$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43248210-9c19-3508-a3ba-fecc92f89d36.roa File: 43248210-9c19-3508-a3ba-fecc92f89d36.roa (raw, json) Hash identifier: MwZ9v7GXLA9aUDfawQtboPLthfWGXMGdvbTDOCwhs1Q= Subject key identifier: FA:CF:15:3E:BB:3F:9C:96:BE:18:60:39:55:B5:A6:B0:A2:F9:D4:56 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAFE7034B7A2978D01049D680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43248210-9c19-3508-a3ba-fecc92f89d36.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 397201 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e7:03:4b:7a:29:78:d0:10:49:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=e8b72856-2272-42bc-a51a-4494b9534477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0b:4f:87:bb:ae:46:34:7f:67:d6:89:2b:77: e1:52:ca:c8:8c:91:30:41:ff:2a:8e:6d:8f:0a:b6: c4:0a:31:8e:6c:7c:9c:f4:1b:27:91:31:cb:99:8b: b7:08:69:df:88:4b:43:c4:8b:2c:3a:0a:75:76:b1: 19:16:ef:57:9e:95:4b:c3:45:39:9c:b2:97:fd:1e: 41:12:2f:2d:ff:c4:43:62:38:64:4e:d3:19:39:55: ea:15:04:b1:b7:2d:1e:4a:18:96:97:70:a5:f4:3c: 44:e1:9b:f9:6b:04:f1:42:03:07:5f:83:bc:e6:03: 4c:a0:c8:16:63:c8:6d:9c:12:dc:15:9e:fd:42:d4: 8d:14:7d:53:7c:1a:b2:ed:c4:9c:56:8e:43:ec:33: 23:63:74:d3:81:f7:3f:5e:4e:97:21:d5:d4:c8:f8: dc:f9:c5:66:c8:b3:af:88:07:77:bb:88:b4:b0:e3: 4d:d5:e5:9f:88:8d:1c:c8:c2:ad:bc:c2:00:22:1b: 58:5e:16:4a:37:44:cc:26:9e:58:44:c0:94:f5:99: e0:b5:22:e2:84:1a:7a:42:40:15:c0:a8:3e:b2:79: 10:7e:f2:c2:be:67:61:ba:09:a7:7b:1c:52:9a:a9: 10:33:01:6c:72:86:39:6c:c1:49:3c:d8:e1:75:56: 6e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CF:15:3E:BB:3F:9C:96:BE:18:60:39:55:B5:A6:B0:A2:F9:D4:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43248210-9c19-3508-a3ba-fecc92f89d36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:51:d3:b9:e1:75:f9:9c:90:ad:94:5b:9b:63:12:89:d0:06: d2:4e:fd:29:17:5b:c1:a0:27:cd:e8:ff:2f:b7:b2:30:d8:d8: de:6e:eb:33:ed:d4:2c:28:e5:57:68:56:48:79:5b:33:72:6f: 35:f9:0a:49:a9:b1:95:08:92:54:52:de:15:0a:dd:88:2f:21: 26:cd:cb:c3:5c:43:14:d8:78:dc:a1:a3:ed:39:58:05:2d:83: 0f:e5:f3:d5:92:c9:ce:5a:90:1c:b0:46:e2:73:69:56:8b:c2: f9:16:a7:60:ae:d1:fb:56:d8:90:64:e2:e7:5c:d3:3a:8c:1d: ea:96:c9:cf:ba:90:2d:51:af:1d:7a:4a:75:15:d1:76:03:f8: 66:48:ba:25:b9:9b:0e:41:9b:fe:12:2f:df:4b:13:a3:fb:11: 16:2a:46:6f:7e:27:c4:9f:aa:5a:0f:65:f0:27:65:e4:8f:a5: 79:04:1a:b7:51:81:80:ff:03:05:02:e9:4f:80:47:0e:73:e9: b4:1f:fa:4b:28:17:3f:61:35:91:a2:c1:68:5d:90:64:9c:7e: 6e:82:7e:3b:25:86:42:47:1f:24:42:65:b1:8b:e6:a5:6d:95: 3b:4d:73:58:e2:56:0e:57:da:fd:e0:ec:c5:20:2c:06:7f:c5: bb:5d:e7:0a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6v5wNLeil40BBJ1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk ZThiNzI4NTYtMjI3Mi00MmJjLWE1MWEtNDQ5NGI5NTM0NDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigtPh7uuRjR/Z9aJK3fhUsrIjJEwQf8qjm2P CrbECjGObHyc9BsnkTHLmYu3CGnfiEtDxIssOgp1drEZFu9XnpVLw0U5nLKX/R5B Ei8t/8RDYjhkTtMZOVXqFQSxty0eShiWl3Cl9DxE4Zv5awTxQgMHX4O85gNMoMgW Y8htnBLcFZ79QtSNFH1TfBqy7cScVo5D7DMjY3TTgfc/Xk6XIdXUyPjc+cVmyLOv iAd3u4i0sONN1eWfiI0cyMKtvMIAIhtYXhZKN0TMJp5YRMCU9ZngtSLihBp6QkAV wKg+snkQfvLCvmdhugmnexxSmqkQMwFscoY5bMFJPNjhdVZuAwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPrPFT67P5yWvhhgOVW1prCi+dRWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDMyNDgyMTAtOWMxOS0z NTA4LWEzYmEtZmVjYzkyZjg5ZDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBgUdO54XX5nJCtlFubYxKJ0AbSTv0pF1vBoCfN6P8vt7Iw2Njebusz 7dQsKOVXaFZIeVszcm81+QpJqbGVCJJUUt4VCt2ILyEmzcvDXEMU2HjcoaPtOVgF LYMP5fPVksnOWpAcsEbic2lWi8L5FqdgrtH7VtiQZOLnXNM6jB3qlsnPupAtUa8d ekp1FdF2A/hmSLoluZsOQZv+Ei/fSxOj+xEWKkZvfifEn6paD2XwJ2Xkj6V5BBq3 UYGA/wMFAulPgEcOc+m0H/pLKBc/YTWRosFoXZBknH5ugn47JYZCRx8kQmWxi+al bZU7TXNY4lYOV9r94OzFICwGf8W7XecK -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:09 2026 by rpki-client