$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd4efe0c-435b-364e-90b0-423af199d985.roa File: bd4efe0c-435b-364e-90b0-423af199d985.roa (raw, json) Hash identifier: hnUIKJpajm8YMyRUvhg1Ti24PJDMopIFr1B7+QuDklA= Subject key identifier: C4:77:14:C8:70:2E:49:18:64:A2:66:5A:83:F7:F4:F2:ED:DE:DB:36 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0C1EEA486D3AC27A78D1AA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd4efe0c-435b-364e-90b0-423af199d985.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 397210 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:ea:48:6d:3a:c2:7a:78:d1:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=81d2caa6-f20f-4943-8e24-c4f3e92f5e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9e:bd:d3:46:c9:26:a7:06:0a:07:bc:95:33: a7:83:21:8e:c0:7b:be:12:b1:67:0c:ff:1e:e9:e5: 41:da:53:fe:d8:43:be:49:0c:9e:46:60:88:ff:4d: bc:e9:77:c5:f8:20:d3:05:ed:17:d3:59:27:d8:4a: c1:27:39:56:16:32:6f:c2:61:4b:80:eb:b8:b1:ea: 2f:7d:26:6c:e4:78:16:dd:30:22:58:3f:36:4d:d8: f1:a6:c0:5a:83:5b:42:f1:31:ae:b0:2b:71:50:c1: 60:ca:11:4a:51:08:4f:f7:d1:87:ec:83:c3:39:91: db:19:31:bf:34:22:ab:91:19:4a:f4:55:6b:35:16: 6f:38:f8:d0:a8:ed:6d:94:d9:0f:2f:a5:98:93:c3: da:02:17:41:bc:e7:5e:29:8f:e4:a6:9c:ab:06:0a: 66:87:58:b2:36:da:2b:b3:52:47:f6:94:a8:f6:e7: f1:d9:4a:25:98:38:f0:c3:13:35:a1:48:74:7e:9d: d5:5b:5e:20:8e:51:b0:ad:c1:31:4e:bc:6e:c4:cf: 16:af:58:52:27:0f:ba:b4:09:22:f3:70:c2:72:42: ae:99:11:95:f7:ac:7c:b4:f3:f9:72:7d:5c:d8:bf: f8:d8:e8:d7:89:28:e2:0d:fb:b7:47:2e:a4:b5:4f: e2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:77:14:C8:70:2E:49:18:64:A2:66:5A:83:F7:F4:F2:ED:DE:DB:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd4efe0c-435b-364e-90b0-423af199d985.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:d6:d8:69:9e:43:74:d7:a2:ff:65:43:ee:44:6b:e7:d9:33: de:b1:ce:cf:c3:72:d6:ac:89:4d:4f:5e:fd:19:69:f6:bf:24: b4:45:86:df:31:17:bc:6e:56:8c:11:ea:d8:53:e6:10:08:06: 84:e7:2a:ce:52:b9:18:40:a7:a9:da:0b:08:09:47:b0:de:f3: 80:9f:cd:4d:15:cb:8f:5c:d5:66:f0:72:9f:f5:fd:6a:50:51: 8f:05:9c:46:a4:a3:a9:a7:9b:f8:da:65:94:56:4c:fd:25:1d: 4d:81:27:19:e7:6c:87:47:c4:b5:61:e1:34:79:b7:85:71:44: 0b:f3:60:ed:7e:64:0f:f7:39:d1:f4:5d:83:11:b1:c2:aa:d0: b1:62:46:f5:56:ab:6c:2a:3d:83:a8:fe:29:fc:fd:ad:d1:db: 6f:00:f0:43:4e:57:ed:c7:51:9e:9a:47:68:cd:5f:37:39:ac: 56:f6:36:3f:07:52:d2:0e:3f:86:b7:6e:76:c2:d4:e6:49:72: 5f:77:78:3b:47:af:8c:56:a5:2b:dd:a4:56:8f:11:95:23:19: d5:00:dc:a1:70:66:ec:11:7c:4e:15:e1:e6:e7:1d:19:af:ac: 25:9f:be:63:0a:8f:0d:75:d5:65:0b:4d:ee:ca:e8:98:49:63: 75:60:ad:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHupIbTrCenjRqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk ODFkMmNhYTYtZjIwZi00OTQzLThlMjQtYzRmM2U5MmY1ZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ6900bJJqcGCge8lTOngyGOwHu+ErFnDP8e 6eVB2lP+2EO+SQyeRmCI/0286XfF+CDTBe0X01kn2ErBJzlWFjJvwmFLgOu4seov fSZs5HgW3TAiWD82TdjxpsBag1tC8TGusCtxUMFgyhFKUQhP99GH7IPDOZHbGTG/ NCKrkRlK9FVrNRZvOPjQqO1tlNkPL6WYk8PaAhdBvOdeKY/kppyrBgpmh1iyNtor s1JH9pSo9ufx2UolmDjwwxM1oUh0fp3VW14gjlGwrcExTrxuxM8Wr1hSJw+6tAki 83DCckKumRGV96x8tPP5cn1c2L/42OjXiSjiDfu3Ry6ktU/i+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMR3FMhwLkkYZKJmWoP39PLt3ts2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmQ0ZWZlMGMtNDM1Yi0z NjRlLTkwYjAtNDIzYWYxOTlkOTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfW2GmeQ3TXov9lQ+5Ea+fZM96xzs/DctasiU1PXv0Zafa/JLRFht8x F7xuVowR6thT5hAIBoTnKs5SuRhAp6naCwgJR7De84CfzU0Vy49c1Wbwcp/1/WpQ UY8FnEako6mnm/jaZZRWTP0lHU2BJxnnbIdHxLVh4TR5t4VxRAvzYO1+ZA/3OdH0 XYMRscKq0LFiRvVWq2wqPYOo/in8/a3R228A8ENOV+3HUZ6aR2jNXzc5rFb2Nj8H UtIOP4a3bnbC1OZJcl93eDtHr4xWpSvdpFaPEZUjGdUA3KFwZuwRfE4V4ebnHRmv rCWfvmMKjw111WULTe7K6JhJY3Vgrac= -----END CERTIFICATE-----Generated at Sat Jun 13 15:35:46 2026 by rpki-client