$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21eaa185-fe7a-35e5-9482-4011ef5eef0c.roa File: 21eaa185-fe7a-35e5-9482-4011ef5eef0c.roa (raw, json) Hash identifier: KoD+Mb0FgV9agp4wKL2ojpwABGM2N2gNI8nP8TUYVc0= Subject key identifier: C6:4B:03:52:9D:0E:68:AC:4A:B8:48:71:70:64:48:1F:B3:62:D9:75 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAE81B6CD055D9DE526304000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21eaa185-fe7a-35e5-9482-4011ef5eef0c.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 396578 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:b6:cd:05:5d:9d:e5:26:30:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=52801e56-8fcb-4684-8758-5dee917f4cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:34:ea:a5:aa:f5:95:00:53:fa:fe:97:bf:5c: 99:f7:e1:b7:ac:61:d2:8c:7b:34:29:e1:41:01:e5: 96:85:8a:6b:27:da:2c:ab:8a:17:74:de:20:33:45: 16:48:fb:00:92:e5:d5:f8:f7:9f:eb:1e:6d:97:1e: c8:71:0f:a9:6a:bd:c8:83:c3:cd:6a:a8:61:4d:0a: ff:a5:00:5e:1c:a5:0b:8c:60:73:1c:d0:2a:22:14: 0a:9f:a3:eb:2a:8f:52:b7:25:1f:a4:6f:da:f2:7d: ae:a2:3a:5e:eb:21:79:7e:31:cc:9c:0b:0a:27:a3: b5:71:24:76:2e:41:c6:ba:3b:1e:cb:11:16:6c:63: d1:34:74:e7:79:3d:dc:fa:69:ca:fb:1a:75:64:09: 36:4b:2e:82:25:7d:bb:7d:14:4e:9e:17:17:7a:82: 0b:cd:57:1c:cf:e4:ac:16:43:5b:b7:d3:27:b1:4a: c3:60:3d:2f:66:f6:ca:b0:80:61:68:b1:42:e6:03: 0e:29:c4:ab:32:9d:fd:25:f4:49:91:17:24:39:22: d4:d0:fb:1e:fd:36:98:58:66:16:3d:c7:71:27:ff: e0:d0:94:3b:80:bd:64:cb:f5:ff:4b:dd:24:4a:d1: ff:48:55:f5:84:34:59:a9:fc:68:9f:11:e9:0a:86: 8e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4B:03:52:9D:0E:68:AC:4A:B8:48:71:70:64:48:1F:B3:62:D9:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21eaa185-fe7a-35e5-9482-4011ef5eef0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:b1:0f:d4:3d:95:bb:6d:46:f3:92:47:6f:b4:89:f7:41:c1: fe:0a:54:48:46:a3:45:27:ec:41:5b:51:8b:b0:e2:4e:31:b5: f5:87:ff:03:fe:25:4f:6a:24:57:ed:63:c9:3b:29:f8:c7:0b: 90:77:3c:ec:01:bf:f2:4e:0d:6f:41:d0:54:60:a9:d3:61:c3: 71:79:1e:a2:b9:90:9a:9a:9d:60:aa:27:26:b8:e0:35:96:2c: 69:41:52:9f:03:1d:c3:d8:da:cd:e4:37:ce:e9:34:e7:96:ca: 04:42:7b:10:ba:1e:c0:bc:82:64:57:ac:b0:9f:6b:6e:8a:b9: 81:15:ee:39:65:6c:8b:fb:bb:4b:ee:b4:18:27:ee:1e:6b:b5: b8:00:82:42:15:ab:0f:3d:b3:60:cc:87:82:84:aa:16:c5:f9: f6:0a:70:f3:dc:1b:39:4a:47:cc:8e:b9:7e:34:dd:08:09:d7: 09:94:86:ae:8f:bf:14:77:9f:31:f2:cd:be:a5:ea:69:09:cf: 13:42:d4:14:fb:d0:7a:42:58:af:12:a9:9d:93:76:d5:4d:65: db:c2:e2:9b:8c:f9:b3:9b:88:1d:08:db:bf:fd:9e:3f:e6:94: 42:dc:60:b8:c4:ee:1e:47:cd:be:07:2f:a4:ea:0f:ad:6e:03: eb:9c:b5:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugbbNBV2d5SYwQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk NTI4MDFlNTYtOGZjYi00Njg0LTg3NTgtNWRlZTkxN2Y0Y2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzTqpar1lQBT+v6Xv1yZ9+G3rGHSjHs0KeFB AeWWhYprJ9osq4oXdN4gM0UWSPsAkuXV+Pef6x5tlx7IcQ+par3Ig8PNaqhhTQr/ pQBeHKULjGBzHNAqIhQKn6PrKo9StyUfpG/a8n2uojpe6yF5fjHMnAsKJ6O1cSR2 LkHGujseyxEWbGPRNHTneT3c+mnK+xp1ZAk2Sy6CJX27fRROnhcXeoILzVccz+Ss FkNbt9MnsUrDYD0vZvbKsIBhaLFC5gMOKcSrMp39JfRJkRckOSLU0Pse/TaYWGYW PcdxJ//g0JQ7gL1ky/X/S90kStH/SFX1hDRZqfxonxHpCoaOAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZLA1KdDmisSrhIcXBkSB+zYtl1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjFlYWExODUtZmU3YS0z NWU1LTk0ODItNDAxMWVmNWVlZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqxD9Q9lbttRvOSR2+0ifdBwf4KVEhGo0Un7EFbUYuw4k4xtfWH/wP+ JU9qJFftY8k7KfjHC5B3POwBv/JODW9B0FRgqdNhw3F5HqK5kJqanWCqJya44DWW LGlBUp8DHcPY2s3kN87pNOeWygRCexC6HsC8gmRXrLCfa26KuYEV7jllbIv7u0vu tBgn7h5rtbgAgkIVqw89s2DMh4KEqhbF+fYKcPPcGzlKR8yOuX403QgJ1wmUhq6P vxR3nzHyzb6l6mkJzxNC1BT70HpCWK8SqZ2TdtVNZdvC4puM+bObiB0I27/9nj/m lELcYLjE7h5Hzb4HL6TqD61uA+uctaQ= -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:59 2026 by rpki-client