$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4de38486-00f8-322f-ab21-b6f3878c6517.roa File: 4de38486-00f8-322f-ab21-b6f3878c6517.roa (raw, json) Hash identifier: CdVK5M77qJy3+tefBtH4WITrG8x3AT6Z0N9jIA0W2BM= Subject key identifier: 94:42:BC:24:40:5B:D5:8A:AD:DC:76:09:F9:2B:6A:50:77:A7:6A:54 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAFE703576999338BF70A0480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4de38486-00f8-322f-ab21-b6f3878c6517.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 36630 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e7:03:57:69:99:33:8b:f7:0a:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=736ec3b3-7436-46f3-b0bf-6fd2f723647f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e9:55:bf:b4:37:f3:57:1c:4b:90:7a:3c:81: 5c:3d:57:a3:72:56:06:d4:e8:31:ac:6b:04:3a:6d: 10:d6:e2:28:79:12:3f:69:4c:65:71:14:88:7f:c7: 9d:02:98:93:dc:1c:69:82:da:1a:5d:e6:0c:2a:46: cc:e6:0e:31:49:a5:e7:9d:d7:26:a4:e1:78:8c:57: a3:1b:3e:26:57:17:5e:6d:0d:15:91:50:dd:d1:a7: 1b:a8:69:7b:d4:99:f0:d4:2b:b5:41:88:fc:6b:1f: 59:bc:60:62:8a:5a:40:d3:47:64:58:2f:26:a5:a3: e6:b0:c9:4a:d1:30:62:26:f0:d1:00:c3:93:80:b7: ad:15:8e:45:91:59:b4:e0:9e:70:71:9e:d1:00:9a: 60:be:f9:8c:c1:76:50:cb:40:23:bf:f4:b1:82:a8: 30:22:f2:6d:c6:44:ba:56:ec:f7:42:69:cd:d5:a6: f4:0e:7e:94:ec:73:84:90:bc:ec:e8:0e:21:cf:88: f0:64:f5:87:a0:a8:bd:57:4b:02:65:3a:0c:0b:45: 64:58:74:81:55:c8:5c:18:30:e5:41:67:18:47:98: c1:7b:03:42:0a:b9:f7:2b:3e:9a:eb:a8:14:45:98: c3:5b:ce:f0:66:e4:cc:cf:be:c5:3f:31:0f:e1:66: 76:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:42:BC:24:40:5B:D5:8A:AD:DC:76:09:F9:2B:6A:50:77:A7:6A:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4de38486-00f8-322f-ab21-b6f3878c6517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e5:1c:4a:98:c7:df:70:01:8b:00:52:6c:f4:50:ca:15:27: e8:f5:39:6d:b1:28:8d:00:9c:69:e2:8e:86:1d:22:7b:ff:66: 71:d6:25:5d:76:3d:45:6e:0f:40:08:2a:21:ac:5b:e6:fc:d4: 7d:19:70:9d:73:f4:d4:49:f6:aa:9b:fe:94:72:a7:ed:da:29: f6:65:4e:fc:6e:96:e6:13:43:d2:2a:ee:c3:a2:c1:e5:a2:8f: 50:65:fa:02:12:f7:dd:7e:12:52:ae:03:03:32:d0:25:7d:e9: 38:1f:87:04:f2:65:b2:42:63:a3:5c:7f:42:3a:c1:91:5f:a9: d9:82:b9:c0:9d:5d:48:28:6d:6c:bb:af:09:91:ca:e5:2d:3e: 08:08:78:c6:b9:4b:4e:de:77:c1:71:69:68:65:17:0f:35:7f: de:e5:89:b0:b8:0e:0f:1d:dc:15:e6:f0:7c:55:bf:87:ae:d5: ff:b6:43:f4:0f:e0:83:23:24:0b:ce:85:5f:fb:b6:e1:e0:31: 49:2b:5f:41:94:87:55:b3:0b:c0:97:39:e8:6a:a2:7b:fc:58: 74:cd:51:e5:8d:e7:3b:ba:7e:02:c6:76:69:92:e6:98:9e:10: a8:1e:ec:ae:0a:36:77:d7:43:52:fa:12:e5:1f:34:1f:34:d1: 2c:86:e6:fd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6v5wNXaZkzi/cKBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk NzM2ZWMzYjMtNzQzNi00NmYzLWIwYmYtNmZkMmY3MjM2NDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+lVv7Q381ccS5B6PIFcPVejclYG1OgxrGsE Om0Q1uIoeRI/aUxlcRSIf8edApiT3BxpgtoaXeYMKkbM5g4xSaXnndcmpOF4jFej Gz4mVxdebQ0VkVDd0acbqGl71Jnw1Cu1QYj8ax9ZvGBiilpA00dkWC8mpaPmsMlK 0TBiJvDRAMOTgLetFY5FkVm04J5wcZ7RAJpgvvmMwXZQy0Ajv/SxgqgwIvJtxkS6 Vuz3QmnN1ab0Dn6U7HOEkLzs6A4hz4jwZPWHoKi9V0sCZToMC0VkWHSBVchcGDDl QWcYR5jBewNCCrn3Kz6a66gURZjDW87wZuTMz77FPzEP4WZ2OQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJRCvCRAW9WKrdx2CfkralB3p2pUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGRlMzg0ODYtMDBmOC0z MjJmLWFiMjEtYjZmMzg3OGM2NTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBm5RxKmMffcAGLAFJs9FDKFSfo9TltsSiNAJxp4o6GHSJ7/2Zx1iVd dj1Fbg9ACCohrFvm/NR9GXCdc/TUSfaqm/6Ucqft2in2ZU78bpbmE0PSKu7DosHl oo9QZfoCEvfdfhJSrgMDMtAlfek4H4cE8mWyQmOjXH9COsGRX6nZgrnAnV1IKG1s u68JkcrlLT4ICHjGuUtO3nfBcWloZRcPNX/e5YmwuA4PHdwV5vB8Vb+HrtX/tkP0 D+CDIyQLzoVf+7bh4DFJK19BlIdVswvAlznoaqJ7/Fh0zVHljec7un4CxnZpkuaY nhCoHuyuCjZ310NS+hLlHzQfNNEshub9 -----END CERTIFICATE-----Generated at Wed Aug 19 18:44:40 2026 by rpki-client