$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa44ecfd-a7cc-3c83-a0a8-fa2d589e64d4.roa File: fa44ecfd-a7cc-3c83-a0a8-fa2d589e64d4.roa (raw, json) Hash identifier: ffuqRnJRLjtmcYGHnjM0xakSWWiHLQgj+vaQG0ihja0= Subject key identifier: 84:6A:02:51:7D:27:BC:E0:F4:79:F5:EE:F6:5D:C5:60:89:33:60:A6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0C1ECA4AEF9566B41D47AE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa44ecfd-a7cc-3c83-a0a8-fa2d589e64d4.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 36627 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:ca:4a:ef:95:66:b4:1d:47:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=3420de29-e818-4e8f-9de9-30442db4a8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d8:86:c1:57:aa:50:b2:e4:a6:44:b4:e9:de: bd:3f:0b:67:0c:82:7d:27:37:16:b5:ad:e5:92:e5: e6:42:f9:c8:76:ef:79:7c:a1:68:d0:ce:d4:87:a8: 64:cf:a7:d0:23:88:ab:7c:cd:44:5f:8b:15:1a:4f: dd:01:4f:61:e6:c6:c1:f0:b2:77:cc:c5:c6:73:bd: 72:df:13:f1:5b:c3:4f:39:72:c7:a6:3f:20:27:53: 0e:b3:67:80:0f:dc:18:7a:fc:4e:55:97:c8:9c:d6: c5:b4:c7:c9:59:e6:37:e4:95:f2:83:49:cc:fb:e5: b1:35:a8:3c:55:22:be:39:ed:23:af:5c:e5:30:38: bf:71:e0:37:4a:99:9f:28:bc:5d:40:14:e2:af:d0: 63:ab:2f:a4:ab:e6:32:7c:49:bd:1a:b4:de:fa:e9: 03:7d:d6:ce:2d:bd:a6:69:73:de:e6:2d:29:74:cd: ae:f7:d6:7b:89:d6:d0:66:12:70:eb:2a:e0:ce:e3: 59:7a:b7:aa:bf:8d:e8:16:aa:54:73:57:09:9e:f9: 87:ad:f7:df:d0:3e:6e:a9:48:05:16:bd:11:e4:ae: 5c:c4:a6:1e:b2:d6:62:84:a5:5c:fc:54:8b:99:17: 74:a5:7a:9d:cc:b1:88:81:0c:f6:ed:19:db:66:be: 8a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6A:02:51:7D:27:BC:E0:F4:79:F5:EE:F6:5D:C5:60:89:33:60:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa44ecfd-a7cc-3c83-a0a8-fa2d589e64d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:3c:ee:17:ae:e2:44:71:de:3c:7a:5c:20:12:cc:c6:35:18: 99:a1:ff:ef:f7:d8:77:02:40:af:a5:b9:35:26:69:57:b6:66: af:0a:3e:2a:b1:46:3e:41:9f:7e:ef:69:c3:53:25:0d:c3:80: 07:e2:4e:0d:12:d3:79:48:a6:44:d0:b8:18:f1:ea:3d:1e:94: 87:2f:23:4c:0e:73:4c:47:02:53:39:6e:ea:9c:6a:03:87:bc: 97:85:23:76:17:0f:f2:c7:c3:d3:73:c5:2f:27:91:e1:17:f2: 2a:dc:9a:7d:16:66:aa:dc:a0:06:64:e7:b3:48:5c:a3:42:87: 82:7a:34:6a:53:29:74:cb:1c:ea:19:a6:aa:08:2a:8e:7a:c2: 6e:e8:ac:02:c4:52:27:ad:53:9b:42:76:2b:60:db:05:47:62: 49:29:0c:a6:88:84:15:29:9b:5d:2b:f1:1b:e7:da:10:94:15: 8b:fe:cb:eb:1a:48:64:c1:4e:22:13:8a:08:76:91:cc:b0:29: 19:75:f1:5b:79:2d:c2:1c:f2:b6:f8:73:a5:ed:c2:aa:9b:20: a5:75:4e:9f:94:00:90:7a:7a:33:49:0f:7e:17:d2:32:6e:42: 84:15:4a:cf:9b:a7:99:e9:67:30:7e:da:b4:11:17:12:a1:87: ed:2a:3c:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHspK75VmtB1HroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk MzQyMGRlMjktZTgxOC00ZThmLTlkZTktMzA0NDJkYjRhOGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdiGwVeqULLkpkS06d69PwtnDIJ9JzcWta3l kuXmQvnIdu95fKFo0M7Uh6hkz6fQI4irfM1EX4sVGk/dAU9h5sbB8LJ3zMXGc71y 3xPxW8NPOXLHpj8gJ1MOs2eAD9wYevxOVZfInNbFtMfJWeY35JXyg0nM++WxNag8 VSK+Oe0jr1zlMDi/ceA3SpmfKLxdQBTir9Bjqy+kq+YyfEm9GrTe+ukDfdbOLb2m aXPe5i0pdM2u99Z7idbQZhJw6yrgzuNZereqv43oFqpUc1cJnvmHrfff0D5uqUgF Fr0R5K5cxKYestZihKVc/FSLmRd0pXqdzLGIgQz27RnbZr6KTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRqAlF9J7zg9Hn17vZdxWCJM2CmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmE0NGVjZmQtYTdjYy0z YzgzLWEwYTgtZmEyZDU4OWU2NGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFE87heu4kRx3jx6XCASzMY1GJmh/+/32HcCQK+luTUmaVe2Zq8KPiqx Rj5Bn37vacNTJQ3DgAfiTg0S03lIpkTQuBjx6j0elIcvI0wOc0xHAlM5buqcagOH vJeFI3YXD/LHw9NzxS8nkeEX8ircmn0WZqrcoAZk57NIXKNCh4J6NGpTKXTLHOoZ pqoIKo56wm7orALEUietU5tCditg2wVHYkkpDKaIhBUpm10r8Rvn2hCUFYv+y+sa SGTBTiITigh2kcywKRl18Vt5LcIc8rb4c6XtwqqbIKV1Tp+UAJB6ejNJD34X0jJu QoQVSs+bp5npZzB+2rQRFxKhh+0qPO4= -----END CERTIFICATE-----Generated at Sat Jun 13 13:05:53 2026 by rpki-client