$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3e59f0f-3759-3833-9a05-71cc1b1e1732.roa File: b3e59f0f-3759-3833-9a05-71cc1b1e1732.roa (raw, json) Hash identifier: eO+x05omw6aFmUpc+3N1c55H5+GoHGq0jlXwlG8HCq4= Subject key identifier: 58:70:F8:B3:E5:0E:B2:AB:3C:29:21:95:FD:CB:5E:34:F7:84:8D:51 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAE81B3C9185BAC3B5E0C9F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3e59f0f-3759-3833-9a05-71cc1b1e1732.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 396542 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:b3:c9:18:5b:ac:3b:5e:0c:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=91d52b62-6a4c-4dc1-8911-38fc7e55c43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:03:48:74:e7:f0:2e:c6:d5:90:92:9d:da:78: e0:06:87:e9:22:3d:9f:13:78:11:f3:ef:8e:a8:32: b2:e8:b4:9f:65:83:10:32:46:2e:e3:9f:56:7b:42: 50:bd:fc:cf:13:8f:66:d9:80:cd:a8:72:37:bc:1d: d0:24:d6:56:9f:0e:e3:8a:8c:a9:18:1c:3c:91:ea: 24:2c:63:09:2d:17:bd:35:94:b1:ec:ab:1b:a7:8f: 26:d7:55:ff:20:14:c5:f6:9c:6e:34:99:c6:af:e1: dd:e5:96:28:f0:a0:2e:af:95:27:e0:ea:42:29:26: 2e:91:09:05:4b:fd:11:30:58:bf:47:11:79:e5:d6: 33:f6:be:37:05:68:b0:1a:71:85:85:b6:5a:91:d1: c4:3f:0f:61:27:5a:ca:96:e4:69:65:06:7d:3a:05: 9c:c3:c3:99:c3:f6:d7:5c:09:b1:89:d7:ad:92:e7: e5:46:20:d7:c9:01:04:6e:95:00:aa:e2:a4:fc:d0: 7e:6a:08:44:18:ed:1d:73:47:d5:e5:59:cf:dc:6a: 28:06:82:dc:a3:ad:67:d4:73:55:03:5e:87:6a:88: fd:d4:cf:aa:a6:22:eb:3e:b1:15:05:60:28:97:06: ef:2f:71:bb:b9:25:6e:8e:96:dc:45:3b:b1:1d:2e: a2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:70:F8:B3:E5:0E:B2:AB:3C:29:21:95:FD:CB:5E:34:F7:84:8D:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3e59f0f-3759-3833-9a05-71cc1b1e1732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:fd:e1:39:b3:a0:80:3b:72:f9:95:eb:76:b4:a2:41:8b:75: b6:7b:c9:90:9d:48:9b:d8:11:66:fd:40:f0:2b:72:7d:92:2f: 3d:c5:c7:46:5d:d8:b2:56:e6:0f:d7:6a:af:78:d6:18:5c:e0: 51:42:12:51:df:2a:70:a8:71:9f:a9:88:e6:68:0e:66:00:38: 47:59:3d:a7:27:f8:2b:e0:ed:a7:92:9b:46:a4:2e:b0:21:7d: 43:eb:41:76:00:34:5c:3f:19:b8:28:e4:f5:a5:63:2f:e2:3b: 1f:7e:3a:1d:7b:db:62:99:5c:1d:64:ac:ed:cc:95:9c:5e:e9: b0:91:8f:1a:99:74:d6:87:27:ac:28:14:60:3e:89:c2:79:36: d8:b6:7b:5a:e1:47:ee:1e:84:c2:1f:ff:56:ba:9c:84:50:7c: eb:75:34:c0:6d:06:d5:63:93:ed:94:28:8f:d4:9f:da:d5:1a: 12:ea:a8:86:8d:60:6f:17:ab:83:09:c0:27:28:5c:00:62:f2: 38:74:43:4c:4b:de:69:61:0c:e9:fc:75:eb:3e:1b:a4:1f:75: 2e:66:51:d5:ec:1b:18:c7:a1:9c:2f:3b:84:ff:68:0d:c3:8e: 86:72:84:cf:6c:29:a5:fc:26:2c:6d:06:86:7d:45:d2:95:be: c2:e9:35:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugbPJGFusO14Mn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk OTFkNTJiNjItNmE0Yy00ZGMxLTg5MTEtMzhmYzdlNTVjNDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgNIdOfwLsbVkJKd2njgBofpIj2fE3gR8++O qDKy6LSfZYMQMkYu459We0JQvfzPE49m2YDNqHI3vB3QJNZWnw7jioypGBw8keok LGMJLRe9NZSx7Ksbp48m11X/IBTF9pxuNJnGr+Hd5ZYo8KAur5Un4OpCKSYukQkF S/0RMFi/RxF55dYz9r43BWiwGnGFhbZakdHEPw9hJ1rKluRpZQZ9OgWcw8OZw/bX XAmxidetkuflRiDXyQEEbpUAquKk/NB+aghEGO0dc0fV5VnP3GooBoLco61n1HNV A16Haoj91M+qpiLrPrEVBWAolwbvL3G7uSVujpbcRTuxHS6ihQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhw+LPlDrKrPCkhlf3LXjT3hI1RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjNlNTlmMGYtMzc1OS0z ODMzLTlhMDUtNzFjYzFiMWUxNzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGP94TmzoIA7cvmV63a0okGLdbZ7yZCdSJvYEWb9QPArcn2SLz3Fx0Zd 2LJW5g/Xaq941hhc4FFCElHfKnCocZ+piOZoDmYAOEdZPacn+Cvg7aeSm0akLrAh fUPrQXYANFw/Gbgo5PWlYy/iOx9+Oh1722KZXB1krO3MlZxe6bCRjxqZdNaHJ6wo FGA+icJ5Nti2e1rhR+4ehMIf/1a6nIRQfOt1NMBtBtVjk+2UKI/Un9rVGhLqqIaN YG8Xq4MJwCcoXABi8jh0Q0xL3mlhDOn8des+G6QfdS5mUdXsGxjHoZwvO4T/aA3D joZyhM9sKaX8JixtBoZ9RdKVvsLpNeA= -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:03 2026 by rpki-client