$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/698462e2-42b4-35b5-a712-a58067b5e726.roa File: 698462e2-42b4-35b5-a712-a58067b5e726.roa (raw, json) Hash identifier: 6dn28sMsg3c3qU266D9fvH6GfMtHXxvAW5HZxJHm+G8= Subject key identifier: A5:83:AD:EC:F8:BE:31:FD:F9:2B:42:1A:F8:36:B7:2D:10:D3:4E:A2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAFE7073180C6C58942518B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/698462e2-42b4-35b5-a712-a58067b5e726.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 36628 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e7:07:31:80:c6:c5:89:42:51:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=8f33d1a5-fd8d-40b1-9e32-2d2a004fb1ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:03:ef:be:86:92:ab:7a:1b:8f:83:f9:30:5b: 3d:a1:e3:d6:80:22:fa:7b:88:69:28:ae:c8:d1:24: 75:02:85:d4:c5:4b:8f:be:0c:e1:01:bb:cc:70:38: f1:23:2d:a4:e8:41:8d:84:b4:ab:7b:40:9d:14:e8: 99:5c:4d:6f:cc:e9:db:8a:4f:3d:7b:e5:22:54:98: 34:5c:96:c2:83:50:1c:eb:05:c4:0a:57:d6:78:74: 19:eb:a3:57:eb:60:44:de:1e:e7:e4:d6:fd:86:76: 94:e0:44:cb:a4:04:c4:09:8f:5e:b7:1a:76:5b:d4: b9:e6:8d:10:ae:df:59:8c:8c:a1:fb:75:44:ac:9a: 5a:66:3b:11:14:db:d2:f2:95:53:2e:c3:f9:b8:df: 3f:3e:2d:25:f0:68:80:01:f5:01:84:3a:38:52:98: 39:08:25:79:8d:25:e3:c5:a1:67:3d:2d:17:e0:f0: 08:76:57:e7:82:08:cd:1d:34:f1:a1:eb:a9:5e:99: 7e:c8:72:2f:1f:a2:12:9c:be:fd:c8:6e:76:80:9b: 06:9b:16:ac:f4:b1:12:98:28:86:da:72:13:49:e1: 45:0e:ce:91:4c:92:09:12:fa:61:87:61:7a:d5:18: 6f:0b:93:12:f4:7f:99:86:be:a1:98:40:3a:ba:53: d9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:83:AD:EC:F8:BE:31:FD:F9:2B:42:1A:F8:36:B7:2D:10:D3:4E:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/698462e2-42b4-35b5-a712-a58067b5e726.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:6e:29:a7:00:7d:1e:37:f9:fa:e1:ba:d5:3e:f1:ae:bf:57: 47:78:0d:a9:80:89:5f:ea:13:c1:9d:fc:75:7f:45:88:56:03: f0:28:64:05:49:e4:a1:bd:1c:6f:04:c6:91:8e:12:cd:fd:12: 22:0d:37:32:cf:36:5c:4c:3d:50:8e:0e:6b:f1:14:6f:80:09: 08:a8:a0:94:c6:5d:62:1e:89:c3:63:7c:0d:e4:f8:97:b6:0a: a0:13:45:6c:0a:0c:c8:ed:8c:01:33:da:a5:15:dc:dc:29:07: d0:d5:e5:d2:22:8a:a5:51:08:11:a7:6e:f0:b9:bf:4a:93:2a: 16:a1:8d:6e:1a:42:5e:ec:a1:2f:e8:30:1b:ab:7e:49:8f:97: b2:8a:55:3f:54:53:b9:89:08:32:0f:fd:67:55:5f:2c:b9:e1: 0c:68:d3:38:77:07:3f:09:6b:87:8e:0f:2f:36:f0:54:24:54: d7:fc:54:9c:90:1a:1b:a4:02:9f:60:95:29:7f:a9:dc:38:c9: 3a:a7:59:ab:7d:1c:c3:fc:62:9a:00:fb:d3:62:8e:af:6f:66: 72:33:cc:9f:8d:cd:55:72:5c:80:99:0c:09:94:25:4f:46:d5: fb:90:a1:2b:74:49:d8:0b:34:86:a3:ef:cc:c8:13:9f:56:22: e6:2e:4c:9e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6v5wcxgMbFiUJRiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk OGYzM2QxYTUtZmQ4ZC00MGIxLTllMzItMmQyYTAwNGZiMWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQPvvoaSq3obj4P5MFs9oePWgCL6e4hpKK7I 0SR1AoXUxUuPvgzhAbvMcDjxIy2k6EGNhLSre0CdFOiZXE1vzOnbik89e+UiVJg0 XJbCg1Ac6wXEClfWeHQZ66NX62BE3h7n5Nb9hnaU4ETLpATECY9etxp2W9S55o0Q rt9ZjIyh+3VErJpaZjsRFNvS8pVTLsP5uN8/Pi0l8GiAAfUBhDo4Upg5CCV5jSXj xaFnPS0X4PAIdlfnggjNHTTxoeupXpl+yHIvH6ISnL79yG52gJsGmxas9LESmCiG 2nITSeFFDs6RTJIJEvphh2F61RhvC5MS9H+Zhr6hmEA6ulPZgwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKWDrez4vjH9+StCGvg2ty0Q006iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjk4NDYyZTItNDJiNC0z NWI1LWE3MTItYTU4MDY3YjVlNzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQALbimnAH0eN/n64brVPvGuv1dHeA2pgIlf6hPBnfx1f0WIVgPwKGQF SeShvRxvBMaRjhLN/RIiDTcyzzZcTD1Qjg5r8RRvgAkIqKCUxl1iHonDY3wN5PiX tgqgE0VsCgzI7YwBM9qlFdzcKQfQ1eXSIoqlUQgRp27wub9KkyoWoY1uGkJe7KEv 6DAbq35Jj5eyilU/VFO5iQgyD/1nVV8sueEMaNM4dwc/CWuHjg8vNvBUJFTX/FSc kBobpAKfYJUpf6ncOMk6p1mrfRzD/GKaAPvTYo6vb2ZyM8yfjc1VclyAmQwJlCVP RtX7kKErdEnYCzSGo+/MyBOfViLmLkye -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:27 2026 by rpki-client