$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7e9d8625-f410-386c-9018-a927f219e329.roa File: 7e9d8625-f410-386c-9018-a927f219e329.roa (raw, json) Hash identifier: TbLmXg1Fkjc1h10BbifxCtdxozKLT+PgNWpEt+Cmq18= Subject key identifier: B2:21:76:5A:A7:BB:1A:FB:03:6D:2E:3C:30:42:3C:4B:0C:F3:28:E7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAE819C8AF56178C2DCC34500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7e9d8625-f410-386c-9018-a927f219e329.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 396588 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:9c:8a:f5:61:78:c2:dc:c3:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=ffcc3b82-1586-4563-9468-fd0eecb04034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1e:d3:ee:14:f0:31:d7:ee:f2:a9:47:13:24: 49:01:74:cf:59:7f:19:91:39:e4:19:3e:a6:df:15: 15:20:99:ba:cd:a2:f5:0d:dc:34:52:4d:86:28:92: d8:d0:bc:9c:15:82:86:c5:8d:4d:2c:61:bc:5e:3d: e8:b9:68:b4:d0:f8:16:21:84:ed:1f:55:c8:c7:67: 4b:c8:11:d0:a0:7c:05:ed:05:34:b4:d5:71:a7:bc: a7:7c:76:77:6d:26:13:ec:a9:99:11:b4:b4:4b:3d: 21:d1:ef:74:9d:92:91:4a:b5:a1:b1:40:69:2d:c9: ac:d1:7d:e2:bb:e1:fe:96:e0:e4:e1:4e:6e:7f:29: db:37:07:d1:2f:2c:c1:02:ef:9b:eb:66:8c:9e:24: a2:1a:8c:b0:b2:bd:b2:12:4d:de:d5:04:a2:67:db: 18:38:b4:4c:12:18:59:6a:e8:47:94:3b:b7:7e:ca: d0:11:ce:0f:e8:16:fc:1d:50:83:58:cd:53:b1:7c: 2b:cf:7b:97:73:29:ee:c5:7f:7a:d5:07:09:8f:25: 22:41:18:75:79:9d:63:de:85:95:c2:bf:f9:1c:9d: a2:4d:fd:94:03:54:2a:a1:5e:c9:9d:69:ad:ad:14: 46:ef:7f:1d:59:71:66:11:c3:d6:ce:92:8f:33:5b: 45:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:21:76:5A:A7:BB:1A:FB:03:6D:2E:3C:30:42:3C:4B:0C:F3:28:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7e9d8625-f410-386c-9018-a927f219e329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:7d:8a:37:44:a4:cf:53:1c:93:0c:ad:da:bf:b3:3f:6c:00: f7:bd:f5:03:c3:4f:49:b8:a6:eb:94:a5:e3:ba:ec:91:43:9d: 68:af:f3:a4:25:1a:ca:a2:ee:b1:dc:b0:81:7f:83:50:f9:86: 7c:5f:4e:44:a7:94:39:28:a9:23:8a:98:a6:15:b6:b4:9c:6e: 73:34:8d:cc:db:88:ab:b2:2d:bc:03:5c:f0:b5:a1:64:ed:02: e6:78:60:1c:78:9d:85:f1:e7:3d:f4:d0:be:83:34:75:4f:a9: fa:ef:88:4c:12:5e:2b:6d:7c:9c:73:f9:b4:d6:a8:24:26:9f: be:ad:5f:73:11:0b:c7:8f:7c:16:3e:13:ac:9e:ab:86:ce:f8: 44:3b:0b:53:e3:cc:87:53:67:28:3f:aa:91:a4:5c:3d:6f:31: 38:a0:51:84:76:af:8d:db:fb:71:dc:f2:f3:e7:48:12:a6:e3: 28:28:8a:8a:fb:85:2c:1c:c2:61:f5:68:d2:1e:28:36:00:d6: 1b:2b:fb:35:5d:f8:e0:a2:c6:9b:3b:95:4a:0a:9c:27:55:bf: 7d:e1:55:dd:c6:8d:36:08:0f:76:81:5c:b9:41:8a:f4:5a:59: 13:16:eb:5f:1e:9f:38:82:8f:a5:e0:4a:e5:12:71:34:62:7f: d6:cf:0e:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugZyK9WF4wtzDRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk ZmZjYzNiODItMTU4Ni00NTYzLTk0NjgtZmQwZWVjYjA0MDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgB7T7hTwMdfu8qlHEyRJAXTPWX8ZkTnkGT6m 3xUVIJm6zaL1Ddw0Uk2GKJLY0LycFYKGxY1NLGG8Xj3ouWi00PgWIYTtH1XIx2dL yBHQoHwF7QU0tNVxp7ynfHZ3bSYT7KmZEbS0Sz0h0e90nZKRSrWhsUBpLcms0X3i u+H+luDk4U5ufynbNwfRLyzBAu+b62aMniSiGoywsr2yEk3e1QSiZ9sYOLRMEhhZ auhHlDu3fsrQEc4P6Bb8HVCDWM1TsXwrz3uXcynuxX961QcJjyUiQRh1eZ1j3oWV wr/5HJ2iTf2UA1QqoV7JnWmtrRRG738dWXFmEcPWzpKPM1tF3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIhdlqnuxr7A20uPDBCPEsM8yjnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2U5ZDg2MjUtZjQxMC0z ODZjLTkwMTgtYTkyN2YyMTllMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI99ijdEpM9THJMMrdq/sz9sAPe99QPDT0m4puuUpeO67JFDnWiv86Ql Gsqi7rHcsIF/g1D5hnxfTkSnlDkoqSOKmKYVtrScbnM0jczbiKuyLbwDXPC1oWTt AuZ4YBx4nYXx5z300L6DNHVPqfrviEwSXittfJxz+bTWqCQmn76tX3MRC8ePfBY+ E6yeq4bO+EQ7C1PjzIdTZyg/qpGkXD1vMTigUYR2r43b+3Hc8vPnSBKm4ygoior7 hSwcwmH1aNIeKDYA1hsr+zVd+OCixps7lUoKnCdVv33hVd3GjTYID3aBXLlBivRa WRMW618enziCj6XgSuUScTRif9bPDvQ= -----END CERTIFICATE-----Generated at Wed Aug 19 16:57:19 2026 by rpki-client