$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3d0ed94-a94d-384b-a208-cd45356f874c.roa File: d3d0ed94-a94d-384b-a208-cd45356f874c.roa (raw, json) Hash identifier: kCzH+zBbqLXhKEPwJNnbVI+4od0ZFEDoEIq7APC+yNQ= Subject key identifier: 57:3F:53:F4:06:A9:A5:0E:17:B9:68:A9:10:C7:81:06:D3:6D:F8:68 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0C1EEFAAFBEF816DFB9C8CE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3d0ed94-a94d-384b-a208-cd45356f874c.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 36623 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:ef:aa:fb:ef:81:6d:fb:9c:8c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=6ec88b9c-2029-4774-832c-dddc092ed772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:95:d5:6a:86:0d:6e:b8:0c:ff:f1:2c:1e:18: e6:bd:71:74:2a:d6:66:38:9b:b4:79:65:04:59:15: e4:dd:68:da:9b:19:d3:13:0e:0b:c2:aa:07:e1:94: 6b:b1:8e:1f:41:19:56:7a:27:6b:b3:0e:24:53:bb: 2e:9f:fd:14:01:71:96:5d:87:4e:ea:9d:41:69:65: ae:f1:a7:29:5e:20:c0:85:dc:cb:88:e3:63:a8:bc: 87:69:77:5b:9b:84:5d:25:bb:9f:0f:a8:5e:ee:7d: 3a:79:88:84:d9:1e:1e:46:b5:50:1b:d6:c7:ae:43: 50:32:a5:09:82:75:77:2c:29:d9:22:22:26:82:7f: bb:5f:c7:e3:d4:09:ee:67:3a:b2:b0:5a:a3:ca:f3: e1:9a:71:14:e3:6c:74:88:31:a0:0f:74:a3:65:08: 5f:0e:8d:a4:a0:97:73:50:b0:d4:da:b9:e6:9e:e7: b7:c4:af:57:b4:b0:fe:99:ae:e6:60:2b:a0:ae:02: fd:16:00:13:a4:fd:f8:55:a3:6d:eb:e5:e5:c4:27: ce:b8:09:d5:b1:ad:fa:19:22:21:87:bc:f9:75:ee: c4:6a:92:2e:cf:0e:d2:6e:bb:c4:19:d3:a9:e7:ae: 9e:25:70:52:f8:3f:02:e4:c1:60:0e:fc:71:3b:16: 34:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3F:53:F4:06:A9:A5:0E:17:B9:68:A9:10:C7:81:06:D3:6D:F8:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3d0ed94-a94d-384b-a208-cd45356f874c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:88:72:49:1d:5f:36:77:1f:73:88:7a:c0:6d:c7:c6:dc:c8: 3c:44:b6:39:b3:65:d8:b0:f5:82:54:dd:6e:be:e7:6c:76:78: b6:5a:48:91:a6:c9:7a:d9:dc:be:8b:be:ad:da:06:f2:4e:0a: ba:38:fd:c2:41:f6:46:29:a9:42:92:fb:92:3d:c7:77:58:89: bb:dd:9b:92:81:43:b3:52:6b:5d:e8:94:64:7f:1c:99:35:ee: be:2e:4d:70:10:47:cf:a4:bf:37:28:1a:c8:4e:0c:24:a3:0a: 71:60:e6:eb:cf:58:32:4b:32:1d:0f:e0:52:b0:03:33:03:26: 95:fd:bd:b4:17:8d:32:06:dc:cb:ff:a6:eb:71:12:84:07:54: da:aa:7a:75:87:2e:a7:ff:dd:41:4f:d3:29:2b:81:62:f9:8e: a6:5e:d5:75:c8:33:69:af:dd:2f:04:0e:65:38:ec:6f:b8:ae: 80:65:b0:ae:22:16:24:bf:d4:64:98:f9:4c:9b:48:82:85:df: 8c:c5:6a:2b:7f:e7:71:1e:82:8e:36:82:62:f8:ac:13:bf:7f: 94:b4:94:5e:93:91:28:c3:c4:43:7a:00:1e:3b:d3:15:fc:cc: c3:9e:22:9e:e6:ec:59:d5:2b:96:33:ea:e5:19:ad:fb:57:0a: 75:d4:f3:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHu+q+++BbfucjOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk NmVjODhiOWMtMjAyOS00Nzc0LTgzMmMtZGRkYzA5MmVkNzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZXVaoYNbrgM//EsHhjmvXF0KtZmOJu0eWUE WRXk3WjamxnTEw4LwqoH4ZRrsY4fQRlWeidrsw4kU7sun/0UAXGWXYdO6p1BaWWu 8acpXiDAhdzLiONjqLyHaXdbm4RdJbufD6he7n06eYiE2R4eRrVQG9bHrkNQMqUJ gnV3LCnZIiImgn+7X8fj1AnuZzqysFqjyvPhmnEU42x0iDGgD3SjZQhfDo2koJdz ULDU2rnmnue3xK9XtLD+ma7mYCugrgL9FgATpP34VaNt6+XlxCfOuAnVsa36GSIh h7z5de7EapIuzw7SbrvEGdOp566eJXBS+D8C5MFgDvxxOxY0bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFc/U/QGqaUOF7loqRDHgQbTbfhoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDNkMGVkOTQtYTk0ZC0z ODRiLWEyMDgtY2Q0NTM1NmY4NzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKIckkdXzZ3H3OIesBtx8bcyDxEtjmzZdiw9YJU3W6+52x2eLZaSJGm yXrZ3L6Lvq3aBvJOCro4/cJB9kYpqUKS+5I9x3dYibvdm5KBQ7NSa13olGR/HJk1 7r4uTXAQR8+kvzcoGshODCSjCnFg5uvPWDJLMh0P4FKwAzMDJpX9vbQXjTIG3Mv/ putxEoQHVNqqenWHLqf/3UFP0ykrgWL5jqZe1XXIM2mv3S8EDmU47G+4roBlsK4i FiS/1GSY+UybSIKF34zFait/53Eego42gmL4rBO/f5S0lF6TkSjDxEN6AB470xX8 zMOeIp7m7FnVK5Yz6uUZrftXCnXU89g= -----END CERTIFICATE-----Generated at Sat Jun 13 13:36:43 2026 by rpki-client