$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bfa59191-b81b-382b-afff-0cb5dd8ecdf1.roa File: bfa59191-b81b-382b-afff-0cb5dd8ecdf1.roa (raw, json) Hash identifier: +BskaDy4r4kWLogfJ+bGxlxRk8/6jWPWr+eWcVPiIDY= Subject key identifier: 2E:98:E7:77:9D:9F:03:D5:D9:1B:6F:20:A0:42:D9:49:3C:ED:CB:FE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0D84377D92800527346D85C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bfa59191-b81b-382b-afff-0cb5dd8ecdf1.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 396584 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:37:7d:92:80:05:27:34:6d:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=60dd8754-c584-4339-8c15-bd9263670603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:50:a9:a5:a4:a6:c3:90:9c:6b:74:02:fb:55: 83:9e:b5:91:bc:bf:da:36:a7:82:c6:b8:20:1c:2d: a3:dc:b9:2f:4c:c8:a6:9b:49:04:3b:ee:21:06:d3: eb:0a:1b:b3:b5:b1:6c:6a:35:1a:f0:6d:ef:a2:a7: 8c:af:87:d3:4c:5c:16:72:c7:2e:84:31:74:a4:cf: bd:a4:a1:05:17:0b:9e:75:58:14:2e:cc:e6:d9:6e: 77:4b:94:61:e4:85:54:f7:97:ce:7b:85:3f:37:c5: 79:a3:99:d8:83:c2:08:12:84:0e:55:ca:aa:98:05: 69:07:60:1f:3b:6c:0c:05:b5:f1:17:75:b5:7c:19: e7:39:ec:a9:de:4e:ef:4a:eb:12:63:a8:69:fd:c3: 72:12:9f:93:42:c0:bb:12:ca:17:89:1c:84:47:12: b4:cd:a6:d5:33:bb:7c:cf:00:11:ce:f1:76:3f:4c: a2:53:b1:52:9d:e1:e5:56:02:f1:26:30:93:de:3b: 4b:20:35:5f:f7:1b:a2:1f:da:a7:88:f6:cf:64:4f: 45:08:54:95:fe:c7:2a:64:08:46:05:73:6e:a7:5e: a7:be:9b:bd:5b:94:9e:25:eb:a4:da:f5:6c:74:20: 6d:08:dc:45:79:cb:6f:e3:2a:1c:70:b2:0a:4a:26: 65:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:98:E7:77:9D:9F:03:D5:D9:1B:6F:20:A0:42:D9:49:3C:ED:CB:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bfa59191-b81b-382b-afff-0cb5dd8ecdf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:f8:7b:30:07:87:0f:0c:42:60:49:04:1e:92:0f:92:91:88: 03:ff:71:56:1c:88:d5:1e:0c:ae:b3:42:73:6f:91:5f:7a:54: fa:c0:e6:9e:4d:58:d6:78:ca:60:64:0f:45:a0:05:c5:18:ff: 9f:d0:4b:59:48:16:74:9a:34:00:ff:95:7a:45:5c:6e:b6:fc: 49:ba:4d:21:ab:e4:e0:bb:7d:a4:41:cb:32:8d:53:b4:cd:9a: 76:6b:b5:fe:bf:40:8d:6c:01:85:0b:39:95:1e:ab:a1:da:6f: 9f:8e:70:44:10:3b:38:44:47:8e:f8:a0:e6:da:3d:93:a3:a6: c4:f0:2b:3b:15:52:41:88:c3:c9:92:72:70:89:55:72:cf:73: a0:65:21:8c:ab:25:5d:73:f6:64:ec:e9:19:2e:0a:73:0e:d8: 92:a8:ce:90:8d:aa:78:68:e9:19:18:a6:44:4d:0d:fc:6a:e1: 83:c0:57:a6:15:30:97:99:f4:04:d7:e1:da:84:e7:4e:a1:6b: 5f:ba:f7:da:55:89:8e:dc:04:c2:42:5c:2a:22:71:48:dd:c3: e9:48:34:d7:75:f8:ec:27:c8:ec:a7:50:41:69:08:71:5f:a1: 1c:52:5d:d6:a4:a5:b5:aa:3d:3d:f0:b7:c8:07:ae:cc:8d:35: 4b:3d:18:b4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4NhDd9koAFJzRthcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk NjBkZDg3NTQtYzU4NC00MzM5LThjMTUtYmQ5MjYzNjcwNjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVCppaSmw5Cca3QC+1WDnrWRvL/aNqeCxrgg HC2j3LkvTMimm0kEO+4hBtPrChuztbFsajUa8G3voqeMr4fTTFwWcscuhDF0pM+9 pKEFFwuedVgULszm2W53S5Rh5IVU95fOe4U/N8V5o5nYg8IIEoQOVcqqmAVpB2Af O2wMBbXxF3W1fBnnOeyp3k7vSusSY6hp/cNyEp+TQsC7EsoXiRyERxK0zabVM7t8 zwARzvF2P0yiU7FSneHlVgLxJjCT3jtLIDVf9xuiH9qniPbPZE9FCFSV/scqZAhG BXNup16nvpu9W5SeJeuk2vVsdCBtCNxFectv4yoccLIKSiZlZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC6Y53ednwPV2RtvIKBC2Uk87cv+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmZhNTkxOTEtYjgxYi0z ODJiLWFmZmYtMGNiNWRkOGVjZGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBN+HswB4cPDEJgSQQekg+SkYgD/3FWHIjVHgyus0Jzb5FfelT6wOae TVjWeMpgZA9FoAXFGP+f0EtZSBZ0mjQA/5V6RVxutvxJuk0hq+Tgu32kQcsyjVO0 zZp2a7X+v0CNbAGFCzmVHquh2m+fjnBEEDs4REeO+KDm2j2To6bE8Cs7FVJBiMPJ knJwiVVyz3OgZSGMqyVdc/Zk7OkZLgpzDtiSqM6Qjap4aOkZGKZETQ38auGDwFem FTCXmfQE1+HahOdOoWtfuvfaVYmO3ATCQlwqInFI3cPpSDTXdfjsJ8jsp1BBaQhx X6EcUl3WpKW1qj098LfIB67MjTVLPRi0 -----END CERTIFICATE-----Generated at Sat Jun 13 14:27:01 2026 by rpki-client