$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd455da0-bdef-3129-8691-c9920dae59f1.roa File: dd455da0-bdef-3129-8691-c9920dae59f1.roa (raw, json) Hash identifier: Gjme/UWmVKyclw7Z+TFn3yVlUvH6z6eLig0q/FjA8uQ= Subject key identifier: DA:C2:14:58:6F:E7:E5:64:3E:DA:86:5D:B5:CE:BD:12:69:30:DF:1F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0C1EEBB660076403A45B8680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd455da0-bdef-3129-8691-c9920dae59f1.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 397194 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:eb:b6:60:07:64:03:a4:5b:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=b9ad2d76-fc09-45f2-bf7b-d43d5c978522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:67:a3:17:c9:52:f7:8a:af:e8:05:61:c6:06: 73:f2:3c:4d:df:59:56:95:7b:aa:6f:c5:13:12:05: ed:d0:3b:2a:37:38:21:ea:8b:86:5a:14:57:49:e3: a5:af:5c:54:bf:1f:bf:ac:db:72:9e:6c:c7:7b:16: 00:13:fb:43:17:32:59:22:cf:05:4e:df:45:06:5b: 05:36:9c:81:d8:81:4c:6e:99:ff:3f:62:1a:fa:15: 91:ad:c5:9a:15:c0:9e:a9:5e:c8:24:af:91:8d:21: ae:62:84:82:39:6d:cf:3a:67:bc:06:00:49:34:2e: 53:67:f8:0b:e5:87:93:dc:69:23:b0:2c:ca:51:d8: af:a6:ef:28:3b:f0:91:23:91:f8:06:c9:e6:9e:ac: bf:a3:51:71:54:c0:70:d0:17:cf:0c:f9:66:5d:41: 7d:ba:c8:be:bb:d6:a6:e0:65:2e:68:79:e4:bc:b2: 7c:27:b0:cd:9d:62:fd:49:6a:24:24:c3:15:df:6f: 99:c2:33:4a:da:36:99:bf:4c:18:81:02:68:8d:d0: 27:2f:ba:16:4f:3f:27:4d:90:84:3c:95:25:a3:b5: 7b:1f:85:d3:64:0c:3d:6d:bd:85:c2:5c:93:8c:72: 6d:b4:46:43:cd:36:ff:54:59:87:ab:be:80:23:c9: 71:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C2:14:58:6F:E7:E5:64:3E:DA:86:5D:B5:CE:BD:12:69:30:DF:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd455da0-bdef-3129-8691-c9920dae59f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:a4:5b:73:df:f4:94:ab:f0:f6:e1:84:ec:2d:0d:46:bf:d5: 93:2e:f6:77:f2:ef:82:37:ad:26:5e:fb:9b:a7:73:17:56:4c: 20:62:2a:b7:05:e2:bf:c1:ba:df:6b:95:aa:69:00:ab:0d:f3: 57:79:65:dd:19:71:3c:f4:df:3a:a4:76:ba:33:36:ab:85:30: dc:fb:f1:26:45:53:9e:25:71:a1:12:8d:75:d6:ce:36:8d:37: 2e:16:64:d8:c1:0a:ae:a5:5b:30:a1:a1:20:a5:0b:23:09:4d: 39:07:dd:f5:a3:54:7e:0b:d2:fc:20:f4:87:ee:b1:27:f1:4a: 9e:3b:8c:60:65:59:4b:ab:97:a5:3e:72:af:03:89:14:64:f9: 40:d0:85:11:f2:b3:f9:c0:00:3d:b5:28:d4:d7:d1:15:ab:af: 64:3d:0e:b8:40:f6:96:88:8c:f9:eb:06:89:ee:97:14:10:2e: c0:b8:75:c3:6e:19:57:f8:78:12:d0:7a:5b:6d:53:1e:d6:05: df:b8:7d:ed:39:84:64:07:40:61:36:3a:4e:e9:e7:46:db:90: 88:dd:d4:3b:b4:ce:44:a1:37:f8:35:4a:b6:5e:ce:c7:8c:46: 43:2d:e8:7b:4c:61:2e:93:92:fe:a9:40:75:69:2a:d3:b0:41: ea:be:9c:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHuu2YAdkA6RbhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk YjlhZDJkNzYtZmMwOS00NWYyLWJmN2ItZDQzZDVjOTc4NTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWejF8lS94qv6AVhxgZz8jxN31lWlXuqb8UT EgXt0DsqNzgh6ouGWhRXSeOlr1xUvx+/rNtynmzHexYAE/tDFzJZIs8FTt9FBlsF NpyB2IFMbpn/P2Ia+hWRrcWaFcCeqV7IJK+RjSGuYoSCOW3POme8BgBJNC5TZ/gL 5YeT3GkjsCzKUdivpu8oO/CRI5H4Bsnmnqy/o1FxVMBw0BfPDPlmXUF9usi+u9am 4GUuaHnkvLJ8J7DNnWL9SWokJMMV32+ZwjNK2jaZv0wYgQJojdAnL7oWTz8nTZCE PJUlo7V7H4XTZAw9bb2FwlyTjHJttEZDzTb/VFmHq76AI8lxQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrCFFhv5+VkPtqGXbXOvRJpMN8fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGQ0NTVkYTAtYmRlZi0z MTI5LTg2OTEtYzk5MjBkYWU1OWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKkW3Pf9JSr8PbhhOwtDUa/1ZMu9nfy74I3rSZe+5uncxdWTCBiKrcF 4r/But9rlappAKsN81d5Zd0ZcTz03zqkdrozNquFMNz78SZFU54lcaESjXXWzjaN Ny4WZNjBCq6lWzChoSClCyMJTTkH3fWjVH4L0vwg9IfusSfxSp47jGBlWUurl6U+ cq8DiRRk+UDQhRHys/nAAD21KNTX0RWrr2Q9DrhA9paIjPnrBonulxQQLsC4dcNu GVf4eBLQelttUx7WBd+4fe05hGQHQGE2Ok7p50bbkIjd1Du0zkShN/g1SrZezseM RkMt6HtMYS6Tkv6pQHVpKtOwQeq+nJ8= -----END CERTIFICATE-----Generated at Sat Jun 13 14:36:40 2026 by rpki-client