$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3af75ab3-84a4-3e81-96c9-79648513a39c.roa File: 3af75ab3-84a4-3e81-96c9-79648513a39c.roa (raw, json) Hash identifier: XfL1NbxPPR4R5aMLuugn/xAGYfDD+q7bUQTdfiL6oeE= Subject key identifier: 5F:CB:BC:6E:BD:C5:A3:4E:D8:AB:9F:34:45:A2:5E:B5:47:B2:64:69 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EC20C7565F3C2BE3A3FD2FC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3af75ab3-84a4-3e81-96c9-79648513a39c.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 396584 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:75:65:f3:c2:be:3a:3f:d2:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=d88ff131-a641-4a5a-b714-19529cd372ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:57:d9:05:63:cf:93:e3:d2:9c:5d:77:08:1b: 94:2a:d5:9d:53:46:03:b6:81:4e:8c:e7:19:dc:95: c4:50:ae:74:fb:47:a1:b2:ec:7a:80:22:4d:5d:28: d5:92:62:40:53:78:6a:64:bb:a0:c4:0e:ba:c5:11: ed:70:67:6d:a0:26:e1:ab:98:5b:7a:08:e9:70:05: 50:56:74:73:13:09:f9:c3:65:f1:99:b5:84:7d:1b: 95:a0:fc:4d:db:aa:94:5d:d2:71:50:d6:59:e4:ba: 4a:2f:6b:b5:e8:1e:d4:2f:50:eb:e4:33:ef:2d:27: 19:e8:8a:cc:ac:fa:91:e7:39:d7:48:81:c0:bb:b4: 1d:d2:60:3c:a2:84:21:90:7c:8b:16:82:cc:db:37: 1a:2c:28:63:16:0d:c8:3c:e5:e5:0e:8c:cd:f3:c4: 55:53:7e:18:be:71:40:c3:37:13:ce:79:07:53:09: 08:39:0c:97:b9:79:51:14:8c:a5:3d:10:9f:5a:97: 37:b2:83:8a:34:2b:e3:37:6a:fb:6b:02:a2:aa:5f: 0e:a4:25:eb:7b:af:8d:9e:e7:b9:9b:82:8d:a8:1f: 7f:65:eb:47:37:03:47:aa:ee:45:d9:fe:d2:51:6d: a9:26:f1:2b:c8:1c:d2:b9:d5:c6:3f:13:80:53:6b: 0c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:CB:BC:6E:BD:C5:A3:4E:D8:AB:9F:34:45:A2:5E:B5:47:B2:64:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3af75ab3-84a4-3e81-96c9-79648513a39c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ff:fa:87:4f:3f:75:68:b0:f8:0d:d8:e8:5e:5a:6b:f4:8d: 7f:0c:c8:e5:d1:b7:5e:35:72:42:f5:b8:58:da:fa:c7:c8:35: 3c:c3:a4:fa:c9:94:ae:fa:bf:d7:59:03:b4:14:34:3a:ea:cb: 00:0a:3a:db:5f:88:a0:97:71:c5:c0:59:55:6d:c9:01:30:c9: 5a:56:26:b9:21:bf:38:a8:33:6e:eb:a1:e2:d2:97:eb:18:a3: 05:f7:d4:8f:53:fe:2c:f4:8c:8a:2a:17:ed:22:4e:33:57:4e: 45:aa:cb:cf:0b:f6:cb:20:7c:8f:77:4a:b8:c0:eb:d2:cd:8b: 1b:08:45:1a:b1:45:83:1e:da:9a:9d:30:71:80:93:04:71:1a: e4:49:ad:ff:81:f2:0d:5a:18:1c:07:74:f9:22:94:68:9e:96: 6c:97:09:88:7f:e5:d7:b1:6a:b3:46:1c:41:93:a9:f1:26:ef: 47:a9:1f:77:2e:5b:a6:d7:91:9c:53:7f:b5:3c:1e:f2:69:03: b4:72:dd:6d:d8:27:35:f7:e3:ac:c1:b0:85:36:f9:b1:86:aa: 54:03:91:70:ad:14:10:56:f0:47:71:09:0d:38:57:f8:61:53: a8:3f:bd:0c:2f:fc:16:8b:84:a0:67:52:ba:6c:f4:ed:e2:56: f3:0f:fa:86 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7CDHVl88K+Oj/S/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk ZDg4ZmYxMzEtYTY0MS00YTVhLWI3MTQtMTk1MjljZDM3MmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VfZBWPPk+PSnF13CBuUKtWdU0YDtoFOjOcZ 3JXEUK50+0ehsux6gCJNXSjVkmJAU3hqZLugxA66xRHtcGdtoCbhq5hbegjpcAVQ VnRzEwn5w2XxmbWEfRuVoPxN26qUXdJxUNZZ5LpKL2u16B7UL1Dr5DPvLScZ6IrM rPqR5znXSIHAu7Qd0mA8ooQhkHyLFoLM2zcaLChjFg3IPOXlDozN88RVU34YvnFA wzcTznkHUwkIOQyXuXlRFIylPRCfWpc3soOKNCvjN2r7awKiql8OpCXre6+Nnue5 m4KNqB9/ZetHNwNHqu5F2f7SUW2pJvEryBzSudXGPxOAU2sM6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF/LvG69xaNO2KufNEWiXrVHsmRpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2FmNzVhYjMtODRhNC0z ZTgxLTk2YzktNzk2NDg1MTNhMzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBF//qHTz91aLD4DdjoXlpr9I1/DMjl0bdeNXJC9bhY2vrHyDU8w6T6 yZSu+r/XWQO0FDQ66ssACjrbX4igl3HFwFlVbckBMMlaVia5Ib84qDNu66Hi0pfr GKMF99SPU/4s9IyKKhftIk4zV05FqsvPC/bLIHyPd0q4wOvSzYsbCEUasUWDHtqa nTBxgJMEcRrkSa3/gfINWhgcB3T5IpRonpZslwmIf+XXsWqzRhxBk6nxJu9HqR93 Llum15GcU3+1PB7yaQO0ct1t2Cc19+OswbCFNvmxhqpUA5FwrRQQVvBHcQkNOFf4 YVOoP70ML/wWi4SgZ1K6bPTt4lbzD/qG -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:28 2026 by rpki-client