$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b8b2999-e481-3499-95c4-43200cd0febc.roa File: 5b8b2999-e481-3499-95c4-43200cd0febc.roa (raw, json) Hash identifier: 6v1z6aRY3jIKiRMEpz6PzFijlbHTAoP3SNE52sHQF/U= Subject key identifier: 8B:F9:61:F2:4E:C8:D9:C9:DE:D4:69:0D:CD:F1:D2:2F:55:FF:41:B1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAFE7037A1D5F7C51AEE74D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b8b2999-e481-3499-95c4-43200cd0febc.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 396600 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e7:03:7a:1d:5f:7c:51:ae:e7:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=223ad9d8-5b34-48cd-8002-779d6b299a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:78:16:f8:50:5f:a3:4a:9e:ec:7b:d6:a4:86: 47:43:b6:2a:b1:1d:37:71:a3:b1:50:64:84:2a:3d: 08:81:ba:e3:36:17:51:ba:19:12:d6:41:db:a6:36: d2:37:07:d2:0c:e0:ad:f6:a7:7c:e7:a8:d6:01:12: 53:9a:c1:4a:47:7a:3b:14:cd:d0:1a:9e:46:3a:95: 77:53:e6:a1:66:8a:52:5b:9f:2e:e0:5c:54:c6:fe: 11:a0:16:a6:66:1c:81:86:18:91:c5:61:45:f6:2a: b0:65:80:2e:48:cd:df:38:f9:56:07:6f:62:4c:93: d4:f8:88:14:0f:b4:37:c1:6d:6d:be:67:7f:fd:69: 72:d5:54:08:86:5c:46:3d:a4:84:c6:3f:80:b7:e4: 42:fc:57:d0:ad:00:58:13:6a:de:80:c2:88:44:25: 7d:22:3a:70:de:36:53:db:a7:7d:29:45:c8:c2:6e: 73:c4:0d:7b:5f:1d:8f:3c:2f:19:7e:3b:60:c9:c5: 2d:62:66:c3:f3:d0:52:b2:65:15:21:e3:b7:7e:e8: 94:92:d2:8d:41:58:40:f6:f5:e7:b2:22:04:1f:0e: 78:b5:44:c8:dc:fe:42:4d:e0:8f:72:67:84:f6:a4: c5:1c:a6:96:9d:aa:f9:be:f3:44:dc:38:9d:46:a8: f3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F9:61:F2:4E:C8:D9:C9:DE:D4:69:0D:CD:F1:D2:2F:55:FF:41:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b8b2999-e481-3499-95c4-43200cd0febc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:c4:27:4f:30:1a:9a:be:5e:0f:c9:fc:84:be:b6:a0:57:5a: 5f:e6:16:b4:62:1e:47:34:3b:d2:52:8c:8e:77:23:bc:05:b5: f6:23:3d:c6:f5:41:f1:de:57:86:9e:f9:8c:76:8e:9b:f2:97: fa:bc:df:51:21:7c:9f:e3:ce:b0:5f:19:6c:78:55:f7:8c:21: 7a:3a:14:d5:a0:ca:f2:91:f8:62:cb:e2:ad:53:88:7f:33:a2: 29:c8:39:8f:95:ab:e8:e8:5c:42:ee:2b:db:fb:72:f3:73:9f: 49:bd:f0:9b:3a:29:37:0a:1d:cb:44:42:ef:85:2f:d3:cc:db: ce:c2:76:e8:ac:18:9f:0f:83:2f:42:c9:e3:97:e5:40:1f:18: ca:3b:7d:21:e0:e1:6e:6d:91:05:87:5e:dc:70:83:33:2f:59: d6:d2:56:ed:f9:f0:a2:dd:df:29:f5:8a:05:6b:ec:70:47:da: 48:52:04:b5:a2:b8:b7:0c:3d:e7:9d:81:29:af:35:81:69:c4: c9:bd:57:7a:45:c8:42:5a:34:fa:73:07:79:c3:f6:d7:2b:81: 31:01:93:a4:ec:d0:cf:28:2f:d7:52:b2:8a:18:f5:e0:31:b0: ec:e4:49:bc:f4:a7:c3:46:65:d9:12:88:f8:71:86:95:0f:3b: 2d:7c:45:c7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6v5wN6HV98Ua7nTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk MjIzYWQ5ZDgtNWIzNC00OGNkLTgwMDItNzc5ZDZiMjk5YTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAingW+FBfo0qe7HvWpIZHQ7YqsR03caOxUGSE Kj0IgbrjNhdRuhkS1kHbpjbSNwfSDOCt9qd856jWARJTmsFKR3o7FM3QGp5GOpV3 U+ahZopSW58u4FxUxv4RoBamZhyBhhiRxWFF9iqwZYAuSM3fOPlWB29iTJPU+IgU D7Q3wW1tvmd//Wly1VQIhlxGPaSExj+At+RC/FfQrQBYE2regMKIRCV9Ijpw3jZT 26d9KUXIwm5zxA17Xx2PPC8ZfjtgycUtYmbD89BSsmUVIeO3fuiUktKNQVhA9vXn siIEHw54tUTI3P5CTeCPcmeE9qTFHKaWnar5vvNE3DidRqjzDwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIv5YfJOyNnJ3tRpDc3x0i9V/0GxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWI4YjI5OTktZTQ4MS0z NDk5LTk1YzQtNDMyMDBjZDBmZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCFxCdPMBqavl4PyfyEvragV1pf5ha0Yh5HNDvSUoyOdyO8BbX2Iz3G 9UHx3leGnvmMdo6b8pf6vN9RIXyf486wXxlseFX3jCF6OhTVoMrykfhiy+KtU4h/ M6IpyDmPlavo6FxC7ivb+3Lzc59JvfCbOik3Ch3LRELvhS/TzNvOwnborBifD4Mv Qsnjl+VAHxjKO30h4OFubZEFh17ccIMzL1nW0lbt+fCi3d8p9YoFa+xwR9pIUgS1 ori3DD3nnYEprzWBacTJvVd6RchCWjT6cwd5w/bXK4ExAZOk7NDPKC/XUrKKGPXg MbDs5Em89KfDRmXZEoj4cYaVDzstfEXH -----END CERTIFICATE-----Generated at Wed Aug 19 17:53:29 2026 by rpki-client