$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a57ef3f6-66a3-3c7d-9c97-1fe5d6a438d2.roa File: a57ef3f6-66a3-3c7d-9c97-1fe5d6a438d2.roa (raw, json) Hash identifier: p8OH6/YS3OS3m/wHmPUp+Ecq9xxpsVsQr58pfxs/cKI= Subject key identifier: 3E:BB:1B:DF:3F:12:24:45:DB:2E:A7:76:6E:FA:AC:C8:0C:AB:7F:CB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAFE70781B7FCD42DB39DE180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a57ef3f6-66a3-3c7d-9c97-1fe5d6a438d2.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 36624 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e7:07:81:b7:fc:d4:2d:b3:9d:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=c17cf041-643e-4d72-9712-45957387208d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9a:33:6d:16:1c:76:f9:be:ec:3c:3e:d0:8c: fb:72:42:79:58:21:7f:e8:28:2b:50:e4:00:83:95: d2:f8:14:18:6e:97:b8:f9:b2:a0:de:1f:19:60:8e: 03:70:6b:b7:7f:e8:28:de:0b:31:5e:0d:13:2f:b8: 78:fa:66:42:89:6d:42:cd:a9:ff:9f:90:53:2a:bd: f2:ac:78:08:cd:8d:94:2a:cc:b1:ff:85:90:01:4b: 63:72:8c:10:4a:a4:92:62:ac:e3:9c:fb:58:f7:84: c6:10:47:af:fa:1a:12:03:d5:1e:62:bc:80:21:5f: 08:49:2d:e6:0a:fd:be:a7:eb:d1:39:cc:5a:59:e5: e5:d7:3b:40:cd:49:6d:30:61:50:e0:b2:cf:05:8b: 9c:59:f3:4f:06:fa:ed:ab:d2:d4:ff:fa:54:76:ce: 86:d6:f4:49:36:34:e5:08:27:ba:83:3b:0b:e1:96: 5a:71:12:15:ce:85:af:40:f1:f0:08:73:c5:89:d8: 07:92:66:92:ad:6b:dc:e0:6b:d2:42:54:94:56:9c: f6:2f:f8:20:09:0e:6b:b6:bb:d1:b2:18:33:63:b9: 0c:c3:a2:34:d2:06:c5:5a:e9:9e:37:cc:5a:6a:39: bb:7d:4f:bf:06:d7:5d:aa:22:d8:9c:5d:fb:9f:64: 05:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:BB:1B:DF:3F:12:24:45:DB:2E:A7:76:6E:FA:AC:C8:0C:AB:7F:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a57ef3f6-66a3-3c7d-9c97-1fe5d6a438d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:56:95:c1:56:4c:8b:9f:50:a2:5a:f2:4f:e1:59:9c:4f:53: 9e:5f:c3:85:97:62:07:6d:be:01:be:c5:92:f1:08:97:91:80: 5f:43:b1:b6:e9:ba:7b:82:a0:8a:dc:b5:d2:b0:74:6f:db:35: 45:20:d0:34:4c:a4:e0:02:00:26:f1:79:48:9f:ee:82:d8:cc: 2f:06:00:d4:65:a8:09:c1:3d:39:64:5d:14:9d:8c:ad:0f:2c: 4d:d9:07:5b:7d:ed:cc:b1:bb:8b:3a:41:c2:fc:28:99:17:c4: f3:58:60:c5:90:d4:6d:d8:fb:49:b3:70:6d:50:21:f7:7c:76: 53:f7:94:12:ab:23:3c:cc:80:15:27:e0:98:05:a5:83:59:36: b2:90:dc:b4:22:90:f6:0c:a5:7d:fc:7f:db:60:b0:3d:13:41: d8:ad:50:e9:3f:29:d2:7f:07:d9:ec:7a:98:75:c4:9d:c3:01: e6:f9:e2:09:74:4b:76:2c:6d:10:da:18:49:63:c9:6f:7b:42: dd:a5:85:ea:73:21:d9:b7:da:e4:2b:2a:3c:4b:72:d3:13:0a: 76:a6:15:e2:e7:d4:bc:4b:67:be:84:83:cd:11:67:a7:1b:e1: c8:cb:54:54:77:15:a9:27:49:c9:49:be:2e:4b:81:06:10:0b: 45:61:0f:81 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6v5weBt/zULbOd4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk YzE3Y2YwNDEtNjQzZS00ZDcyLTk3MTItNDU5NTczODcyMDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5ozbRYcdvm+7Dw+0Iz7ckJ5WCF/6CgrUOQA g5XS+BQYbpe4+bKg3h8ZYI4DcGu3f+go3gsxXg0TL7h4+mZCiW1Czan/n5BTKr3y rHgIzY2UKsyx/4WQAUtjcowQSqSSYqzjnPtY94TGEEev+hoSA9UeYryAIV8ISS3m Cv2+p+vROcxaWeXl1ztAzUltMGFQ4LLPBYucWfNPBvrtq9LU//pUds6G1vRJNjTl CCe6gzsL4ZZacRIVzoWvQPHwCHPFidgHkmaSrWvc4GvSQlSUVpz2L/ggCQ5rtrvR shgzY7kMw6I00gbFWumeN8xaajm7fU+/BtddqiLYnF37n2QFawIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD67G98/EiRF2y6ndm76rMgMq3/LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTU3ZWYzZjYtNjZhMy0z YzdkLTljOTctMWZlNWQ2YTQzOGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCJVpXBVkyLn1CiWvJP4VmcT1OeX8OFl2IHbb4BvsWS8QiXkYBfQ7G2 6bp7gqCK3LXSsHRv2zVFINA0TKTgAgAm8XlIn+6C2MwvBgDUZagJwT05ZF0UnYyt DyxN2Qdbfe3MsbuLOkHC/CiZF8TzWGDFkNRt2PtJs3BtUCH3fHZT95QSqyM8zIAV J+CYBaWDWTaykNy0IpD2DKV9/H/bYLA9E0HYrVDpPynSfwfZ7HqYdcSdwwHm+eIJ dEt2LG0Q2hhJY8lve0LdpYXqcyHZt9rkKyo8S3LTEwp2phXi59S8S2e+hIPNEWen G+HIy1RUdxWpJ0nJSb4uS4EGEAtFYQ+B -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:55 2026 by rpki-client