$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a89c9e8a-d20b-32d1-9596-cd15ec57c075.roa File: a89c9e8a-d20b-32d1-9596-cd15ec57c075.roa (raw, json) Hash identifier: vOgAkUQH7U5JZNgDwsFBbNXFAOwcLdyMG36HgheBJaU= Subject key identifier: F7:BC:4C:D5:B8:EC:4D:CA:01:B6:91:22:4C:C6:72:FA:77:10:90:A3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0C1ECB78DE894057D8F48940 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a89c9e8a-d20b-32d1-9596-cd15ec57c075.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 36619 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:cb:78:de:89:40:57:d8:f4:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=b93092fd-dcd6-4e32-881f-9b458f3fba13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:98:09:67:c3:64:3e:29:89:18:43:0d:2a:a0: cb:56:5e:27:63:5d:e0:59:ef:15:3d:9e:03:31:f7: ce:1f:fc:e5:ea:49:77:66:62:49:a8:80:e5:e7:c0: 16:ad:fa:20:67:d6:8a:b7:62:8b:03:87:ec:24:d7: 05:d4:a4:7d:98:eb:e2:77:16:25:0f:e2:98:29:b1: e0:e7:12:69:e8:b5:a2:7b:9d:e1:5a:79:83:21:7d: bc:db:43:d8:b8:4c:c9:5e:3d:9a:04:f3:1d:e4:92: ad:18:60:95:42:a2:2f:c2:c0:57:c0:f4:83:70:be: 20:4a:0a:fe:93:21:07:fc:2a:ce:32:70:7a:08:d0: 3d:66:dd:40:d8:df:8d:07:39:26:ff:94:69:bc:f3: d5:f1:40:95:d6:d4:3c:41:45:27:b1:b0:00:f7:41: 23:44:a2:e5:c5:31:09:27:af:47:7d:09:86:64:34: 0a:6e:60:76:75:54:8d:96:fc:6b:32:27:73:59:28: cb:42:ca:e7:74:d7:49:1d:ed:b0:ec:7e:42:c8:f5: 06:25:8a:d4:9e:ed:35:c2:e7:77:96:d9:5f:d6:00: 66:98:db:30:58:1e:1b:6e:9b:60:e9:65:3b:29:61: 4c:41:07:e2:28:38:ad:cd:4b:2f:c4:f7:25:87:51: 6d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BC:4C:D5:B8:EC:4D:CA:01:B6:91:22:4C:C6:72:FA:77:10:90:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a89c9e8a-d20b-32d1-9596-cd15ec57c075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c8:d1:1f:10:ec:2c:a0:46:32:23:c5:f7:20:0b:22:ef:09: 6c:96:b7:fc:01:87:d1:1a:8f:f7:ad:f6:67:02:78:ae:e0:04: 0c:52:77:03:e8:fc:c5:97:d1:c3:af:4c:17:ed:3d:9d:0f:64: b2:9d:a7:e1:1b:1d:14:41:fb:e9:da:91:e4:e8:dc:f3:f5:a8: 75:db:07:f5:98:d7:a3:b6:e5:90:73:77:75:95:af:c1:e5:03: ae:9d:41:16:22:69:4c:12:ce:e2:cc:57:b0:4b:7c:cb:6f:a8: 09:d4:d5:ab:fc:32:6d:be:78:62:2b:8d:50:c6:d8:72:dd:e3: 82:41:16:fc:13:63:f2:d3:84:01:30:8e:26:b1:2c:dd:9f:b6: 51:a4:0d:ac:9d:a5:fd:51:ee:35:99:50:ac:08:a7:51:71:52: 89:ca:0a:a8:e4:1b:d7:a1:d0:5a:52:d0:fd:5c:d9:b4:26:8c: 40:7a:02:c5:2c:5c:e0:48:06:ca:11:34:01:61:c4:23:43:c3: a2:4f:e2:fa:e8:63:06:a2:dc:bc:95:da:78:c0:e7:78:89:20: 5f:e7:ad:71:47:fc:0f:90:e9:f6:9f:d8:5a:3c:c1:bc:92:c7: 28:3f:2a:ce:14:62:3f:75:8a:52:1e:40:23:ff:af:59:94:d7: 3f:c6:02:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHst43olAV9j0iUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk YjkzMDkyZmQtZGNkNi00ZTMyLTg4MWYtOWI0NThmM2ZiYTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZgJZ8NkPimJGEMNKqDLVl4nY13gWe8VPZ4D MffOH/zl6kl3ZmJJqIDl58AWrfogZ9aKt2KLA4fsJNcF1KR9mOvidxYlD+KYKbHg 5xJp6LWie53hWnmDIX2820PYuEzJXj2aBPMd5JKtGGCVQqIvwsBXwPSDcL4gSgr+ kyEH/CrOMnB6CNA9Zt1A2N+NBzkm/5RpvPPV8UCV1tQ8QUUnsbAA90EjRKLlxTEJ J69HfQmGZDQKbmB2dVSNlvxrMidzWSjLQsrndNdJHe2w7H5CyPUGJYrUnu01wud3 ltlf1gBmmNswWB4bbptg6WU7KWFMQQfiKDitzUsvxPclh1FtMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPe8TNW47E3KAbaRIkzGcvp3EJCjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTg5YzllOGEtZDIwYi0z MmQxLTk1OTYtY2QxNWVjNTdjMDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjI0R8Q7CygRjIjxfcgCyLvCWyWt/wBh9Eaj/et9mcCeK7gBAxSdwPo /MWX0cOvTBftPZ0PZLKdp+EbHRRB++nakeTo3PP1qHXbB/WY16O25ZBzd3WVr8Hl A66dQRYiaUwSzuLMV7BLfMtvqAnU1av8Mm2+eGIrjVDG2HLd44JBFvwTY/LThAEw jiaxLN2ftlGkDaydpf1R7jWZUKwIp1FxUonKCqjkG9eh0FpS0P1c2bQmjEB6AsUs XOBIBsoRNAFhxCNDw6JP4vroYwai3LyV2njA53iJIF/nrXFH/A+Q6faf2Fo8wbyS xyg/Ks4UYj91ilIeQCP/r1mU1z/GAtE= -----END CERTIFICATE-----Generated at Sat Jun 13 13:23:06 2026 by rpki-client