$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/796e3c25-7519-3ab8-8f6e-cf2b0ca36a24.roa File: 796e3c25-7519-3ab8-8f6e-cf2b0ca36a24.roa (raw, json) Hash identifier: 1fTbpHmCmhXNxdE55jy3ylwT5fyUsL6d84ze2fjdWm8= Subject key identifier: 21:E3:B6:67:41:C4:80:33:A0:9E:85:7C:71:22:B1:B2:FC:11:B4:86 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DA84F517448C45ADDE74436E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/796e3c25-7519-3ab8-8f6e-cf2b0ca36a24.roa Signing time: Tue 28 Apr 2026 14:57:12 +0000 ROA not before: Tue 28 Apr 2026 14:57:12 +0000 ROA not after: Mon 27 Jul 2026 14:57:12 +0000 asID: 26134 IP address blocks: 216.168.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:4f:51:74:48:c4:5a:dd:e7:44:36:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 28 14:57:12 2026 GMT Not After : Jul 27 14:57:12 2026 GMT Subject: CN=5587deb3-d4f7-4e11-b067-fce0bc8de3d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c1:d5:b8:22:97:f5:8e:d6:af:d8:a8:46:20: a5:88:3b:1b:a2:3a:d3:51:61:5e:d6:b9:f7:ef:fb: df:1b:23:66:77:b5:17:00:0b:45:15:00:4e:ef:5f: 17:d1:0f:3d:9c:00:ec:27:03:00:bd:5f:07:35:d9: f0:07:03:5a:a5:b0:03:8b:2c:87:a1:64:1a:19:e8: 76:da:89:2c:82:29:4e:f9:67:59:99:7c:89:5d:90: 27:0e:e1:14:4b:c6:7d:72:a8:d3:d1:df:1e:b8:13: 82:22:fa:4e:60:d9:29:87:dd:f9:b8:87:21:d8:d4: e8:0b:fe:95:ce:26:fd:74:4d:ca:e8:95:23:2e:51: 57:da:ad:f7:5b:3c:eb:88:02:c8:a8:c0:0c:03:f6: ac:61:9a:e2:6f:ca:32:f6:95:f8:6e:59:ea:5a:66: f7:cc:ac:b8:7b:76:b1:b5:51:0f:4e:51:cd:eb:44: 12:54:10:16:5b:12:88:06:59:e0:49:aa:ab:21:04: c2:77:d0:60:5b:82:c6:30:f7:ca:ba:68:19:3b:5b: fa:51:72:f1:f1:96:57:62:4f:f2:e7:ce:3e:31:ee: 27:f4:79:70:64:d7:3e:52:ce:ad:3a:f5:d1:cc:3d: 9a:02:0d:b1:e5:fb:5e:dd:0b:0f:06:30:d2:16:5b: 23:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E3:B6:67:41:C4:80:33:A0:9E:85:7C:71:22:B1:B2:FC:11:B4:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/796e3c25-7519-3ab8-8f6e-cf2b0ca36a24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:80:e5:09:5a:bf:b2:f1:cd:5c:37:47:ff:91:a6:e1:7d:37: dd:a1:ed:0a:fc:23:d4:f1:7b:b9:96:15:c6:ac:d3:d5:e3:82: cf:e5:8e:72:c3:53:b3:b0:f1:ad:dc:75:49:71:ac:ad:3b:0d: 04:7e:ad:0a:e5:5e:4a:36:3c:29:27:11:17:d9:99:9a:6c:f1: ef:f6:65:fa:bb:7a:3c:92:14:ba:30:4d:10:9d:75:61:29:2e: f3:81:89:ff:0a:1f:e6:99:6c:81:fa:e7:d7:e8:fc:dc:e0:4a: 6b:9f:08:5f:71:3e:ab:05:5e:01:61:ea:49:e9:26:47:e0:e2: 60:60:26:2d:e9:15:c9:e8:aa:7b:a1:8e:8b:c6:7d:57:7a:d2: 2c:5f:5a:fa:6d:81:7c:fb:e1:76:a5:12:d8:4d:f3:81:f0:13: e9:0d:56:d0:2d:78:14:bd:f6:a9:f0:37:45:d3:52:dd:f4:49: 04:51:4f:17:66:5a:99:22:57:5b:16:0e:a1:b3:b0:36:7c:40: a9:f2:13:16:85:29:84:15:59:b2:16:10:9a:44:45:4e:39:0c: 91:ed:00:ad:31:98:39:34:64:9f:8a:ef:48:06:3e:01:03:d8: df:a5:25:b1:f1:41:ad:a7:d3:32:1c:bc:ae:fa:8d:a2:65:28: b0:ed:1e:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oT1F0SMRa3edENuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyODE0NTcxMloXDTI2MDcyNzE0NTcxMlowLzEtMCsGA1UEAxMk NTU4N2RlYjMtZDRmNy00ZTExLWIwNjctZmNlMGJjOGRlM2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28HVuCKX9Y7Wr9ioRiCliDsbojrTUWFe1rn3 7/vfGyNmd7UXAAtFFQBO718X0Q89nADsJwMAvV8HNdnwBwNapbADiyyHoWQaGeh2 2oksgilO+WdZmXyJXZAnDuEUS8Z9cqjT0d8euBOCIvpOYNkph935uIch2NToC/6V zib9dE3K6JUjLlFX2q33WzzriALIqMAMA/asYZrib8oy9pX4blnqWmb3zKy4e3ax tVEPTlHN60QSVBAWWxKIBlngSaqrIQTCd9BgW4LGMPfKumgZO1v6UXLx8ZZXYk/y 584+Me4n9HlwZNc+Us6tOvXRzD2aAg2x5fte3QsPBjDSFlsj+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHjtmdBxIAzoJ6FfHEisbL8EbSGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzk2ZTNjMjUtNzUxOS0z YWI4LThmNmUtY2YyYjBjYTM2YTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWA5Qlav7LxzVw3R/+RpuF9N92h7Qr8I9Txe7mWFcas09Xjgs/ljnLD U7Ow8a3cdUlxrK07DQR+rQrlXko2PCknERfZmZps8e/2Zfq7ejySFLowTRCddWEp LvOBif8KH+aZbIH659fo/NzgSmufCF9xPqsFXgFh6knpJkfg4mBgJi3pFcnoqnuh jovGfVd60ixfWvptgXz74XalEthN84HwE+kNVtAteBS99qnwN0XTUt30SQRRTxdm WpkiV1sWDqGzsDZ8QKnyExaFKYQVWbIWEJpERU45DJHtAK0xmDk0ZJ+K70gGPgED 2N+lJbHxQa2n0zIcvK76jaJlKLDtHtQ= -----END CERTIFICATE-----Generated at Wed May 13 04:54:12 2026 by rpki-client