$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2d39581-fbd4-3281-a7c8-d32f5779d128.roa File: d2d39581-fbd4-3281-a7c8-d32f5779d128.roa (raw, json) Hash identifier: eCFUvBk6wZyTeZtx1VGeLjYvfm897Gw5WPRTypRK0tM= Subject key identifier: 1D:F5:29:26:E3:FD:44:52:56:F5:9B:DC:A5:F3:7A:F1:F9:E8:00:A8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0D843458892018D6E27B08D0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2d39581-fbd4-3281-a7c8-d32f5779d128.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 396602 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:34:58:89:20:18:d6:e2:7b:08:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=88a36058-86eb-4e2d-8181-e5babbf90633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:38:b2:6a:72:28:7f:d0:07:dc:b3:b5:a3:2e: 30:c1:7a:b2:3e:3d:15:2d:9d:7b:55:a5:ba:79:77: 5a:b1:a9:36:72:53:85:80:20:48:b2:d9:f5:4a:50: cd:73:36:84:4e:84:bc:54:2c:27:ad:80:46:a7:02: 80:a8:61:0b:76:1b:e5:70:d5:6e:98:7a:7d:5b:d6: ee:f7:72:45:56:c2:e1:39:61:8f:fa:c6:03:41:98: 8a:2e:01:47:49:ff:15:25:db:63:73:2e:24:a3:ad: 21:24:ac:4a:4f:cd:b4:cf:dc:1c:3d:1b:ea:04:ee: 14:32:f8:36:2b:5d:7a:40:e6:d3:19:6d:93:ac:e4: 93:58:32:36:96:4e:75:0f:07:63:00:5f:48:fc:c0: aa:7d:70:a5:00:21:1a:54:5c:12:ea:80:e3:36:28: 7d:9c:db:9c:fe:52:23:88:96:85:bb:08:5d:93:0f: 6b:13:93:cf:0e:fa:e2:ad:20:d7:84:63:3c:fb:76: 3d:f6:35:d3:85:d8:60:a6:ac:c7:5b:e3:3b:70:93: 8d:19:20:70:6b:9b:72:b4:71:e0:5c:ce:b4:a6:7b: ae:c3:8c:8e:af:89:5c:8f:61:49:4d:c6:20:0a:3e: 6d:91:80:41:ae:1b:ec:eb:30:e1:b9:e7:f3:36:08: 56:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F5:29:26:E3:FD:44:52:56:F5:9B:DC:A5:F3:7A:F1:F9:E8:00:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2d39581-fbd4-3281-a7c8-d32f5779d128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:93:d4:4a:86:b2:38:17:db:15:55:ad:38:6f:1d:70:06:1d: 97:bc:91:7f:8b:c9:44:41:5c:fd:91:d5:7b:aa:cc:35:3d:f9: 7f:b8:5b:ba:02:1d:e0:b0:23:36:34:69:61:4e:99:9e:5c:48: 17:2a:f7:d7:86:14:13:89:61:e2:24:3d:5c:b5:a8:15:08:cc: 8c:47:59:75:19:8f:50:7e:d7:bf:83:8d:af:04:3f:9c:93:e7: e9:9c:0b:07:8e:4d:2f:d3:9c:b4:0f:c3:e9:e3:58:e6:f7:b0: 60:47:78:a3:31:53:df:25:8a:9d:50:30:cc:09:80:4a:26:16: fa:00:c8:23:2f:be:79:1c:c1:57:f3:37:22:92:52:b9:dc:90: ef:8c:91:9c:13:d9:33:39:82:fb:d1:b6:f2:c1:11:0d:e3:eb: 06:f8:2d:7a:12:dd:c3:79:67:3f:e6:9c:fe:90:a0:41:02:08: 9e:a2:b7:4e:d6:f5:bc:6f:28:28:da:54:1d:3f:11:cf:a9:1c: fb:86:d8:be:14:1e:85:c8:63:bc:cc:f9:3e:c0:a7:92:c5:7d: e3:f0:e2:af:82:88:e6:b0:3d:48:c5:fd:f2:27:aa:32:e1:da: ab:d3:3e:88:e2:48:b6:dd:67:6f:35:ea:24:c2:4a:bd:97:62: a1:bc:67:33 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4NhDRYiSAY1uJ7CNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk ODhhMzYwNTgtODZlYi00ZTJkLTgxODEtZTViYWJiZjkwNjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujiyanIof9AH3LO1oy4wwXqyPj0VLZ17VaW6 eXdasak2clOFgCBIstn1SlDNczaEToS8VCwnrYBGpwKAqGELdhvlcNVumHp9W9bu 93JFVsLhOWGP+sYDQZiKLgFHSf8VJdtjcy4ko60hJKxKT820z9wcPRvqBO4UMvg2 K116QObTGW2TrOSTWDI2lk51DwdjAF9I/MCqfXClACEaVFwS6oDjNih9nNuc/lIj iJaFuwhdkw9rE5PPDvrirSDXhGM8+3Y99jXThdhgpqzHW+M7cJONGSBwa5tytHHg XM60pnuuw4yOr4lcj2FJTcYgCj5tkYBBrhvs6zDhuefzNghWIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB31KSbj/URSVvWb3KXzevH56ACoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDJkMzk1ODEtZmJkNC0z MjgxLWE3YzgtZDMyZjU3NzlkMTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBgk9RKhrI4F9sVVa04bx1wBh2XvJF/i8lEQVz9kdV7qsw1Pfl/uFu6 Ah3gsCM2NGlhTpmeXEgXKvfXhhQTiWHiJD1ctagVCMyMR1l1GY9Qfte/g42vBD+c k+fpnAsHjk0v05y0D8Pp41jm97BgR3ijMVPfJYqdUDDMCYBKJhb6AMgjL755HMFX 8zciklK53JDvjJGcE9kzOYL70bbywREN4+sG+C16Et3DeWc/5pz+kKBBAgieordO 1vW8bygo2lQdPxHPqRz7hti+FB6FyGO8zPk+wKeSxX3j8OKvgojmsD1Ixf3yJ6oy 4dqr0z6I4ki23WdvNeokwkq9l2KhvGcz -----END CERTIFICATE-----Generated at Sat Jun 13 16:56:56 2026 by rpki-client