$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a725409d-9980-3cc5-89e4-a1049996251a.roa File: a725409d-9980-3cc5-89e4-a1049996251a.roa (raw, json) Hash identifier: 4F+Xv67yTWn0dL5natVTJbKV3Ocdr/bwxOdJvp7cXkk= Subject key identifier: 3D:72:E5:2D:94:D2:77:7F:60:D5:43:04:17:31:25:60:9F:27:A0:E2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0D8433D44A01D846E5F88180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a725409d-9980-3cc5-89e4-a1049996251a.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 397200 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:33:d4:4a:01:d8:46:e5:f8:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=dbb4bf2b-e443-4933-ab3a-b8a5de2592c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1b:3e:7c:f7:8e:a5:b3:93:6e:15:61:97:c3: d9:d9:70:98:fc:f6:d6:21:26:40:fa:28:05:48:7a: e3:46:ca:dd:24:98:bf:32:f6:fe:9d:ca:57:3b:a2: 17:9f:31:c8:a3:6b:9c:78:82:9a:6a:9d:94:90:4b: 63:c3:be:47:da:28:6b:dd:41:3d:c3:c2:2e:74:82: 76:90:ae:a1:5c:49:b5:d3:c5:c8:5e:df:81:56:ce: bd:6f:59:b3:40:03:a4:ec:af:b9:0e:d0:80:84:d5: fc:52:57:f0:1d:74:86:42:2e:b1:7b:2e:bf:3d:03: bc:68:58:6f:8e:87:af:e9:7a:24:4a:e4:d4:a2:82: 00:ad:00:f7:65:d9:10:ca:06:33:c8:1e:08:3e:96: bb:83:0e:ee:52:5f:4d:a6:50:2d:60:cd:32:cf:05: 20:55:82:f5:e1:ab:f2:76:bd:28:5b:80:18:6b:ee: 98:63:c9:3c:03:b3:40:7e:9b:d3:72:bc:67:16:9f: 9c:44:c9:0c:36:c4:e1:3f:81:15:90:8a:c7:98:3b: 88:35:50:a2:e3:02:27:cc:b6:2f:2b:42:ae:10:f7: 8e:18:4d:0c:5d:ab:22:90:57:b7:f2:97:a4:27:ec: 8b:16:de:e4:d5:30:6b:ac:a6:0a:98:22:a6:b0:5f: 2e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:72:E5:2D:94:D2:77:7F:60:D5:43:04:17:31:25:60:9F:27:A0:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a725409d-9980-3cc5-89e4-a1049996251a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:69:5d:bd:f5:61:7f:20:d6:92:91:f9:22:5b:fc:f7:fd:d7: 2c:32:d4:95:87:22:42:10:24:10:66:fb:49:a9:ca:f1:b1:0e: d9:77:1b:90:6b:e7:2f:a0:76:f6:b0:78:a9:50:db:c7:d0:b9: 53:20:42:44:e0:90:60:a9:f5:7d:1d:25:dc:24:76:3d:ea:71: c4:7d:cc:be:b7:69:ea:26:2c:36:c9:0c:d3:65:a8:95:b4:52: 5c:8d:fd:43:b9:75:0c:e4:80:8b:2f:61:b4:5f:6b:e9:c2:e2: 91:de:b5:d6:46:72:7b:d5:40:af:4c:24:a2:b6:e4:d1:64:3b: 2f:74:76:e8:31:a8:35:0a:fb:2e:f2:d5:1d:64:60:0e:fc:d1: 7f:0e:7b:a9:fc:ae:ae:a4:51:de:5e:bd:2e:1f:f5:f6:cc:a3: 4c:8d:d6:ea:47:5f:27:62:f4:cc:fc:77:98:6a:a5:36:f1:b4: 3d:5f:87:ad:46:cc:cf:55:db:a1:b8:9f:a9:4a:f5:4c:aa:78: 09:b8:6a:35:de:8e:86:0e:71:7e:db:12:9f:37:b3:9e:5b:9f: 1e:e0:3d:12:40:33:46:9a:be:44:09:48:bd:c5:76:f2:52:91: 3c:5e:d2:91:47:74:f3:33:37:d2:8b:2d:bb:89:68:ce:b1:0a: 0d:d0:25:c0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4NhDPUSgHYRuX4gYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk ZGJiNGJmMmItZTQ0My00OTMzLWFiM2EtYjhhNWRlMjU5MmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Rs+fPeOpbOTbhVhl8PZ2XCY/PbWISZA+igF SHrjRsrdJJi/Mvb+ncpXO6IXnzHIo2uceIKaap2UkEtjw75H2ihr3UE9w8IudIJ2 kK6hXEm108XIXt+BVs69b1mzQAOk7K+5DtCAhNX8UlfwHXSGQi6xey6/PQO8aFhv joev6XokSuTUooIArQD3ZdkQygYzyB4IPpa7gw7uUl9NplAtYM0yzwUgVYL14avy dr0oW4AYa+6YY8k8A7NAfpvTcrxnFp+cRMkMNsThP4EVkIrHmDuINVCi4wInzLYv K0KuEPeOGE0MXasikFe38pekJ+yLFt7k1TBrrKYKmCKmsF8urQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD1y5S2U0nd/YNVDBBcxJWCfJ6DiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTcyNTQwOWQtOTk4MC0z Y2M1LTg5ZTQtYTEwNDk5OTYyNTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAzaV299WF/INaSkfkiW/z3/dcsMtSVhyJCECQQZvtJqcrxsQ7ZdxuQ a+cvoHb2sHipUNvH0LlTIEJE4JBgqfV9HSXcJHY96nHEfcy+t2nqJiw2yQzTZaiV tFJcjf1DuXUM5ICLL2G0X2vpwuKR3rXWRnJ71UCvTCSituTRZDsvdHboMag1Cvsu 8tUdZGAO/NF/Dnup/K6upFHeXr0uH/X2zKNMjdbqR18nYvTM/HeYaqU28bQ9X4et RszPVduhuJ+pSvVMqngJuGo13o6GDnF+2xKfN7OeW58e4D0SQDNGmr5ECUi9xXby UpE8XtKRR3TzMzfSiy27iWjOsQoN0CXA -----END CERTIFICATE-----Generated at Sat Jun 13 15:31:29 2026 by rpki-client