$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/653a59d8-1df8-34ef-a248-5b5b2a22dbd6.roa File: 653a59d8-1df8-34ef-a248-5b5b2a22dbd6.roa (raw, json) Hash identifier: 4Of0Qs8ewmHR1utJ3E87G7pWYo3er+ZjkN0KeyqRZ9Q= Subject key identifier: 8F:78:5D:BD:49:B2:0B:84:57:06:55:40:24:71:6E:C1:DF:36:44:32 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0C1EEB4E49B73A06362B9D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/653a59d8-1df8-34ef-a248-5b5b2a22dbd6.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 396566 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:eb:4e:49:b7:3a:06:36:2b:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=bd796c98-ab68-4cb0-b505-2faa0c772c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fc:fe:38:e6:24:be:f2:c3:09:82:9a:4b:74: ba:be:8b:02:09:28:8c:61:7b:34:88:0a:ec:fb:a9: 14:24:23:bd:2d:e5:7e:09:29:97:30:f3:f8:d0:1a: 9b:7d:55:3c:d2:41:df:d7:45:07:84:ec:96:a5:88: 7c:6c:14:72:29:0c:09:aa:c4:46:26:14:d0:da:4b: 9c:49:c9:3c:c6:a2:76:52:aa:85:a8:d6:40:31:2b: ad:3e:6a:71:73:ea:d8:cc:1c:3a:06:5f:00:ba:b6: cd:96:9c:0a:5a:0e:c8:79:51:07:ef:b6:da:ea:ac: 41:4c:ef:32:0f:e4:50:c1:e7:e2:15:67:75:11:8b: eb:7b:13:37:d1:88:88:65:67:31:e0:8a:0f:1f:c3: 8f:98:1d:45:c2:47:44:81:30:d9:7c:43:61:c6:e1: aa:e8:93:d5:7c:31:d6:b5:32:af:5b:1c:dd:f4:26: be:a9:bf:3b:3e:6a:98:2f:40:f5:2b:c5:f8:67:af: 3e:11:3d:76:d2:85:15:f5:15:3d:72:17:4f:42:65: 91:1d:aa:e8:17:3e:ee:38:f4:c3:ee:34:37:2d:fc: 08:47:0d:ba:32:52:7d:f1:f5:fc:06:99:db:42:c6: 4a:1c:84:6c:8b:87:a7:ef:c3:76:0a:32:72:9e:f3: 4f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:78:5D:BD:49:B2:0B:84:57:06:55:40:24:71:6E:C1:DF:36:44:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/653a59d8-1df8-34ef-a248-5b5b2a22dbd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:8d:9c:b2:cc:de:ca:c8:8b:96:0e:a3:88:78:fd:bf:c4:2f: 5e:af:db:a1:6d:63:85:d0:d3:e1:6a:69:a5:eb:f6:c8:1e:29: a7:3e:63:5f:96:6b:19:bd:21:8b:be:f8:f2:5d:b4:dd:67:40: f4:f0:08:9d:b7:5e:18:24:ed:5e:a4:fb:22:57:07:aa:b9:a1: 5d:53:bb:40:c0:c6:de:ac:b1:c3:3b:c5:b5:39:e2:e4:0d:05: f9:36:68:57:d3:2a:41:12:da:29:32:f8:07:7c:ce:4a:37:23: 24:38:9b:06:92:3a:22:f2:59:c8:19:e2:41:dc:9f:36:78:3b: a5:d5:22:27:a6:a3:6a:c2:e8:94:f5:af:66:c1:ca:20:34:b3: f8:69:99:4d:0b:4f:d9:d5:de:f1:a4:df:8b:80:c7:77:f2:fa: db:37:1c:85:ed:c1:0e:a8:4e:95:3c:8d:34:2b:9e:93:4d:66: 62:14:75:2a:84:f1:12:62:7a:fc:6e:c3:6f:32:8f:fc:42:bc: 20:67:62:29:79:9a:18:98:dc:41:ee:e7:43:3e:c6:ff:d2:dc: b1:59:03:45:f0:2c:35:4a:f4:d8:9e:b7:89:e4:0a:6a:89:d9: 4d:ba:a4:47:0d:be:23:a0:ee:dd:c8:5e:3b:8f:ec:02:c9:e6: 63:4c:84:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHutOSbc6BjYrnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk YmQ3OTZjOTgtYWI2OC00Y2IwLWI1MDUtMmZhYTBjNzcyYzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/z+OOYkvvLDCYKaS3S6vosCCSiMYXs0iArs +6kUJCO9LeV+CSmXMPP40BqbfVU80kHf10UHhOyWpYh8bBRyKQwJqsRGJhTQ2kuc Sck8xqJ2UqqFqNZAMSutPmpxc+rYzBw6Bl8AurbNlpwKWg7IeVEH77ba6qxBTO8y D+RQwefiFWd1EYvrexM30YiIZWcx4IoPH8OPmB1FwkdEgTDZfENhxuGq6JPVfDHW tTKvWxzd9Ca+qb87PmqYL0D1K8X4Z68+ET120oUV9RU9chdPQmWRHaroFz7uOPTD 7jQ3LfwIRw26MlJ98fX8BpnbQsZKHIRsi4en78N2CjJynvNPiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI94Xb1JsguEVwZVQCRxbsHfNkQyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjUzYTU5ZDgtMWRmOC0z NGVmLWEyNDgtNWI1YjJhMjJkYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmNnLLM3srIi5YOo4h4/b/EL16v26FtY4XQ0+FqaaXr9sgeKac+Y1+W axm9IYu++PJdtN1nQPTwCJ23Xhgk7V6k+yJXB6q5oV1Tu0DAxt6sscM7xbU54uQN Bfk2aFfTKkES2iky+Ad8zko3IyQ4mwaSOiLyWcgZ4kHcnzZ4O6XVIiemo2rC6JT1 r2bByiA0s/hpmU0LT9nV3vGk34uAx3fy+ts3HIXtwQ6oTpU8jTQrnpNNZmIUdSqE 8RJievxuw28yj/xCvCBnYil5mhiY3EHu50M+xv/S3LFZA0XwLDVK9Niet4nkCmqJ 2U26pEcNviOg7t3IXjuP7ALJ5mNMhLY= -----END CERTIFICATE-----Generated at Sat Jun 13 14:28:12 2026 by rpki-client