$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa File: af8f6829-25f2-342c-8e95-5e209025a010.roa (raw, json) Hash identifier: kjV2vvPq1oYmRLrkykcPmzzUDSWcHDPAtMyGper9Yns= Subject key identifier: EF:5F:DF:F3:12:4F:9F:35:6E:85:F8:31:9D:15:DE:B6:A0:E5:FA:87 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAFE7043DC900E206ECBC04E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 20431 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e7:04:3d:c9:00:e2:06:ec:bc:04:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=a69423f3-e57e-4019-ba52-5c9e84de1526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7a:32:58:bb:83:88:21:0e:3d:3b:2c:a1:c5: 7d:66:c4:c8:ac:5e:c4:b5:f6:7f:f6:60:87:dd:09: 7b:ca:5f:09:22:87:9c:01:39:ed:d2:f3:1c:99:e0: 5e:34:c7:bb:e0:6f:27:36:1f:4c:2e:0a:92:8d:9e: 1d:6a:0a:f8:02:07:73:05:db:75:40:b6:ec:bc:58: 6a:69:40:96:03:10:f3:92:5d:9c:01:11:b7:e5:87: b3:9c:e4:95:d0:4c:3d:0c:ae:69:35:8f:c5:42:dc: 86:8a:aa:ff:9b:a9:8e:e1:a1:66:a9:44:88:fa:fc: f1:31:ca:26:d4:07:24:56:d5:ee:3c:14:9c:71:b4: c3:62:b7:b2:93:ea:c5:dd:e8:b3:7f:98:6b:fb:b1: 82:ad:bf:e1:ff:93:0c:c3:f1:3d:15:d7:21:10:01: c3:e1:6f:95:a8:ac:7b:9a:27:2f:f2:b5:8a:f3:1e: 70:38:18:85:5f:20:a0:8d:b6:b7:f3:9a:c6:71:f2: 61:76:b2:54:11:63:4b:28:a6:44:59:a7:2c:94:47: b0:83:bb:42:97:14:f5:1a:93:84:93:bf:49:8c:e9: 9d:b1:ed:45:59:1d:a4:da:f0:75:05:c6:00:73:77: 7a:f8:3d:c1:41:33:7d:61:2c:2a:dc:25:7d:60:67: 73:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5F:DF:F3:12:4F:9F:35:6E:85:F8:31:9D:15:DE:B6:A0:E5:FA:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:6f:d2:5f:2a:23:8e:c6:3d:b6:09:c5:30:cd:76:4b:ff:c8: e1:5d:6f:8d:30:ec:21:0e:00:e0:b9:a8:1a:85:54:0b:5d:a2: d7:f9:06:02:58:a1:dc:d5:ad:22:8b:ea:38:39:17:34:24:20: 31:0a:52:79:99:f4:80:60:b3:43:5e:c9:f9:9b:29:74:e0:fa: d2:76:7b:df:a6:9c:ca:07:c3:36:78:87:40:8b:04:1f:06:e8: 25:6c:04:a8:29:8c:98:8b:30:1b:32:6e:11:31:6a:94:d5:87: 7b:83:24:34:59:c9:9b:9f:79:c3:f8:69:23:5e:c2:d8:4e:d9: 78:ae:42:d9:3f:7d:1c:eb:83:e9:79:7d:e8:71:51:c8:73:5c: 6a:9c:64:8b:02:10:aa:52:a6:14:41:bc:3f:ff:9a:51:08:22: a1:ba:68:23:32:23:2c:35:f4:c4:24:22:ce:38:11:91:a4:37: 93:60:c2:79:cb:1f:a9:38:ec:3e:f4:89:86:b5:25:50:5b:41: 0b:d4:0d:99:4f:8b:09:36:81:09:18:64:00:a8:00:7a:46:49: 7f:36:4a:68:0e:d1:fa:d4:30:3e:9d:1e:68:76:1c:2b:87:1b: 44:87:f6:6f:ea:30:c0:e7:5a:38:0a:b5:c5:41:2f:b9:18:eb: 87:58:8f:36 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6v5wQ9yQDiBuy8BOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk YTY5NDIzZjMtZTU3ZS00MDE5LWJhNTItNWM5ZTg0ZGUxNTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXoyWLuDiCEOPTssocV9ZsTIrF7EtfZ/9mCH 3Ql7yl8JIoecATnt0vMcmeBeNMe74G8nNh9MLgqSjZ4dagr4AgdzBdt1QLbsvFhq aUCWAxDzkl2cARG35YeznOSV0Ew9DK5pNY/FQtyGiqr/m6mO4aFmqUSI+vzxMcom 1AckVtXuPBSccbTDYreyk+rF3eizf5hr+7GCrb/h/5MMw/E9FdchEAHD4W+VqKx7 micv8rWK8x5wOBiFXyCgjba385rGcfJhdrJUEWNLKKZEWacslEewg7tClxT1GpOE k79JjOmdse1FWR2k2vB1BcYAc3d6+D3BQTN9YSwq3CV9YGdz/QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO9f3/MST581boX4MZ0V3rag5fqHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWY4ZjY4MjktMjVmMi0z NDJjLThlOTUtNWUyMDkwMjVhMDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBxb9JfKiOOxj22CcUwzXZL/8jhXW+NMOwhDgDguagahVQLXaLX+QYC WKHc1a0ii+o4ORc0JCAxClJ5mfSAYLNDXsn5myl04PrSdnvfppzKB8M2eIdAiwQf BuglbASoKYyYizAbMm4RMWqU1Yd7gyQ0Wcmbn3nD+GkjXsLYTtl4rkLZP30c64Pp eX3ocVHIc1xqnGSLAhCqUqYUQbw//5pRCCKhumgjMiMsNfTEJCLOOBGRpDeTYMJ5 yx+pOOw+9ImGtSVQW0EL1A2ZT4sJNoEJGGQAqAB6Rkl/NkpoDtH61DA+nR5odhwr hxtEh/Zv6jDA51o4CrXFQS+5GOuHWI82 -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:09 2026 by rpki-client