$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc6f9627-0c5d-3957-8b2a-491064bb3ad9.roa File: bc6f9627-0c5d-3957-8b2a-491064bb3ad9.roa (raw, json) Hash identifier: BFbfbwtAsMg0d936oc0KqqJiOdX9FBuu51ZZrRJoAbE= Subject key identifier: 79:3C:36:FF:4E:39:26:A0:80:A0:D9:37:60:26:13:30:D9:22:43:08 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E0D84383D7BB97CED40483500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc6f9627-0c5d-3957-8b2a-491064bb3ad9.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 211369 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:38:3d:7b:b9:7c:ed:40:48:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=24a2d252-1ec8-4f00-8064-21324eacb020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a3:5c:cf:1a:54:a0:fc:98:a1:ce:26:99:fa: cc:a7:c9:82:37:97:e7:e2:84:f3:5c:ee:d7:3d:7b: 9c:14:80:e9:af:aa:f9:0d:24:40:3d:8a:05:5b:fa: 27:e9:46:ff:12:e6:fe:ca:de:e4:c0:6f:f2:67:5f: 36:f4:2a:23:f6:97:c4:37:b2:56:d2:bf:2e:2e:03: 99:dd:00:9f:e8:b7:07:fe:00:26:b6:16:a7:59:41: 62:1d:d4:c9:fb:0f:fa:27:91:3c:92:39:86:32:5f: 84:58:d9:1e:73:a0:7d:f4:dc:b7:3d:07:1f:53:c7: 5b:6a:0f:5a:2c:8d:35:0c:f1:e3:bc:44:9a:68:f2: aa:36:47:ee:d2:bb:80:d6:3e:7e:9a:99:fc:07:fc: 35:64:0f:fd:ef:18:38:e8:c9:92:c8:d3:35:69:5a: 00:4d:4a:98:bd:73:37:df:43:89:67:7e:b5:9b:cd: 70:e4:5b:be:c6:0f:f9:09:63:8a:d8:66:ca:c4:ba: 09:1f:c8:82:9a:f7:b0:a9:cf:46:a8:01:88:71:fc: 04:28:54:f4:28:07:79:8e:c3:aa:d1:e8:0a:cb:ac: 21:c9:4e:1e:bf:3d:aa:28:f0:33:50:32:d8:5a:7f: fc:11:fd:21:7a:36:46:3c:09:70:7a:67:8d:bc:5f: ec:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3C:36:FF:4E:39:26:A0:80:A0:D9:37:60:26:13:30:D9:22:43:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc6f9627-0c5d-3957-8b2a-491064bb3ad9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:b8:90:0f:d1:df:49:6c:81:cc:25:6e:c5:8f:3b:81:d9:25: 1d:69:93:cb:9f:02:49:11:46:5f:88:97:eb:37:49:2d:d4:4f: 94:02:b4:5d:ca:b6:10:97:d3:44:cf:b5:12:11:db:f3:05:f9: 70:bd:32:e1:6b:c9:b6:e5:ea:03:f6:f5:ad:24:f2:4e:93:c5: 9a:50:6a:ff:2f:3f:81:a2:ee:b6:fd:fb:86:43:40:91:56:42: b5:e5:18:c1:26:ae:32:ee:fc:b2:3f:ab:f8:ce:b2:01:20:47: 30:ae:e2:46:28:8e:75:3d:51:38:f8:f4:d5:9e:aa:0e:3b:91: fc:61:1c:9a:26:c5:23:0a:c8:27:26:4f:bb:d6:4b:75:0f:b1: 45:2b:41:74:d2:0e:55:13:e6:6f:7a:90:14:c5:0e:87:c4:59: 94:0b:be:13:56:a9:3b:98:04:b8:a6:8e:b6:d1:19:84:e3:36: e0:2e:b7:7b:9a:95:ca:0a:8e:fe:b8:75:04:8e:86:07:14:37: 71:c6:26:a4:2a:9b:fa:51:4b:30:c0:be:8f:b8:d4:56:1c:66: 02:23:fc:db:ef:45:45:e3:c7:bd:85:66:a6:3a:ee:c9:60:c6: 3b:2e:cf:17:89:24:f0:d6:b4:91:3c:00:3a:2b:b6:d1:5b:0e: 47:5f:7f:6b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4NhDg9e7l87UBINQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk MjRhMmQyNTItMWVjOC00ZjAwLTgwNjQtMjEzMjRlYWNiMDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKNczxpUoPyYoc4mmfrMp8mCN5fn4oTzXO7X PXucFIDpr6r5DSRAPYoFW/on6Ub/Eub+yt7kwG/yZ1829Coj9pfEN7JW0r8uLgOZ 3QCf6LcH/gAmthanWUFiHdTJ+w/6J5E8kjmGMl+EWNkec6B99Ny3PQcfU8dbag9a LI01DPHjvESaaPKqNkfu0ruA1j5+mpn8B/w1ZA/97xg46MmSyNM1aVoATUqYvXM3 30OJZ361m81w5Fu+xg/5CWOK2GbKxLoJH8iCmvewqc9GqAGIcfwEKFT0KAd5jsOq 0egKy6whyU4evz2qKPAzUDLYWn/8Ef0hejZGPAlwemeNvF/sqwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHk8Nv9OOSaggKDZN2AmEzDZIkMIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmM2Zjk2MjctMGM1ZC0z OTU3LThiMmEtNDkxMDY0YmIzYWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA1uJAP0d9JbIHMJW7FjzuB2SUdaZPLnwJJEUZfiJfrN0kt1E+UArRd yrYQl9NEz7USEdvzBflwvTLha8m25eoD9vWtJPJOk8WaUGr/Lz+Bou62/fuGQ0CR VkK15RjBJq4y7vyyP6v4zrIBIEcwruJGKI51PVE4+PTVnqoOO5H8YRyaJsUjCsgn Jk+71kt1D7FFK0F00g5VE+ZvepAUxQ6HxFmUC74TVqk7mAS4po620RmE4zbgLrd7 mpXKCo7+uHUEjoYHFDdxxiakKpv6UUswwL6PuNRWHGYCI/zb70VF48e9hWamOu7J YMY7Ls8XiSTw1rSRPAA6K7bRWw5HX39r -----END CERTIFICATE-----Generated at Tue Jun 9 20:07:59 2026 by rpki-client