$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ebe38b68-a2f4-34a1-bd4a-9c388c40123e.roa File: ebe38b68-a2f4-34a1-bd4a-9c388c40123e.roa (raw, json) Hash identifier: R3KgSX51ABLFpbZTxSK/X3WsPbmL9iiYn3J2iSYEfxo= Subject key identifier: D3:7D:ED:75:DE:CF:AB:AC:52:5F:F6:4C:7B:21:C6:80:5F:9B:E4:8C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EAFE702BFA441CC44EF8F2B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ebe38b68-a2f4-34a1-bd4a-9c388c40123e.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 396585 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e7:02:bf:a4:41:cc:44:ef:8f:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=1a8394a6-d7aa-4d08-b4f8-bb5674d5a20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:58:30:8e:1b:0e:cb:9d:01:6b:48:13:ac:17: 21:26:97:c6:92:d9:ae:45:f1:f9:e2:e7:5e:7e:1f: 5b:16:e4:26:e6:23:90:5c:bd:3c:44:9f:e3:98:bb: b6:10:29:cd:0c:76:1c:9c:c7:3d:80:4f:7c:a1:cd: e7:a6:b4:e0:20:b8:e5:47:45:c8:8e:a2:6d:0c:46: 83:0b:19:3f:07:2a:b8:68:23:81:2d:62:18:85:c8: 69:90:bd:de:07:ec:6e:0e:c8:29:fc:a8:11:e1:3a: b3:f6:88:3a:53:05:cb:f4:0a:cb:5b:5c:22:f5:5f: 80:93:95:36:2a:39:f2:85:5a:97:47:0c:bb:4f:6b: 36:e7:1b:f9:58:4c:7f:68:fa:a7:b0:36:52:79:28: 83:fe:cc:35:a4:4b:2e:41:ce:df:91:07:1e:65:b5: 31:68:ae:e5:04:76:db:d8:e7:d4:0a:b4:8c:fc:19: 73:87:ca:be:6c:87:0a:15:6c:72:39:27:d7:e1:cb: fe:c2:60:e1:7f:a4:6f:3b:54:ac:16:6d:af:7b:b1: 8b:68:ff:88:96:9e:6f:ff:46:d8:e2:09:f0:d3:12: fc:79:93:0f:3e:2e:93:9e:89:e4:8b:10:15:8b:6f: a7:fd:1c:ee:ba:c8:6d:c5:70:84:f0:e7:1b:52:6c: 43:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7D:ED:75:DE:CF:AB:AC:52:5F:F6:4C:7B:21:C6:80:5F:9B:E4:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ebe38b68-a2f4-34a1-bd4a-9c388c40123e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e8:e0:f9:6c:8f:d7:33:f6:b0:14:cf:74:8a:1f:1d:89:4f: 52:06:35:78:31:d4:c2:20:4a:d0:50:02:51:17:b1:f8:48:df: b1:9a:04:66:66:a9:b0:ae:33:f5:1a:69:81:c2:10:39:9c:fd: b4:18:a9:be:ae:5a:dd:29:dc:37:02:cf:d7:5b:77:00:04:d1: 4f:00:01:86:cc:f8:f3:2c:0b:9b:e0:f3:85:6a:97:e4:c6:d6: 55:90:9f:02:3f:48:cc:cd:2d:4c:d9:e6:40:66:16:90:4d:75: 04:6e:a2:27:93:3c:90:af:41:bf:1b:a9:cf:37:c4:e8:19:a9: a0:c2:af:fa:be:2c:95:1f:45:03:b8:13:63:47:6b:f5:50:5f: 8a:a5:8b:76:19:77:d1:f8:19:1f:6f:81:ee:ba:20:b6:03:ff: 52:01:08:a7:60:5f:8c:41:46:16:74:f6:7f:d0:57:50:06:14: 9b:d4:69:f5:b3:fd:8f:d7:f1:e0:b0:9d:16:63:70:bb:3f:93: c7:45:cf:e1:97:91:84:1b:24:f3:0c:b4:01:ac:19:ad:be:59: e4:66:2b:13:e2:20:b2:99:5e:e8:d1:2b:be:af:95:ed:5b:d7: 08:09:41:88:34:99:57:3c:06:70:92:ef:0e:c6:35:4c:0a:b6: d2:42:df:f8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6v5wK/pEHMRO+PKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk MWE4Mzk0YTYtZDdhYS00ZDA4LWI0ZjgtYmI1Njc0ZDVhMjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1gwjhsOy50Ba0gTrBchJpfGktmuRfH54ude fh9bFuQm5iOQXL08RJ/jmLu2ECnNDHYcnMc9gE98oc3nprTgILjlR0XIjqJtDEaD Cxk/Byq4aCOBLWIYhchpkL3eB+xuDsgp/KgR4Tqz9og6UwXL9ArLW1wi9V+Ak5U2 KjnyhVqXRwy7T2s25xv5WEx/aPqnsDZSeSiD/sw1pEsuQc7fkQceZbUxaK7lBHbb 2OfUCrSM/Blzh8q+bIcKFWxyOSfX4cv+wmDhf6RvO1SsFm2ve7GLaP+Ilp5v/0bY 4gnw0xL8eZMPPi6TnonkixAVi2+n/RzuushtxXCE8OcbUmxD0QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNN97XXez6usUl/2THshxoBfm+SMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWJlMzhiNjgtYTJmNC0z NGExLWJkNGEtOWMzODhjNDAxMjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA26OD5bI/XM/awFM90ih8diU9SBjV4MdTCIErQUAJRF7H4SN+xmgRm ZqmwrjP1GmmBwhA5nP20GKm+rlrdKdw3As/XW3cABNFPAAGGzPjzLAub4POFapfk xtZVkJ8CP0jMzS1M2eZAZhaQTXUEbqInkzyQr0G/G6nPN8ToGamgwq/6viyVH0UD uBNjR2v1UF+KpYt2GXfR+Bkfb4HuuiC2A/9SAQinYF+MQUYWdPZ/0FdQBhSb1Gn1 s/2P1/HgsJ0WY3C7P5PHRc/hl5GEGyTzDLQBrBmtvlnkZisT4iCymV7o0Su+r5Xt W9cICUGINJlXPAZwku8OxjVMCrbSQt/4 -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:18 2026 by rpki-client