$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0bfd918-56d6-3e11-a3c0-43db32c6ef1a.roa File: a0bfd918-56d6-3e11-a3c0-43db32c6ef1a.roa (raw, json) Hash identifier: GE9mEnI2T+Kn4+6JTZ5ovJ3XuAm0RQnY1hXqbF1VhWk= Subject key identifier: 1C:F4:F5:0B:85:C1:7D:2C:19:22:56:04:02:0E:31:C5:15:46:39:36 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAE81B87BFC393B62E1975860 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0bfd918-56d6-3e11-a3c0-43db32c6ef1a.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 396571 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:b8:7b:fc:39:3b:62:e1:97:58:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=b9fb9f53-d69d-4254-b8e3-974c676e62d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b5:6d:f5:cb:cc:fd:c5:2e:51:97:d7:cf:f1: 97:c6:49:a7:b7:33:31:25:01:21:65:c8:04:d4:47: 2d:d2:b2:e6:9a:77:3c:42:7d:2d:c5:89:7a:aa:ee: 72:52:02:27:dd:2c:f0:9b:b8:88:84:e3:42:1b:0e: c9:9a:85:19:23:5e:b6:bd:f9:90:17:80:ce:06:52: bb:29:5c:dd:00:98:a9:88:46:34:4c:78:f5:a2:32: ec:a0:06:f2:f3:23:b8:11:ea:df:2e:ec:a3:5e:92: 3c:3f:9a:22:2e:de:ca:1c:bf:05:14:c8:d5:19:5d: 18:ff:7c:7a:22:01:5e:32:ef:00:52:a9:b8:c5:ea: f6:2b:46:5c:99:2b:78:80:27:cc:13:21:7c:0b:39: cc:e8:01:42:a5:22:f4:89:29:37:ba:19:a9:68:5c: 55:dd:61:25:2b:ec:91:7e:69:f0:bc:93:5b:ea:00: 1d:e8:f3:47:c4:0b:39:ac:48:49:40:75:62:50:9f: a3:bd:a3:a5:29:5d:75:f9:13:63:4c:6b:27:8f:79: 03:4a:7e:88:12:25:ec:56:36:8a:cd:ba:fc:93:d6: 41:89:78:a3:6f:bb:ab:61:30:e8:bd:0b:13:c7:35: 13:a7:31:a6:49:17:a0:05:42:18:b3:b6:f3:6c:27: b8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F4:F5:0B:85:C1:7D:2C:19:22:56:04:02:0E:31:C5:15:46:39:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0bfd918-56d6-3e11-a3c0-43db32c6ef1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:92:a6:d5:6a:73:1d:1b:36:25:2d:bc:fe:85:e0:14:79:e3: a7:36:19:7e:6b:ad:93:fc:7c:42:0a:60:e5:75:48:3b:b3:84: 34:41:e2:e0:c8:fc:8b:39:38:5d:81:b2:ef:ae:38:46:97:67: c7:2c:0d:35:48:b5:cf:eb:26:3d:4e:08:99:f3:45:16:42:37: ec:96:8c:0a:37:5d:69:34:80:ac:ad:db:8d:6b:48:85:7b:98: ba:b3:20:70:78:cf:11:47:20:24:fe:e2:5a:13:e5:ac:d3:25: 36:59:e2:d7:b8:4e:38:c9:7a:cd:86:30:cc:77:3b:f7:70:01: 97:75:59:86:be:bf:d8:1a:2b:27:21:3f:2c:17:49:5b:b9:16: 35:81:fe:a6:7f:90:d8:bd:67:30:29:4e:09:19:b4:81:01:13: a1:34:3e:51:d9:e7:83:2f:ce:b3:6d:42:1c:55:59:31:3f:4d: f8:4c:26:a8:26:10:51:e6:e8:91:18:b9:05:6b:e5:0b:57:eb: 7e:36:2d:ff:db:cd:94:ce:6c:63:98:b7:54:21:fa:96:45:3a: 6d:9b:b2:c8:f0:b0:9d:3c:43:27:17:c4:f4:b1:f2:04:2f:2d: a3:d1:7b:61:63:b6:d6:e6:40:24:e9:2f:93:73:36:0c:1b:55: 58:88:ac:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugbh7/Dk7YuGXWGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk YjlmYjlmNTMtZDY5ZC00MjU0LWI4ZTMtOTc0YzY3NmU2MmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7Vt9cvM/cUuUZfXz/GXxkmntzMxJQEhZcgE 1Ect0rLmmnc8Qn0txYl6qu5yUgIn3Szwm7iIhONCGw7JmoUZI162vfmQF4DOBlK7 KVzdAJipiEY0THj1ojLsoAby8yO4EerfLuyjXpI8P5oiLt7KHL8FFMjVGV0Y/3x6 IgFeMu8AUqm4xer2K0ZcmSt4gCfMEyF8CznM6AFCpSL0iSk3uhmpaFxV3WElK+yR fmnwvJNb6gAd6PNHxAs5rEhJQHViUJ+jvaOlKV11+RNjTGsnj3kDSn6IEiXsVjaK zbr8k9ZBiXijb7urYTDovQsTxzUTpzGmSRegBUIYs7bzbCe4qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBz09QuFwX0sGSJWBAIOMcUVRjk2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTBiZmQ5MTgtNTZkNi0z ZTExLWEzYzAtNDNkYjMyYzZlZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCSptVqcx0bNiUtvP6F4BR546c2GX5rrZP8fEIKYOV1SDuzhDRB4uDI /Is5OF2Bsu+uOEaXZ8csDTVItc/rJj1OCJnzRRZCN+yWjAo3XWk0gKyt241rSIV7 mLqzIHB4zxFHICT+4loT5azTJTZZ4te4TjjJes2GMMx3O/dwAZd1WYa+v9gaKych PywXSVu5FjWB/qZ/kNi9ZzApTgkZtIEBE6E0PlHZ54MvzrNtQhxVWTE/TfhMJqgm EFHm6JEYuQVr5QtX6342Lf/bzZTObGOYt1Qh+pZFOm2bssjwsJ08QycXxPSx8gQv LaPRe2FjttbmQCTpL5NzNgwbVViIrEk= -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:10 2026 by rpki-client