$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32a5b28a-eed1-3c80-907f-6a1b787516eb.roa File: 32a5b28a-eed1-3c80-907f-6a1b787516eb.roa (raw, json) Hash identifier: dyCA1bgHIx+jL0AbWW68d/wEKpnDwM4YTX/79GEZAyI= Subject key identifier: 36:77:4F:7A:87:AA:71:D0:64:5B:E2:F5:1B:2B:A5:64:9C:A4:90:76 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAFE7029C6009933610812B40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32a5b28a-eed1-3c80-907f-6a1b787516eb.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 21313 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e7:02:9c:60:09:93:36:10:81:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=e95f45b2-fb7d-472c-abb9-b5ff39f93f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:05:04:c1:8e:66:7d:69:31:d1:92:1b:ba:07: ac:e2:43:9d:a1:e2:28:19:30:f4:47:72:bf:a0:5e: f2:a7:cd:0c:35:4f:52:e4:e5:56:05:64:b7:36:53: 8c:49:ab:f0:5d:98:a5:41:73:8c:44:d6:1a:22:b1: 58:c6:c4:14:9c:1a:1f:59:7e:79:50:28:e4:f5:3f: b5:3d:0e:a0:af:4d:2c:5e:7d:d3:0b:be:89:ba:ba: 73:ae:6c:62:93:6b:50:93:d8:10:95:a6:48:eb:4f: 50:1f:b2:bd:7f:24:ef:2c:a4:ba:60:d5:70:bc:18: 1d:21:4f:fb:ba:5a:4a:cd:68:61:e9:24:74:9a:e1: ac:3e:ad:a5:39:91:55:e1:c0:f7:e2:10:ec:48:78: ff:8e:55:6a:7f:dd:e2:1f:9e:b1:23:3e:dd:37:d5: 2b:b2:ff:d2:e4:60:09:18:95:c6:2d:fb:61:63:74: 57:1f:47:95:59:63:1f:35:19:2a:72:f9:2f:80:05: 21:75:19:06:37:f1:0c:65:b8:25:af:5d:30:95:98: 6a:ee:10:68:9b:65:73:be:b0:c3:dd:8d:38:60:82: 5f:8d:09:87:9f:7f:37:2f:ac:da:04:35:95:dd:f4: 18:1c:3a:a8:76:32:7e:1b:6b:ca:2a:b2:49:6e:30: 38:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:77:4F:7A:87:AA:71:D0:64:5B:E2:F5:1B:2B:A5:64:9C:A4:90:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32a5b28a-eed1-3c80-907f-6a1b787516eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:27:3e:08:6e:0b:57:cf:22:7a:2e:41:ae:e2:f1:3e:8c:93: 81:5a:7c:17:ba:a8:72:ca:74:17:ba:d2:d8:b4:0a:7a:41:b8: 8e:91:5b:33:ee:a8:1c:a7:58:41:dd:0d:1e:96:38:b7:e6:71: 00:21:5d:44:83:d3:8f:6d:93:8b:7f:44:d9:79:b4:0a:d2:c7: fc:1e:27:35:6a:23:f1:64:78:9d:14:ee:b9:9d:9a:40:15:d7: 4f:48:d5:d1:96:46:8c:e2:d1:0b:8f:8a:12:88:58:36:41:76: f2:ba:21:0d:c8:57:44:78:43:62:24:f3:f6:14:43:e2:03:b7: 13:5d:1f:51:75:73:f3:ed:a5:22:6b:c2:cb:24:a3:99:b7:a6: 6e:58:be:dc:50:80:11:22:41:08:1f:f7:b4:70:0a:73:b4:81: 5c:cf:c0:6e:a7:b2:27:d5:4e:f4:48:ae:96:6c:ae:fb:d2:d1: 03:28:5c:c0:9c:4b:10:26:3a:e5:4f:c0:6d:82:b0:9a:fb:42: 08:6d:79:0d:dd:07:dd:69:bf:b2:1a:d2:a6:99:ba:13:7c:e8: 03:93:56:b3:25:11:21:60:9b:3d:22:05:11:29:55:8c:6c:ad: c9:55:7c:54:14:84:04:0d:cd:ed:91:fb:ca:16:34:e6:89:c6: 06:c3:af:9c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6v5wKcYAmTNhCBK0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk ZTk1ZjQ1YjItZmI3ZC00NzJjLWFiYjktYjVmZjM5ZjkzZjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQUEwY5mfWkx0ZIbuges4kOdoeIoGTD0R3K/ oF7yp80MNU9S5OVWBWS3NlOMSavwXZilQXOMRNYaIrFYxsQUnBofWX55UCjk9T+1 PQ6gr00sXn3TC76Jurpzrmxik2tQk9gQlaZI609QH7K9fyTvLKS6YNVwvBgdIU/7 ulpKzWhh6SR0muGsPq2lOZFV4cD34hDsSHj/jlVqf93iH56xIz7dN9Ursv/S5GAJ GJXGLfthY3RXH0eVWWMfNRkqcvkvgAUhdRkGN/EMZbglr10wlZhq7hBom2VzvrDD 3Y04YIJfjQmHn383L6zaBDWV3fQYHDqodjJ+G2vKKrJJbjA4ZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDZ3T3qHqnHQZFvi9RsrpWScpJB2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzJhNWIyOGEtZWVkMS0z YzgwLTkwN2YtNmExYjc4NzUxNmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAeJz4IbgtXzyJ6LkGu4vE+jJOBWnwXuqhyynQXutLYtAp6QbiOkVsz 7qgcp1hB3Q0elji35nEAIV1Eg9OPbZOLf0TZebQK0sf8Hic1aiPxZHidFO65nZpA FddPSNXRlkaM4tELj4oSiFg2QXbyuiENyFdEeENiJPP2FEPiA7cTXR9RdXPz7aUi a8LLJKOZt6ZuWL7cUIARIkEIH/e0cApztIFcz8Bup7In1U70SK6WbK770tEDKFzA nEsQJjrlT8BtgrCa+0IIbXkN3Qfdab+yGtKmmboTfOgDk1azJREhYJs9IgURKVWM bK3JVXxUFIQEDc3tkfvKFjTmicYGw6+c -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:50 2026 by rpki-client