$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0bfd918-56d6-3e11-a3c0-43db32c6ef1a.roa File: a0bfd918-56d6-3e11-a3c0-43db32c6ef1a.roa (raw, json) Hash identifier: GSjdmHxxWLQW1Cbk2WE5MP5Fo0DlKGg30hvjyEYXNn8= Subject key identifier: C7:49:7D:09:C7:28:09:4C:7C:82:30:1D:82:27:20:04:65:FA:D9:F7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0C1EEF3679E9452A1077AE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0bfd918-56d6-3e11-a3c0-43db32c6ef1a.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 396571 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:ef:36:79:e9:45:2a:10:77:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=5bf2094c-2a7a-40b4-9007-015314b749c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5c:34:be:48:4a:3a:ab:af:6b:6a:5b:e1:50: 48:86:71:d7:b5:54:8a:0f:db:0b:78:d8:dd:52:31: c4:7d:aa:b5:e2:17:b6:14:fe:92:d9:1a:39:07:e3: e5:68:10:2f:7d:f3:90:3d:ca:23:77:de:d2:2b:d7: 87:27:18:e0:a5:9f:46:10:78:50:9a:41:91:17:16: 5f:bd:81:ec:31:ea:9a:0c:24:65:9c:58:2c:83:8b: 92:6a:ea:a7:1a:bf:86:10:62:6f:06:42:02:28:fa: 34:d7:d4:fc:0c:83:43:6f:d3:cc:db:ce:49:d3:0f: dc:72:47:41:f0:6a:92:97:49:84:f9:ee:fc:04:5b: 98:27:b9:c7:19:92:3e:d0:e6:5d:1a:3e:7d:bb:70: 38:cb:c2:44:9b:ba:61:94:33:0f:8a:fb:0e:c9:c7: 10:38:a8:10:07:72:a9:d4:44:4d:89:5f:af:c5:2c: 3a:19:f4:a3:9a:74:ad:c0:a7:7b:48:e4:c6:b8:6c: 7b:1e:8b:d0:ca:11:42:cd:a4:b2:0b:31:dd:cc:dd: c6:c4:1d:4b:28:74:75:17:c3:4a:75:e6:3b:cd:29: 62:73:ba:b1:7e:0c:b0:98:1c:5e:49:f5:98:76:08: a0:46:95:d9:f0:2f:4c:1b:c0:bf:2f:c1:d0:c4:09: 8a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:49:7D:09:C7:28:09:4C:7C:82:30:1D:82:27:20:04:65:FA:D9:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0bfd918-56d6-3e11-a3c0-43db32c6ef1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:9b:96:1e:db:33:c3:22:79:e7:37:4a:e9:de:08:5e:03:da: e7:7b:44:65:e6:7d:d2:18:eb:a0:5c:0b:b5:83:37:05:30:2d: da:3a:ec:cd:3f:9b:d3:d1:91:21:dd:75:57:bc:54:42:df:ca: da:44:3d:19:6d:38:a0:09:fa:62:91:09:c8:cf:cd:d2:78:8c: a8:38:7f:4f:9d:88:22:54:d1:d2:8a:f9:3a:0f:24:d1:cf:9a: 6c:54:24:92:90:4c:9b:5a:26:af:71:7f:43:52:94:6d:a5:e2: 29:a4:87:63:da:19:80:c0:aa:08:aa:bd:94:d7:11:7c:58:60: 71:67:c7:4c:89:0c:ad:76:be:4c:e5:d3:66:5b:0c:07:f6:5e: ff:5a:f4:1c:94:5e:00:1b:fd:ef:09:77:0a:90:15:c0:cd:5c: 6d:02:26:bb:1d:f9:a8:0e:db:f5:2e:30:3c:e3:5a:0e:b6:58: 7d:98:ab:c2:d0:65:60:a2:9b:2a:56:80:ff:df:ee:2e:2d:ad: 13:2b:46:a2:d8:3a:a7:da:19:f5:6c:92:7b:ae:f6:94:1e:c9: e4:d2:1b:05:6e:4d:8a:01:a6:a3:25:73:69:6e:d5:b9:5a:c7: 56:14:71:ec:3c:c9:a1:c2:d7:3b:c9:6f:22:14:a3:89:ed:40: 80:1d:a4:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHu82eelFKhB3roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk NWJmMjA5NGMtMmE3YS00MGI0LTkwMDctMDE1MzE0Yjc0OWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVw0vkhKOquva2pb4VBIhnHXtVSKD9sLeNjd UjHEfaq14he2FP6S2Ro5B+PlaBAvffOQPcojd97SK9eHJxjgpZ9GEHhQmkGRFxZf vYHsMeqaDCRlnFgsg4uSauqnGr+GEGJvBkICKPo019T8DINDb9PM285J0w/cckdB 8GqSl0mE+e78BFuYJ7nHGZI+0OZdGj59u3A4y8JEm7phlDMPivsOyccQOKgQB3Kp 1ERNiV+vxSw6GfSjmnStwKd7SOTGuGx7HovQyhFCzaSyCzHdzN3GxB1LKHR1F8NK deY7zSlic7qxfgywmBxeSfWYdgigRpXZ8C9MG8C/L8HQxAmK2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdJfQnHKAlMfIIwHYInIARl+tn3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTBiZmQ5MTgtNTZkNi0z ZTExLWEzYzAtNDNkYjMyYzZlZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSblh7bM8Mieec3SuneCF4D2ud7RGXmfdIY66BcC7WDNwUwLdo67M0/ m9PRkSHddVe8VELfytpEPRltOKAJ+mKRCcjPzdJ4jKg4f0+diCJU0dKK+ToPJNHP mmxUJJKQTJtaJq9xf0NSlG2l4imkh2PaGYDAqgiqvZTXEXxYYHFnx0yJDK12vkzl 02ZbDAf2Xv9a9ByUXgAb/e8JdwqQFcDNXG0CJrsd+agO2/UuMDzjWg62WH2Yq8LQ ZWCimypWgP/f7i4trRMrRqLYOqfaGfVsknuu9pQeyeTSGwVuTYoBpqMlc2lu1bla x1YUcew8yaHC1zvJbyIUo4ntQIAdpHY= -----END CERTIFICATE-----Generated at Sat Jun 13 13:51:43 2026 by rpki-client