy3T6ps7ytNuoL6xSPPk/NvvvZsUZRDkn/eii/Bvm bamM3/TRD1mH234Z/Ym3HpCYpk0A2SWNaBAnnEGY2kC+5FNnNQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBVA6k5GXGwLgZSfP0AFbgkM1W1nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWFhZTE2ODEtYTcxNS0z OThkLTkzZTQtYmEwMWVmNjhmZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBGDuCjBUzSe+DZyvL73kwnkPC9P7AWoSQ1+6hp1/rLIVKiENzHnQK2 5QHaTBlX59Px9Oo8oUQDDjt3waMfVZk4pmcF+xFAG1oLInh/RDLu4RxRBMH0SZtj /Hvn6jLudnmYUnKQgUXR3oERQojA3ovFTAJLsMdbCYLje0a+8Ydb2ax3MLgLdclo rPnV1FcDfZRUIyx7FwKRN7AhwHo3AdsyXA0ES0gcnj2WzauFeghuUEzUtlrQfuWt 9XVBbMgXPj5BByc9aNKVbTvxMVXWHymYkegSVH/3KTtczgd8MLVjj4bZlYrpgyOx qIaGr3DsKLiXzywTzqMeObdyaSoiLlJ3 -----END CERTIFICATE-----Generated at Sat Jun 13 14:35:08 2026 by rpki-client