$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a89a2854-a92c-3f79-919b-6f5f8f114875.roa File: a89a2854-a92c-3f79-919b-6f5f8f114875.roa (raw, json) Hash identifier: VfVTvKMB/Gj3Cq+488yck7M+0yknFSbfoQTtb00DTSU= Subject key identifier: C8:2A:69:F3:96:94:65:88:92:96:12:49:86:55:22:A1:AD:C5:05:4E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DCF4C0C0A7D0E276247660E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a89a2854-a92c-3f79-919b-6f5f8f114875.roa Signing time: Tue 12 May 2026 14:07:08 +0000 ROA not before: Tue 12 May 2026 14:07:08 +0000 ROA not after: Mon 10 Aug 2026 14:07:08 +0000 asID: 16838 IP address blocks: 216.168.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:4c:0c:0a:7d:0e:27:62:47:66:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 12 14:07:08 2026 GMT Not After : Aug 10 14:07:08 2026 GMT Subject: CN=70a483cc-d4e3-4b72-b925-ae2db4780b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:87:31:ab:41:03:55:19:8f:ed:e6:b5:96:32: f8:73:11:f4:b9:f8:82:65:62:d4:d3:1f:9a:28:0e: d1:df:a4:8d:a0:c1:80:ff:af:ff:10:be:60:2c:68: 1a:ba:c6:52:60:4b:5d:e9:cb:45:4f:33:5c:c3:50: f3:b8:c4:a7:cb:a6:c0:19:5b:d1:1e:a7:47:e9:f6: 32:14:f4:8d:a9:6d:24:76:59:a3:5f:a7:6b:bc:ca: 4d:24:b4:02:a4:66:c1:14:4d:6d:f7:23:b9:08:3e: 60:d7:c0:39:37:15:a3:fc:a3:46:af:93:72:81:a7: 80:ba:50:c0:65:2a:33:66:58:d5:c2:f9:7f:ec:2e: ec:2c:3e:2d:f1:31:fb:9c:56:f5:ee:6b:26:c7:bc: 10:8b:ed:2a:e2:4e:04:2c:5d:b2:2a:cb:9e:11:d0: c9:1a:df:3d:c9:26:36:d1:61:08:f7:ce:fa:61:d3: be:0b:fe:d2:1b:87:7e:68:99:d9:12:c3:61:b4:4c: 8f:e2:6f:af:62:6e:39:0c:80:9e:37:be:3a:18:40: fa:32:aa:d6:9e:c4:be:ba:76:ad:95:e6:cc:b0:e1: 02:a2:c5:ba:81:eb:f6:89:69:8a:5c:fe:dc:3f:f2: da:3d:0e:5d:4f:b9:df:ff:c4:ef:d5:d6:46:2e:14: 97:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2A:69:F3:96:94:65:88:92:96:12:49:86:55:22:A1:AD:C5:05:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a89a2854-a92c-3f79-919b-6f5f8f114875.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:6f:45:11:17:1a:cf:13:88:74:20:ea:d5:d4:c0:2b:a1:86: c5:16:9e:de:f4:95:10:cf:a1:a9:f9:d4:e6:55:4c:2f:b8:44: f8:fa:35:45:67:4e:9f:2d:a8:54:08:b0:7c:59:a4:ee:92:c7: 8b:46:9a:86:e7:30:48:11:98:aa:c6:a5:8b:da:30:a1:6d:c9: 8b:79:ec:a7:d5:c9:44:10:df:d2:5a:f1:8f:1f:e6:99:39:f1: d8:2f:c1:1b:dc:a8:bb:11:78:fe:d7:f9:2d:b2:eb:cc:8a:09: 9f:06:49:ca:e8:9c:ef:e2:64:79:fd:f3:e9:e7:9c:72:fb:91: f9:ef:33:a4:b7:86:15:c2:0d:59:5e:aa:54:dd:63:30:08:aa: 6e:f1:4b:3e:73:f4:b2:65:e1:7b:fa:30:6b:50:32:b7:e0:3f: 7b:ec:cf:b8:f7:0e:2f:15:36:7a:80:82:1a:5b:cb:2b:b1:3c: 5c:e4:b8:30:83:9b:96:bd:8f:4d:72:ae:09:fe:47:ae:ba:76: 89:c1:eb:90:3f:07:71:1c:c6:31:5b:eb:4e:d2:1f:cf:01:da: e6:3f:c9:84:90:e6:29:a5:03:f6:65:f9:88:29:d8:98:59:7b: f1:3d:d2:bc:ba:57:9c:1b:d1:8d:5b:9e:5a:4c:3a:a0:5c:eb: 10:13:f3:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PTAwKfQ4nYkdmDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxMjE0MDcwOFoXDTI2MDgxMDE0MDcwOFowLzEtMCsGA1UEAxMk NzBhNDgzY2MtZDRlMy00YjcyLWI5MjUtYWUyZGI0NzgwYjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuocxq0EDVRmP7ea1ljL4cxH0ufiCZWLU0x+a KA7R36SNoMGA/6//EL5gLGgausZSYEtd6ctFTzNcw1DzuMSny6bAGVvRHqdH6fYy FPSNqW0kdlmjX6drvMpNJLQCpGbBFE1t9yO5CD5g18A5NxWj/KNGr5NygaeAulDA ZSozZljVwvl/7C7sLD4t8TH7nFb17msmx7wQi+0q4k4ELF2yKsueEdDJGt89ySY2 0WEI9876YdO+C/7SG4d+aJnZEsNhtEyP4m+vYm45DICeN746GED6MqrWnsS+unat lebMsOECosW6gev2iWmKXP7cP/LaPQ5dT7nf/8Tv1dZGLhSXiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgqafOWlGWIkpYSSYZVIqGtxQVOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTg5YTI4NTQtYTkyYy0z Zjc5LTkxOWItNmY1ZjhmMTE0ODc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINvRREXGs8TiHQg6tXUwCuhhsUWnt70lRDPoan51OZVTC+4RPj6NUVn Tp8tqFQIsHxZpO6Sx4tGmobnMEgRmKrGpYvaMKFtyYt57KfVyUQQ39Ja8Y8f5pk5 8dgvwRvcqLsReP7X+S2y68yKCZ8GScronO/iZHn98+nnnHL7kfnvM6S3hhXCDVle qlTdYzAIqm7xSz5z9LJl4Xv6MGtQMrfgP3vsz7j3Di8VNnqAghpbyyuxPFzkuDCD m5a9j01yrgn+R666donB65A/B3EcxjFb607SH88B2uY/yYSQ5imlA/Zl+Ygp2JhZ e/E90ry6V5wb0Y1bnlpMOqBc6xAT80g= -----END CERTIFICATE-----Generated at Wed May 13 03:55:25 2026 by rpki-client