$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/0f5edf3f-6a02-35da-9d6c-388315281f24.roa File: 0f5edf3f-6a02-35da-9d6c-388315281f24.roa (raw, json) Hash identifier: cZf2M0iRizIBujGTxpqzHDeFmNB3KorjcwdBr8RmIeI= Subject key identifier: D4:F7:4A:95:54:D2:77:4C:46:62:D0:D4:FC:6C:7D:35:5C:26:CF:AC Certificate issuer: /CN=53e52220-fa56-4913-b008-c1121580f510 Certificate serial: 010D0C9F4328584EAFE6EB831D822D01F8B4D764 Authority key identifier: B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/0f5edf3f-6a02-35da-9d6c-388315281f24.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 12684 IP address blocks: 216.226.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:eb:83:1d:82:2d:01:f8:b4:d7:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e52220-fa56-4913-b008-c1121580f510 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=fcd2637b-e51e-4210-9b83-570410b500fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a6:e3:ba:48:11:08:5b:47:e7:22:65:ae:4c: df:e6:c5:70:65:20:52:8e:04:8d:34:6b:da:d5:e6: 54:e5:bc:e6:c3:12:be:6f:19:8e:22:01:5b:2d:bb: 2e:4f:82:b7:09:df:87:30:83:49:06:ff:0f:80:53: 64:cf:f6:46:e3:81:97:00:56:b7:d8:eb:57:89:d3: 8a:06:19:bd:4d:3c:86:18:cc:27:91:0c:0d:e5:09: 3a:5f:14:33:ca:f4:53:3b:1e:43:d3:bb:65:1d:04: 6d:80:19:fe:a7:7b:74:9a:bc:b6:74:c8:60:22:82: ac:a2:41:16:c4:95:12:4a:35:81:7f:cc:14:97:79: 10:68:97:02:1c:2a:ca:96:95:d7:48:4a:28:a7:07: 9c:b4:34:69:51:3e:57:e9:81:46:6b:36:c1:68:72: 71:2b:ec:56:41:32:57:95:74:94:d3:3e:2b:9c:77: ad:25:39:59:6e:90:31:f0:1f:5f:cb:2c:49:ae:83: ae:3c:ae:91:24:ea:64:bd:53:f6:ac:97:e7:6f:ca: 33:38:bc:79:6f:4b:df:63:c9:8a:eb:fe:f0:8e:89: d5:e2:51:4b:d2:27:ca:5f:d3:64:99:51:f3:a4:33: b3:d1:7b:0c:5c:b0:d6:23:29:ef:98:db:74:2c:10: c9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F7:4A:95:54:D2:77:4C:46:62:D0:D4:FC:6C:7D:35:5C:26:CF:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/0f5edf3f-6a02-35da-9d6c-388315281f24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl X509v3 Authority Key Identifier: keyid:B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer sbgp-ipAddrBlock: critical IPv4: 216.226.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:77:d3:4a:76:e2:8e:07:87:7c:0f:93:69:1c:31:cc:cb:16: 0d:12:ef:99:c0:df:e5:ce:31:7a:c5:2a:2b:82:2c:f8:bf:26: d0:ce:fe:63:1d:df:24:9b:fe:18:0f:36:09:fc:1d:43:94:32: 6e:7d:c1:16:cd:e3:7b:de:02:26:78:d9:0d:3c:cc:11:bd:13: 7b:d5:ca:85:a8:e3:d0:2f:3f:da:37:e5:60:a1:b7:d5:5d:6e: 2a:12:22:e7:97:7a:20:1c:97:da:4b:b9:59:5c:24:e8:8c:7d: c8:77:04:10:a9:d1:db:6d:09:c8:71:11:b2:a3:4f:81:a7:b0: 9b:ff:8d:1b:21:88:09:e8:94:92:db:56:89:1b:55:7e:41:30: b6:e9:c2:1c:55:04:27:ba:b8:89:56:34:37:df:a1:4e:69:d4: 8f:83:21:52:6f:67:a2:b1:1e:b8:4b:8d:1c:01:9e:00:06:b1: d1:07:2d:78:fb:6f:fe:15:7c:05:fa:d5:79:15:c6:ae:06:72: 06:09:33:fa:4a:19:51:cc:48:ca:31:67:78:ad:86:22:ff:78: 92:dd:b8:5a:f0:fd:72:9b:8b:af:ea:5f:a0:c9:79:3e:05:6e: d3:17:c8:02:be:3f:45:93:4c:cf:00:6c:15:0a:c4:89:ce:f2: aa:4b:79:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5uuDHYItAfi012QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlNTIyMjAtZmE1Ni00OTEzLWIwMDgtYzExMjE1ODBm NTEwMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk ZmNkMjYzN2ItZTUxZS00MjEwLTliODMtNTcwNDEwYjUwMGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKbjukgRCFtH5yJlrkzf5sVwZSBSjgSNNGva 1eZU5bzmwxK+bxmOIgFbLbsuT4K3Cd+HMINJBv8PgFNkz/ZG44GXAFa32OtXidOK Bhm9TTyGGMwnkQwN5Qk6XxQzyvRTOx5D07tlHQRtgBn+p3t0mry2dMhgIoKsokEW xJUSSjWBf8wUl3kQaJcCHCrKlpXXSEoopwectDRpUT5X6YFGazbBaHJxK+xWQTJX lXSU0z4rnHetJTlZbpAx8B9fyyxJroOuPK6RJOpkvVP2rJfnb8ozOLx5b0vfY8mK 6/7wjonV4lFL0ifKX9NkmVHzpDOz0XsMXLDWIynvmNt0LBDJ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNT3SpVU0ndMRmLQ1PxsfTVcJs+sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81M2U1 MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEyMTU4MGY1MTAvMGY1ZWRmM2YtNmEwMi0z NWRhLTlkNmMtMzg4MzE1MjgxZjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTNlNTIyMjAtZmE1Ni00OTEzLWIw MDgtYzExMjE1ODBmNTEwLzUzZTUyMjIwLWZhNTYtNDkxMy1iMDA4LWMxMTIxNTgw ZjUxMC5jcmwwHwYDVR0jBBgwFoAUtsgIa4D1MgBWejE7fFhyqkQLuDUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81M2U1MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEy MTU4MGY1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OLlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABF300p24o4Hh3wPk2kcMczLFg0S75nA3+XOMXrFKiuCLPi/JtDO/mMd 3ySb/hgPNgn8HUOUMm59wRbN43veAiZ42Q08zBG9E3vVyoWo49AvP9o35WCht9Vd bioSIueXeiAcl9pLuVlcJOiMfch3BBCp0dttCchxEbKjT4GnsJv/jRshiAnolJLb VokbVX5BMLbpwhxVBCe6uIlWNDffoU5p1I+DIVJvZ6KxHrhLjRwBngAGsdEHLXj7 b/4VfAX61XkVxq4GcgYJM/pKGVHMSMoxZ3ithiL/eJLduFrw/XKbi6/qX6DJeT4F btMXyAK+P0WTTM8AbBUKxInO8qpLeWY= -----END CERTIFICATE-----Generated at Sat Sep 5 09:41:22 2026 by rpki-client