$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbddffd1-e73a-39b6-a7b9-2dc149cc1170.roa File: bbddffd1-e73a-39b6-a7b9-2dc149cc1170.roa (raw, json) Hash identifier: r0g5ihfzVhltz7l8BfPnnWd5Z0lvycCosIvWP2rhnfw= Subject key identifier: 0B:5B:CC:61:A4:87:DC:29:DD:4F:75:2A:33:0C:3B:C5:37:3C:20:9C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0D8435C21C520B93C1E68DE6 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbddffd1-e73a-39b6-a7b9-2dc149cc1170.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 397207 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:35:c2:1c:52:0b:93:c1:e6:8d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=ef1de868-0a0f-4866-9cd1-7e01233dc29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:20:81:c5:42:4b:0e:74:8a:46:ce:54:bd:51: b6:36:4a:72:50:84:eb:bb:6f:49:e2:63:3c:3d:22: b1:52:9a:57:ef:54:42:77:56:b4:49:f7:ac:18:8a: b6:9d:cd:b6:a1:e7:47:8d:46:03:e4:60:f0:5a:29: de:76:46:90:34:e7:ab:2f:69:98:1c:f1:91:0d:d8: c1:04:22:10:c3:c0:a7:1b:27:05:47:83:b0:00:3e: 1e:0a:4b:7d:31:09:6b:98:00:96:9e:51:b8:e1:c5: 7a:af:85:98:81:47:5e:34:87:b7:f4:2f:42:c0:ab: 02:84:31:0e:79:83:24:5e:a7:e9:86:80:13:d8:ab: 1e:a7:b4:85:1a:b1:08:fc:e9:5c:cd:38:e0:2b:02: d9:66:3e:af:f4:aa:7f:84:8a:50:f0:f0:54:6f:c2: e1:5a:a0:96:30:14:84:44:44:7d:d0:67:4e:5b:f2: 47:df:12:bf:cd:b1:43:b6:71:a7:96:4d:f9:97:19: d7:f8:86:c0:22:4c:05:fe:64:87:77:5e:db:9e:cc: 11:7c:09:bb:20:24:c2:d3:a0:42:19:52:ce:e4:dc: bc:bf:85:32:fe:e6:91:ce:b3:03:b0:ac:8b:96:c1: e2:e9:44:f5:2a:ee:63:77:22:55:75:fa:40:eb:85: a0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5B:CC:61:A4:87:DC:29:DD:4F:75:2A:33:0C:3B:C5:37:3C:20:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbddffd1-e73a-39b6-a7b9-2dc149cc1170.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a5:d5:66:0a:ae:ab:d7:c7:f9:c7:08:c5:16:d0:44:82:8e: c9:3b:18:04:ca:97:9b:3a:03:c0:eb:0a:5b:73:41:aa:b0:9c: 42:bf:fe:21:ed:ab:ac:d1:0a:04:f5:99:d8:ad:43:b6:42:0f: bf:d3:73:9e:4b:11:b1:04:68:d2:6a:3e:fb:73:6d:ef:4a:d5: 46:5b:26:48:3e:90:43:23:cb:f8:5c:91:cc:c3:8e:f5:1d:ab: dc:92:19:12:b6:d1:0c:a4:1c:71:2e:1c:35:c1:7c:59:6e:40: 36:2a:c9:e9:84:cb:8b:c8:eb:49:2b:a8:17:70:73:c8:88:3f: f3:55:9a:45:05:04:94:23:79:52:85:20:ed:4e:09:79:f1:61: ab:f8:1f:b8:87:13:12:42:5a:3f:e2:da:88:0c:e4:39:e4:33: 02:d5:98:05:6b:b3:a9:7b:85:b8:12:f7:d0:90:93:7d:7e:ca: e7:ac:b6:a2:ec:56:87:b1:ea:b4:41:10:47:a6:70:06:b4:e2: 3b:40:78:bc:28:c4:d0:70:2d:c1:21:bc:bc:05:40:35:17:55: 64:5f:20:49:81:f1:36:00:02:40:64:80:81:61:55:0a:e3:d9: b4:49:ea:9c:7d:a8:77:c2:c1:36:46:de:1d:73:01:a6:60:6f: b0:c8:d7:95 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4NhDXCHFILk8HmjeYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk ZWYxZGU4NjgtMGEwZi00ODY2LTljZDEtN2UwMTIzM2RjMjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCCBxUJLDnSKRs5UvVG2NkpyUITru29J4mM8 PSKxUppX71RCd1a0SfesGIq2nc22oedHjUYD5GDwWinedkaQNOerL2mYHPGRDdjB BCIQw8CnGycFR4OwAD4eCkt9MQlrmACWnlG44cV6r4WYgUdeNIe39C9CwKsChDEO eYMkXqfphoAT2Ksep7SFGrEI/OlczTjgKwLZZj6v9Kp/hIpQ8PBUb8LhWqCWMBSE RER90GdOW/JH3xK/zbFDtnGnlk35lxnX+IbAIkwF/mSHd17bnswRfAm7ICTC06BC GVLO5Ny8v4Uy/uaRzrMDsKyLlsHi6UT1Ku5jdyJVdfpA64WgpQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAtbzGGkh9wp3U91KjMMO8U3PCCcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmJkZGZmZDEtZTczYS0z OWI2LWE3YjktMmRjMTQ5Y2MxMTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA6pdVmCq6r18f5xwjFFtBEgo7JOxgEypebOgPA6wpbc0GqsJxCv/4h 7aus0QoE9ZnYrUO2Qg+/03OeSxGxBGjSaj77c23vStVGWyZIPpBDI8v4XJHMw471 HavckhkSttEMpBxxLhw1wXxZbkA2KsnphMuLyOtJK6gXcHPIiD/zVZpFBQSUI3lS hSDtTgl58WGr+B+4hxMSQlo/4tqIDOQ55DMC1ZgFa7Ope4W4EvfQkJN9fsrnrLai 7FaHseq0QRBHpnAGtOI7QHi8KMTQcC3BIby8BUA1F1VkXyBJgfE2AAJAZICBYVUK 49m0Seqcfah3wsE2Rt4dcwGmYG+wyNeV -----END CERTIFICATE-----Generated at Sat Jun 13 13:04:48 2026 by rpki-client