$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/84b10b27-a9d2-3de5-b8dc-2dde7bf28f6a.roa File: 84b10b27-a9d2-3de5-b8dc-2dde7bf28f6a.roa (raw, json) Hash identifier: S5ppX6JOR7aoYzMzPEFOJYtgYXhEvGCPUB9qEU74hDM= Subject key identifier: CC:E7:98:3A:A1:E1:30:EF:2E:57:4B:4B:12:C5:BC:C0:2B:7A:54:80 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAE819A761155405412379788 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/84b10b27-a9d2-3de5-b8dc-2dde7bf28f6a.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 396582 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:9a:76:11:55:40:54:12:37:97:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=a092b916-3792-4a7d-a796-9545da4314df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b3:6e:b4:d3:e2:ff:70:a1:e4:81:1a:fb:14: 48:a3:c2:02:d5:b8:a9:2a:f2:83:f1:6a:e9:ff:a8: 5d:4c:b6:2f:bb:00:dc:d7:fc:b0:b0:95:8f:82:de: de:4f:33:43:f9:c6:0a:ae:e5:44:a2:d1:69:6d:55: 1b:1c:e5:26:8f:2b:7d:61:af:a1:24:48:e4:17:e4: 95:b5:f0:bf:7c:74:53:50:56:04:8d:b1:d3:8d:f8: 09:4a:13:89:55:e2:83:45:9e:e6:c3:ed:df:0f:18: 3e:64:c6:ff:a1:01:1e:93:86:9c:20:47:2b:92:12: c5:db:07:86:4a:b2:57:4b:27:05:64:1b:52:3f:4d: 42:31:40:60:e9:33:20:f5:1d:43:8f:93:fc:b7:ea: 50:4f:6f:c3:7f:94:42:08:9f:be:67:ea:48:50:2f: b6:71:98:38:c5:2d:b9:d6:fa:12:8a:9f:6e:4d:71: 1f:98:69:14:b9:17:f9:0b:e5:30:6f:dd:9e:36:0c: 77:cf:90:5b:ff:89:b7:38:a8:81:de:78:85:0f:f1: 45:09:e2:51:69:6e:0a:08:3d:ea:88:90:aa:1e:92: ff:95:6d:6c:47:9b:c8:25:7a:f7:d0:00:1f:92:c0: c3:3a:53:34:d1:38:7b:d0:ac:68:65:d4:7a:2d:a9: c8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E7:98:3A:A1:E1:30:EF:2E:57:4B:4B:12:C5:BC:C0:2B:7A:54:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/84b10b27-a9d2-3de5-b8dc-2dde7bf28f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:82:f6:bd:15:fd:f1:20:0d:3c:44:ff:8d:57:37:e8:ef:dc: 83:32:94:fd:c8:34:d5:c8:fc:cc:02:28:61:56:af:52:4f:9b: e9:5a:d8:db:53:67:e1:f9:7a:4d:9f:0d:5d:11:30:1f:4f:0d: ea:b0:55:31:1b:10:e8:5b:d2:36:70:ea:0a:d8:55:a8:dd:34: 32:73:dd:e6:75:67:71:39:54:a2:fa:d3:09:f3:a9:ea:e4:d9: 28:7f:7a:1f:09:68:68:da:f7:79:5e:69:f1:00:66:7e:ea:c3: 7c:a1:63:b6:65:61:1c:de:48:bd:e1:92:54:c7:15:73:38:74: cd:8d:bc:ba:3e:a2:1a:0b:60:66:c2:ba:f9:35:8c:18:3e:0c: ae:cf:67:08:94:4d:76:81:b6:39:da:fa:bd:f6:17:51:cc:a9: 4c:c8:f2:a8:62:ef:69:41:fd:71:39:6e:e6:e5:ad:8e:22:1c: ec:6d:cb:d7:68:6f:f2:1d:c9:e1:7f:07:62:0d:dc:0a:b8:67: 1e:2b:0a:39:e2:48:5a:81:ce:a4:0b:32:7e:e4:9e:84:c7:e7: 08:d4:ed:82:16:65:a9:e8:5c:d6:8b:3f:30:ec:1d:42:03:8d: 21:ad:5d:09:9d:95:3f:70:da:09:90:91:91:32:ef:b4:52:04: ec:a2:1b:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugZp2EVVAVBI3l4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk YTA5MmI5MTYtMzc5Mi00YTdkLWE3OTYtOTU0NWRhNDMxNGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrNutNPi/3Ch5IEa+xRIo8IC1bipKvKD8Wrp /6hdTLYvuwDc1/ywsJWPgt7eTzND+cYKruVEotFpbVUbHOUmjyt9Ya+hJEjkF+SV tfC/fHRTUFYEjbHTjfgJShOJVeKDRZ7mw+3fDxg+ZMb/oQEek4acIEcrkhLF2weG SrJXSycFZBtSP01CMUBg6TMg9R1Dj5P8t+pQT2/Df5RCCJ++Z+pIUC+2cZg4xS25 1voSip9uTXEfmGkUuRf5C+Uwb92eNgx3z5Bb/4m3OKiB3niFD/FFCeJRaW4KCD3q iJCqHpL/lW1sR5vIJXr30AAfksDDOlM00Th70KxoZdR6LanIWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMznmDqh4TDvLldLSxLFvMArelSAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODRiMTBiMjctYTlkMi0z ZGU1LWI4ZGMtMmRkZTdiZjI4ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSC9r0V/fEgDTxE/41XN+jv3IMylP3INNXI/MwCKGFWr1JPm+la2NtT Z+H5ek2fDV0RMB9PDeqwVTEbEOhb0jZw6grYVajdNDJz3eZ1Z3E5VKL60wnzqerk 2Sh/eh8JaGja93leafEAZn7qw3yhY7ZlYRzeSL3hklTHFXM4dM2NvLo+ohoLYGbC uvk1jBg+DK7PZwiUTXaBtjna+r32F1HMqUzI8qhi72lB/XE5bublrY4iHOxty9do b/IdyeF/B2IN3Aq4Zx4rCjniSFqBzqQLMn7knoTH5wjU7YIWZanoXNaLPzDsHUID jSGtXQmdlT9w2gmQkZEy77RSBOyiG/M= -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:47 2026 by rpki-client