$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c395aa6-82d8-305b-882d-70fc9f94aec8.roa File: 5c395aa6-82d8-305b-882d-70fc9f94aec8.roa (raw, json) Hash identifier: tB+PZNv6Ui1blAwy3R3wvmtJa2xtUo0QuVXdNIBaQrY= Subject key identifier: BC:1F:A8:A9:D0:9D:22:C1:59:86:E0:55:C9:71:3F:CB:A3:83:E2:26 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAFE7075F90F2829670C84600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c395aa6-82d8-305b-882d-70fc9f94aec8.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 396580 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e7:07:5f:90:f2:82:96:70:c8:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=70a4f8a0-0bcd-4832-be3b-5e03bbbb01b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a0:73:01:90:3b:b5:44:1d:64:f9:17:7c:34: 91:48:83:81:82:d9:fc:52:fc:76:14:54:99:66:ee: cc:19:00:a5:f0:ce:9f:b6:27:66:4e:41:dd:90:cd: c0:79:8e:9b:24:58:78:3b:50:32:e8:ae:59:f0:d7: 87:40:04:e6:87:ff:ad:34:35:8c:3d:5d:7c:a4:f7: b2:69:ae:d4:2e:e0:4e:ee:8f:96:9f:d8:fe:4e:33: 8f:b1:73:03:82:2e:eb:b8:37:d7:c3:2b:8a:7c:ec: f4:ba:ec:49:a8:62:61:46:4b:d4:60:ba:71:4a:66: 2e:4f:a5:90:d0:c0:87:9b:0d:4d:d1:0d:36:9c:9f: 97:f7:c6:1a:6b:cc:26:9c:e8:eb:b8:48:28:e6:eb: 4d:65:7e:7b:90:ac:47:30:7b:68:f1:68:a0:75:c4: 36:ae:d0:60:02:96:f3:cc:6d:6d:82:79:4a:1c:be: 30:1d:7f:0d:32:20:aa:19:de:7f:f4:3b:c1:81:89: b3:fe:d7:e8:b6:17:f6:1e:49:9c:5f:54:01:2c:15: d9:43:fb:ac:f7:6a:28:47:3b:22:da:39:e0:6f:84: a7:f3:9a:84:6b:92:19:75:f0:4d:a4:94:2c:0b:f1: ab:b5:d0:6a:51:40:5b:da:dd:ad:d2:ad:2d:eb:cc: 8a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:1F:A8:A9:D0:9D:22:C1:59:86:E0:55:C9:71:3F:CB:A3:83:E2:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c395aa6-82d8-305b-882d-70fc9f94aec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:52:8a:cd:d4:ad:d2:28:20:b6:5e:46:a6:0f:60:f7:d5:83: 23:42:89:55:f5:e5:9b:e4:19:f4:42:de:48:a9:21:b1:f2:5d: 89:d4:ea:ea:1b:57:1e:b7:e5:d5:dd:a2:1c:dd:b9:36:f3:69: 57:7d:85:b5:7c:d5:30:a3:24:62:4b:87:37:ca:37:13:51:c7: 55:5a:fb:0d:e7:b6:9e:02:57:13:da:0c:31:16:ce:17:02:b9: 50:1a:98:05:af:42:a9:13:cc:d2:90:fc:94:c4:98:66:46:fd: 37:62:51:79:c6:49:41:a1:64:30:6a:54:56:25:a9:a3:1e:8d: 21:16:1e:b7:db:98:44:4d:ce:b6:8c:b5:eb:cf:b1:9e:28:d3: 97:05:6d:d3:8b:37:bc:d4:09:80:1d:6b:7a:bb:6b:0f:f9:e4: 0d:ae:d7:2c:fa:21:88:8c:df:81:77:53:27:6b:1f:56:bb:da: 08:f7:b7:4c:4b:6a:df:90:d1:3a:79:51:de:85:df:5e:14:aa: a7:a5:aa:8d:49:67:b4:c4:0d:57:b2:0a:b1:47:0c:e3:85:7b: 7b:b1:80:57:3e:d9:8f:0f:23:1e:8b:a7:e7:40:be:76:3d:12: 45:0f:9a:cc:4e:34:ec:93:72:c5:4f:be:ce:47:e1:70:3f:f3: 92:b1:4f:56 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6v5wdfkPKClnDIRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk NzBhNGY4YTAtMGJjZC00ODMyLWJlM2ItNWUwM2JiYmIwMWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KBzAZA7tUQdZPkXfDSRSIOBgtn8Uvx2FFSZ Zu7MGQCl8M6ftidmTkHdkM3AeY6bJFh4O1Ay6K5Z8NeHQATmh/+tNDWMPV18pPey aa7ULuBO7o+Wn9j+TjOPsXMDgi7ruDfXwyuKfOz0uuxJqGJhRkvUYLpxSmYuT6WQ 0MCHmw1N0Q02nJ+X98Yaa8wmnOjruEgo5utNZX57kKxHMHto8WigdcQ2rtBgApbz zG1tgnlKHL4wHX8NMiCqGd5/9DvBgYmz/tfothf2HkmcX1QBLBXZQ/us92ooRzsi 2jngb4Sn85qEa5IZdfBNpJQsC/GrtdBqUUBb2t2t0q0t68yK1QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLwfqKnQnSLBWYbgVclxP8ujg+ImMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWMzOTVhYTYtODJkOC0z MDViLTg4MmQtNzBmYzlmOTRhZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBnUorN1K3SKCC2XkamD2D31YMjQolV9eWb5Bn0Qt5IqSGx8l2J1Orq G1cet+XV3aIc3bk282lXfYW1fNUwoyRiS4c3yjcTUcdVWvsN57aeAlcT2gwxFs4X ArlQGpgFr0KpE8zSkPyUxJhmRv03YlF5xklBoWQwalRWJamjHo0hFh6325hETc62 jLXrz7GeKNOXBW3Tize81AmAHWt6u2sP+eQNrtcs+iGIjN+Bd1Mnax9Wu9oI97dM S2rfkNE6eVHehd9eFKqnpaqNSWe0xA1XsgqxRwzjhXt7sYBXPtmPDyMei6fnQL52 PRJFD5rMTjTsk3LFT77OR+FwP/OSsU9W -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:51 2026 by rpki-client