$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4b44afae-8815-3fcc-9da0-ba1b0bee3eba.roa File: 4b44afae-8815-3fcc-9da0-ba1b0bee3eba.roa (raw, json) Hash identifier: ypbI87Ok1NzLP2YEYnmW+BYz8cZifIXpXEpoYuciPfk= Subject key identifier: FE:C7:4C:3A:83:7A:88:D9:6C:F2:18:58:D0:12:E3:65:01:91:93:86 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAFE702E1CA0627023309E680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4b44afae-8815-3fcc-9da0-ba1b0bee3eba.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 396611 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e7:02:e1:ca:06:27:02:33:09:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=91a0c077-7a54-4025-bd5d-4cab64a6aa84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:89:34:6a:55:b2:db:3b:3e:bd:12:8c:b9:a2: 64:93:dc:80:9c:88:55:29:4f:55:1d:8c:68:f3:24: a6:8e:f7:47:84:44:d7:c5:e1:b9:5d:c6:8e:18:79: 57:74:fa:51:ec:da:4b:bb:03:16:a6:de:da:34:25: 34:0c:8a:20:5d:e9:56:29:ff:b1:d7:c7:19:f0:4f: a5:09:14:ea:09:a0:08:94:f8:9b:eb:45:1f:d9:b4: 65:34:b1:eb:e3:5d:3b:0a:52:54:d7:90:9f:2e:a7: 73:14:df:9f:9a:73:31:f0:00:67:b7:ba:49:ee:48: df:a5:00:f9:92:09:1b:ac:69:fe:58:17:e9:b6:99: fe:a6:fb:56:27:21:89:df:44:11:1c:47:5d:2f:f8: eb:34:ee:53:f7:25:be:b1:29:e3:85:0a:10:96:e9: fa:82:ef:02:c0:bd:1a:11:32:aa:b0:2c:87:88:84: 29:a3:be:95:4c:0b:40:87:87:d9:d8:7f:50:c8:a9: cb:27:90:2c:15:ca:18:1b:72:39:5e:a7:84:d0:1b: 4c:8e:4d:06:cf:a4:22:86:04:63:bd:a9:65:14:6b: a7:36:60:57:1f:25:5d:fa:3a:5a:12:16:4f:86:91: 62:2a:60:57:91:be:fa:dc:61:52:c3:be:f8:0e:2b: 8e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C7:4C:3A:83:7A:88:D9:6C:F2:18:58:D0:12:E3:65:01:91:93:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4b44afae-8815-3fcc-9da0-ba1b0bee3eba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:9a:76:c1:81:e9:fd:af:a5:76:93:97:63:d7:09:48:43:84: 91:e2:e0:ec:86:3b:c8:a4:76:61:5b:22:be:e9:e1:cd:e1:a1: 62:e2:24:e9:97:f8:5c:e4:de:c3:2b:95:66:7d:44:1f:4a:f2: 8d:0b:4d:35:87:9a:ba:6d:24:60:90:ea:25:39:a5:b6:a8:a8: 16:f6:04:9c:c5:ca:e2:56:d2:78:ec:11:23:05:4b:b1:ba:64: ed:f8:e4:c2:e5:3d:9c:da:04:f0:ec:90:5a:f1:a5:07:50:5d: 92:16:17:e8:47:66:56:0f:3a:29:09:b8:2f:48:72:49:0a:aa: dc:b1:2d:33:42:b6:c7:54:0e:19:f0:ad:d6:03:fd:5f:1f:0a: be:88:e1:5f:9c:f8:67:22:2e:06:87:e0:33:89:bb:cb:8e:14: d2:09:94:6e:06:1e:62:d9:ff:79:52:58:76:d6:ad:4b:3e:4f: 89:2d:08:0c:ee:74:67:9e:6a:4b:f1:64:6f:00:d6:6a:2e:9b: 52:a6:5c:d1:e5:ed:e0:e6:46:11:61:5c:40:ba:71:76:b0:36: 00:2e:c9:26:a7:5a:3b:fe:c4:92:9b:bc:1b:2b:1a:d0:04:2d: 9e:46:bc:58:d4:85:aa:b6:68:1c:4c:04:13:48:be:20:4c:60: de:ef:3b:d0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6v5wLhygYnAjMJ5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk OTFhMGMwNzctN2E1NC00MDI1LWJkNWQtNGNhYjY0YTZhYTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIk0alWy2zs+vRKMuaJkk9yAnIhVKU9VHYxo 8ySmjvdHhETXxeG5XcaOGHlXdPpR7NpLuwMWpt7aNCU0DIogXelWKf+x18cZ8E+l CRTqCaAIlPib60Uf2bRlNLHr4107ClJU15CfLqdzFN+fmnMx8ABnt7pJ7kjfpQD5 kgkbrGn+WBfptpn+pvtWJyGJ30QRHEddL/jrNO5T9yW+sSnjhQoQlun6gu8CwL0a ETKqsCyHiIQpo76VTAtAh4fZ2H9QyKnLJ5AsFcoYG3I5XqeE0BtMjk0Gz6QihgRj vallFGunNmBXHyVd+jpaEhZPhpFiKmBXkb763GFSw774DiuOWwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP7HTDqDeojZbPIYWNAS42UBkZOGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGI0NGFmYWUtODgxNS0z ZmNjLTlkYTAtYmExYjBiZWUzZWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA8mnbBgen9r6V2k5dj1wlIQ4SR4uDshjvIpHZhWyK+6eHN4aFi4iTp l/hc5N7DK5VmfUQfSvKNC001h5q6bSRgkOolOaW2qKgW9gScxcriVtJ47BEjBUux umTt+OTC5T2c2gTw7JBa8aUHUF2SFhfoR2ZWDzopCbgvSHJJCqrcsS0zQrbHVA4Z 8K3WA/1fHwq+iOFfnPhnIi4Gh+AzibvLjhTSCZRuBh5i2f95Ulh21q1LPk+JLQgM 7nRnnmpL8WRvANZqLptSplzR5e3g5kYRYVxAunF2sDYALskmp1o7/sSSm7wbKxrQ BC2eRrxY1IWqtmgcTAQTSL4gTGDe7zvQ -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:53 2026 by rpki-client