$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa41c3e6-898a-3313-a156-1d95e18083a0.roa File: fa41c3e6-898a-3313-a156-1d95e18083a0.roa (raw, json) Hash identifier: CInjjb1AZWNudeF9RzPtvZAyDXZMsa7vqXBy3zhROt8= Subject key identifier: 36:78:6F:10:0C:82:D8:77:3F:70:37:59:3B:73:55:5C:26:F7:E8:FA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0D8437E380CE20676469D200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa41c3e6-898a-3313-a156-1d95e18083a0.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 36627 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:37:e3:80:ce:20:67:64:69:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=7138f8b6-a676-4052-a153-5e44e2bb71ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:05:d7:87:c8:af:1c:cb:ed:16:cf:dd:c7:ce: b6:7e:e8:a5:92:64:27:43:57:46:b4:96:78:7f:ec: 30:d2:04:c9:6f:97:69:d6:9f:80:66:5c:c1:75:ab: 32:f4:a9:94:47:12:78:b2:a6:a8:9e:dc:72:81:b5: 2c:94:97:53:b6:05:ea:be:f7:f3:aa:4d:5c:74:d7: 4b:b1:f7:6b:03:58:c8:55:db:cd:1a:2e:fd:18:24: da:63:80:3a:ef:e6:b7:21:5d:9f:19:3a:ac:7a:12: 86:33:2f:ef:e9:a4:6f:8a:55:60:db:73:6e:8b:45: dd:8e:95:cc:26:07:77:6d:1e:d3:a6:04:44:ed:e7: b5:85:a7:93:c1:bf:ee:0a:39:b9:40:06:c9:4d:8f: 5f:77:3d:ab:39:0c:53:ae:4c:37:99:5a:0a:d6:43: 60:52:de:fb:b6:2f:91:0a:b5:71:98:92:cb:af:e5: 5b:f5:9d:30:0d:fc:1f:58:5c:90:6e:15:3f:ac:08: 08:66:8e:69:67:f5:9b:a9:27:00:dc:70:bf:7d:09: bd:65:70:0d:a6:91:84:77:ec:b6:56:95:73:0b:f9: a4:0d:b2:af:00:b1:1b:01:17:0c:03:4d:dd:38:4e: 74:de:1f:60:9d:1c:21:2c:18:b6:f7:61:2f:fc:84: 16:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:78:6F:10:0C:82:D8:77:3F:70:37:59:3B:73:55:5C:26:F7:E8:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa41c3e6-898a-3313-a156-1d95e18083a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:e9:eb:b1:44:be:b2:7c:9d:4c:1d:0f:7c:cf:dd:07:11:2a: cd:57:9c:04:b7:09:88:ea:80:7f:03:d6:e1:fc:3d:81:2a:42: a6:23:a1:e1:f6:85:07:bf:69:3c:16:ae:6d:4d:cf:41:fb:1d: 39:32:d4:c1:72:f5:04:24:e2:2e:15:cd:57:d8:9b:25:4c:85: d9:d4:54:9f:17:7a:6a:79:30:7c:64:65:75:b9:8c:61:68:c3: 4f:bc:eb:19:28:e0:1c:26:cc:29:c5:b7:fb:73:c9:cd:fd:82: 6d:56:00:d7:7c:05:45:42:fb:78:ce:41:40:68:de:70:fc:bb: 48:54:08:9c:95:31:12:84:2b:b8:78:72:53:09:c6:e9:43:a8: 2f:27:f9:9b:2b:2d:4e:62:90:e9:83:2e:1a:0f:a5:3d:97:dd: b0:1d:91:f1:24:21:b1:74:24:8c:82:2c:b5:5b:3e:1e:1f:45: fd:7f:a2:a2:12:3c:e3:0e:53:bd:5e:67:b3:2b:e7:5d:61:f0: 2d:cf:20:5a:22:6e:1f:0b:e7:13:ed:5a:f0:14:8c:9a:9c:26: 9e:e1:4a:c4:69:bc:4b:27:10:7a:c0:1d:1b:8a:a1:fe:3d:fb: c6:1e:59:ba:4b:b8:28:15:ac:cf:58:05:b9:21:69:db:c4:c6: a6:b7:4b:62 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4NhDfjgM4gZ2Rp0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk NzEzOGY4YjYtYTY3Ni00MDUyLWExNTMtNWU0NGUyYmI3MWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQXXh8ivHMvtFs/dx862fuilkmQnQ1dGtJZ4 f+ww0gTJb5dp1p+AZlzBdasy9KmURxJ4sqaontxygbUslJdTtgXqvvfzqk1cdNdL sfdrA1jIVdvNGi79GCTaY4A67+a3IV2fGTqsehKGMy/v6aRvilVg23Nui0XdjpXM Jgd3bR7TpgRE7ee1haeTwb/uCjm5QAbJTY9fdz2rOQxTrkw3mVoK1kNgUt77ti+R CrVxmJLLr+Vb9Z0wDfwfWFyQbhU/rAgIZo5pZ/WbqScA3HC/fQm9ZXANppGEd+y2 VpVzC/mkDbKvALEbARcMA03dOE503h9gnRwhLBi292Ev/IQWTQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDZ4bxAMgth3P3A3WTtzVVwm9+j6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmE0MWMzZTYtODk4YS0z MzEzLWExNTYtMWQ5NWUxODA4M2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCA6euxRL6yfJ1MHQ98z90HESrNV5wEtwmI6oB/A9bh/D2BKkKmI6Hh 9oUHv2k8Fq5tTc9B+x05MtTBcvUEJOIuFc1X2JslTIXZ1FSfF3pqeTB8ZGV1uYxh aMNPvOsZKOAcJswpxbf7c8nN/YJtVgDXfAVFQvt4zkFAaN5w/LtIVAiclTEShCu4 eHJTCcbpQ6gvJ/mbKy1OYpDpgy4aD6U9l92wHZHxJCGxdCSMgiy1Wz4eH0X9f6Ki EjzjDlO9XmezK+ddYfAtzyBaIm4fC+cT7VrwFIyanCae4UrEabxLJxB6wB0biqH+ PfvGHlm6S7goFazPWAW5IWnbxMamt0ti -----END CERTIFICATE-----Generated at Sat Jun 13 15:52:38 2026 by rpki-client