$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef87d8d5-7336-3cde-af35-6ca9e1a1a28b.roa File: ef87d8d5-7336-3cde-af35-6ca9e1a1a28b.roa (raw, json) Hash identifier: ppsOQU13mhMKZAWl0Ye5mMfFtofzw7w7e8zjprMYb7I= Subject key identifier: 3F:BE:51:C1:27:56:EC:5E:CD:81:80:61:1F:80:DB:C2:07:2B:AB:87 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0C1EEC187EC03379CAF6B880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef87d8d5-7336-3cde-af35-6ca9e1a1a28b.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 396587 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:ec:18:7e:c0:33:79:ca:f6:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=bd7d8918-50a7-462f-afd2-727d951736a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:db:52:ba:2e:05:2f:a5:c8:f0:c5:54:ee:d6: 5b:33:fb:c6:71:12:04:4f:b8:f8:f3:c6:50:3c:a5: 3e:a8:ba:79:83:d7:96:3c:c1:e1:c0:b2:7f:28:27: b6:22:93:ae:c1:53:e9:9a:1b:0a:6e:29:4e:92:9c: 3e:98:d0:5f:bb:02:49:86:48:99:36:7a:ec:1e:87: 97:cf:70:30:a5:c0:03:d1:a0:87:38:1c:a1:23:0c: f4:c4:32:aa:38:74:11:15:8a:69:50:2c:48:c0:b0: b6:f1:39:fb:19:7c:ab:86:50:64:24:45:9e:3e:a3: 49:15:a3:01:13:8d:85:0f:37:c6:c9:72:5c:98:13: 61:e7:4f:75:35:80:56:69:6f:9a:5b:73:54:03:b6: 29:2c:d6:58:26:ed:93:37:9c:69:65:5f:a5:9a:10: 96:9b:8f:bc:a7:88:3a:cb:fd:69:4f:93:77:07:ae: da:a8:cf:d5:72:3f:66:b5:ed:3a:17:bf:45:f1:5f: ff:1a:ba:02:ed:9f:a5:f6:7e:21:b1:a2:56:b9:00: e1:4b:0c:0f:96:4d:12:24:7e:74:ef:a6:d7:58:32: 4e:4e:ec:98:3d:28:ef:e3:f4:1c:67:1b:5d:c0:bb: 28:4b:e2:b4:ce:b7:2c:ac:89:64:38:68:94:ab:bc: 83:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:BE:51:C1:27:56:EC:5E:CD:81:80:61:1F:80:DB:C2:07:2B:AB:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef87d8d5-7336-3cde-af35-6ca9e1a1a28b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:4c:68:e1:c7:6c:0c:15:00:6e:1e:da:2d:f2:58:81:12:d3: 4a:3a:52:02:d9:f9:b1:7e:c9:58:b2:7e:20:a0:1b:03:9b:30: 92:0a:a5:3d:3c:6a:a0:3e:3c:9f:cc:9e:61:57:85:50:62:bb: 0d:73:16:95:be:d0:e5:0c:91:27:de:37:04:4c:ca:07:92:d5: 01:16:b8:0c:77:43:41:33:c2:b2:65:b1:e6:1e:67:b6:b6:a0: 44:bf:28:84:9b:78:7a:ce:00:db:e0:1e:13:28:76:0a:bf:e1: 28:bf:14:9f:05:64:6d:5d:e2:85:9c:9b:16:78:71:de:71:24: 7e:2c:ef:1c:92:2b:bc:ee:bd:74:30:c7:fe:e0:e5:53:4a:8e: 80:6d:c6:57:54:d4:ba:8f:22:79:bf:11:8f:47:bc:a9:06:fc: fd:5a:aa:cc:49:0d:72:11:51:ee:85:cc:14:ca:c9:d5:51:d5: 44:a0:34:e3:21:ac:6c:73:7b:f0:ba:e7:7b:c8:ab:ce:d1:43: 3b:5d:47:24:9e:9f:9b:c5:59:cf:de:42:db:36:3f:28:70:0b: 1f:02:5c:97:a8:46:25:7d:39:fb:97:a9:db:d7:96:b6:e1:5d: 2b:f7:f8:60:a0:15:f5:11:25:57:2d:da:04:60:2c:bd:2d:e1: 3c:4a:f5:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHuwYfsAzecr2uIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk YmQ3ZDg5MTgtNTBhNy00NjJmLWFmZDItNzI3ZDk1MTczNmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9tSui4FL6XI8MVU7tZbM/vGcRIET7j488ZQ PKU+qLp5g9eWPMHhwLJ/KCe2IpOuwVPpmhsKbilOkpw+mNBfuwJJhkiZNnrsHoeX z3AwpcAD0aCHOByhIwz0xDKqOHQRFYppUCxIwLC28Tn7GXyrhlBkJEWePqNJFaMB E42FDzfGyXJcmBNh5091NYBWaW+aW3NUA7YpLNZYJu2TN5xpZV+lmhCWm4+8p4g6 y/1pT5N3B67aqM/Vcj9mte06F79F8V//GroC7Z+l9n4hsaJWuQDhSwwPlk0SJH50 76bXWDJOTuyYPSjv4/QcZxtdwLsoS+K0zrcsrIlkOGiUq7yD6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD++UcEnVuxezYGAYR+A28IHK6uHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWY4N2Q4ZDUtNzMzNi0z Y2RlLWFmMzUtNmNhOWUxYTFhMjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdMaOHHbAwVAG4e2i3yWIES00o6UgLZ+bF+yViyfiCgGwObMJIKpT08 aqA+PJ/MnmFXhVBiuw1zFpW+0OUMkSfeNwRMygeS1QEWuAx3Q0EzwrJlseYeZ7a2 oES/KISbeHrOANvgHhModgq/4Si/FJ8FZG1d4oWcmxZ4cd5xJH4s7xySK7zuvXQw x/7g5VNKjoBtxldU1LqPInm/EY9HvKkG/P1aqsxJDXIRUe6FzBTKydVR1USgNOMh rGxze/C653vIq87RQztdRySen5vFWc/eQts2PyhwCx8CXJeoRiV9OfuXqdvXlrbh XSv3+GCgFfURJVct2gRgLL0t4TxK9UE= -----END CERTIFICATE-----Generated at Sat Jun 13 13:21:42 2026 by rpki-client