$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2d39581-fbd4-3281-a7c8-d32f5779d128.roa File: d2d39581-fbd4-3281-a7c8-d32f5779d128.roa (raw, json) Hash identifier: etMJzq8eGCLXZgoXA3l2KcFYSV2pljgJfbEodoX+NvY= Subject key identifier: 43:01:61:47:98:48:F7:A3:59:D5:E7:3F:54:20:D8:05:95:EC:2B:F5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAFE703E00494E5752D55E880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2d39581-fbd4-3281-a7c8-d32f5779d128.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 396602 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e7:03:e0:04:94:e5:75:2d:55:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=0b2d7260-e805-46c1-a9e7-94547c50f46f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:51:2f:3e:a0:df:6a:b4:cf:bf:2c:cd:81:5c: 5a:3d:78:10:6c:5b:dc:da:5d:e5:39:3e:7d:34:ee: 3c:ae:f8:1d:b2:a7:1e:db:9d:f1:e9:b4:59:cf:52: de:9f:56:2a:77:2a:c4:44:56:0a:c3:1a:54:98:b5: a0:b4:36:3a:b9:5e:a3:73:48:66:09:e7:49:0b:b5: 5c:43:e1:ae:e4:58:e4:9c:34:9a:f7:86:2e:f5:77: 1c:aa:c4:0c:06:de:b7:87:d6:a0:0e:a0:a1:c3:50: fc:5a:6d:bc:36:08:6e:ce:0c:08:8b:65:7e:fb:42: 59:a8:2b:57:bf:f4:f3:fd:9c:61:41:d3:9b:65:b7: c2:a5:31:7d:34:5d:fa:54:e8:0a:82:1a:65:fe:42: 34:46:c9:99:32:d5:bd:a9:5c:2f:8f:11:fc:f3:26: ae:23:04:83:7f:d5:e1:63:c6:5d:14:ad:c6:69:e1: 66:05:e4:2c:87:5d:67:7e:ce:32:c8:9f:93:95:ec: 60:41:ec:3b:a8:ff:0e:b0:aa:89:6b:71:c3:34:89: 09:8c:e8:68:38:a7:5f:e9:34:bd:b0:06:07:55:db: 32:92:6f:a4:6e:2c:b9:49:3c:b9:d0:b5:39:a2:8b: 96:f2:e6:30:58:a7:98:de:02:e0:92:08:c9:e9:71: 5e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:01:61:47:98:48:F7:A3:59:D5:E7:3F:54:20:D8:05:95:EC:2B:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2d39581-fbd4-3281-a7c8-d32f5779d128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:9a:04:29:7c:95:0f:93:43:74:81:f2:d4:44:33:89:99:b8: 45:a3:71:23:68:fa:95:5d:af:c2:55:93:70:be:63:8a:aa:3e: e3:e4:cb:df:78:ea:c0:7a:10:c1:4b:d9:bc:32:9c:4e:63:33: d8:a2:e4:b7:8b:19:bc:d9:1a:e0:47:3c:42:c0:8d:25:5d:a2: a2:4a:a9:e3:d0:ad:01:fb:86:1a:dc:d9:fd:c1:6e:57:d7:b7: 88:55:c4:29:17:ac:f3:ed:0a:9b:a7:db:61:99:2b:7e:eb:3e: 22:04:8a:f4:18:72:59:fd:36:1f:c2:c6:23:40:81:05:bb:75: ab:31:b2:05:d3:d8:18:4c:94:1a:69:32:d6:cf:28:9f:a3:3d: 23:c9:79:2b:d8:51:a2:32:0a:37:7f:a5:92:fe:2f:4f:f8:60: fa:9c:f5:78:1a:a8:78:c4:b8:d2:38:f5:00:8f:1f:aa:c8:87: e6:b5:00:5b:17:c3:18:1e:e0:11:83:10:f5:ea:8b:3f:45:a8: dc:e1:06:c0:4a:60:d6:2c:4d:98:26:cf:52:36:00:a8:87:c3: 79:ef:ec:18:f9:77:04:05:5c:0b:fe:ac:7c:22:16:9c:56:84: 02:bb:d8:17:9c:e3:90:a8:18:a4:47:8a:23:15:76:ea:36:da: a8:1d:02:f2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6v5wPgBJTldS1V6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk MGIyZDcyNjAtZTgwNS00NmMxLWE5ZTctOTQ1NDdjNTBmNDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1EvPqDfarTPvyzNgVxaPXgQbFvc2l3lOT59 NO48rvgdsqce253x6bRZz1Len1YqdyrERFYKwxpUmLWgtDY6uV6jc0hmCedJC7Vc Q+Gu5FjknDSa94Yu9XccqsQMBt63h9agDqChw1D8Wm28NghuzgwIi2V++0JZqCtX v/Tz/ZxhQdObZbfCpTF9NF36VOgKghpl/kI0RsmZMtW9qVwvjxH88yauIwSDf9Xh Y8ZdFK3GaeFmBeQsh11nfs4yyJ+TlexgQew7qP8OsKqJa3HDNIkJjOhoOKdf6TS9 sAYHVdsykm+kbiy5STy50LU5oouW8uYwWKeY3gLgkgjJ6XFe/QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEMBYUeYSPejWdXnP1Qg2AWV7Cv1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDJkMzk1ODEtZmJkNC0z MjgxLWE3YzgtZDMyZjU3NzlkMTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBtmgQpfJUPk0N0gfLURDOJmbhFo3EjaPqVXa/CVZNwvmOKqj7j5Mvf eOrAehDBS9m8MpxOYzPYouS3ixm82RrgRzxCwI0lXaKiSqnj0K0B+4Ya3Nn9wW5X 17eIVcQpF6zz7Qqbp9thmSt+6z4iBIr0GHJZ/TYfwsYjQIEFu3WrMbIF09gYTJQa aTLWzyifoz0jyXkr2FGiMgo3f6WS/i9P+GD6nPV4Gqh4xLjSOPUAjx+qyIfmtQBb F8MYHuARgxD16os/Rajc4QbASmDWLE2YJs9SNgCoh8N57+wY+XcEBVwL/qx8Ihac VoQCu9gXnOOQqBikR4ojFXbqNtqoHQLy -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:53 2026 by rpki-client