$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd4efe0c-435b-364e-90b0-423af199d985.roa File: bd4efe0c-435b-364e-90b0-423af199d985.roa (raw, json) Hash identifier: ezwcY29myR/XUIYTdBc8EoIz+4wXEA13nfPEcexXl78= Subject key identifier: 7E:07:AB:E6:0B:F8:90:24:3B:AD:39:ED:40:A9:14:AE:B7:F7:BE:4D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAE81B35F649604E75EEDC980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd4efe0c-435b-364e-90b0-423af199d985.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 397210 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:b3:5f:64:96:04:e7:5e:ed:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=60ce2b9f-0afa-442e-9426-ab760f912bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1c:47:29:b9:c4:e8:d5:36:d4:38:c0:07:ad: 9f:b0:d7:31:67:4b:80:ce:26:1b:32:af:42:cf:ef: b6:8b:78:fa:98:18:4f:da:bd:92:d7:10:b5:bc:5d: 66:d3:69:24:29:6b:1d:71:95:8b:7a:fd:b3:94:9e: 93:a1:d8:8e:36:57:1d:a0:d2:3f:0c:b2:1f:b7:e5: bd:d5:a9:80:4b:05:5a:35:97:a4:dd:09:87:5e:70: 72:c7:42:68:55:36:ac:ee:d7:52:5f:d6:38:c6:0e: a1:65:50:b8:0a:b5:9e:5e:9d:d2:3d:8a:f3:4f:84: e1:b4:b9:2f:a0:f6:46:d4:50:b3:ab:7b:ad:d2:4d: 4c:dd:5c:ca:1b:b0:e5:68:ae:38:a3:2e:a6:19:41: 90:69:97:5d:c1:c9:36:47:a2:48:af:69:15:aa:52: c5:60:20:5d:4a:ce:93:95:ed:9d:96:fa:dd:30:31: 4d:a0:63:2e:20:b5:99:54:30:47:0f:e7:bb:a3:6a: a7:c6:6b:82:65:e3:cc:0c:c6:2b:f1:c6:b2:2e:a3: b2:3b:b1:38:4c:8d:75:2e:14:9f:ba:c7:13:b1:4c: 6d:69:98:bb:90:12:30:36:7c:71:9e:05:b9:fb:05: a6:6c:f4:3b:50:89:1b:23:d3:be:06:b5:eb:92:1a: c9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:07:AB:E6:0B:F8:90:24:3B:AD:39:ED:40:A9:14:AE:B7:F7:BE:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd4efe0c-435b-364e-90b0-423af199d985.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:39:56:57:1b:66:c7:25:83:27:06:bb:b3:89:53:5e:22:da: 70:74:31:55:2b:7b:f7:fa:c1:36:a2:28:75:1d:f0:9b:6c:8a: 1a:1e:2c:f0:df:ed:2e:92:05:7e:21:79:d7:c0:f1:a0:d7:8d: 10:5a:77:cc:f1:70:34:f2:d3:44:82:b5:32:8a:c0:fe:50:53: 78:bb:03:0d:19:ce:9a:3d:c3:93:06:74:6d:61:13:f8:ae:59: ee:07:b0:f4:fa:bb:ec:5f:4a:67:a4:04:a2:82:98:99:b6:bb: be:b1:5e:53:1e:ae:0b:32:e2:10:37:9c:2f:af:8d:c3:cb:f6: 20:bb:f6:8b:22:e5:63:1c:55:fa:63:a9:6e:af:77:0a:ee:0f: ea:9f:b2:bd:e9:b4:81:14:29:7f:7b:2f:2a:28:9a:8e:cf:ef: 6d:6a:d3:a3:ad:c2:69:05:85:97:99:f3:50:49:28:d3:89:fb: c3:0f:8f:ed:49:c2:2a:a2:ed:cc:8c:79:eb:cf:93:86:a1:7e: c2:25:c6:72:15:97:cd:2f:f4:40:c0:c9:be:16:75:41:d5:d8: 5a:66:f0:de:55:be:3d:c2:50:d5:9d:b7:79:24:97:70:53:9d: 4b:b2:d0:f4:b8:91:ec:0a:03:73:75:0d:58:e9:86:6c:00:bf: 7d:a9:43:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugbNfZJYE517tyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk NjBjZTJiOWYtMGFmYS00NDJlLTk0MjYtYWI3NjBmOTEyYmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBxHKbnE6NU21DjAB62fsNcxZ0uAziYbMq9C z++2i3j6mBhP2r2S1xC1vF1m02kkKWsdcZWLev2zlJ6TodiONlcdoNI/DLIft+W9 1amASwVaNZek3QmHXnByx0JoVTas7tdSX9Y4xg6hZVC4CrWeXp3SPYrzT4ThtLkv oPZG1FCzq3ut0k1M3VzKG7DlaK44oy6mGUGQaZddwck2R6JIr2kVqlLFYCBdSs6T le2dlvrdMDFNoGMuILWZVDBHD+e7o2qnxmuCZePMDMYr8cayLqOyO7E4TI11LhSf uscTsUxtaZi7kBIwNnxxngW5+wWmbPQ7UIkbI9O+BrXrkhrJ8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4Hq+YL+JAkO6057UCpFK63975NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmQ0ZWZlMGMtNDM1Yi0z NjRlLTkwYjAtNDIzYWYxOTlkOTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABU5VlcbZsclgycGu7OJU14i2nB0MVUre/f6wTaiKHUd8JtsihoeLPDf 7S6SBX4hedfA8aDXjRBad8zxcDTy00SCtTKKwP5QU3i7Aw0Zzpo9w5MGdG1hE/iu We4HsPT6u+xfSmekBKKCmJm2u76xXlMergsy4hA3nC+vjcPL9iC79osi5WMcVfpj qW6vdwruD+qfsr3ptIEUKX97Lyoomo7P721q06OtwmkFhZeZ81BJKNOJ+8MPj+1J wiqi7cyMeevPk4ahfsIlxnIVl80v9EDAyb4WdUHV2Fpm8N5Vvj3CUNWdt3kkl3BT nUuy0PS4kewKA3N1DVjphmwAv32pQ6s= -----END CERTIFICATE-----Generated at Wed Aug 19 17:54:27 2026 by rpki-client