$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/17e60318-be7d-3d91-9c8a-066e492f2c62.roa File: 17e60318-be7d-3d91-9c8a-066e492f2c62.roa (raw, json) Hash identifier: CO+9NhLZitZJFWJUmyp1aMa12hta1aZ4f+XtwViK7VU= Subject key identifier: B0:FE:58:76:0E:0A:EB:83:76:65:B3:58:C1:BC:45:7C:FF:3D:91:EB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAE819AC0E94B2BC723369700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/17e60318-be7d-3d91-9c8a-066e492f2c62.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 396590 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:9a:c0:e9:4b:2b:c7:23:36:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=b1cbf69e-36df-473a-a593-802bea41a873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:00:24:42:65:e9:f2:3e:eb:89:c0:95:ac:37: a7:ea:28:de:a4:f0:03:1a:9e:a8:d4:15:b9:6c:12: d5:9a:85:cc:be:02:65:69:b1:16:e4:5c:24:f7:3f: 3f:f2:ff:e4:09:de:3c:4a:d9:a9:5d:0b:88:2d:3c: e6:9a:e7:e5:42:0f:a3:21:cf:ab:2d:a9:d2:83:b6: fc:a8:b5:f4:91:e7:87:44:b2:01:35:51:51:c5:2b: 82:37:dd:1f:31:a0:ca:31:e5:1d:6d:b9:17:b8:cc: 20:57:7e:ba:a1:0a:26:f4:6a:c8:50:08:16:8c:71: 06:09:e3:b4:a2:19:36:03:d6:5c:4b:4c:2d:9e:54: e7:3b:6f:e6:58:2b:e6:a5:4f:81:5f:8b:ae:dc:0c: 1d:e4:e2:7b:73:5d:31:11:2a:01:8d:d8:63:5c:30: c1:e0:17:88:fa:c7:04:a0:7a:8e:e1:42:ab:3d:d0: c8:cf:38:03:6a:2c:b1:66:4f:82:e4:67:d0:2d:81: be:a6:4e:58:24:36:f0:f6:81:08:d1:27:3f:ce:c7: 61:a9:2a:df:dc:cf:d4:01:6b:dc:d4:1d:af:05:fa: 2e:3f:11:c2:a4:f6:b0:99:eb:ed:88:cc:2b:6c:1f: 5f:89:de:13:d2:28:3a:3f:c6:49:49:62:00:ec:81: 1e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FE:58:76:0E:0A:EB:83:76:65:B3:58:C1:BC:45:7C:FF:3D:91:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/17e60318-be7d-3d91-9c8a-066e492f2c62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:9a:3e:f5:0c:09:ab:96:46:93:f2:18:81:9d:5d:db:88:7a: 30:57:bb:01:f4:b8:a9:60:eb:b9:36:a3:16:af:9d:8f:ad:16: 73:80:8d:53:a6:5e:44:0e:76:88:1c:90:f1:9f:25:7e:87:c2: a6:e2:a1:1f:1c:a3:05:71:25:27:c7:19:4c:2d:a8:02:a1:f2: 30:de:18:30:7f:08:31:07:55:3c:04:12:ba:bf:ff:64:38:f1: 61:ec:39:2d:8f:01:0c:37:fe:77:eb:66:8a:e8:58:20:df:74: 97:cb:83:0a:74:5f:83:6e:51:06:fd:51:4b:e9:bf:e7:0f:9e: 61:c5:df:61:fc:08:51:e0:5e:f8:af:f4:a7:c2:82:a7:0b:f4: de:50:a8:eb:b9:5f:8f:d6:ac:6b:8b:12:85:2f:c7:66:71:08: a5:3b:53:12:68:d1:3b:6f:f3:a7:15:82:17:36:1f:d6:eb:f1: a7:e9:25:66:2b:5d:f5:a5:30:c8:93:12:ae:08:68:ea:4a:79: 18:77:26:da:89:77:15:a5:f5:90:3f:4f:32:17:0e:cc:e2:26: 53:08:c7:16:23:c4:72:e1:ce:a0:78:9c:fa:03:ce:c7:43:97: fb:cc:71:74:4a:23:da:de:fb:c4:d7:06:77:93:cf:e4:d3:f2: 67:fa:cd:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugZrA6UsrxyM2lwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk YjFjYmY2OWUtMzZkZi00NzNhLWE1OTMtODAyYmVhNDFhODczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgAkQmXp8j7ricCVrDen6ijepPADGp6o1BW5 bBLVmoXMvgJlabEW5Fwk9z8/8v/kCd48StmpXQuILTzmmuflQg+jIc+rLanSg7b8 qLX0keeHRLIBNVFRxSuCN90fMaDKMeUdbbkXuMwgV366oQom9GrIUAgWjHEGCeO0 ohk2A9ZcS0wtnlTnO2/mWCvmpU+BX4uu3Awd5OJ7c10xESoBjdhjXDDB4BeI+scE oHqO4UKrPdDIzzgDaiyxZk+C5GfQLYG+pk5YJDbw9oEI0Sc/zsdhqSrf3M/UAWvc 1B2vBfouPxHCpPawmevtiMwrbB9fid4T0ig6P8ZJSWIA7IEePwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLD+WHYOCuuDdmWzWMG8RXz/PZHrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTdlNjAzMTgtYmU3ZC0z ZDkxLTljOGEtMDY2ZTQ5MmYyYzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESaPvUMCauWRpPyGIGdXduIejBXuwH0uKlg67k2oxavnY+tFnOAjVOm XkQOdogckPGfJX6HwqbioR8cowVxJSfHGUwtqAKh8jDeGDB/CDEHVTwEErq//2Q4 8WHsOS2PAQw3/nfrZoroWCDfdJfLgwp0X4NuUQb9UUvpv+cPnmHF32H8CFHgXviv 9KfCgqcL9N5QqOu5X4/WrGuLEoUvx2ZxCKU7UxJo0Ttv86cVghc2H9br8afpJWYr XfWlMMiTEq4IaOpKeRh3JtqJdxWl9ZA/TzIXDsziJlMIxxYjxHLhzqB4nPoDzsdD l/vMcXRKI9re+8TXBneTz+TT8mf6zUU= -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:24 2026 by rpki-client