$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da168f0c-2b9f-3725-8b5d-8b0710abf39a.roa File: da168f0c-2b9f-3725-8b5d-8b0710abf39a.roa (raw, json) Hash identifier: nQKZxYlxj2wxHehfVGb0SLBAKdqF4Uc9R3p+/Xd98QE= Subject key identifier: 84:71:A2:26:86:88:D1:03:D7:24:91:4F:8D:BF:9F:E2:64:46:40:43 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAE819599F86E8973A9ED3000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da168f0c-2b9f-3725-8b5d-8b0710abf39a.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 396573 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:95:99:f8:6e:89:73:a9:ed:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=eaa4bc38-a0cf-474f-915d-c260d97ca14b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5d:10:40:d1:3b:93:c8:7a:9a:00:57:e2:43: b6:eb:64:73:e3:d9:a3:b0:6e:63:94:b2:bc:39:ff: 54:9a:91:00:af:36:ea:73:14:7f:2e:60:05:cd:79: 82:03:6a:4e:b1:d7:cd:23:64:c8:5b:95:4e:c2:91: 48:95:44:4a:e4:80:67:55:a4:cf:d5:bc:59:42:06: 1e:00:bc:68:30:1a:4c:cb:c6:37:a0:d5:23:a5:4b: 73:09:ce:fc:b7:77:62:ad:f6:81:51:1a:68:24:97: 1e:67:3a:24:e6:69:65:56:c3:bb:03:e5:10:a9:da: f0:69:54:2a:91:b5:d2:1d:f6:f5:b2:87:0d:dd:50: 3c:d2:29:9f:41:46:74:bd:b4:97:1d:f5:5d:71:82: 1e:ff:7a:c6:f7:9a:b0:16:0f:08:ee:2a:f0:40:a1: 1e:2f:2e:d2:e6:ab:64:9e:48:19:5b:69:b0:67:c8: c7:10:57:3e:d3:fb:d0:91:af:ca:5a:8f:fb:e5:10: 1b:7b:4d:24:5d:64:08:ce:92:4b:b1:22:9a:e9:05: 9a:7a:a3:97:b2:94:85:84:d3:4a:8f:75:e8:ec:09: 4d:b0:27:4b:c2:e8:3f:51:58:a3:5e:eb:18:2c:e2: c9:24:3a:f3:8c:fd:5b:60:6f:ab:4b:a7:41:d7:de: d9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:71:A2:26:86:88:D1:03:D7:24:91:4F:8D:BF:9F:E2:64:46:40:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da168f0c-2b9f-3725-8b5d-8b0710abf39a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:fa:ff:79:59:29:25:9a:df:51:10:5f:59:36:27:cb:56:b2: 6b:a3:45:85:60:a9:9f:7f:87:d9:8e:7e:85:45:01:c8:bd:fc: 0f:7d:3f:56:ca:de:15:1f:ab:ec:3d:6b:33:1a:87:23:b1:c8: fb:e3:10:72:e6:a4:2f:d8:66:dc:d0:af:22:db:84:7e:96:39: 1b:97:95:a9:db:36:31:cc:e6:82:21:10:6c:ee:06:bc:d4:3d: 47:38:17:dd:e9:e4:85:7e:4d:30:2b:1a:b6:ff:ec:6a:16:d2: f2:32:76:19:2a:ad:10:29:a4:d7:29:42:ee:ec:45:83:02:28: 41:bf:88:00:bc:bc:29:b7:2f:11:ca:06:28:54:75:e3:3c:42: af:19:a8:21:b8:6d:34:7b:05:24:ab:d1:13:f8:5f:19:2d:5c: bd:57:b4:af:17:b4:3b:e9:82:66:58:30:3e:06:d9:3d:4d:9e: d1:ea:ae:90:a5:dd:df:74:70:9c:59:a6:be:66:9b:cf:cd:20: 26:a2:1d:c9:c3:2b:49:ce:3a:05:85:14:d3:79:1e:da:c6:54: e1:94:51:71:8d:0a:0f:8d:25:b9:fc:2d:54:91:89:fa:a8:e0: 26:5d:5c:80:17:94:fd:20:48:d8:24:b1:32:e4:2f:a2:0b:72: 51:f2:f0:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugZWZ+G6Jc6ntMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk ZWFhNGJjMzgtYTBjZi00NzRmLTkxNWQtYzI2MGQ5N2NhMTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA210QQNE7k8h6mgBX4kO262Rz49mjsG5jlLK8 Of9UmpEArzbqcxR/LmAFzXmCA2pOsdfNI2TIW5VOwpFIlURK5IBnVaTP1bxZQgYe ALxoMBpMy8Y3oNUjpUtzCc78t3dirfaBURpoJJceZzok5mllVsO7A+UQqdrwaVQq kbXSHfb1socN3VA80imfQUZ0vbSXHfVdcYIe/3rG95qwFg8I7irwQKEeLy7S5qtk nkgZW2mwZ8jHEFc+0/vQka/KWo/75RAbe00kXWQIzpJLsSKa6QWaeqOXspSFhNNK j3Xo7AlNsCdLwug/UVijXusYLOLJJDrzjP1bYG+rS6dB197ZBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRxoiaGiNED1ySRT42/n+JkRkBDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGExNjhmMGMtMmI5Zi0z NzI1LThiNWQtOGIwNzEwYWJmMzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAT6/3lZKSWa31EQX1k2J8tWsmujRYVgqZ9/h9mOfoVFAci9/A99P1bK 3hUfq+w9azMahyOxyPvjEHLmpC/YZtzQryLbhH6WORuXlanbNjHM5oIhEGzuBrzU PUc4F93p5IV+TTArGrb/7GoW0vIydhkqrRAppNcpQu7sRYMCKEG/iAC8vCm3LxHK BihUdeM8Qq8ZqCG4bTR7BSSr0RP4XxktXL1XtK8XtDvpgmZYMD4G2T1NntHqrpCl 3d90cJxZpr5mm8/NICaiHcnDK0nOOgWFFNN5HtrGVOGUUXGNCg+NJbn8LVSRifqo 4CZdXIAXlP0gSNgksTLkL6ILclHy8BQ= -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:14 2026 by rpki-client