$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd6c0aea-9f81-3979-91b8-7a645a4bb690.roa File: cd6c0aea-9f81-3979-91b8-7a645a4bb690.roa (raw, json) Hash identifier: 2hHJPa48CmMaSaPDpZGRnCC1+iyC0wHdVZL7GzGieBA= Subject key identifier: 9D:E0:A2:51:E8:75:6F:F9:C9:BA:4E:2E:82:E5:A2:82:EE:FC:D7:2E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E1FA9B1D104A715644865ADC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd6c0aea-9f81-3979-91b8-7a645a4bb690.roa Signing time: Wed 10 Jun 2026 09:00:13 +0000 ROA not before: Wed 10 Jun 2026 09:00:13 +0000 ROA not after: Tue 08 Sep 2026 09:00:13 +0000 asID: 396560 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1f:a9:b1:d1:04:a7:15:64:48:65:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 10 09:00:13 2026 GMT Not After : Sep 8 09:00:13 2026 GMT Subject: CN=64925168-6155-40b3-9936-7cd0033d7443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3e:02:e0:6a:d0:5d:f7:b8:98:41:75:3b:c4: 49:7c:79:c3:bb:25:81:57:b3:f2:02:db:12:b2:04: 54:94:90:19:67:59:b5:2f:f6:e5:cd:cd:f6:12:99: e5:f8:f0:87:14:b5:31:85:7d:d0:ca:0a:c8:a0:cc: 59:f8:0e:67:66:0a:8b:ee:32:3b:94:85:36:5d:3e: 4c:d2:38:63:b4:2a:da:b7:63:4b:c7:fb:cd:45:34: 92:c5:ce:18:7f:85:20:9f:e2:dc:cd:4b:01:8a:74: 1e:d8:fd:32:e3:2c:ad:28:25:d0:e8:db:44:f4:e9: db:db:47:87:c1:bb:90:44:7b:48:81:56:65:85:76: 30:93:c6:5d:2c:52:6c:a3:e5:3f:38:47:31:1d:d5: 8e:17:cd:e8:3f:45:41:e6:d7:6a:8e:3b:f3:ca:c8: d1:ba:1b:14:0f:da:65:c5:90:49:bd:fc:7b:10:03: ba:b9:0a:47:0d:8e:52:18:e6:47:02:03:b0:12:78: d4:37:4e:e3:d4:62:ce:89:c9:ec:b7:35:8b:f6:66: 3e:9e:d0:a0:61:59:7e:8f:e3:6a:46:23:53:40:87: 6d:cb:2a:c9:33:b8:76:50:e3:75:22:73:ca:61:af: 9f:59:14:71:23:8f:a8:06:33:92:33:c1:87:42:01: b6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E0:A2:51:E8:75:6F:F9:C9:BA:4E:2E:82:E5:A2:82:EE:FC:D7:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd6c0aea-9f81-3979-91b8-7a645a4bb690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:04:ec:49:4e:25:d4:58:8e:02:8d:41:e5:74:35:9d:0e:01: c0:26:88:26:de:78:f3:bb:b6:cc:8e:91:fa:73:7c:c7:ce:8d: 90:88:c2:28:08:d0:74:0b:58:c1:4a:b9:f4:c3:04:df:68:e8: 96:9f:56:af:03:ab:83:4d:1e:1b:35:41:f2:a4:2f:37:8c:19: 7a:71:de:13:68:e3:6d:31:b6:61:8a:7a:34:8c:b2:b8:fc:76: 5d:43:8e:50:9e:e5:94:51:40:c6:0d:92:b3:4e:d0:50:4b:35: bf:e0:32:aa:8b:1a:af:23:e5:36:91:4c:ff:6a:50:2d:7b:c6: e4:f2:11:fd:d4:49:f1:e6:c4:10:5e:c3:e6:5c:48:39:5f:48: 5f:c7:55:4b:60:d5:65:e8:34:2a:66:ae:74:2f:51:f7:ef:ac: a8:01:0f:f9:80:e8:a7:7e:ab:e2:29:80:85:d6:ab:57:04:db: a8:d4:00:ab:06:85:89:99:a6:a8:b7:86:e3:88:25:b9:48:0c: 54:5a:63:76:c0:3e:62:21:82:f8:59:30:26:a0:39:e5:2c:5e: f6:7b:6f:3f:97:c1:a9:88:20:52:9c:b4:ee:bf:3b:b7:bd:ba: f4:9f:a8:cc:4b:38:41:82:89:f3:ad:df:93:49:9c:bd:6c:cf: 6d:03:e6:bd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4fqbHRBKcVZEhlrcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk NjQ5MjUxNjgtNjE1NS00MGIzLTk5MzYtN2NkMDAzM2Q3NDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD4C4GrQXfe4mEF1O8RJfHnDuyWBV7PyAtsS sgRUlJAZZ1m1L/blzc32Epnl+PCHFLUxhX3QygrIoMxZ+A5nZgqL7jI7lIU2XT5M 0jhjtCrat2NLx/vNRTSSxc4Yf4Ugn+LczUsBinQe2P0y4yytKCXQ6NtE9Onb20eH wbuQRHtIgVZlhXYwk8ZdLFJso+U/OEcxHdWOF83oP0VB5tdqjjvzysjRuhsUD9pl xZBJvfx7EAO6uQpHDY5SGOZHAgOwEnjUN07j1GLOicnstzWL9mY+ntCgYVl+j+Nq RiNTQIdtyyrJM7h2UON1InPKYa+fWRRxI4+oBjOSM8GHQgG2WwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ3golHodW/5ybpOLoLlooLu/NcuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Q2YzBhZWEtOWY4MS0z OTc5LTkxYjgtN2E2NDVhNGJiNjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA7BOxJTiXUWI4CjUHldDWdDgHAJogm3njzu7bMjpH6c3zHzo2QiMIo CNB0C1jBSrn0wwTfaOiWn1avA6uDTR4bNUHypC83jBl6cd4TaONtMbZhino0jLK4 /HZdQ45QnuWUUUDGDZKzTtBQSzW/4DKqixqvI+U2kUz/alAte8bk8hH91Enx5sQQ XsPmXEg5X0hfx1VLYNVl6DQqZq50L1H376yoAQ/5gOinfqviKYCF1qtXBNuo1ACr BoWJmaaot4bjiCW5SAxUWmN2wD5iIYL4WTAmoDnlLF72e28/l8GpiCBSnLTuvzu3 vbr0n6jMSzhBgonzrd+TSZy9bM9tA+a9 -----END CERTIFICATE-----Generated at Sat Jun 13 14:36:01 2026 by rpki-client