$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a33b48f-eb1d-3ce9-9752-6d76561e91fb.roa File: 3a33b48f-eb1d-3ce9-9752-6d76561e91fb.roa (raw, json) Hash identifier: uBw2SRWPPNJgY/plj0A8L1wXzIsSucZePLQfcvQkeMs= Subject key identifier: 25:D1:4E:D4:D0:15:D6:91:BF:5B:26:F7:C4:46:B0:B3:B1:05:F4:28 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EC20C74EE218A8229EE482B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a33b48f-eb1d-3ce9-9752-6d76561e91fb.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 36630 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:74:ee:21:8a:82:29:ee:48:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=a226af6a-e014-4c73-b21f-c8b1b6fd35f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:14:1f:6f:47:08:5e:88:d0:8f:25:07:15:19: 23:69:dd:c1:41:c3:7c:fb:9a:69:af:20:12:ca:78: d8:79:0d:b2:33:1a:bc:a7:f1:0d:85:b1:5e:59:48: 31:21:5b:b9:56:6a:2e:2c:ae:05:d2:fd:cc:bd:e3: 63:d7:7e:ae:f4:2c:4a:c0:c9:8f:0e:4f:48:3f:63: aa:b4:a6:f9:fa:52:ea:49:fd:81:e7:7e:66:40:31: ed:52:82:e8:55:a3:a4:33:fe:9e:cd:59:c6:2b:46: 37:a4:25:20:20:f9:7d:96:8d:87:6e:45:94:17:65: 00:72:7d:6c:22:d6:b2:7f:2e:66:56:28:5c:1b:69: 2c:2c:cb:9d:f3:fc:3b:72:68:56:c5:fb:98:ab:a0: 80:66:60:a6:e0:94:2d:11:e1:5a:51:24:c1:7e:de: 55:4d:7b:e5:fa:6a:93:ef:ff:1d:d8:bb:ec:a2:fa: 03:23:9b:cc:77:a2:01:8a:cc:cf:fc:d4:9b:5a:d1: c9:ce:0a:0b:14:23:95:04:50:2a:6b:a2:4b:d2:c0: 9e:c7:9b:1c:2a:c7:f9:90:56:7a:35:39:01:62:21: 12:f4:0a:c3:a4:3e:54:e2:f7:64:03:1c:2d:db:f6: f6:d1:74:dd:e1:8c:6a:f8:88:c9:29:08:4e:e5:cd: 06:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D1:4E:D4:D0:15:D6:91:BF:5B:26:F7:C4:46:B0:B3:B1:05:F4:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a33b48f-eb1d-3ce9-9752-6d76561e91fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:c0:2a:e4:cb:f3:17:d5:40:9a:91:3d:13:e0:a6:f9:00:72: 6e:f3:e2:fd:c8:e2:2f:ab:e1:c6:f2:d8:e8:75:26:a2:f6:a7: d9:c2:65:f7:18:9c:67:a6:1f:48:82:a1:60:cc:87:b5:df:77: 93:cd:7c:5d:7a:fc:d1:b0:67:30:2a:3a:1c:5e:f6:4d:45:9b: 4b:96:f6:e9:9b:ce:86:e5:16:93:31:5e:63:b4:43:85:47:89: df:b2:67:f6:45:b9:49:92:b3:18:4c:8b:a5:f2:c8:19:dc:2d: a5:c8:07:37:f5:9c:65:1c:da:27:5a:78:17:77:9c:05:c3:47: 93:00:10:96:7c:ff:12:61:2d:22:e4:28:04:44:f7:d2:70:1e: 36:57:93:2a:37:a0:80:e1:75:9e:ed:b7:32:20:a1:44:24:bb: 0d:1d:e1:09:ec:16:d0:54:fc:8e:63:6c:53:3a:e4:77:0f:c4: 42:c6:0f:5a:41:5c:1e:f1:fc:a9:19:21:f9:76:d5:80:73:9c: f7:86:b8:cd:e7:50:e2:15:62:a4:69:ba:a4:eb:e3:59:0c:d0: d8:5f:0b:5e:76:39:e7:65:87:c8:63:c5:ba:6d:0d:78:c6:dc: 0c:16:cc:f0:51:df:f9:13:af:45:9e:93:5b:e7:16:c4:bc:0a: c6:9a:b3:c8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7CDHTuIYqCKe5IKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk YTIyNmFmNmEtZTAxNC00YzczLWIyMWYtYzhiMWI2ZmQzNWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohQfb0cIXojQjyUHFRkjad3BQcN8+5ppryAS ynjYeQ2yMxq8p/ENhbFeWUgxIVu5VmouLK4F0v3MveNj136u9CxKwMmPDk9IP2Oq tKb5+lLqSf2B535mQDHtUoLoVaOkM/6ezVnGK0Y3pCUgIPl9lo2HbkWUF2UAcn1s Itayfy5mVihcG2ksLMud8/w7cmhWxfuYq6CAZmCm4JQtEeFaUSTBft5VTXvl+mqT 7/8d2LvsovoDI5vMd6IBiszP/NSbWtHJzgoLFCOVBFAqa6JL0sCex5scKsf5kFZ6 NTkBYiES9ArDpD5U4vdkAxwt2/b20XTd4Yxq+IjJKQhO5c0GJwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCXRTtTQFdaRv1sm98RGsLOxBfQoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2EzM2I0OGYtZWIxZC0z Y2U5LTk3NTItNmQ3NjU2MWU5MWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCEwCrky/MX1UCakT0T4Kb5AHJu8+L9yOIvq+HG8tjodSai9qfZwmX3 GJxnph9IgqFgzIe133eTzXxdevzRsGcwKjocXvZNRZtLlvbpm86G5RaTMV5jtEOF R4nfsmf2RblJkrMYTIul8sgZ3C2lyAc39ZxlHNonWngXd5wFw0eTABCWfP8SYS0i 5CgERPfScB42V5MqN6CA4XWe7bcyIKFEJLsNHeEJ7BbQVPyOY2xTOuR3D8RCxg9a QVwe8fypGSH5dtWAc5z3hrjN51DiFWKkabqk6+NZDNDYXwtedjnnZYfIY8W6bQ14 xtwMFszwUd/5E69FnpNb5xbEvArGmrPI -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:46 2026 by rpki-client