$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d6c780a-893d-33a7-8cfa-483ed4f640e5.roa File: 1d6c780a-893d-33a7-8cfa-483ed4f640e5.roa (raw, json) Hash identifier: oNneodeCKwn0OWqRAuAEGe6cLHqjS2HQJSYnZEuQflU= Subject key identifier: B2:2C:87:2B:1E:B4:29:32:11:88:39:04:09:1E:1A:CA:FB:93:80:31 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAFE703ED977D2CE7958C6000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d6c780a-893d-33a7-8cfa-483ed4f640e5.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 396599 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e7:03:ed:97:7d:2c:e7:95:8c:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=d495c811-c172-4570-b435-85b29f2bf04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4b:18:d1:bb:e5:da:84:4e:14:b7:46:c9:39: bf:8d:9a:60:6b:41:e3:07:f2:8b:66:6a:45:ba:d5: 01:85:98:3b:18:25:e1:72:88:16:2f:0e:e8:e3:9d: f8:8f:46:20:1e:76:5f:a1:c4:9a:55:f4:1a:df:02: 19:ca:12:67:b2:b2:4a:ac:c1:6e:9c:c5:dd:8a:1a: d5:68:79:37:53:56:26:b5:c2:00:c1:1b:8c:31:30: b5:39:04:c2:0a:53:ab:76:1a:e2:88:32:f9:c4:7a: 27:0d:ad:6e:45:71:5a:ef:0f:c6:96:4c:26:01:ee: 43:ea:f0:60:d9:55:2f:33:40:1b:c4:4b:de:51:1a: 3f:88:2f:1a:4c:7b:7e:b0:d1:68:fa:29:3d:ba:59: 5a:e1:b7:ba:d7:d7:0f:f8:ca:43:15:0b:e8:25:31: d8:aa:fe:67:bd:66:79:34:23:1b:2b:4c:ce:af:2a: 06:bd:8f:d2:2b:f4:c0:ed:3a:3c:df:07:a3:c8:d9: ea:1f:e5:e9:ba:b5:54:c7:f1:36:50:62:06:f0:8a: 60:57:37:4c:e8:23:56:ba:f2:11:2f:a7:b4:0f:f5: ba:ad:eb:96:fd:a7:27:0d:8c:01:e4:b1:a6:49:1f: c6:b8:02:2b:e6:92:63:9c:13:6b:b7:a6:1a:58:ca: 3f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2C:87:2B:1E:B4:29:32:11:88:39:04:09:1E:1A:CA:FB:93:80:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1d6c780a-893d-33a7-8cfa-483ed4f640e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:9b:ad:1e:a9:6d:c4:a6:95:59:04:8b:0c:fa:e9:73:de:66: 3e:e3:9f:da:02:9a:5a:23:52:30:a5:bb:c8:1b:c3:4d:70:fc: 79:9e:49:33:69:11:cf:8e:79:01:d2:d6:9c:40:70:d3:d5:9b: 58:29:54:24:82:b5:f3:23:c8:33:66:57:07:a7:2e:6a:5e:ba: 30:3d:c0:74:2d:21:bb:fb:c3:36:93:cf:ec:04:0c:58:80:bb: b4:86:0e:62:d5:ed:0a:fd:a4:19:59:c2:b4:65:86:c0:29:d0: 65:f1:27:4a:e9:85:17:74:55:3f:dd:5c:7a:9c:3d:b7:84:60: a4:32:d5:8f:17:19:3d:31:66:01:1e:72:e5:0e:83:14:b8:4b: 04:d1:ee:05:60:85:ef:75:e2:dc:4e:d1:18:0a:85:5b:3d:36: 65:b7:63:39:b2:a6:fa:3c:b6:6d:b2:67:9b:99:4c:6e:24:f1: e6:ea:49:71:23:88:08:b2:a9:04:4d:16:ff:27:84:91:d9:3d: 3d:d3:3c:06:ef:62:69:86:4b:3b:1d:40:09:b3:03:18:c0:1c: f2:bd:17:6c:c6:dd:8c:a6:9c:b1:c6:4d:d9:cc:a2:67:5d:b5: 05:a5:2b:b4:17:75:df:83:b6:16:24:54:7c:d0:2d:e6:92:71: a7:39:59:b6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6v5wPtl30s55WMYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk ZDQ5NWM4MTEtYzE3Mi00NTcwLWI0MzUtODViMjlmMmJmMDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqksY0bvl2oROFLdGyTm/jZpga0HjB/KLZmpF utUBhZg7GCXhcogWLw7o4534j0YgHnZfocSaVfQa3wIZyhJnsrJKrMFunMXdihrV aHk3U1YmtcIAwRuMMTC1OQTCClOrdhriiDL5xHonDa1uRXFa7w/GlkwmAe5D6vBg 2VUvM0AbxEveURo/iC8aTHt+sNFo+ik9ulla4be619cP+MpDFQvoJTHYqv5nvWZ5 NCMbK0zOryoGvY/SK/TA7To83wejyNnqH+XpurVUx/E2UGIG8IpgVzdM6CNWuvIR L6e0D/W6reuW/acnDYwB5LGmSR/GuAIr5pJjnBNrt6YaWMo/bwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLIshysetCkyEYg5BAkeGsr7k4AxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWQ2Yzc4MGEtODkzZC0z M2E3LThjZmEtNDgzZWQ0ZjY0MGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBQm60eqW3EppVZBIsM+ulz3mY+45/aAppaI1IwpbvIG8NNcPx5nkkz aRHPjnkB0tacQHDT1ZtYKVQkgrXzI8gzZlcHpy5qXrowPcB0LSG7+8M2k8/sBAxY gLu0hg5i1e0K/aQZWcK0ZYbAKdBl8SdK6YUXdFU/3Vx6nD23hGCkMtWPFxk9MWYB HnLlDoMUuEsE0e4FYIXvdeLcTtEYCoVbPTZlt2M5sqb6PLZtsmebmUxuJPHm6klx I4gIsqkETRb/J4SR2T090zwG72Jphks7HUAJswMYwBzyvRdsxt2Mppyxxk3ZzKJn XbUFpSu0F3Xfg7YWJFR80C3mknGnOVm2 -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:11 2026 by rpki-client