$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8dcd070-15e5-3fb5-b4fc-7416e5a5f7be.roa File: b8dcd070-15e5-3fb5-b4fc-7416e5a5f7be.roa (raw, json) Hash identifier: kuSjQFmTrD7q1+rG6rnqS6H5ZKow3d7W2oCzcIfcYq8= Subject key identifier: 8F:70:91:5D:40:AE:99:BC:C9:B7:2D:65:2B:10:E7:5C:68:10:E5:1D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAE81B4EFF69390D31E11B6C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8dcd070-15e5-3fb5-b4fc-7416e5a5f7be.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 397205 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:b4:ef:f6:93:90:d3:1e:11:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=ea6bc05f-fe6b-4d3d-b974-40f083e7332e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b6:75:ca:5f:37:07:85:d0:db:7a:5d:33:e3: 4f:20:76:f4:cc:be:ad:0e:b7:91:c2:6d:6e:11:b6: 52:0d:68:f1:22:30:2a:9a:cd:b7:a2:c3:34:08:92: ea:12:12:d9:9c:a9:ea:bc:e2:56:b9:d7:49:6c:c6: 51:4e:44:20:ef:94:1d:d7:c5:f0:ab:03:8f:11:bb: 14:59:a7:4d:12:5b:57:c2:a2:c1:2c:ab:19:39:ac: 6d:c5:56:05:89:65:85:8d:d2:cf:73:39:94:b2:44: 36:11:47:aa:b7:f2:6b:36:1b:b9:76:d2:37:fd:3b: aa:72:ac:8e:dc:2a:fd:f3:ac:2f:b0:55:2f:d1:51: 85:58:c6:9c:d2:5e:6c:7e:82:4e:b3:94:20:34:49: 5f:bf:c3:7b:08:49:5a:cc:e0:d8:7d:f5:19:2a:5f: 8d:d0:ea:18:b9:ab:c4:d3:2e:80:74:fc:aa:ed:0e: 09:c7:db:57:b5:32:ea:e7:35:76:8a:4c:9e:e3:f8: 73:98:73:71:00:77:98:1e:66:e2:ad:31:67:b7:7b: da:fd:0d:81:95:79:7b:e2:f1:a5:24:94:4a:d0:0c: 94:b1:0c:59:91:b4:ac:22:68:6b:fe:bd:4e:7c:ff: 35:ca:c3:06:81:6d:74:7a:d8:93:7d:85:4a:5b:c7: 4e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:70:91:5D:40:AE:99:BC:C9:B7:2D:65:2B:10:E7:5C:68:10:E5:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8dcd070-15e5-3fb5-b4fc-7416e5a5f7be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:f7:ab:b5:76:20:fe:3f:9f:63:9b:20:27:51:6f:42:6d:e2: 99:c7:56:f6:4f:2d:77:91:9c:64:71:0c:4e:28:99:2e:e5:d7: ba:ef:9d:3b:f5:1b:84:4c:d6:b7:71:80:2d:9c:e0:25:7d:28: 39:9a:28:d3:a3:ca:f7:be:d6:d9:06:87:77:3a:13:b5:38:65: 4d:d9:ca:32:e5:5b:24:ff:58:46:26:06:70:b5:4a:47:89:75: c4:ae:24:c3:c7:4b:46:56:c7:b3:c3:9f:3f:50:32:1e:d3:76: 43:27:a8:63:99:b2:16:68:ab:e4:ce:b5:b5:0f:13:ef:47:7c: eb:08:9a:a8:33:e1:aa:d4:40:ce:b7:ce:2f:5b:6d:fa:d7:fe: 9b:1e:46:9b:35:a4:51:be:8e:de:a0:57:cf:81:0a:ca:e7:34: d5:fb:73:bd:42:bb:2f:7a:12:99:b9:91:b0:a3:3d:62:fa:64: aa:94:e1:a1:c7:c6:46:a9:c2:87:ec:d2:e3:f4:90:c6:74:aa: a3:82:b5:0b:8f:ba:9d:d9:f3:7d:84:e3:d0:db:7a:4e:f4:71: 39:05:e4:0d:b3:ba:7d:19:15:bb:d7:b1:18:ba:52:ee:54:28: be:f1:11:a7:0f:d1:ef:66:bc:bd:5b:29:fd:6f:59:7c:d1:0b: 51:f3:84:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugbTv9pOQ0x4RtsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk ZWE2YmMwNWYtZmU2Yi00ZDNkLWI5NzQtNDBmMDgzZTczMzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLZ1yl83B4XQ23pdM+NPIHb0zL6tDreRwm1u EbZSDWjxIjAqms23osM0CJLqEhLZnKnqvOJWuddJbMZRTkQg75Qd18XwqwOPEbsU WadNEltXwqLBLKsZOaxtxVYFiWWFjdLPczmUskQ2EUeqt/JrNhu5dtI3/TuqcqyO 3Cr986wvsFUv0VGFWMac0l5sfoJOs5QgNElfv8N7CElazODYffUZKl+N0OoYuavE 0y6AdPyq7Q4Jx9tXtTLq5zV2ikye4/hzmHNxAHeYHmbirTFnt3va/Q2BlXl74vGl JJRK0AyUsQxZkbSsImhr/r1OfP81ysMGgW10etiTfYVKW8dOTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9wkV1Arpm8ybctZSsQ51xoEOUdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjhkY2QwNzAtMTVlNS0z ZmI1LWI0ZmMtNzQxNmU1YTVmN2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACf3q7V2IP4/n2ObICdRb0Jt4pnHVvZPLXeRnGRxDE4omS7l17rvnTv1 G4RM1rdxgC2c4CV9KDmaKNOjyve+1tkGh3c6E7U4ZU3ZyjLlWyT/WEYmBnC1SkeJ dcSuJMPHS0ZWx7PDnz9QMh7TdkMnqGOZshZoq+TOtbUPE+9HfOsImqgz4arUQM63 zi9bbfrX/pseRps1pFG+jt6gV8+BCsrnNNX7c71Cuy96Epm5kbCjPWL6ZKqU4aHH xkapwofs0uP0kMZ0qqOCtQuPup3Z832E49Dbek70cTkF5A2zun0ZFbvXsRi6Uu5U KL7xEacP0e9mvL1bKf1vWXzRC1HzhDM= -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:19 2026 by rpki-client