$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea7c016d-3c6c-38d5-8323-b44ba800c05c.roa File: ea7c016d-3c6c-38d5-8323-b44ba800c05c.roa (raw, json) Hash identifier: jloET+GcvaqLOy8/y1IuAEjAWskBcF6eI4aMcksILtA= Subject key identifier: 4B:F9:C7:B7:2E:33:64:45:ED:C8:A7:E1:B6:59:57:E8:DD:38:6B:57 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0C1EC9580967B518E0841740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea7c016d-3c6c-38d5-8323-b44ba800c05c.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 396826 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:c9:58:09:67:b5:18:e0:84:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=150e3258-f3c4-468e-93eb-810536f3b4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ad:e8:99:dc:a6:16:df:d6:2a:04:ef:29:12: 27:5e:d3:ea:eb:4d:f7:d9:e8:5b:98:2d:8e:b3:ea: 2d:72:00:0e:9f:23:80:cc:11:4c:6e:94:92:a4:ea: ea:10:4f:08:b9:99:b1:93:1a:70:4f:89:c2:eb:9c: ff:3e:f4:f8:95:59:59:a6:c2:04:a5:23:d6:46:42: 50:58:98:8d:88:0e:27:2f:dd:bb:cc:ff:ad:32:db: f8:b5:1f:06:e2:f2:17:86:46:5a:a3:64:1a:e0:b5: bc:a8:23:f0:9a:61:0a:4d:39:ce:09:e3:2f:1a:cd: f2:ca:f0:a3:d5:bf:55:94:d3:52:64:1c:3d:23:63: 9d:f2:4a:6a:13:b6:ae:50:15:46:40:ec:b2:bb:51: 55:ca:16:4a:23:97:bf:63:3d:14:02:8e:7d:28:2e: 5e:02:2d:98:5e:1d:7b:95:8b:1f:e8:e7:4a:58:b8: 46:2e:56:7c:2b:7e:e6:79:93:12:c3:75:90:62:0a: ef:16:16:75:96:77:df:dd:72:e4:fc:b3:91:3a:a4: 57:6f:80:f5:66:d3:17:52:c8:c3:c9:0a:8d:ab:e3: 29:39:0c:6c:79:6b:02:18:ef:20:ee:56:00:69:ff: 58:d9:69:66:9e:a4:d3:9a:cf:2c:28:93:77:cd:c6: 02:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F9:C7:B7:2E:33:64:45:ED:C8:A7:E1:B6:59:57:E8:DD:38:6B:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea7c016d-3c6c-38d5-8323-b44ba800c05c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:42:a5:11:74:b5:74:d3:7f:f7:71:55:82:30:66:e2:39:99: 04:15:81:8c:e5:da:e8:6d:12:04:87:e5:14:97:0f:28:85:7c: 56:da:f9:d4:99:54:d6:fa:fc:1c:de:63:39:80:b2:31:21:b9: 70:81:49:61:25:bc:56:e3:2a:7a:e0:a8:11:54:6c:ec:38:79: 5c:93:a9:f7:9d:d7:0c:04:d9:4d:34:b5:9a:1e:a9:79:a7:42: f6:64:51:25:0d:05:2e:83:75:da:b4:39:6e:6e:86:5d:dc:ef: 9c:28:74:c0:2a:53:eb:69:6f:f0:bc:4b:8c:59:8a:6e:53:ac: b3:e1:c6:b7:d7:67:06:cf:86:c8:6d:1d:7a:cb:0a:02:1e:e6: 52:01:4b:60:da:2f:f3:1d:90:b8:9f:34:1a:60:2d:52:dc:0a: c9:d6:e2:2f:9d:3f:3f:d1:50:25:19:ce:93:a9:db:f2:53:3e: 49:c2:cf:d6:cf:99:dd:98:3d:99:28:70:65:2a:9a:e3:53:e8: 5c:29:2b:23:f9:6b:3f:59:a3:b0:93:55:99:1b:cc:9e:ba:40: de:58:a8:54:9e:be:cb:26:2c:79:92:a8:a7:72:99:ef:3b:f5: 3f:6d:64:bb:64:b6:81:a9:f4:24:73:56:f3:87:06:0f:2f:3e: 96:53:c1:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHslYCWe1GOCEF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk MTUwZTMyNTgtZjNjNC00NjhlLTkzZWItODEwNTM2ZjNiNGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq3omdymFt/WKgTvKRInXtPq60332ehbmC2O s+otcgAOnyOAzBFMbpSSpOrqEE8IuZmxkxpwT4nC65z/PvT4lVlZpsIEpSPWRkJQ WJiNiA4nL927zP+tMtv4tR8G4vIXhkZao2Qa4LW8qCPwmmEKTTnOCeMvGs3yyvCj 1b9VlNNSZBw9I2Od8kpqE7auUBVGQOyyu1FVyhZKI5e/Yz0UAo59KC5eAi2YXh17 lYsf6OdKWLhGLlZ8K37meZMSw3WQYgrvFhZ1lnff3XLk/LOROqRXb4D1ZtMXUsjD yQqNq+MpOQxseWsCGO8g7lYAaf9Y2WlmnqTTms8sKJN3zcYClwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEv5x7cuM2RF7cin4bZZV+jdOGtXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWE3YzAxNmQtM2M2Yy0z OGQ1LTgzMjMtYjQ0YmE4MDBjMDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9CpRF0tXTTf/dxVYIwZuI5mQQVgYzl2uhtEgSH5RSXDyiFfFba+dSZ VNb6/BzeYzmAsjEhuXCBSWElvFbjKnrgqBFUbOw4eVyTqfed1wwE2U00tZoeqXmn QvZkUSUNBS6Dddq0OW5uhl3c75wodMAqU+tpb/C8S4xZim5TrLPhxrfXZwbPhsht HXrLCgIe5lIBS2DaL/MdkLifNBpgLVLcCsnW4i+dPz/RUCUZzpOp2/JTPknCz9bP md2YPZkocGUqmuNT6FwpKyP5az9Zo7CTVZkbzJ66QN5YqFSevssmLHmSqKdyme87 9T9tZLtktoGp9CRzVvOHBg8vPpZTwdc= -----END CERTIFICATE-----Generated at Sat Jun 13 13:51:49 2026 by rpki-client