$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/577249d9-af53-386f-9c9a-cb916a1f5097.roa File: 577249d9-af53-386f-9c9a-cb916a1f5097.roa (raw, json) Hash identifier: J/wbCmxxNVoqZ7mY47jOu2JCq69wbryibIIYszmUYko= Subject key identifier: 27:30:16:AD:99:DC:11:E4:69:7C:74:30:D1:4F:53:69:90:3C:21:76 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAE81B72335684B12308F23A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/577249d9-af53-386f-9c9a-cb916a1f5097.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 396616 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:b7:23:35:68:4b:12:30:8f:23:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=a16739a9-61f7-4d82-aeb2-f6080d31fe67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:80:07:95:a2:9e:64:ad:24:76:af:e3:c8:07: 89:f7:03:e7:7d:30:a2:83:24:8c:6b:bf:93:fd:72: fe:5a:f1:43:34:d0:64:54:b7:30:6d:eb:d2:77:05: 7b:a2:f3:0f:6e:06:58:fa:2c:ad:3c:d3:3b:93:eb: 5c:bb:74:48:c5:4c:5b:c8:d6:fe:3e:17:1c:1e:22: 6e:3f:9d:cb:a7:e5:42:a5:f9:1d:5f:6e:e6:8d:58: 54:ac:e0:f3:de:eb:1e:a1:0a:af:ab:7c:a6:6a:84: e1:9a:f4:e6:6f:39:b5:92:c0:c2:fb:f0:2d:e7:17: d2:aa:86:37:d9:e1:9c:51:d1:50:67:44:3f:fe:bc: 97:71:4a:b5:ba:1b:52:93:80:bd:d3:2c:f5:0c:8d: c9:22:de:7e:f0:ef:5a:9a:e3:96:ca:54:7b:7b:ae: 06:37:d4:4d:cc:de:91:8c:8e:d0:83:6e:ca:32:6b: 26:b2:b4:df:0b:07:d0:cf:bf:46:b8:ac:9e:d8:a5: 26:9a:39:8d:6e:0d:44:29:90:16:5e:4b:04:5a:07: c5:4d:c0:c3:b6:a8:23:6a:82:39:d6:75:8e:92:01: 59:4c:8a:45:3e:6b:80:e6:6e:e1:b8:74:da:19:74: 51:d8:8f:23:99:e6:ed:71:df:1c:a0:e2:74:f8:0d: 1a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:30:16:AD:99:DC:11:E4:69:7C:74:30:D1:4F:53:69:90:3C:21:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/577249d9-af53-386f-9c9a-cb916a1f5097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f8:81:df:90:91:c1:0b:24:2b:f8:7f:5c:64:f0:eb:31:54: 74:d3:77:74:b1:07:de:5a:4d:42:55:8b:55:2e:9f:0d:31:09: 7c:56:40:f5:ba:84:0b:fc:2e:09:97:0c:c4:4d:94:94:cc:c1: 32:b3:ab:73:f4:83:92:01:a0:10:39:f1:c3:dd:0e:83:50:34: ce:c0:7f:18:3f:f7:bb:3b:82:c0:a5:45:1b:49:f1:e0:7a:34: 1c:aa:3b:41:b9:83:44:78:e5:a2:22:7f:1c:b1:60:d9:94:c2: 58:0f:1f:9b:78:c3:58:6f:d2:a4:f7:07:51:fe:94:8e:d7:3b: 9f:5c:40:d8:d6:e3:5b:05:36:65:72:d4:5e:a2:0b:c1:66:de: 09:d0:b6:bb:69:ae:88:11:a4:ac:40:1a:1b:42:1b:3f:c6:17: c1:2f:ea:1e:21:0e:43:47:ee:7f:e6:e4:79:8c:7a:9d:be:a4: b1:db:24:30:51:87:7f:da:1f:76:e0:b4:f5:4b:27:95:1b:06: 58:77:4f:1b:38:1d:0e:72:c2:c6:5d:90:25:7e:e5:c6:6d:c5: 4b:94:e2:21:4c:2b:42:dc:36:4c:69:25:09:7b:f2:77:e8:dd: 16:91:28:16:e8:94:39:95:c5:58:80:20:2c:9b:88:6c:28:78: 25:af:33:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugbcjNWhLEjCPI6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk YTE2NzM5YTktNjFmNy00ZDgyLWFlYjItZjYwODBkMzFmZTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIAHlaKeZK0kdq/jyAeJ9wPnfTCigySMa7+T /XL+WvFDNNBkVLcwbevSdwV7ovMPbgZY+iytPNM7k+tcu3RIxUxbyNb+PhccHiJu P53Lp+VCpfkdX27mjVhUrODz3useoQqvq3ymaoThmvTmbzm1ksDC+/At5xfSqoY3 2eGcUdFQZ0Q//ryXcUq1uhtSk4C90yz1DI3JIt5+8O9amuOWylR7e64GN9RNzN6R jI7Qg27KMmsmsrTfCwfQz79GuKye2KUmmjmNbg1EKZAWXksEWgfFTcDDtqgjaoI5 1nWOkgFZTIpFPmuA5m7huHTaGXRR2I8jmebtcd8coOJ0+A0a1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcwFq2Z3BHkaXx0MNFPU2mQPCF2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTc3MjQ5ZDktYWY1My0z ODZmLTljOWEtY2I5MTZhMWY1MDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAr4gd+QkcELJCv4f1xk8OsxVHTTd3SxB95aTUJVi1Uunw0xCXxWQPW6 hAv8LgmXDMRNlJTMwTKzq3P0g5IBoBA58cPdDoNQNM7Afxg/97s7gsClRRtJ8eB6 NByqO0G5g0R45aIifxyxYNmUwlgPH5t4w1hv0qT3B1H+lI7XO59cQNjW41sFNmVy 1F6iC8Fm3gnQtrtprogRpKxAGhtCGz/GF8Ev6h4hDkNH7n/m5HmMep2+pLHbJDBR h3/aH3bgtPVLJ5UbBlh3Txs4HQ5ywsZdkCV+5cZtxUuU4iFMK0LcNkxpJQl78nfo 3RaRKBbolDmVxViAICybiGwoeCWvM6k= -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:46 2026 by rpki-client