$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78238a8d-a55c-3bd2-881a-c10ab57f4d71.roa File: 78238a8d-a55c-3bd2-881a-c10ab57f4d71.roa (raw, json) Hash identifier: cpYdhSzfYYsUVYvCMS22ozmWti7Pzyhqk8/AG3AXy9A= Subject key identifier: A0:DC:A6:87:E6:B9:E4:4F:70:B5:1E:89:38:AA:6E:9E:A0:2C:D5:72 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0D8433A74CD10CD08BA05000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78238a8d-a55c-3bd2-881a-c10ab57f4d71.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 396826 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:33:a7:4c:d1:0c:d0:8b:a0:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=e1f0e8d0-d952-4dcb-a12c-93556a658dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:25:ac:b6:af:b3:0d:75:90:b2:7d:b6:00:66: ee:93:60:7d:f1:46:09:b5:a5:90:03:c6:da:6b:e7: 10:e0:06:0d:44:f4:e7:ee:e8:a8:db:5c:3a:38:49: 3b:e1:f7:fa:2b:c4:bb:2c:47:a9:f9:7a:58:bb:3a: 1c:2c:0c:a4:9d:42:a1:b5:db:18:a0:c8:b7:c3:f9: 76:55:64:1a:01:f7:1c:70:54:b4:a8:55:a1:9c:79: bb:26:00:54:f3:4e:2d:d5:6c:a6:af:35:8a:19:d1: d3:c0:29:e7:e7:c9:b7:72:e7:77:9f:27:fc:48:d4: dc:74:e7:02:df:91:2c:66:cf:bd:17:b0:3c:c7:2b: 9e:5b:f7:13:58:60:9a:2d:90:3c:97:4d:ff:45:67: 94:22:70:c5:45:32:a6:44:ab:ff:11:87:3c:6c:9f: ee:77:ba:4d:57:36:43:ab:cd:82:4d:90:8e:04:67: 0d:80:18:ae:52:d2:ee:a3:9e:e8:c2:e4:0f:12:c5: 7b:43:10:d1:d4:2c:77:81:27:9d:50:0f:da:fe:fb: dc:c1:c2:03:e8:26:16:60:e4:2f:e6:80:73:34:3f: 8f:24:c9:83:25:5f:e9:86:53:83:64:51:bf:02:56: 2c:9b:a4:6c:fc:32:c7:22:cc:06:57:e1:02:11:91: 3c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DC:A6:87:E6:B9:E4:4F:70:B5:1E:89:38:AA:6E:9E:A0:2C:D5:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78238a8d-a55c-3bd2-881a-c10ab57f4d71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:58:c5:0e:c4:b7:f9:ff:75:97:ae:0b:6b:0e:d9:b2:c4:c9: 2d:20:df:21:7e:f2:58:ac:ae:31:40:d7:5e:2a:59:41:64:47: 78:78:f1:8f:18:6f:e2:48:db:bb:62:28:ca:ff:93:a5:a2:88: d4:39:87:c8:be:f1:df:cc:18:88:a1:d4:9c:a9:f2:8a:0b:70: b1:18:6e:55:e3:51:5a:b3:4a:86:de:c3:7b:89:e4:4c:d2:bf: 57:eb:48:26:a9:56:4d:29:3f:d8:aa:6a:bc:bb:fd:54:33:06: 28:02:8e:d7:8f:db:1c:7b:2e:0f:8e:d0:22:af:1d:01:55:15: d1:f7:a8:c5:94:06:6d:2e:0d:5b:35:8d:f5:45:76:88:b2:f3: bd:07:8d:09:80:18:97:6a:8e:44:18:3e:8f:59:f3:fa:e8:bd: ba:60:52:39:f8:d8:cf:e4:c4:60:73:b9:53:c6:7a:4b:c7:b8: 07:d6:a3:ec:24:1c:03:ba:5e:4a:15:91:5b:2e:7e:37:a7:11: 63:9b:69:0e:6b:2a:0d:d8:76:69:51:c0:a2:88:cb:0a:21:2b: ab:59:c4:da:a7:8d:8c:0d:5e:74:5f:1e:b3:de:21:fc:96:f8: 4d:0e:58:ed:33:da:99:47:ad:e3:ed:0a:bb:d7:63:87:f5:ed: 5b:2d:52:48 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4NhDOnTNEM0IugUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk ZTFmMGU4ZDAtZDk1Mi00ZGNiLWExMmMtOTM1NTZhNjU4ZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyWstq+zDXWQsn22AGbuk2B98UYJtaWQA8ba a+cQ4AYNRPTn7uio21w6OEk74ff6K8S7LEep+XpYuzocLAyknUKhtdsYoMi3w/l2 VWQaAfcccFS0qFWhnHm7JgBU804t1WymrzWKGdHTwCnn58m3cud3nyf8SNTcdOcC 35EsZs+9F7A8xyueW/cTWGCaLZA8l03/RWeUInDFRTKmRKv/EYc8bJ/ud7pNVzZD q82CTZCOBGcNgBiuUtLuo57owuQPEsV7QxDR1Cx3gSedUA/a/vvcwcID6CYWYOQv 5oBzND+PJMmDJV/phlODZFG/AlYsm6Rs/DLHIswGV+ECEZE8UQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKDcpofmueRPcLUeiTiqbp6gLNVyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzgyMzhhOGQtYTU1Yy0z YmQyLTg4MWEtYzEwYWI1N2Y0ZDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB4WMUOxLf5/3WXrgtrDtmyxMktIN8hfvJYrK4xQNdeKllBZEd4ePGP GG/iSNu7YijK/5OloojUOYfIvvHfzBiIodScqfKKC3CxGG5V41Fas0qG3sN7ieRM 0r9X60gmqVZNKT/Yqmq8u/1UMwYoAo7Xj9scey4PjtAirx0BVRXR96jFlAZtLg1b NY31RXaIsvO9B40JgBiXao5EGD6PWfP66L26YFI5+NjP5MRgc7lTxnpLx7gH1qPs JBwDul5KFZFbLn43pxFjm2kOayoN2HZpUcCiiMsKISurWcTap42MDV50Xx6z3iH8 lvhNDljtM9qZR63j7Qq712OH9e1bLVJI -----END CERTIFICATE-----Generated at Sat Jun 13 16:02:10 2026 by rpki-client