$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/855bba1e-8412-3b97-8dd5-c004e360ed69.roa File: 855bba1e-8412-3b97-8dd5-c004e360ed69.roa (raw, json) Hash identifier: yccoKn/G63GQ+pQnN9QdoWDSAfwZy8FcoenTmjaS3d4= Subject key identifier: 04:49:23:BF:6F:22:EB:0D:18:A8:CD:72:9B:98:3C:51:73:62:22:C7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DD4E1DB653A1B8A116F4A6900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/855bba1e-8412-3b97-8dd5-c004e360ed69.roa Signing time: Thu 14 May 2026 14:08:01 +0000 ROA not before: Thu 14 May 2026 14:08:01 +0000 ROA not after: Wed 12 Aug 2026 14:08:01 +0000 asID: 30060 IP address blocks: 216.87.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d4:e1:db:65:3a:1b:8a:11:6f:4a:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 14 14:08:01 2026 GMT Not After : Aug 12 14:08:01 2026 GMT Subject: CN=aa76d350-cf00-4916-8c34-4ff9a2b59474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:13:b4:24:47:0a:b4:c6:da:e0:36:ed:fc:f6: 23:66:aa:ad:04:7f:e6:71:2f:bd:36:56:80:db:5c: 54:33:8e:73:a9:49:59:11:06:7d:fa:d2:78:09:2e: 92:a5:5f:9f:83:51:3c:73:7c:51:a6:ba:52:9c:19: 5d:e2:d3:aa:a2:23:c4:25:5c:60:17:ff:68:08:d8: 75:66:81:21:a1:e0:24:bc:c9:d5:67:bc:7f:de:4f: 60:f9:d4:5d:55:19:ab:35:aa:ed:58:c0:44:b4:4e: b6:62:4e:7c:71:54:1b:4a:bc:33:65:38:2f:4d:a8: f1:bd:78:c6:c1:53:08:e2:28:60:77:98:88:8e:73: e2:1b:34:6f:0e:12:cc:fd:71:57:1c:8c:59:a8:1b: 9b:17:cb:f4:e7:d3:4e:57:66:aa:d0:23:2a:c2:b1: bc:4c:a2:a7:94:4e:5b:d5:ed:04:a6:aa:05:a4:4f: 5c:65:ef:59:aa:3a:54:8a:5c:12:b6:f1:1a:04:0a: 15:a0:71:6f:2a:94:eb:7b:2a:ff:d2:80:df:b0:b1: 98:26:d9:c3:0e:b0:ee:af:3d:e5:e0:c8:36:d7:c5: 28:e5:bd:b7:f5:70:9f:9b:56:08:ed:e0:5e:86:ea: 7e:6c:25:fc:47:75:5a:46:c7:49:dd:f9:0f:32:92: 4a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:49:23:BF:6F:22:EB:0D:18:A8:CD:72:9B:98:3C:51:73:62:22:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/855bba1e-8412-3b97-8dd5-c004e360ed69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:da:96:94:0c:b5:00:fe:48:1f:0a:ef:bf:88:76:b2:2c:0b: d4:ad:64:11:e2:50:7e:a4:4d:91:6d:5c:28:b2:cb:30:16:5c: d4:67:37:56:7d:37:1f:f7:11:23:cc:3a:38:12:e8:53:85:fd: 6d:72:4a:8b:4c:db:85:ee:59:a7:c1:54:e6:0d:2b:93:47:ec: 2b:6a:ef:79:8d:ee:de:46:b0:92:01:a4:3e:ea:0d:bb:16:b8: e5:73:b1:26:83:54:84:cb:2c:ef:4a:2a:64:5c:a7:c1:79:16: f8:01:33:be:ac:6d:91:2c:dc:15:84:99:7e:17:11:be:10:a3: e8:c5:7a:08:82:4a:6a:d8:33:0d:95:35:1e:4d:92:0a:73:cb: 42:00:52:41:31:c2:c9:0a:93:d3:d3:d2:21:c1:4c:c0:63:e4: 14:a7:b8:a7:df:f8:d3:fc:39:7a:00:ef:5e:76:e1:e1:22:55: fb:9b:c5:f6:ca:40:82:93:90:04:68:fc:81:9f:78:5f:39:6c: dd:41:bd:fa:45:fd:92:27:cb:85:82:88:f4:a9:8f:d6:e8:08: fa:be:5b:82:17:20:d6:19:20:32:c8:f0:1a:b5:a9:fa:ca:a2: 5e:0f:fa:69:a5:7b:d0:b5:ff:9e:7e:0c:f1:fb:e6:d8:af:f7: bf:de:b7:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3U4dtlOhuKEW9KaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxNDE0MDgwMVoXDTI2MDgxMjE0MDgwMVowLzEtMCsGA1UEAxMk YWE3NmQzNTAtY2YwMC00OTE2LThjMzQtNGZmOWEyYjU5NDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxO0JEcKtMba4Dbt/PYjZqqtBH/mcS+9NlaA 21xUM45zqUlZEQZ9+tJ4CS6SpV+fg1E8c3xRprpSnBld4tOqoiPEJVxgF/9oCNh1 ZoEhoeAkvMnVZ7x/3k9g+dRdVRmrNartWMBEtE62Yk58cVQbSrwzZTgvTajxvXjG wVMI4ihgd5iIjnPiGzRvDhLM/XFXHIxZqBubF8v059NOV2aq0CMqwrG8TKKnlE5b 1e0EpqoFpE9cZe9ZqjpUilwStvEaBAoVoHFvKpTreyr/0oDfsLGYJtnDDrDurz3l 4Mg218Uo5b239XCfm1YI7eBehup+bCX8R3VaRsdJ3fkPMpJKDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARJI79vIusNGKjNcpuYPFFzYiLHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODU1YmJhMWUtODQxMi0z Yjk3LThkZDUtYzAwNGUzNjBlZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDalpQMtQD+SB8K77+IdrIsC9StZBHiUH6kTZFtXCiyyzAWXNRnN1Z9 Nx/3ESPMOjgS6FOF/W1ySotM24XuWafBVOYNK5NH7Ctq73mN7t5GsJIBpD7qDbsW uOVzsSaDVITLLO9KKmRcp8F5FvgBM76sbZEs3BWEmX4XEb4Qo+jFegiCSmrYMw2V NR5Nkgpzy0IAUkExwskKk9PT0iHBTMBj5BSnuKff+NP8OXoA71524eEiVfubxfbK QIKTkARo/IGfeF85bN1BvfpF/ZIny4WCiPSpj9boCPq+W4IXINYZIDLI8Bq1qfrK ol4P+mmle9C1/55+DPH75tiv97/et/M= -----END CERTIFICATE-----Generated at Sat Jun 13 15:41:37 2026 by rpki-client