$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1cb50823-243c-3bec-ac90-2f0d6038c4a1.roa File: 1cb50823-243c-3bec-ac90-2f0d6038c4a1.roa (raw, json) Hash identifier: 5HTV8NAxaVi54bnjjWoCGVLztaSJIXaTJwU89relSwI= Subject key identifier: A9:B2:9C:13:A8:30:FA:0F:BD:63:00:5D:EB:95:C7:51:26:39:8B:26 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAFE70642FB7500BB7B83E500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1cb50823-243c-3bec-ac90-2f0d6038c4a1.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 396613 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e7:06:42:fb:75:00:bb:7b:83:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=4eb141d8-2fc1-4d27-99e9-9e10a59e7e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6a:f3:30:f8:27:e0:bf:b4:27:b1:6f:ed:10: ee:b2:0e:6e:0a:11:fb:26:d1:17:f1:c7:eb:ac:b2: e1:11:dd:95:73:c2:57:95:bf:70:70:02:e4:f3:f6: b1:8d:7e:49:76:d6:a0:a2:0d:f0:c9:71:fc:2d:13: f6:75:eb:0f:e6:1e:ea:37:0a:be:a3:37:6b:dd:ea: 61:c7:f0:68:21:32:4e:24:ee:65:66:de:2a:f1:7d: 41:44:5a:04:30:e7:a2:f3:ce:54:92:d4:cf:db:15: e6:c6:c9:80:5a:b4:7d:29:24:cd:71:8d:81:c0:a6: ae:b9:f1:0d:37:66:76:d1:cc:45:c8:69:b0:17:1e: c5:f3:50:9b:5e:f1:78:83:a0:b4:c3:68:19:46:37: 45:53:b1:43:52:ff:64:38:b2:19:db:5d:72:bd:9e: 52:f9:91:78:fd:ab:32:bc:42:28:b1:3d:b8:3f:da: e7:fe:a8:a7:a1:a6:99:9c:cd:aa:9f:26:0a:ec:2f: a5:59:ea:a4:42:14:c9:36:1d:af:f3:33:7b:59:1e: a9:03:4c:0e:4c:80:0f:dd:fa:7a:c3:36:4e:d1:bd: f9:9d:a3:a2:3e:62:8f:f1:cd:c4:55:55:8b:bd:7b: 89:36:91:3c:77:5d:a2:b3:6e:37:f3:e3:d2:23:60: 2f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B2:9C:13:A8:30:FA:0F:BD:63:00:5D:EB:95:C7:51:26:39:8B:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1cb50823-243c-3bec-ac90-2f0d6038c4a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:01:0d:3d:82:b6:2d:2f:46:54:a6:e9:48:fe:94:5d:c7:82: ea:c2:ac:79:0a:a5:35:e0:57:3c:99:a9:d4:9b:d7:c9:c2:6a: 48:9d:a9:dc:db:6c:02:64:03:a3:9f:22:05:3f:bc:e6:9f:19: cf:c1:24:99:92:95:93:47:95:8f:44:d4:d8:f8:23:3b:c8:41: 2c:b6:6b:67:a1:f3:f2:75:68:27:08:e9:77:ac:eb:66:bc:9c: ed:c3:f9:69:bf:8b:5a:83:09:a4:77:f3:07:70:94:80:64:09: df:0f:ac:85:54:3e:a8:b6:1d:8d:6e:b6:37:1e:a3:3a:9b:bf: 74:81:4a:55:b6:ef:7c:29:84:7f:59:77:05:da:43:9a:b7:27: e4:f7:f3:da:40:b8:bb:2d:17:87:8b:4e:59:b5:63:bf:37:26: 0d:8f:52:1a:3e:d0:b3:9a:fe:a1:44:24:98:a1:33:0a:ef:9f: f7:0f:fc:48:5c:35:00:36:d3:eb:74:e5:fa:b1:45:19:4d:ed: 68:52:cc:22:a5:38:c2:e1:14:96:db:c0:2c:f6:cf:d7:59:df: 94:c1:79:e9:db:e9:47:82:9a:37:c8:d1:00:75:06:c1:e9:d3: 41:23:80:09:e6:92:65:ae:af:c2:73:a1:60:b8:83:8d:e1:27: 81:89:ef:64 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6v5wZC+3UAu3uD5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk NGViMTQxZDgtMmZjMS00ZDI3LTk5ZTktOWUxMGE1OWU3ZTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWrzMPgn4L+0J7Fv7RDusg5uChH7JtEX8cfr rLLhEd2Vc8JXlb9wcALk8/axjX5Jdtagog3wyXH8LRP2desP5h7qNwq+ozdr3eph x/BoITJOJO5lZt4q8X1BRFoEMOei885UktTP2xXmxsmAWrR9KSTNcY2BwKauufEN N2Z20cxFyGmwFx7F81CbXvF4g6C0w2gZRjdFU7FDUv9kOLIZ211yvZ5S+ZF4/asy vEIosT24P9rn/qinoaaZnM2qnyYK7C+lWeqkQhTJNh2v8zN7WR6pA0wOTIAP3fp6 wzZO0b35naOiPmKP8c3EVVWLvXuJNpE8d12is2438+PSI2AvtwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKmynBOoMPoPvWMAXeuVx1EmOYsmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWNiNTA4MjMtMjQzYy0z YmVjLWFjOTAtMmYwZDYwMzhjNGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBmAQ09grYtL0ZUpulI/pRdx4Lqwqx5CqU14Fc8manUm9fJwmpInanc 22wCZAOjnyIFP7zmnxnPwSSZkpWTR5WPRNTY+CM7yEEstmtnofPydWgnCOl3rOtm vJztw/lpv4tagwmkd/MHcJSAZAnfD6yFVD6oth2NbrY3HqM6m790gUpVtu98KYR/ WXcF2kOatyfk9/PaQLi7LReHi05ZtWO/NyYNj1IaPtCzmv6hRCSYoTMK75/3D/xI XDUANtPrdOX6sUUZTe1oUswipTjC4RSW28As9s/XWd+UwXnp2+lHgpo3yNEAdQbB 6dNBI4AJ5pJlrq/Cc6FguION4SeBie9k -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:26 2026 by rpki-client