$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4/1a2222ab-efdf-3b3d-8ae6-7d398b840f66.roa File: 1a2222ab-efdf-3b3d-8ae6-7d398b840f66.roa (raw, json) Hash identifier: 52PAnF8yudwth+USDxEBvVNCMQcFw9i4RdQ3pjbzFAA= Subject key identifier: FF:85:17:E8:6D:99:8A:39:07:91:45:68:5A:9B:B9:1D:3A:90:91:11 Certificate issuer: /CN=ae28425a-59dd-4da2-864c-2b324303abb4 Certificate serial: 010D0C9F4328584ED2CC76C7AF338131C04C0540 Authority key identifier: 43:18:C3:87:2F:B6:7B:A0:1E:FD:88:8B:4F:BC:81:05:14:3D:BB:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4/1a2222ab-efdf-3b3d-8ae6-7d398b840f66.roa Signing time: Thu 13 Aug 2026 13:00:12 +0000 ROA not before: Thu 13 Aug 2026 13:00:12 +0000 ROA not after: Wed 11 Nov 2026 14:00:12 +0000 asID: 54794 IP address blocks: 216.235.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4/ae28425a-59dd-4da2-864c-2b324303abb4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4/ae28425a-59dd-4da2-864c-2b324303abb4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d2:cc:76:c7:af:33:81:31:c0:4c:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae28425a-59dd-4da2-864c-2b324303abb4 Validity Not Before: Aug 13 13:00:12 2026 GMT Not After : Nov 11 14:00:12 2026 GMT Subject: CN=07eba60f-fe8a-4480-b552-4135b9e70559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a2:6f:bf:94:4d:95:27:28:a7:76:6c:77:2b: 0f:8c:b9:5b:bb:59:a3:8b:fa:7e:8c:17:36:14:1b: 88:08:54:a9:25:0c:db:10:71:06:4e:8e:46:9f:c2: 0d:f9:1e:b1:f5:47:38:b9:e6:3c:82:96:b0:87:09: cb:53:9f:ce:4b:60:f3:c7:2c:0d:c5:46:2c:99:a0: e4:5f:b3:a4:4b:55:20:23:67:80:63:91:c2:9d:ff: 4e:8a:17:9d:a7:57:a5:9d:6d:f6:4f:98:2e:84:f6: be:81:c3:3e:51:5d:26:fb:a9:9e:db:59:5a:08:20: dd:38:02:d4:83:50:1e:9e:fc:ac:39:c6:1b:c1:87: de:d8:16:ea:84:4a:5a:a3:21:7e:00:c6:b5:85:7c: ab:05:f4:67:55:c9:bd:7f:76:18:b6:8a:c9:18:8a: fc:fb:5b:c8:d5:73:80:28:1d:fc:7d:49:6f:19:36: 08:24:5a:a2:07:d6:ca:df:3d:27:1f:c3:df:8c:6c: fb:67:62:15:1b:51:78:6e:90:1b:05:14:18:50:9d: d4:8a:a7:c2:e0:a0:3a:af:46:be:e1:4a:53:b1:d6: ec:ea:8e:50:60:2e:71:98:a6:3f:ac:84:2a:5c:83: 86:b9:50:52:b1:e0:a6:ad:1c:84:7d:d1:97:fc:0b: 8e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:85:17:E8:6D:99:8A:39:07:91:45:68:5A:9B:B9:1D:3A:90:91:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4/1a2222ab-efdf-3b3d-8ae6-7d398b840f66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4/ae28425a-59dd-4da2-864c-2b324303abb4.crl X509v3 Authority Key Identifier: keyid:43:18:C3:87:2F:B6:7B:A0:1E:FD:88:8B:4F:BC:81:05:14:3D:BB:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ae28425a-59dd-4da2-864c-2b324303abb4.cer sbgp-ipAddrBlock: critical IPv4: 216.235.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:b1:da:f1:81:de:c8:af:83:16:19:41:d0:69:ff:d4:a1:da: f2:0e:8a:db:87:8d:6e:c0:ea:97:3b:4d:ee:d2:39:76:5c:29: 90:e7:57:dd:5a:18:bc:0e:98:d0:1c:4e:2b:bf:46:63:a0:14: 11:24:d6:79:18:06:2a:cb:58:41:30:a8:95:d4:f9:ba:9f:6c: 13:d1:c3:82:3d:62:6e:b4:8b:b2:ab:c1:eb:5e:48:0e:5f:ec: d7:c6:89:3d:ce:a9:aa:a4:cb:82:90:6c:f5:c5:48:85:ec:33: d1:0a:6b:92:20:ce:0a:40:83:a3:cf:62:39:b4:ce:b3:9b:21: 3d:c6:62:d3:a2:be:65:26:75:d3:c6:9e:64:73:d1:48:24:ad: 89:89:cb:e9:0f:8f:0e:a9:b4:6a:78:e5:cb:9e:af:71:e7:ae: 72:a7:1b:43:50:61:20:5f:e1:9d:cf:9d:59:c2:9a:14:a6:63: c6:57:a7:9a:ed:7b:e0:63:07:8b:0b:cb:89:00:87:ff:56:3a: bc:37:30:1b:6e:48:6c:ae:c3:0a:eb:a5:df:8d:05:a3:ba:71: 37:55:07:be:9e:42:0b:e4:55:23:bc:1a:5e:88:f6:93:a3:92: 87:1a:62:f9:96:1d:97:77:4f:62:b5:f5:ab:25:5b:d2:da:44: c4:2f:4d:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7SzHbHrzOBMcBMBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWUyODQyNWEtNTlkZC00ZGEyLTg2NGMtMmIzMjQzMDNh YmI0MB4XDTI2MDgxMzEzMDAxMloXDTI2MTExMTE0MDAxMlowLzEtMCsGA1UEAxMk MDdlYmE2MGYtZmU4YS00NDgwLWI1NTItNDEzNWI5ZTcwNTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqJvv5RNlScop3ZsdysPjLlbu1mji/p+jBc2 FBuICFSpJQzbEHEGTo5Gn8IN+R6x9Uc4ueY8gpawhwnLU5/OS2DzxywNxUYsmaDk X7OkS1UgI2eAY5HCnf9Oihedp1elnW32T5guhPa+gcM+UV0m+6me21laCCDdOALU g1AenvysOcYbwYfe2BbqhEpaoyF+AMa1hXyrBfRnVcm9f3YYtorJGIr8+1vI1XOA KB38fUlvGTYIJFqiB9bK3z0nH8PfjGz7Z2IVG1F4bpAbBRQYUJ3UiqfC4KA6r0a+ 4UpTsdbs6o5QYC5xmKY/rIQqXIOGuVBSseCmrRyEfdGX/AuOJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+FF+htmYo5B5FFaFqbuR06kJERMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZTI4 NDI1YS01OWRkLTRkYTItODY0Yy0yYjMyNDMwM2FiYjQvMWEyMjIyYWItZWZkZi0z YjNkLThhZTYtN2QzOThiODQwZjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWUyODQyNWEtNTlkZC00ZGEyLTg2 NGMtMmIzMjQzMDNhYmI0L2FlMjg0MjVhLTU5ZGQtNGRhMi04NjRjLTJiMzI0MzAz YWJiNC5jcmwwHwYDVR0jBBgwFoAUQxjDhy+2e6Ae/YiLT7yBBRQ9u58wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZTI4NDI1YS01OWRkLTRkYTItODY0Yy0yYjMy NDMwM2FiYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWx2vGB3sivgxYZQdBp/9Sh2vIOituHjW7A6pc7Te7SOXZcKZDnV91a GLwOmNAcTiu/RmOgFBEk1nkYBirLWEEwqJXU+bqfbBPRw4I9Ym60i7KrweteSA5f 7NfGiT3Oqaqky4KQbPXFSIXsM9EKa5IgzgpAg6PPYjm0zrObIT3GYtOivmUmddPG nmRz0UgkrYmJy+kPjw6ptGp45cuer3HnrnKnG0NQYSBf4Z3PnVnCmhSmY8ZXp5rt e+BjB4sLy4kAh/9WOrw3MBtuSGyuwwrrpd+NBaO6cTdVB76eQgvkVSO8Gl6I9pOj kocaYvmWHZd3T2K19aslW9LaRMQvTYo= -----END CERTIFICATE-----Generated at Tue Aug 25 15:39:18 2026 by rpki-client