$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/237e22c1-1d5e-3e56-ab84-1316298cd75c.roa File: 237e22c1-1d5e-3e56-ab84-1316298cd75c.roa (raw, json) Hash identifier: KnSqYrwZ+USepSay0IQCPbaAOqAuGX5fx2AmvJXBuhs= Subject key identifier: 27:B0:88:3D:8C:9B:5B:71:3E:44:BA:D4:9F:3B:9B:7D:AF:FA:5A:C2 Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F4328584DFA707DA0A71F2FB522C40720 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/237e22c1-1d5e-3e56-ab84-1316298cd75c.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 11273 IP address blocks: 216.66.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:7d:a0:a7:1f:2f:b5:22:c4:07:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=ffd37bb6-6682-4922-9453-d20e749cae75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6d:60:49:1b:e0:13:17:6d:42:17:ef:84:80: ef:6e:83:45:5d:68:a1:c6:00:c8:72:3b:01:14:90: ed:24:32:1c:48:2b:c4:ad:94:5b:d7:88:b1:17:71: f3:fe:9f:72:a1:7f:b8:a7:b5:de:68:d0:b1:e1:93: 15:e0:30:7b:0f:7d:db:40:90:28:d8:c4:91:47:48: b1:0a:07:2c:92:7c:49:3a:27:39:75:76:82:34:b9: ca:84:f7:ad:b3:df:09:33:1e:71:84:f9:a6:03:72: 70:89:0a:8a:60:65:38:85:3d:f9:39:ed:76:22:ed: 74:e0:fb:88:1f:cf:a2:20:66:6c:3d:ad:53:ec:1b: 40:b8:f9:b4:81:f1:7d:08:ef:47:ad:ce:1e:ed:7b: 9b:4c:1c:47:4a:d4:a8:92:a4:f8:17:65:6d:86:0c: 81:17:17:60:f5:1e:1a:41:d9:46:13:18:65:42:f4: ad:ce:fa:63:1d:b9:ca:3d:8a:f0:b3:2b:26:d3:3a: a9:05:73:90:59:d5:74:db:50:41:4a:30:72:63:f8: 88:6d:b5:f3:1c:a9:42:f2:7d:1e:0e:d0:34:b7:3c: cd:04:e8:c4:f5:84:cb:0a:3d:16:d9:c9:d3:db:a6: 29:be:0f:f8:21:0d:67:1e:2a:8a:60:1f:48:1f:de: 7d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B0:88:3D:8C:9B:5B:71:3E:44:BA:D4:9F:3B:9B:7D:AF:FA:5A:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/237e22c1-1d5e-3e56-ab84-1316298cd75c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 216.66.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ed:38:e1:80:00:bd:7c:4c:09:d2:19:90:b4:e2:1e:25:3e: 33:d9:73:5d:fc:e8:b6:e3:73:82:19:5c:31:97:53:43:94:b9: cf:7d:f9:72:10:ab:30:53:6c:56:76:cf:e8:ee:db:52:23:33: 81:e1:21:00:7f:d1:43:e2:12:30:fc:fe:77:78:23:ee:5e:9f: a2:a0:ce:5c:8c:2f:70:e6:42:aa:04:08:44:07:83:b8:06:b2: 6e:f5:47:a3:c8:ef:99:9a:fc:f4:1b:14:05:ac:bc:63:f9:c4: eb:7a:57:34:e1:02:2d:59:c3:d6:f8:3f:07:22:06:cb:cd:44: 96:5d:37:be:99:c0:7e:93:30:88:6c:7f:31:5b:70:b8:e3:04: 1e:ac:56:7a:21:f6:b9:2d:d0:c7:13:70:3c:dc:29:88:96:5b: 37:8e:6a:20:7f:11:c6:bc:aa:9b:5f:0a:0b:5b:ce:b0:c9:ba: 69:50:c4:58:55:71:bc:6d:fe:1a:e5:05:a3:10:67:2f:79:f0: 71:7c:47:cf:24:47:b5:80:e8:24:13:0b:96:d8:78:e8:bd:ea: e8:b5:5f:5b:10:00:a0:df:f5:f7:66:fb:dc:4b:57:43:37:10: 74:ce:5b:91:77:ec:c2:52:d6:3a:1c:04:ae:4a:dd:34:42:8c: 41:dc:2b:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cH2gpx8vtSLEByAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk ZmZkMzdiYjYtNjY4Mi00OTIyLTk0NTMtZDIwZTc0OWNhZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx21gSRvgExdtQhfvhIDvboNFXWihxgDIcjsB FJDtJDIcSCvErZRb14ixF3Hz/p9yoX+4p7XeaNCx4ZMV4DB7D33bQJAo2MSRR0ix CgcsknxJOic5dXaCNLnKhPets98JMx5xhPmmA3JwiQqKYGU4hT35Oe12Iu104PuI H8+iIGZsPa1T7BtAuPm0gfF9CO9Hrc4e7XubTBxHStSokqT4F2VthgyBFxdg9R4a QdlGExhlQvStzvpjHbnKPYrwsysm0zqpBXOQWdV021BBSjByY/iIbbXzHKlC8n0e DtA0tzzNBOjE9YTLCj0W2cnT26Ypvg/4IQ1nHiqKYB9IH9594wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCewiD2Mm1txPkS61J87m32v+lrCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvMjM3ZTIyYzEtMWQ1ZS0z ZTU2LWFiODQtMTMxNjI5OGNkNzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2ELQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrtOOGAAL18TAnSGZC04h4lPjPZc1386Lbjc4IZXDGXU0OUuc99+XIQ qzBTbFZ2z+ju21IjM4HhIQB/0UPiEjD8/nd4I+5en6KgzlyML3DmQqoECEQHg7gG sm71R6PI75ma/PQbFAWsvGP5xOt6VzThAi1Zw9b4PwciBsvNRJZdN76ZwH6TMIhs fzFbcLjjBB6sVnoh9rkt0McTcDzcKYiWWzeOaiB/Eca8qptfCgtbzrDJumlQxFhV cbxt/hrlBaMQZy958HF8R88kR7WA6CQTC5bYeOi96ui1X1sQAKDf9fdm+9xLV0M3 EHTOW5F37MJS1jocBK5K3TRCjEHcK2w= -----END CERTIFICATE-----Generated at Thu May 28 21:54:56 2026 by rpki-client