$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3e59f0f-3759-3833-9a05-71cc1b1e1732.roa File: b3e59f0f-3759-3833-9a05-71cc1b1e1732.roa (raw, json) Hash identifier: GMguMm8euGY4yfx2v/xad1LlWqBKqd1q1Ahl2XekREs= Subject key identifier: 81:A9:68:E3:B5:C3:24:53:7C:D4:F5:7E:E1:6F:7C:79:9C:A3:29:C9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0C1EEABA47342C6D174A5580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3e59f0f-3759-3833-9a05-71cc1b1e1732.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 396542 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:ea:ba:47:34:2c:6d:17:4a:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=027e240d-b407-413e-be0e-a34a197c9bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:35:9d:ce:04:cf:f7:b9:4b:30:22:cc:99:33: 07:95:4a:8e:29:3b:d0:58:5f:b4:0b:be:be:01:85: 1d:c1:0e:f3:4f:64:97:af:13:df:a3:39:bd:3e:ad: 62:87:b7:1f:a6:46:2a:23:83:ea:48:eb:cd:a4:f5: ce:94:5a:df:7b:7a:a5:b8:31:89:e0:e7:9f:22:5a: 1a:ac:b0:a8:23:b5:2f:34:ea:f3:3e:39:c7:2d:bc: c6:ec:69:6d:16:18:d6:c6:cc:f5:65:46:08:80:7a: 66:5d:e2:ac:de:13:06:16:1e:c4:56:69:18:e0:f7: 5b:6e:c7:80:4d:04:7b:13:1d:51:2f:d8:46:b6:13: 89:c7:2a:f7:3f:5e:17:89:03:41:a1:31:80:08:cc: 0f:51:d3:37:32:e8:6c:67:ce:49:5f:24:f1:16:b4: 0f:6e:6d:6e:23:63:09:75:b5:4a:11:b3:77:74:3f: c6:a8:f4:0e:33:68:cc:7e:5e:0a:53:22:bb:e2:24: 18:87:fd:87:b3:3f:66:9c:af:46:cb:95:71:6d:da: 59:ac:cf:02:da:e5:9d:70:e7:aa:ee:c4:b3:5f:35: fa:37:b6:39:0c:33:26:7a:5c:f5:df:06:37:cf:50: 7f:9d:30:d0:f6:23:57:63:a9:00:a0:b4:80:fa:26: 3c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A9:68:E3:B5:C3:24:53:7C:D4:F5:7E:E1:6F:7C:79:9C:A3:29:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3e59f0f-3759-3833-9a05-71cc1b1e1732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:13:37:91:a9:76:27:ae:41:3c:61:ff:10:07:02:33:c6:e3: 01:46:98:51:f4:b5:b4:97:1f:32:21:7d:2d:a1:32:a2:d4:87: c3:c9:b2:f5:b4:11:3e:37:f4:72:d1:b9:3a:c8:52:b3:56:07: f5:24:f0:13:e5:46:af:5b:73:78:d7:1a:b9:79:97:cc:d3:54: 01:84:0d:b0:b2:2a:9f:ad:44:68:08:d6:91:49:38:48:94:96: 89:68:e7:76:b8:79:61:cf:f9:f9:88:37:2b:c8:02:77:b7:d7: a5:1e:b1:95:12:3c:85:20:41:d3:65:bd:b6:af:bc:97:42:71: 91:db:5c:a5:ab:75:04:41:86:d2:f7:18:14:d4:b8:d6:59:72: 59:d3:33:d6:e7:8b:67:69:eb:d0:cc:39:8d:1b:a7:d0:9f:b4: db:e9:db:fd:32:0b:01:56:b3:69:d4:18:70:0d:ae:92:68:40: 55:bc:63:32:4a:1f:ad:cb:99:e5:d0:6a:75:55:3d:64:92:66: cc:39:ef:a1:41:b1:d9:54:20:aa:1b:27:4c:ef:89:73:27:0b: 14:83:dc:8e:cb:08:14:ad:39:4e:91:bc:68:d2:08:f4:e1:ee: 46:0e:3e:48:a3:a5:75:15:9a:3f:a4:0b:75:cf:9c:f7:c7:78: d4:b7:b0:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHuq6RzQsbRdKVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk MDI3ZTI0MGQtYjQwNy00MTNlLWJlMGUtYTM0YTE5N2M5YmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zWdzgTP97lLMCLMmTMHlUqOKTvQWF+0C76+ AYUdwQ7zT2SXrxPfozm9Pq1ih7cfpkYqI4PqSOvNpPXOlFrfe3qluDGJ4OefIloa rLCoI7UvNOrzPjnHLbzG7GltFhjWxsz1ZUYIgHpmXeKs3hMGFh7EVmkY4PdbbseA TQR7Ex1RL9hGthOJxyr3P14XiQNBoTGACMwPUdM3MuhsZ85JXyTxFrQPbm1uI2MJ dbVKEbN3dD/GqPQOM2jMfl4KUyK74iQYh/2Hsz9mnK9Gy5VxbdpZrM8C2uWdcOeq 7sSzXzX6N7Y5DDMmelz13wY3z1B/nTDQ9iNXY6kAoLSA+iY8jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGpaOO1wyRTfNT1fuFvfHmcoynJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjNlNTlmMGYtMzc1OS0z ODMzLTlhMDUtNzFjYzFiMWUxNzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkTN5GpdieuQTxh/xAHAjPG4wFGmFH0tbSXHzIhfS2hMqLUh8PJsvW0 ET439HLRuTrIUrNWB/Uk8BPlRq9bc3jXGrl5l8zTVAGEDbCyKp+tRGgI1pFJOEiU lolo53a4eWHP+fmINyvIAne316UesZUSPIUgQdNlvbavvJdCcZHbXKWrdQRBhtL3 GBTUuNZZclnTM9bni2dp69DMOY0bp9CftNvp2/0yCwFWs2nUGHANrpJoQFW8YzJK H63LmeXQanVVPWSSZsw576FBsdlUIKobJ0zviXMnCxSD3I7LCBStOU6RvGjSCPTh 7kYOPkijpXUVmj+kC3XPnPfHeNS3sNc= -----END CERTIFICATE-----Generated at Sat Jun 13 14:38:04 2026 by rpki-client