$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d8d294fa-38aa-3b74-ac08-7094c84a655c.roa File: d8d294fa-38aa-3b74-ac08-7094c84a655c.roa (raw, json) Hash identifier: FazZT0FSn9G0LC4T2qqJmyKDCdtDhRfyRVWv2lXW6os= Subject key identifier: 56:AF:39:1F:18:7C:FF:B2:9F:DA:60:EE:64:9A:4A:6F:54:58:BE:8F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAE81B7C88A00603E82217396 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d8d294fa-38aa-3b74-ac08-7094c84a655c.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 396586 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:b7:c8:8a:00:60:3e:82:21:73:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=753a6175-7a6c-49d2-8b53-cd57c15f3181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:40:5d:9d:9c:e1:9a:62:42:6c:b0:6f:03:2b: 26:4b:2c:3f:9d:71:5d:ca:09:60:d2:90:f9:49:77: 62:e5:50:81:e4:c5:fd:fb:11:88:24:96:89:ed:d7: cc:30:4f:23:0c:a4:e4:b9:6f:f6:74:a4:86:8d:dd: 50:39:b0:4e:c9:f6:c1:31:d9:9c:fc:97:b2:ba:81: e6:77:6f:cc:c3:37:0b:ea:a3:0d:0d:94:6d:f0:a9: 72:f5:34:5d:d7:39:d0:15:ec:f4:4d:39:70:bb:68: 16:60:b4:59:17:9f:b9:7d:cc:d4:31:60:aa:b0:36: 16:7d:db:95:ad:29:98:af:20:03:96:e4:6b:eb:97: 7e:10:98:2e:a9:be:fc:f4:51:63:db:1c:c7:e0:47: a0:b2:bb:22:d1:a3:25:a8:a4:e8:dd:cf:8f:66:73: cb:1b:25:f3:e6:26:ec:c5:a3:21:b4:0c:d7:ad:ab: 70:d9:c4:ab:35:c5:df:d6:dc:20:fc:4a:fb:20:de: f7:be:f4:fc:a4:12:83:c5:fe:9f:e8:af:f3:ac:da: 5b:da:7b:56:8b:7b:46:88:fd:19:e8:53:51:6d:00: fb:6b:cf:16:9d:b8:24:29:fa:76:5a:86:d8:25:a1: a9:54:97:4e:bf:2d:e4:87:82:a8:df:c0:16:cc:22: cc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AF:39:1F:18:7C:FF:B2:9F:DA:60:EE:64:9A:4A:6F:54:58:BE:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d8d294fa-38aa-3b74-ac08-7094c84a655c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:da:1d:17:75:95:37:14:86:d7:30:c9:16:a9:8d:a8:ec:b3: 5e:da:4e:6d:a5:59:97:0b:56:a0:a0:71:57:c3:49:5e:59:1c: 7b:90:62:9e:ec:e1:9c:70:a1:2f:1c:54:d9:a9:fd:7a:12:75: 5b:72:46:45:8e:74:64:51:a5:10:98:ee:88:35:b6:ff:6e:c1: 8e:8f:95:3e:e1:98:03:db:cf:92:82:70:d3:53:d1:fd:fd:3e: c2:05:82:38:b1:43:f6:38:77:66:ff:02:0a:4f:b7:f3:2b:7c: 11:a2:76:6e:f2:2c:53:42:d8:3f:33:ac:56:8b:35:50:d3:de: e6:c1:54:26:5b:16:d0:b3:1a:6c:61:63:06:a2:3f:fc:c5:30: 11:38:b3:25:6f:3b:ea:3d:16:9c:a8:e9:62:0b:ab:9a:69:8b: e5:b9:66:76:b1:6f:77:0e:b8:e5:49:01:01:a6:81:f1:b0:8d: 68:73:4a:64:29:c3:f6:2b:8a:81:63:85:02:43:a7:43:14:2f: f7:38:e1:b8:a8:0d:4d:6f:ee:ae:e3:67:83:1d:74:3f:48:74: 19:4c:98:82:c2:61:52:8f:69:6d:ee:a2:fa:c8:09:49:22:c2: 8b:c9:d5:80:01:49:bf:65:50:ac:43:68:48:b1:fa:31:33:04: ce:fb:d1:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugbfIigBgPoIhc5YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk NzUzYTYxNzUtN2E2Yy00OWQyLThiNTMtY2Q1N2MxNWYzMTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEBdnZzhmmJCbLBvAysmSyw/nXFdyglg0pD5 SXdi5VCB5MX9+xGIJJaJ7dfMME8jDKTkuW/2dKSGjd1QObBOyfbBMdmc/JeyuoHm d2/MwzcL6qMNDZRt8Kly9TRd1znQFez0TTlwu2gWYLRZF5+5fczUMWCqsDYWfduV rSmYryADluRr65d+EJguqb789FFj2xzH4Eegsrsi0aMlqKTo3c+PZnPLGyXz5ibs xaMhtAzXratw2cSrNcXf1twg/Er7IN73vvT8pBKDxf6f6K/zrNpb2ntWi3tGiP0Z 6FNRbQD7a88WnbgkKfp2WobYJaGpVJdOvy3kh4Ko38AWzCLMeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFavOR8YfP+yn9pg7mSaSm9UWL6PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDhkMjk0ZmEtMzhhYS0z Yjc0LWFjMDgtNzA5NGM4NGE2NTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADraHRd1lTcUhtcwyRapjajss17aTm2lWZcLVqCgcVfDSV5ZHHuQYp7s 4ZxwoS8cVNmp/XoSdVtyRkWOdGRRpRCY7og1tv9uwY6PlT7hmAPbz5KCcNNT0f39 PsIFgjixQ/Y4d2b/AgpPt/MrfBGidm7yLFNC2D8zrFaLNVDT3ubBVCZbFtCzGmxh YwaiP/zFMBE4syVvO+o9Fpyo6WILq5ppi+W5Znaxb3cOuOVJAQGmgfGwjWhzSmQp w/YrioFjhQJDp0MUL/c44bioDU1v7q7jZ4MddD9IdBlMmILCYVKPaW3uovrICUki wovJ1YABSb9lUKxDaEix+jEzBM770Tg= -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:19 2026 by rpki-client