$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856f5693-c4d3-32ad-a9ff-f8a0f092265c.roa File: 856f5693-c4d3-32ad-a9ff-f8a0f092265c.roa (raw, json) Hash identifier: b/ThOxg4SeKfXczg5xiX+3qpbFGftiw1DTvfH9G5kP8= Subject key identifier: 99:47:79:10:1A:F3:86:6C:A1:C9:DC:4A:B4:BA:BF:E9:8F:B9:E4:A5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAE81B34789F7E95D2650F980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856f5693-c4d3-32ad-a9ff-f8a0f092265c.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 397195 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:b3:47:89:f7:e9:5d:26:50:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=8a9a104a-6b94-46b3-b2af-b9223a9653f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:27:c1:dd:6e:ed:80:9f:85:22:59:46:f7:c9: fd:33:42:0d:da:86:64:00:75:67:d8:3f:a4:9f:08: 74:37:6f:0d:53:44:f9:1f:1a:8e:ae:53:bc:7b:c7: b8:4c:2c:28:1b:f7:42:13:fb:2d:74:8e:88:34:71: ed:6f:da:92:1b:92:e1:28:ee:43:86:a8:c4:b6:5d: 16:4e:55:ba:f5:65:d6:cc:5a:7b:8a:08:12:46:ea: 53:57:f8:9c:15:27:1b:b4:7b:46:d6:5a:3e:c5:dd: e9:ce:9d:68:43:f7:77:44:81:7c:61:d0:97:36:e1: c4:ab:cf:61:24:88:ed:85:b1:69:48:aa:b6:85:04: d2:ec:af:d1:bc:ab:b0:df:42:46:4c:1c:e2:1e:83: 65:1b:20:45:0b:f6:bc:64:19:f7:b7:b4:bf:c9:bc: b5:d4:7c:85:e4:08:f3:4f:fa:5d:27:81:c0:63:d9: 15:14:e0:b9:29:51:cc:5b:b4:7d:8f:86:19:82:88: 39:57:99:cb:3f:2a:83:92:a8:b2:ec:89:e5:64:10: a2:85:4c:25:aa:34:f9:cf:4e:ab:e9:5c:e4:b2:d0: 61:44:9d:ad:6a:c8:10:dd:60:e6:8a:51:cb:9e:f2: 16:13:e3:9a:17:42:ca:f3:c5:aa:fe:53:3d:99:e7: 4c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:47:79:10:1A:F3:86:6C:A1:C9:DC:4A:B4:BA:BF:E9:8F:B9:E4:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856f5693-c4d3-32ad-a9ff-f8a0f092265c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:5f:13:d1:a1:56:5a:f1:56:aa:30:65:0d:43:b9:59:c8:a7: 76:d5:56:98:dd:28:5c:3d:45:89:9b:8a:03:d5:b9:89:a7:f1: fd:bc:18:ac:d7:93:e4:ff:fe:3e:48:59:d9:49:3e:6d:a4:a3: e5:5d:49:7d:13:15:de:71:e5:0a:e3:0c:fa:cd:e5:3e:27:02: 86:7a:52:b2:1f:0f:dd:cc:f0:cb:ca:10:f8:2c:ea:c0:ac:01: ee:90:82:68:c8:a7:31:f4:d9:49:1b:f8:5d:8d:3c:30:35:67: 61:b3:59:a2:7c:88:dc:67:0a:f2:3f:6f:af:4c:48:08:f4:f6: 37:a0:be:4b:e0:c7:7c:f5:0b:de:52:72:3d:ba:b8:d5:90:3c: c0:ae:6f:d9:e3:59:88:b5:41:10:19:ad:41:39:9a:8f:b6:65: fc:88:bc:f1:11:13:c7:de:f9:ea:bd:d3:be:36:c4:b0:0b:0e: 52:06:59:ca:a1:34:ca:90:a1:75:ff:67:a1:38:b4:86:03:4b: 2f:da:b6:94:ae:cd:56:59:90:80:c9:cd:7d:f0:2d:ed:d4:66: 6f:e3:74:2b:a8:bc:24:8e:f8:6a:ba:2f:90:3d:a8:00:15:a6: 53:1d:38:eb:3f:4b:0b:4b:5e:52:93:e0:54:38:14:94:9f:2d: 4a:35:20:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugbNHiffpXSZQ+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk OGE5YTEwNGEtNmI5NC00NmIzLWIyYWYtYjkyMjNhOTY1M2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyfB3W7tgJ+FIllG98n9M0IN2oZkAHVn2D+k nwh0N28NU0T5HxqOrlO8e8e4TCwoG/dCE/stdI6INHHtb9qSG5LhKO5DhqjEtl0W TlW69WXWzFp7iggSRupTV/icFScbtHtG1lo+xd3pzp1oQ/d3RIF8YdCXNuHEq89h JIjthbFpSKq2hQTS7K/RvKuw30JGTBziHoNlGyBFC/a8ZBn3t7S/yby11HyF5Ajz T/pdJ4HAY9kVFOC5KVHMW7R9j4YZgog5V5nLPyqDkqiy7InlZBCihUwlqjT5z06r 6VzkstBhRJ2tasgQ3WDmilHLnvIWE+OaF0LK88Wq/lM9medMfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlHeRAa84ZsocncSrS6v+mPueSlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODU2ZjU2OTMtYzRkMy0z MmFkLWE5ZmYtZjhhMGYwOTIyNjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhfE9GhVlrxVqowZQ1DuVnIp3bVVpjdKFw9RYmbigPVuYmn8f28GKzX k+T//j5IWdlJPm2ko+VdSX0TFd5x5QrjDPrN5T4nAoZ6UrIfD93M8MvKEPgs6sCs Ae6QgmjIpzH02Ukb+F2NPDA1Z2GzWaJ8iNxnCvI/b69MSAj09jegvkvgx3z1C95S cj26uNWQPMCub9njWYi1QRAZrUE5mo+2ZfyIvPERE8fe+eq90742xLALDlIGWcqh NMqQoXX/Z6E4tIYDSy/atpSuzVZZkIDJzX3wLe3UZm/jdCuovCSO+Gq6L5A9qAAV plMdOOs/SwtLXlKT4FQ4FJSfLUo1IG4= -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:12 2026 by rpki-client