$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1dc3feb6-bd11-3d2f-ace5-a64acddd51e3.roa File: 1dc3feb6-bd11-3d2f-ace5-a64acddd51e3.roa (raw, json) Hash identifier: +85VPL6Nzaqdy2OTxCmzYZ2e3EXZVgAxiwUo2OxfLR8= Subject key identifier: CB:17:DE:8F:F2:8A:B9:DF:BC:0A:52:D1:88:7A:03:EE:96:F1:73:4A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAFE705231AE6728B938D6180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1dc3feb6-bd11-3d2f-ace5-a64acddd51e3.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 22547 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e7:05:23:1a:e6:72:8b:93:8d:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=f1816d09-a1fb-4408-a4cc-63a49a8c4486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3d:c3:40:1c:40:aa:c7:1f:e2:83:f5:6c:44: 0b:c3:d6:d6:19:e5:db:d7:54:ce:01:59:36:a6:c8: 85:ae:00:d6:81:5c:be:bf:ff:90:71:9b:44:bd:e4: 49:fb:e2:9c:00:5a:39:6c:03:28:83:fb:59:d2:10: 9d:92:17:8d:26:f2:c3:c7:6f:42:e9:47:ee:69:4c: 8d:0b:0d:21:79:45:92:b2:73:5f:77:f8:1e:2a:26: b9:c8:d5:e2:c9:9b:85:35:bf:74:7e:20:20:c9:5e: 9c:2a:39:2b:e0:23:29:a4:a9:67:f2:8b:37:ab:30: c4:20:35:e1:21:e6:3b:7f:a0:d9:fb:54:de:12:a0: 09:63:d5:80:76:d6:30:97:08:78:1b:7d:03:9d:fd: 14:26:6c:af:3b:66:e8:3b:01:08:59:23:40:42:67: 67:35:4a:12:ad:1a:80:90:71:8c:bd:7d:54:c0:42: 6b:cc:e9:ef:da:60:86:8a:de:95:46:96:51:b1:df: 17:d4:ef:43:77:5e:41:d7:7c:27:73:53:59:92:f6: 3c:0f:82:e3:87:0f:6c:b1:08:07:62:5c:c7:9f:b2: 76:be:f1:34:36:4a:e3:90:be:88:60:ce:83:56:58: 63:a8:cd:0e:81:6d:7e:21:8f:89:9a:4a:e0:f3:ec: af:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:17:DE:8F:F2:8A:B9:DF:BC:0A:52:D1:88:7A:03:EE:96:F1:73:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1dc3feb6-bd11-3d2f-ace5-a64acddd51e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:8c:00:2a:7d:30:8f:87:26:12:1e:e0:c5:42:ef:c7:6b:bf: df:00:04:8d:9e:09:83:63:74:62:c5:a1:e1:ae:62:0d:11:2e: 6d:2d:a4:17:16:5a:2e:f3:ab:ea:38:fe:4a:a8:f4:6c:b4:62: 2e:89:bd:e5:3a:96:44:f8:b0:6d:d1:05:1a:13:63:1b:17:b5: af:98:43:6c:bc:5f:f6:92:c6:a6:36:55:7e:64:45:f4:5a:20: a5:f0:c7:40:1c:0f:11:78:c9:77:49:41:58:79:e6:3f:9d:2a: d6:1c:4e:d7:a9:da:68:80:93:73:3f:7f:7c:23:3d:cf:a9:24: b2:30:3f:ac:77:e0:c7:84:d1:5f:81:d8:df:e3:52:8b:5c:67: e6:2c:51:04:f2:43:dc:b2:25:ac:a4:07:67:02:6f:61:db:3d: 47:78:08:00:8b:29:f4:2c:c6:e5:39:d2:df:3a:df:20:b9:0f: 2d:c0:56:1a:ab:aa:d8:92:2a:1b:70:3a:cd:15:af:d2:a4:ea: 4c:26:d1:4f:6b:a7:5b:8a:d4:69:67:13:80:fb:8d:ce:80:ad: b4:a7:aa:27:53:57:76:53:0d:e8:64:55:0d:61:3a:fc:84:66: da:82:02:01:9c:05:c1:51:e6:92:df:48:45:91:41:83:49:37: 9b:7a:0a:a4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6v5wUjGuZyi5ONYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk ZjE4MTZkMDktYTFmYi00NDA4LWE0Y2MtNjNhNDlhOGM0NDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD3DQBxAqscf4oP1bEQLw9bWGeXb11TOAVk2 psiFrgDWgVy+v/+QcZtEveRJ++KcAFo5bAMog/tZ0hCdkheNJvLDx29C6UfuaUyN Cw0heUWSsnNfd/geKia5yNXiyZuFNb90fiAgyV6cKjkr4CMppKln8os3qzDEIDXh IeY7f6DZ+1TeEqAJY9WAdtYwlwh4G30Dnf0UJmyvO2boOwEIWSNAQmdnNUoSrRqA kHGMvX1UwEJrzOnv2mCGit6VRpZRsd8X1O9Dd15B13wnc1NZkvY8D4Ljhw9ssQgH YlzHn7J2vvE0NkrjkL6IYM6DVlhjqM0OgW1+IY+Jmkrg8+yvNQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMsX3o/yirnfvApS0Yh6A+6W8XNKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWRjM2ZlYjYtYmQxMS0z ZDJmLWFjZTUtYTY0YWNkZGQ1MWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAfjAAqfTCPhyYSHuDFQu/Ha7/fAASNngmDY3RixaHhrmINES5tLaQX Flou86vqOP5KqPRstGIuib3lOpZE+LBt0QUaE2MbF7WvmENsvF/2ksamNlV+ZEX0 WiCl8MdAHA8ReMl3SUFYeeY/nSrWHE7XqdpogJNzP398Iz3PqSSyMD+sd+DHhNFf gdjf41KLXGfmLFEE8kPcsiWspAdnAm9h2z1HeAgAiyn0LMblOdLfOt8guQ8twFYa q6rYkiobcDrNFa/SpOpMJtFPa6dbitRpZxOA+43OgK20p6onU1d2Uw3oZFUNYTr8 hGbaggIBnAXBUeaS30hFkUGDSTebegqk -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:06 2026 by rpki-client