$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cad2833c-ab3d-336e-9d3c-9a05171f1fbb.roa File: cad2833c-ab3d-336e-9d3c-9a05171f1fbb.roa (raw, json) Hash identifier: K48wM+AEQNfM0N4Ed3NcKCqBauW9FPFgf60bV0e5kZc= Subject key identifier: 3B:4E:64:8F:51:CE:A7:7B:0A:87:26:AB:57:7E:27:60:03:A3:7B:99 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E8DEFBB5332CEAD2870886980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cad2833c-ab3d-336e-9d3c-9a05171f1fbb.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 30060 IP address blocks: 216.168.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:bb:53:32:ce:ad:28:70:88:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=044214db-53fc-4b2f-a426-350d4183c36e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c9:7b:59:63:f3:69:ac:e5:96:fc:23:a0:98: 72:b6:df:59:91:5b:73:20:16:ce:66:20:04:6a:31: 6b:47:11:08:92:83:c5:bc:e7:e7:7d:fc:7c:7c:3f: 4e:a3:98:bd:d5:b0:5a:25:21:e5:11:e4:58:a9:83: c7:55:a1:b1:80:c9:09:5a:b2:df:4c:a9:f1:e0:57: f7:55:32:c0:65:da:2c:fa:d2:f2:20:98:47:a4:32: 92:41:a6:98:15:df:21:95:ff:f4:af:74:65:b0:37: 74:1e:f9:1f:dc:36:89:3d:55:c7:06:78:71:31:09: e8:f7:c0:f6:79:d0:19:72:f3:b0:5c:f4:33:79:58: dc:9a:c5:d5:81:8e:5f:70:a1:90:7d:9a:39:77:a8: 21:89:2f:73:72:a0:20:29:70:b1:14:e2:52:9d:5a: 97:55:44:16:69:f4:db:d4:65:b2:49:27:3e:39:86: ef:98:be:b0:64:10:76:48:f3:0b:ab:b2:ab:c3:14: db:38:70:78:fb:6b:35:35:a4:24:61:18:e6:8d:a9: b2:c4:22:cb:3f:04:34:65:d9:38:c8:4a:f1:6a:62: e6:d5:31:5a:72:f7:08:70:ac:76:ca:73:c8:2b:53: ab:6a:4d:c7:bd:1a:3a:b4:79:f3:89:eb:9c:a6:1c: 3e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4E:64:8F:51:CE:A7:7B:0A:87:26:AB:57:7E:27:60:03:A3:7B:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cad2833c-ab3d-336e-9d3c-9a05171f1fbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:0c:dd:10:6f:b0:c2:67:e1:38:ae:6c:af:67:db:72:56:49: 18:81:99:58:01:08:3f:33:c9:d6:ec:c1:92:7e:4e:51:54:31: a8:77:93:5a:d4:96:0c:b5:6f:7f:79:7c:4c:df:5f:81:ee:e8: 22:db:ca:b1:5d:9b:14:ab:e1:6d:e5:6c:ac:cb:28:f3:a7:44: 31:fe:97:17:5f:53:6b:a0:1c:a6:b5:4b:0b:e9:ac:e7:2a:af: b1:86:7e:56:0b:89:cb:b0:f5:43:bd:99:00:23:f7:52:3d:da: 26:6d:53:50:e4:fb:3d:47:52:15:df:f4:1e:bd:9b:2d:93:f9: 42:97:2c:8e:07:32:8c:27:66:6e:26:0d:5d:68:a1:d3:f6:fa: c7:9e:cb:77:01:03:d1:7e:17:ad:f4:b2:cb:ec:eb:70:44:22: 95:00:a5:66:53:d6:e2:1f:c7:ec:44:81:76:fc:d6:19:15:f7: 70:f3:42:59:fa:61:e3:e0:c2:8f:7c:ce:de:7d:b1:25:85:67: 1c:fc:f0:35:98:66:ab:64:1e:55:46:ab:d3:bc:67:5e:ff:2b: 6a:54:88:2c:54:90:ce:c9:75:fd:5c:84:96:74:9d:2d:16:aa: e8:e0:6b:ac:2a:34:63:29:7d:0f:41:50:db:d4:a5:e3:5f:36: 60:92:9e:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N77tTMs6tKHCIaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk MDQ0MjE0ZGItNTNmYy00YjJmLWE0MjYtMzUwZDQxODNjMzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcl7WWPzaazllvwjoJhytt9ZkVtzIBbOZiAE ajFrRxEIkoPFvOfnffx8fD9Oo5i91bBaJSHlEeRYqYPHVaGxgMkJWrLfTKnx4Ff3 VTLAZdos+tLyIJhHpDKSQaaYFd8hlf/0r3RlsDd0Hvkf3DaJPVXHBnhxMQno98D2 edAZcvOwXPQzeVjcmsXVgY5fcKGQfZo5d6ghiS9zcqAgKXCxFOJSnVqXVUQWafTb 1GWySSc+OYbvmL6wZBB2SPMLq7KrwxTbOHB4+2s1NaQkYRjmjamyxCLLPwQ0Zdk4 yErxamLm1TFacvcIcKx2ynPIK1Orak3HvRo6tHnzieucphw+sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtOZI9Rzqd7Cocmq1d+J2ADo3uZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2FkMjgzM2MtYWIzZC0z MzZlLTlkM2MtOWEwNTE3MWYxZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMM3RBvsMJn4TiubK9n23JWSRiBmVgBCD8zydbswZJ+TlFUMah3k1rU lgy1b395fEzfX4Hu6CLbyrFdmxSr4W3lbKzLKPOnRDH+lxdfU2ugHKa1SwvprOcq r7GGflYLicuw9UO9mQAj91I92iZtU1Dk+z1HUhXf9B69my2T+UKXLI4HMownZm4m DV1oodP2+seey3cBA9F+F630ssvs63BEIpUApWZT1uIfx+xEgXb81hkV93DzQln6 YePgwo98zt59sSWFZxz88DWYZqtkHlVGq9O8Z17/K2pUiCxUkM7Jdf1chJZ0nS0W qujga6wqNGMpfQ9BUNvUpeNfNmCSnuU= -----END CERTIFICATE-----Generated at Fri Jul 24 13:22:45 2026 by rpki-client