$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3e7be5f-ea85-3076-b938-dbffc67a2b89.roa File: d3e7be5f-ea85-3076-b938-dbffc67a2b89.roa (raw, json) Hash identifier: p9dKleRv3xqlhmHnLqJdQS1sBFjx3jTxZzGtKDMgbGo= Subject key identifier: B6:0C:27:8B:04:D9:18:97:4A:77:09:2E:D6:46:5F:7D:93:71:47:1F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAFE70432F6AB36BE0041FD00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3e7be5f-ea85-3076-b938-dbffc67a2b89.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 36617 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e7:04:32:f6:ab:36:be:00:41:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=41ba13de-960b-4afd-9bbd-71d9de76466d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:24:24:a9:f6:af:83:12:73:d9:76:3a:96:07: 7a:c5:b8:8e:db:49:4a:c9:54:f7:aa:aa:8c:54:ee: 1e:bd:8a:d5:79:e1:40:2b:8e:f6:17:ca:05:d1:e2: 0c:ce:52:12:70:47:ed:74:96:06:9e:87:ba:5a:55: a5:09:b3:97:df:df:ce:8f:27:0b:2d:48:c4:76:d8: fe:93:16:75:b5:a8:f7:ab:e9:70:64:2d:11:84:dd: aa:d9:17:3f:24:2f:6c:fe:d8:73:0b:78:aa:8e:1f: 5a:4e:18:37:b0:4a:ee:d2:66:20:7e:60:2d:71:e6: 39:05:a5:d8:b0:ab:50:c2:6d:45:29:18:d0:3a:51: 7f:f8:2f:3b:cd:59:99:c1:c7:94:98:b4:9d:b4:24: 25:99:2d:5c:34:7a:d4:c0:7b:c2:14:26:28:79:7d: 2d:ff:05:c6:dd:00:c9:90:0d:a3:f6:57:6b:12:b2: d2:19:e8:d3:48:81:cb:aa:22:6f:9d:77:fe:4c:72: ee:b5:4e:4f:f0:e8:dc:e0:b7:98:3f:11:d6:0d:a6: ef:0d:7d:46:ff:9b:5e:38:86:ad:7a:5c:0f:a6:fb: c5:0c:05:0b:c9:46:30:c8:ca:3a:d2:69:4d:35:94: 84:45:ab:8d:ed:b2:4f:71:2b:d3:40:bd:6a:2c:d6: 1b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0C:27:8B:04:D9:18:97:4A:77:09:2E:D6:46:5F:7D:93:71:47:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3e7be5f-ea85-3076-b938-dbffc67a2b89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:2b:69:72:61:ec:9e:eb:52:09:fc:50:22:c3:db:e8:7a:49: 93:f5:92:11:2c:c0:dc:9f:8a:30:8e:fe:e9:86:d1:27:50:06: 59:05:b8:28:b7:2e:da:71:a0:1e:03:68:c6:5c:f3:9c:fc:88: 1e:87:1f:14:8b:91:a7:2d:ec:3b:1c:a9:6f:f0:50:dc:d0:2d: 8e:83:99:ee:8a:6b:13:08:15:82:b8:62:d0:19:85:b6:9b:4b: 1f:9a:7c:82:8d:79:32:26:49:b1:23:80:87:19:6d:11:86:cc: c6:1d:1b:5e:92:39:e4:68:cb:56:09:27:6d:01:9f:ca:60:3f: 94:f9:47:97:f7:8d:8f:7b:d7:be:c5:ac:fc:40:48:91:dc:5f: ed:7e:d5:1f:3f:14:06:57:31:f4:d1:f5:e3:1b:24:86:ce:f8: 4d:0b:24:01:76:6f:a3:12:29:7f:4d:c5:8e:c3:f8:83:46:2b: 45:f2:a3:a8:4e:1d:ec:00:b2:b7:21:06:e3:07:00:20:20:42: d7:5f:71:52:72:c6:47:c9:c2:2b:59:50:be:1b:c4:ee:b7:d0: 9b:60:36:92:e2:e9:b4:63:97:bc:66:cf:a2:43:32:80:c2:1f: 1a:83:f2:f7:56:74:cb:8b:bb:4c:51:93:af:2a:2b:5e:d8:f0: ed:6e:6b:4c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6v5wQy9qs2vgBB/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk NDFiYTEzZGUtOTYwYi00YWZkLTliYmQtNzFkOWRlNzY0NjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliQkqfavgxJz2XY6lgd6xbiO20lKyVT3qqqM VO4evYrVeeFAK472F8oF0eIMzlIScEftdJYGnoe6WlWlCbOX39/OjycLLUjEdtj+ kxZ1taj3q+lwZC0RhN2q2Rc/JC9s/thzC3iqjh9aThg3sEru0mYgfmAtceY5BaXY sKtQwm1FKRjQOlF/+C87zVmZwceUmLSdtCQlmS1cNHrUwHvCFCYoeX0t/wXG3QDJ kA2j9ldrErLSGejTSIHLqiJvnXf+THLutU5P8Ojc4LeYPxHWDabvDX1G/5teOIat elwPpvvFDAULyUYwyMo60mlNNZSERauN7bJPcSvTQL1qLNYbCwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLYMJ4sE2RiXSncJLtZGX32TcUcfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDNlN2JlNWYtZWE4NS0z MDc2LWI5MzgtZGJmZmM2N2EyYjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAyK2lyYeye61IJ/FAiw9voekmT9ZIRLMDcn4owjv7phtEnUAZZBbgo ty7acaAeA2jGXPOc/Igehx8Ui5GnLew7HKlv8FDc0C2Og5nuimsTCBWCuGLQGYW2 m0sfmnyCjXkyJkmxI4CHGW0RhszGHRtekjnkaMtWCSdtAZ/KYD+U+UeX942Pe9e+ xaz8QEiR3F/tftUfPxQGVzH00fXjGySGzvhNCyQBdm+jEil/TcWOw/iDRitF8qOo Th3sALK3IQbjBwAgIELXX3FScsZHycIrWVC+G8Tut9CbYDaS4um0Y5e8Zs+iQzKA wh8ag/L3VnTLi7tMUZOvKite2PDtbmtM -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:17 2026 by rpki-client