$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caf08744-316a-354c-bc78-972b8b320c08.roa File: caf08744-316a-354c-bc78-972b8b320c08.roa (raw, json) Hash identifier: 5/pWZJFFjQdKDLeTpCzeDRsj+qrHxJLqD5rGXh8co6A= Subject key identifier: DE:0E:B4:DF:71:16:25:B0:D9:FB:BA:06:04:29:7E:EC:76:0D:04:EA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0C1ED38BE144416BB32D21E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caf08744-316a-354c-bc78-972b8b320c08.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 396597 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:d3:8b:e1:44:41:6b:b3:2d:21:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=382eb6eb-4283-4506-864c-24e27eab39b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f1:16:d4:2d:89:81:74:e6:84:b1:7e:d0:6a: d2:72:1a:19:c2:d4:e7:f3:6f:e2:46:05:e1:b5:ec: 9d:55:f3:32:79:88:49:a1:a9:76:b4:39:9c:80:65: 45:56:40:b7:08:af:8c:da:3d:fd:b4:01:1c:0e:be: e8:61:c8:18:57:cc:b8:bd:d5:e3:37:f6:2a:43:e0: ce:8c:50:05:fb:d5:f4:f9:b5:47:53:82:ce:33:8f: ac:9e:56:c9:77:b3:22:ca:f4:f5:26:bc:95:7d:51: 84:2b:5c:1e:08:0b:98:86:01:99:78:1b:67:74:f3: 1e:f4:35:48:ed:7c:37:dd:ae:cc:f1:91:ad:10:88: 72:29:9c:2f:f5:73:13:89:89:80:68:c8:27:60:05: 10:8c:61:62:bb:6e:8a:ca:6c:63:76:2a:ef:a1:78: 7d:83:c5:1b:01:5d:05:78:74:6d:98:67:53:8e:1f: 5c:71:38:b1:64:1d:e6:eb:a8:00:f7:43:3b:ab:3a: 70:6c:25:81:9c:8a:a4:08:b7:d9:39:8c:6d:4f:5b: 9e:6b:4d:9b:92:04:14:d2:ad:c4:e6:c5:f8:81:b7: 9a:2b:20:51:ed:1a:f7:35:ee:73:10:ac:bb:ba:11: e1:0b:6b:10:eb:20:8b:80:c3:d2:88:8c:7b:d9:ff: 66:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0E:B4:DF:71:16:25:B0:D9:FB:BA:06:04:29:7E:EC:76:0D:04:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caf08744-316a-354c-bc78-972b8b320c08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:bd:4d:da:86:15:e1:8e:32:37:b0:48:b2:50:8c:e3:e6:02: 29:55:d4:e1:6e:13:47:f6:81:0f:ec:cf:aa:bc:30:76:74:6b: 79:92:84:a9:02:22:eb:a0:ef:6b:80:54:7d:f3:c8:5d:40:f5: 58:db:e9:dc:7d:5b:e4:54:9f:bd:4a:65:97:08:b2:a6:43:d3: 1b:9d:cb:f5:0c:e5:69:4a:b3:79:71:c7:3d:bd:e9:29:bb:66: 01:16:36:6d:34:66:6c:d3:3a:84:99:cf:1e:f8:6c:5a:5e:be: 2c:b5:20:f1:66:6f:57:84:14:a0:b1:0d:7a:a3:a2:f6:06:4d: e9:4d:bf:5b:8b:96:5f:b9:28:a8:c7:45:cc:e1:64:9b:4a:05: 12:08:ea:b9:da:bc:80:47:2d:b8:21:2e:ef:1e:a0:86:d1:37: f0:49:6c:fa:1c:ae:36:8a:e0:15:45:88:a2:f5:d5:4a:91:5e: 74:f6:a5:da:25:ca:c3:df:c3:63:2c:b8:24:4d:56:26:cc:1c: 4b:10:bb:97:70:5c:18:14:5b:ce:08:41:8e:29:f3:25:ab:68: 5d:01:30:12:d3:7b:fa:db:2c:34:c4:30:67:32:e5:d8:88:1d: ab:fa:ed:07:b1:f8:e5:8b:5f:f3:db:c1:03:9f:e9:15:2e:31: 06:7e:25:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHtOL4URBa7MtIeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk MzgyZWI2ZWItNDI4My00NTA2LTg2NGMtMjRlMjdlYWIzOWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivEW1C2JgXTmhLF+0GrSchoZwtTn82/iRgXh teydVfMyeYhJoal2tDmcgGVFVkC3CK+M2j39tAEcDr7oYcgYV8y4vdXjN/YqQ+DO jFAF+9X0+bVHU4LOM4+snlbJd7MiyvT1JryVfVGEK1weCAuYhgGZeBtndPMe9DVI 7Xw33a7M8ZGtEIhyKZwv9XMTiYmAaMgnYAUQjGFiu26KymxjdirvoXh9g8UbAV0F eHRtmGdTjh9ccTixZB3m66gA90M7qzpwbCWBnIqkCLfZOYxtT1uea02bkgQU0q3E 5sX4gbeaKyBR7Rr3Ne5zEKy7uhHhC2sQ6yCLgMPSiIx72f9mHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4OtN9xFiWw2fu6BgQpfux2DQTqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2FmMDg3NDQtMzE2YS0z NTRjLWJjNzgtOTcyYjhiMzIwYzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIm9TdqGFeGOMjewSLJQjOPmAilV1OFuE0f2gQ/sz6q8MHZ0a3mShKkC Iuug72uAVH3zyF1A9Vjb6dx9W+RUn71KZZcIsqZD0xudy/UM5WlKs3lxxz296Sm7 ZgEWNm00ZmzTOoSZzx74bFpeviy1IPFmb1eEFKCxDXqjovYGTelNv1uLll+5KKjH RczhZJtKBRII6rnavIBHLbghLu8eoIbRN/BJbPocrjaK4BVFiKL11UqRXnT2pdol ysPfw2MsuCRNVibMHEsQu5dwXBgUW84IQY4p8yWraF0BMBLTe/rbLDTEMGcy5diI Hav67Qex+OWLX/PbwQOf6RUuMQZ+Ja0= -----END CERTIFICATE-----Generated at Sat Jun 13 18:01:13 2026 by rpki-client