$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ec2dfa3-f2e8-386e-8f18-6daee6eb4d05.roa File: 1ec2dfa3-f2e8-386e-8f18-6daee6eb4d05.roa (raw, json) Hash identifier: oCyo6pkIuha7MNs9T72x8jdnwOm/ljNVXWuzlAlqkSQ= Subject key identifier: 8F:C5:2F:F3:3D:EB:11:BF:52:17:CC:23:0B:63:B4:28:07:62:C7:58 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAFE706EB8E2FBCBDC679B200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ec2dfa3-f2e8-386e-8f18-6daee6eb4d05.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 396575 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e7:06:eb:8e:2f:bc:bd:c6:79:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=c5cb2660-722f-40cb-8e20-8fbefd36284a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d6:a7:93:8c:b2:4c:ac:fa:47:27:45:f5:8f: de:8b:cf:65:bf:5e:2a:f4:b3:13:9a:85:24:9d:bd: 8e:97:93:a8:66:6a:24:8b:2c:b3:48:cd:a5:56:8b: 0b:2c:3a:8f:95:76:8b:c3:93:52:f3:72:75:cb:8e: 0f:1c:09:99:6b:7e:ea:99:6b:94:fe:7b:10:c4:35: 80:27:a1:83:60:3e:fd:03:79:b6:18:91:20:47:44: f1:97:7b:9a:92:c4:fd:e9:7e:17:6d:af:67:d0:0f: 77:4e:82:e1:b9:ab:4c:25:45:29:f7:79:b8:c6:e4: ca:ea:94:e4:9f:41:de:17:2a:94:9f:e9:f6:2f:7b: 6b:cc:6c:87:ed:30:b5:11:81:41:52:4f:4c:eb:35: 0b:8f:18:f6:2f:e2:4d:09:44:da:f5:17:87:88:d3: 2f:9d:ad:7b:bf:df:e0:d6:c8:6d:4b:61:c3:2b:75: 38:89:b0:42:7d:42:74:e3:89:10:50:2a:29:1f:f8: 42:ba:83:64:a8:41:91:4a:04:fc:e7:70:2f:5e:96: 39:85:b8:7f:56:cd:34:12:ad:62:a3:11:22:a7:3a: b9:01:db:3a:ab:0e:f7:83:dd:97:a7:30:32:11:e0: c2:b9:2a:87:c6:60:2e:a3:7e:d9:e5:88:a6:02:70: c6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C5:2F:F3:3D:EB:11:BF:52:17:CC:23:0B:63:B4:28:07:62:C7:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ec2dfa3-f2e8-386e-8f18-6daee6eb4d05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ec:c8:71:de:78:2b:9f:c6:48:f4:77:c1:12:6c:db:5b:d9: 29:6a:7b:ec:ec:66:1b:66:af:b3:c7:01:16:45:5c:0b:06:88: 85:59:d3:f4:e0:25:e2:a3:4a:5e:84:a6:28:b6:42:c3:0b:ff: ac:f5:0e:dc:20:09:dd:9c:c8:68:e0:69:7d:5b:97:31:46:73: 5a:f6:d9:18:9e:e5:c0:9d:0a:5f:fe:69:f2:0d:34:c0:d4:be: 92:39:b7:6c:41:5a:28:c2:00:f4:85:64:6a:25:ca:3e:64:2f: e4:26:5e:b4:6d:fa:e8:02:9f:0f:6e:59:e3:5d:f0:87:71:92: c9:c4:6d:93:5c:d4:49:d1:e0:ca:b6:62:4b:58:53:83:8b:ee: 65:45:9f:04:76:67:f8:99:b0:03:bd:26:e2:9c:a3:b6:4d:36: 7c:eb:2a:2c:3c:e6:6f:f3:00:e4:74:d8:02:64:d0:3f:f8:48: f4:27:29:2b:15:cc:12:4d:b9:f2:72:84:95:9b:cd:0f:48:1c: bc:7a:28:99:13:60:af:61:79:32:92:f9:0e:24:8c:74:17:b0: b2:57:6c:a3:69:ff:31:7e:db:96:0f:9a:f6:9e:ea:4d:ba:d2: 2d:0f:d9:a5:4a:5e:80:73:c6:79:ec:9a:b7:93:38:f5:e2:8b: 18:4a:2e:03 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6v5wbrji+8vcZ5sgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk YzVjYjI2NjAtNzIyZi00MGNiLThlMjAtOGZiZWZkMzYyODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9ank4yyTKz6RydF9Y/ei89lv14q9LMTmoUk nb2Ol5OoZmokiyyzSM2lVosLLDqPlXaLw5NS83J1y44PHAmZa37qmWuU/nsQxDWA J6GDYD79A3m2GJEgR0Txl3uaksT96X4Xba9n0A93ToLhuatMJUUp93m4xuTK6pTk n0HeFyqUn+n2L3trzGyH7TC1EYFBUk9M6zULjxj2L+JNCUTa9ReHiNMvna17v9/g 1shtS2HDK3U4ibBCfUJ044kQUCopH/hCuoNkqEGRSgT853AvXpY5hbh/Vs00Eq1i oxEipzq5Ads6qw73g92XpzAyEeDCuSqHxmAuo37Z5YimAnDGzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI/FL/M96xG/UhfMIwtjtCgHYsdYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWVjMmRmYTMtZjJlOC0z ODZlLThmMTgtNmRhZWU2ZWI0ZDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBL7Mhx3ngrn8ZI9HfBEmzbW9kpanvs7GYbZq+zxwEWRVwLBoiFWdP0 4CXio0pehKYotkLDC/+s9Q7cIAndnMho4Gl9W5cxRnNa9tkYnuXAnQpf/mnyDTTA 1L6SObdsQVoowgD0hWRqJco+ZC/kJl60bfroAp8PblnjXfCHcZLJxG2TXNRJ0eDK tmJLWFODi+5lRZ8Edmf4mbADvSbinKO2TTZ86yosPOZv8wDkdNgCZNA/+Ej0Jykr FcwSTbnycoSVm80PSBy8eiiZE2CvYXkykvkOJIx0F7CyV2yjaf8xftuWD5r2nupN utItD9mlSl6Ac8Z57Jq3kzj14osYSi4D -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:30 2026 by rpki-client