$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4929e82-06a7-3c2d-85b3-300947e9fa74.roa File: a4929e82-06a7-3c2d-85b3-300947e9fa74.roa (raw, json) Hash identifier: Y/p4iTXvhyTLFgTePCrz41fC1/AcnSKW1KWiSLbi88s= Subject key identifier: 9D:34:CA:78:9E:91:23:0A:A6:2A:15:26:B1:D6:BC:34:F7:CB:B7:D7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0D84373348B13CA6A7E87F88 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4929e82-06a7-3c2d-85b3-300947e9fa74.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 397198 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:37:33:48:b1:3c:a6:a7:e8:7f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=6c9c7cd9-3ee7-41ef-81fe-7b05f9a572f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ac:5f:2a:10:0d:1e:bd:18:c2:44:02:de:d9: 17:25:02:cc:ab:20:a3:fb:dc:d7:77:8f:4d:6b:0e: 17:b6:52:f7:1d:ae:16:de:97:5c:1c:10:a4:06:83: 95:8f:7d:c5:30:8e:f7:c4:a2:5f:b6:17:57:6a:c5: c6:7d:5c:0f:8a:f6:ed:02:10:0a:15:15:33:01:10: 4d:2c:60:19:ac:d5:fb:a2:70:ef:2b:29:e6:f5:c1: d4:be:8b:72:21:df:5b:35:c2:63:2f:ea:5e:25:3d: 15:26:0f:4b:3b:d3:47:a1:2d:a8:70:fc:16:d8:cf: 7a:9b:13:95:13:a5:0a:41:16:60:51:e3:b3:64:1d: 8a:2d:ad:bb:6d:b4:3c:e3:15:92:cd:13:3d:6c:4d: 70:50:c0:8f:b7:e6:a1:10:22:fb:26:55:02:c5:b9: 7d:10:b1:96:ef:a6:57:43:d6:70:28:d5:bf:1c:f7: 7c:c9:0a:02:c2:ab:77:68:75:6f:bd:77:f5:62:46: ec:fa:b0:a4:97:3d:90:8f:7c:05:5f:be:41:96:c4: ff:65:7b:c7:ae:42:37:e0:d4:45:8c:54:23:69:8c: 4f:81:57:4b:0a:a3:c3:10:63:56:0b:1a:ca:0c:72: 93:97:94:42:4c:c2:32:f9:3e:94:91:a4:28:26:cb: 47:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:34:CA:78:9E:91:23:0A:A6:2A:15:26:B1:D6:BC:34:F7:CB:B7:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4929e82-06a7-3c2d-85b3-300947e9fa74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:f7:11:78:24:ec:37:2e:a6:7e:62:a2:e4:25:69:a8:f3:55: a0:1e:e5:08:26:9a:60:54:80:d9:4b:25:d2:c9:6e:78:d4:e5: 40:c9:23:14:0f:79:bf:2f:61:69:48:14:84:54:72:86:79:7d: a5:90:24:5f:0a:31:7a:13:f4:43:68:b8:ef:17:a9:3c:9b:6c: ec:59:a5:fa:29:2f:95:5b:07:4d:d2:64:08:6c:77:5a:d1:9a: f5:98:a3:c2:70:99:98:2f:0a:19:14:92:92:c4:d5:b6:b6:ab: 2b:b6:d2:cb:61:ec:96:18:08:42:78:36:e3:ad:3f:86:9a:06: 78:05:a1:3b:09:ab:a9:49:d4:79:81:5d:8c:e1:be:42:4b:65: 49:a5:a0:58:92:15:58:cb:2f:fc:1a:ec:4f:10:d5:ef:dc:23: c6:7a:cf:4b:55:cb:e2:14:19:ab:51:d7:84:86:89:0d:87:6f: 4b:cb:bb:e7:dd:ef:2c:d9:0c:84:77:e8:12:ce:e5:d0:8d:c3: 1c:cb:e0:3d:b3:35:3f:a9:f3:d8:38:31:5c:92:f5:b0:83:7d: 89:67:c3:77:4c:b3:7b:78:f9:42:f1:8a:cb:10:c1:e8:b5:43: 91:cf:08:42:57:87:46:e6:c8:8f:1c:d4:41:2a:d6:ed:ac:5b: 68:4c:13:e2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4NhDczSLE8pqfof4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk NmM5YzdjZDktM2VlNy00MWVmLTgxZmUtN2IwNWY5YTU3MmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6xfKhANHr0YwkQC3tkXJQLMqyCj+9zXd49N aw4XtlL3Ha4W3pdcHBCkBoOVj33FMI73xKJfthdXasXGfVwPivbtAhAKFRUzARBN LGAZrNX7onDvKynm9cHUvotyId9bNcJjL+peJT0VJg9LO9NHoS2ocPwW2M96mxOV E6UKQRZgUeOzZB2KLa27bbQ84xWSzRM9bE1wUMCPt+ahECL7JlUCxbl9ELGW76ZX Q9ZwKNW/HPd8yQoCwqt3aHVvvXf1Ykbs+rCklz2Qj3wFX75BlsT/ZXvHrkI34NRF jFQjaYxPgVdLCqPDEGNWCxrKDHKTl5RCTMIy+T6UkaQoJstHAQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ00yniekSMKpioVJrHWvDT3y7fXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTQ5MjllODItMDZhNy0z YzJkLTg1YjMtMzAwOTQ3ZTlmYTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBn9xF4JOw3LqZ+YqLkJWmo81WgHuUIJppgVIDZSyXSyW541OVAySMU D3m/L2FpSBSEVHKGeX2lkCRfCjF6E/RDaLjvF6k8m2zsWaX6KS+VWwdN0mQIbHda 0Zr1mKPCcJmYLwoZFJKSxNW2tqsrttLLYeyWGAhCeDbjrT+GmgZ4BaE7CaupSdR5 gV2M4b5CS2VJpaBYkhVYyy/8GuxPENXv3CPGes9LVcviFBmrUdeEhokNh29Ly7vn 3e8s2QyEd+gSzuXQjcMcy+A9szU/qfPYODFckvWwg32JZ8N3TLN7ePlC8YrLEMHo tUORzwhCV4dG5siPHNRBKtbtrFtoTBPi -----END CERTIFICATE-----Generated at Sat Jun 13 14:30:31 2026 by rpki-client