$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa File: af8f6829-25f2-342c-8e95-5e209025a010.roa (raw, json) Hash identifier: YRqfBT37buZn8biaoWPl6ONVvH1FiI1Uc5IAHJvpD3k= Subject key identifier: 35:C5:27:A2:5C:18:76:DB:4C:C2:79:8D:D4:44:B1:A4:3F:C0:51:E8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0D8434B53BC8BC93F8232540 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 20431 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:34:b5:3b:c8:bc:93:f8:23:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=c3ac6def-963d-439b-a6ff-1cd6f54370ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d2:aa:fa:00:42:7d:b1:90:ee:f4:bb:94:99: 73:38:0e:66:0c:92:1c:6c:f0:37:12:7f:60:21:4c: 8e:db:88:5f:a5:82:60:f9:12:6b:8c:db:4c:a7:04: 71:1b:e8:ff:28:41:8e:9e:ea:44:c6:4f:06:ef:e9: 10:d5:c6:ba:e0:98:71:46:44:86:3f:44:73:42:5c: 11:c6:9c:8b:bc:89:19:db:b1:8a:1b:91:a4:e7:fa: e8:f8:dc:20:8b:17:50:2b:6d:10:f7:3f:83:4a:0a: 9a:fb:c3:1e:55:08:1d:bd:42:7d:c3:34:bc:c1:a3: 1d:d0:5b:ad:f1:ed:9e:82:18:0e:2d:32:40:93:4b: b5:a9:d5:8f:c7:3b:38:cc:a3:6a:4b:b9:7f:6c:a1: 48:55:e5:95:7b:17:97:2d:a2:0b:bb:f8:31:84:78: 33:30:8a:6d:7d:b2:20:71:00:5a:b5:b8:03:de:48: 9a:e6:6a:55:c6:30:1c:39:08:5a:3b:56:bc:ab:2b: 81:de:e5:ad:85:63:bb:c9:bb:8b:48:74:82:48:7a: 3a:6b:d4:0c:4f:2a:bb:5b:1a:b7:07:11:7e:0c:0d: e3:29:ee:9e:9e:f8:52:d8:9a:d8:83:33:ba:8b:a4: c0:25:e0:32:23:1d:cc:e7:f3:a5:f7:e6:79:8b:9a: ca:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C5:27:A2:5C:18:76:DB:4C:C2:79:8D:D4:44:B1:A4:3F:C0:51:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:23:ab:34:53:74:9f:54:09:7b:ce:40:64:2e:62:68:be:1b: 01:ff:50:fb:21:39:08:e0:5a:e1:25:b1:10:b8:3c:f2:98:65: 15:b2:08:db:e9:e6:14:71:2a:fe:2a:ec:3c:60:3d:51:cf:28: f4:8c:78:58:dd:c6:13:df:3d:76:15:49:a5:e4:37:c5:fc:3c: 68:48:f5:00:42:e6:5a:f4:46:77:9f:03:0d:ce:62:55:bb:7f: a2:af:14:05:4e:b8:be:0c:e4:fa:53:ab:a3:76:42:dd:94:b8: b8:f9:b3:d4:00:f8:ae:36:72:a8:ae:12:37:d1:d5:62:c1:8c: 24:1d:d7:c5:5d:59:1c:fe:f3:fa:00:7b:e2:54:df:f8:0d:83: 8f:93:e5:1b:49:01:36:81:7d:f2:66:d1:ba:2e:59:e9:31:58: 28:35:56:57:8c:a5:3d:85:76:e8:a4:48:1d:9b:da:8e:1e:b9: 14:37:a4:c9:28:fe:f9:49:a3:bd:53:13:6e:e6:83:39:06:eb: 4f:6d:6a:a9:fe:39:0a:c8:f4:45:07:15:02:a2:a4:c6:63:54: 59:67:45:06:b7:d3:6a:d5:bc:91:43:10:e7:37:2f:1c:e2:a8: 4d:e4:39:b9:b8:2a:23:15:3a:da:83:da:48:8a:59:fe:7a:39: 77:67:d4:9e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4NhDS1O8i8k/gjJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk YzNhYzZkZWYtOTYzZC00MzliLWE2ZmYtMWNkNmY1NDM3MGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtKq+gBCfbGQ7vS7lJlzOA5mDJIcbPA3En9g IUyO24hfpYJg+RJrjNtMpwRxG+j/KEGOnupExk8G7+kQ1ca64JhxRkSGP0RzQlwR xpyLvIkZ27GKG5Gk5/ro+NwgixdQK20Q9z+DSgqa+8MeVQgdvUJ9wzS8waMd0Fut 8e2eghgOLTJAk0u1qdWPxzs4zKNqS7l/bKFIVeWVexeXLaILu/gxhHgzMIptfbIg cQBatbgD3kia5mpVxjAcOQhaO1a8qyuB3uWthWO7ybuLSHSCSHo6a9QMTyq7Wxq3 BxF+DA3jKe6envhS2JrYgzO6i6TAJeAyIx3M5/Ol9+Z5i5rKGwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDXFJ6JcGHbbTMJ5jdREsaQ/wFHoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWY4ZjY4MjktMjVmMi0z NDJjLThlOTUtNWUyMDkwMjVhMDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAVI6s0U3SfVAl7zkBkLmJovhsB/1D7ITkI4FrhJbEQuDzymGUVsgjb 6eYUcSr+Kuw8YD1Rzyj0jHhY3cYT3z12FUml5DfF/DxoSPUAQuZa9EZ3nwMNzmJV u3+irxQFTri+DOT6U6ujdkLdlLi4+bPUAPiuNnKorhI30dViwYwkHdfFXVkc/vP6 AHviVN/4DYOPk+UbSQE2gX3yZtG6LlnpMVgoNVZXjKU9hXbopEgdm9qOHrkUN6TJ KP75SaO9UxNu5oM5ButPbWqp/jkKyPRFBxUCoqTGY1RZZ0UGt9Nq1byRQxDnNy8c 4qhN5Dm5uCojFTrag9pIiln+ejl3Z9Se -----END CERTIFICATE-----Generated at Sat Jun 13 14:36:13 2026 by rpki-client