$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5954c9f9-98a0-3fd7-9fa2-ee387fc9b24c.roa File: 5954c9f9-98a0-3fd7-9fa2-ee387fc9b24c.roa (raw, json) Hash identifier: RvAUTnmzaghrpL0d6vgcFQvTyjriXKYV9d0sZdR5gb0= Subject key identifier: E5:86:F7:AE:D9:44:2A:5F:B0:88:47:1D:78:0F:4F:86:69:61:33:39 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAFE70664930C53CCD95C71C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5954c9f9-98a0-3fd7-9fa2-ee387fc9b24c.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 397211 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e7:06:64:93:0c:53:cc:d9:5c:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=16e0b27a-7e56-45bc-a675-4b2c82dfedae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:02:b3:47:a2:75:04:eb:5c:1b:11:55:83:84: 08:ee:1d:67:a7:e9:92:f8:53:69:d9:d0:61:23:00: 14:bd:8b:c0:02:6a:84:73:3f:13:7f:99:a0:e4:c3: 38:da:89:81:b8:65:73:c8:51:76:75:a7:2e:74:9b: 5e:8a:c7:08:85:be:08:7b:5f:18:15:04:2b:b1:4a: de:66:50:5f:43:d2:fb:5d:ab:23:e9:94:d7:14:1b: 55:25:5c:a9:5e:5e:41:58:ed:bc:74:9f:c8:83:e3: fb:07:12:87:15:ad:64:8f:90:68:d3:c4:c8:b5:29: af:6d:5a:f4:18:ec:3f:18:da:5e:66:e2:38:35:ec: a6:51:a3:73:36:f3:37:cf:b2:03:5b:ef:39:21:07: e5:7f:5b:61:3d:55:f0:62:39:84:0e:bd:00:20:41: 59:d5:bb:de:6f:54:4d:11:d0:f9:ec:75:fc:03:1e: b9:33:1f:c9:71:00:4d:fb:c6:3b:45:da:44:77:53: b2:18:8f:17:f1:5a:a4:5b:54:0e:bc:b3:4a:a5:4b: e9:60:91:9b:79:17:f1:af:97:9c:a3:b4:c9:58:41: 18:71:42:a8:b6:84:58:62:af:7c:6c:03:f9:15:00: b1:e7:4f:3d:ca:36:3e:dc:1e:70:fb:ca:61:e6:6f: 22:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:86:F7:AE:D9:44:2A:5F:B0:88:47:1D:78:0F:4F:86:69:61:33:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5954c9f9-98a0-3fd7-9fa2-ee387fc9b24c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:f9:6a:5f:f8:75:d7:45:ed:c5:a8:9e:f6:7d:d1:88:ab:d4: 8f:6c:60:94:29:d5:b3:55:d3:bf:12:19:2a:24:f9:6f:ce:b7: 9d:47:18:e0:4f:af:4d:89:c8:d4:f9:fc:b4:16:51:42:c0:53: 83:2d:45:d4:91:c0:5d:7e:13:1c:87:b4:66:03:e7:11:3a:92: 1b:69:0c:4b:24:1b:81:bb:08:e6:59:bb:e3:4c:5f:5a:e1:43: 7b:c7:83:11:4b:30:ed:3b:9b:d1:44:87:bd:89:79:3e:96:01: 7e:f6:60:49:43:d8:a5:ac:32:ca:99:a8:ac:04:ab:ef:c1:55: da:a8:67:c9:c7:4a:4d:92:8b:25:c6:ab:8f:56:62:13:ca:77: 5d:c7:78:b8:88:a3:11:8d:2e:71:02:ad:28:d9:18:d8:5b:8d: b9:fc:9a:dd:fe:ce:a3:76:80:48:c9:2e:67:bb:51:61:87:86: 2d:0f:c6:6d:38:f0:f9:be:c5:53:38:37:5a:f2:a2:2d:f7:fc: 03:0f:0a:71:f0:fa:c8:45:b8:b5:c9:0c:44:63:10:45:e4:19: b5:71:97:31:d8:98:80:cf:c9:e7:40:9a:5c:2e:32:45:28:03: bc:0b:cd:e2:09:e1:21:0e:a6:63:8a:20:49:f6:dc:96:8a:2c: 22:93:13:17 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6v5wZkkwxTzNlcccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk MTZlMGIyN2EtN2U1Ni00NWJjLWE2NzUtNGIyYzgyZGZlZGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwKzR6J1BOtcGxFVg4QI7h1np+mS+FNp2dBh IwAUvYvAAmqEcz8Tf5mg5MM42omBuGVzyFF2dacudJteiscIhb4Ie18YFQQrsUre ZlBfQ9L7Xasj6ZTXFBtVJVypXl5BWO28dJ/Ig+P7BxKHFa1kj5Bo08TItSmvbVr0 GOw/GNpeZuI4NeymUaNzNvM3z7IDW+85IQflf1thPVXwYjmEDr0AIEFZ1bveb1RN EdD57HX8Ax65Mx/JcQBN+8Y7RdpEd1OyGI8X8VqkW1QOvLNKpUvpYJGbeRfxr5ec o7TJWEEYcUKotoRYYq98bAP5FQCx5089yjY+3B5w+8ph5m8iFQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOWG967ZRCpfsIhHHXgPT4ZpYTM5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTk1NGM5ZjktOThhMC0z ZmQ3LTlmYTItZWUzODdmYzliMjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCN+Wpf+HXXRe3FqJ72fdGIq9SPbGCUKdWzVdO/EhkqJPlvzredRxjg T69NicjU+fy0FlFCwFODLUXUkcBdfhMch7RmA+cROpIbaQxLJBuBuwjmWbvjTF9a 4UN7x4MRSzDtO5vRRIe9iXk+lgF+9mBJQ9ilrDLKmaisBKvvwVXaqGfJx0pNkosl xquPVmITynddx3i4iKMRjS5xAq0o2RjYW425/Jrd/s6jdoBIyS5nu1Fhh4YtD8Zt OPD5vsVTODda8qIt9/wDDwpx8PrIRbi1yQxEYxBF5Bm1cZcx2JiAz8nnQJpcLjJF KAO8C83iCeEhDqZjiiBJ9tyWiiwikxMX -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:35 2026 by rpki-client