$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e60c7442-6ea3-37ae-be74-ea972a1db7b5.roa File: e60c7442-6ea3-37ae-be74-ea972a1db7b5.roa (raw, json) Hash identifier: NmrL6pqVbdpZXXV1gw1hxTsh6tPFd74cHe+Iswe67GU= Subject key identifier: 5A:48:8C:A9:28:4D:66:F1:E3:34:66:31:47:72:5E:ED:4C:5B:C1:EF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0C1EED5E4B1388E7512D8280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e60c7442-6ea3-37ae-be74-ea972a1db7b5.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 396602 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:ed:5e:4b:13:88:e7:51:2d:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=1a578247-cb38-4538-934c-6d6e817e3b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cf:31:10:f6:b5:64:de:92:cb:10:01:a6:c9: 06:e0:f9:8e:01:86:aa:e3:5c:14:c5:72:9b:c8:f9: 26:0f:f7:99:fd:8c:9f:ff:07:99:a5:2e:1e:36:67: 71:a8:99:63:ae:10:04:85:a4:1e:e0:48:a1:9f:b4: 77:32:86:cd:ed:e7:a2:8b:4b:49:49:d6:cd:0e:54: 98:d7:61:50:4f:a5:9b:fc:b3:e4:4a:a5:c0:25:84: 25:1c:6c:5a:bc:9a:ef:b8:91:3a:80:ad:eb:a2:44: ea:80:01:6f:3c:28:b3:13:6d:d1:bd:1a:cd:84:e4: 3f:98:1e:8a:d9:d9:0d:a6:d1:04:17:24:da:7a:ce: dc:5b:db:ce:a2:10:79:c9:18:c6:d9:da:25:1b:da: e6:51:0a:20:1a:3c:2c:5c:cc:9f:15:c1:66:17:bf: 26:7c:48:6e:94:77:76:3f:fc:cc:8c:1f:10:d2:67: 0e:61:83:b7:3a:38:1a:57:f7:30:7b:31:0c:84:81: f4:5e:45:a4:01:9c:ef:b0:85:31:7d:07:ab:4d:08: 78:7e:13:82:13:03:6d:4b:33:28:ae:91:ea:35:cd: d5:5c:21:56:c8:36:93:f0:dc:38:b0:2a:73:11:dd: c3:f0:90:0d:da:2d:78:fa:cf:ae:97:ed:63:47:1e: 9d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:48:8C:A9:28:4D:66:F1:E3:34:66:31:47:72:5E:ED:4C:5B:C1:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e60c7442-6ea3-37ae-be74-ea972a1db7b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:25:74:40:cb:72:37:ca:1a:57:c3:f8:78:d1:6a:49:a4:5f: 4c:69:05:43:71:7b:a9:2b:37:43:21:a9:c9:54:cc:b6:f2:d4: c1:27:9f:29:2e:de:c1:98:03:34:1f:71:62:68:c4:15:20:2b: ca:95:43:03:a6:5d:6e:17:7e:ab:84:d3:fd:3c:12:f0:fd:57: 1a:97:20:da:76:a9:b6:60:18:53:1b:af:8a:42:95:79:1a:11: 33:10:1f:5f:41:5e:e7:61:85:18:f2:b0:07:6f:32:a5:20:d7: c0:6e:65:ea:2d:7d:57:25:2e:35:fb:8a:f0:04:9e:bd:84:5e: 74:f9:31:97:e9:d9:5a:44:c5:26:e4:51:2e:7f:d0:01:b5:c4: 58:c0:a2:5a:4a:6f:17:e6:3c:99:e5:3a:0c:84:a3:9e:02:4e: a2:a7:18:aa:8e:a5:c7:1f:7b:b0:9e:0b:9f:a0:8a:19:a2:86: fd:8f:f9:02:93:66:05:bf:73:20:f2:a4:49:5d:49:41:43:c5: 0f:9a:eb:01:a7:1f:07:b5:bf:f9:2f:7b:79:8f:e4:80:23:41: b3:76:d3:88:69:15:71:d5:6b:c3:d2:0a:5b:a5:47:52:77:19: 7d:f1:69:5d:b7:0f:79:6c:a6:a3:37:7d:75:30:af:8c:ef:34: 48:2b:a7:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHu1eSxOI51EtgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk MWE1NzgyNDctY2IzOC00NTM4LTkzNGMtNmQ2ZTgxN2UzYjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c8xEPa1ZN6SyxABpskG4PmOAYaq41wUxXKb yPkmD/eZ/Yyf/weZpS4eNmdxqJljrhAEhaQe4Eihn7R3MobN7eeii0tJSdbNDlSY 12FQT6Wb/LPkSqXAJYQlHGxavJrvuJE6gK3rokTqgAFvPCizE23RvRrNhOQ/mB6K 2dkNptEEFyTaes7cW9vOohB5yRjG2dolG9rmUQogGjwsXMyfFcFmF78mfEhulHd2 P/zMjB8Q0mcOYYO3OjgaV/cwezEMhIH0XkWkAZzvsIUxfQerTQh4fhOCEwNtSzMo rpHqNc3VXCFWyDaT8Nw4sCpzEd3D8JAN2i14+s+ul+1jRx6d0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpIjKkoTWbx4zRmMUdyXu1MW8HvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTYwYzc0NDItNmVhMy0z N2FlLWJlNzQtZWE5NzJhMWRiN2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEldEDLcjfKGlfD+HjRakmkX0xpBUNxe6krN0MhqclUzLby1MEnnyku 3sGYAzQfcWJoxBUgK8qVQwOmXW4XfquE0/08EvD9VxqXINp2qbZgGFMbr4pClXka ETMQH19BXudhhRjysAdvMqUg18BuZeotfVclLjX7ivAEnr2EXnT5MZfp2VpExSbk US5/0AG1xFjAolpKbxfmPJnlOgyEo54CTqKnGKqOpccfe7CeC5+gihmihv2P+QKT ZgW/cyDypEldSUFDxQ+a6wGnHwe1v/kve3mP5IAjQbN204hpFXHVa8PSClulR1J3 GX3xaV23D3lspqM3fXUwr4zvNEgrpzk= -----END CERTIFICATE-----Generated at Sat Jun 13 14:27:52 2026 by rpki-client