$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/11a2f965-996f-37f6-ad25-b2988a8d603b.roa File: 11a2f965-996f-37f6-ad25-b2988a8d603b.roa (raw, json) Hash identifier: 1wpJwMbcBs1MtF3in27s2Dkfk6+yjSUmKSb2eD6R2sg= Subject key identifier: AD:C6:88:2B:B4:97:C6:7D:85:0F:7E:03:1B:E8:53:EE:6B:E6:95:A9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F51D2BEF14D5449438E137880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/11a2f965-996f-37f6-ad25-b2988a8d603b.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 396547 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:be:f1:4d:54:49:43:8e:13:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=3fe1051c-dd88-44e5-8df6-89f230fc0b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a5:dd:22:a2:8f:84:15:d7:8e:82:e6:5d:81: 05:9f:a0:10:d8:36:a3:43:df:e7:69:f0:70:a8:69: ae:2d:22:71:35:7d:3f:78:9d:bb:2c:39:78:ce:4a: 2e:43:5d:37:98:77:e5:3d:b5:a4:3f:28:11:1e:58: 13:9a:2c:a0:40:e1:19:0a:ae:5f:d4:5a:fb:9d:47: 6b:b4:aa:53:d9:04:a6:f9:12:99:64:e1:46:13:53: 23:d0:34:54:48:1f:5f:67:ac:5b:fd:42:f7:25:b8: af:6e:24:e0:9d:9c:d3:42:18:56:57:a1:46:ee:76: 27:ff:a5:06:46:15:19:03:44:cc:31:ea:c6:54:69: f3:fa:f5:67:c7:0e:d9:98:82:86:5e:ed:ed:5c:d9: 96:5c:3c:f9:f2:9f:34:23:09:1f:79:af:96:64:93: 52:41:44:8c:c9:ac:cc:9c:1c:e1:80:a7:8e:5d:a0: 36:7f:a2:50:4a:55:bb:10:c5:51:6d:dd:c1:b5:31: 87:cd:6e:a8:8b:30:ce:68:4c:9f:a9:3b:36:a2:0c: 39:e0:f6:97:6f:4f:c1:22:fd:48:a5:4b:fa:76:76: 19:ae:c6:22:60:96:0d:6a:5b:60:9b:2f:07:b4:66: 26:13:dd:a5:c1:59:36:42:37:c0:47:04:06:86:6b: 10:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C6:88:2B:B4:97:C6:7D:85:0F:7E:03:1B:E8:53:EE:6B:E6:95:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/11a2f965-996f-37f6-ad25-b2988a8d603b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:69:2e:55:25:ec:69:a3:a3:17:5e:b9:97:e2:7e:56:95:f7: a1:67:d4:3d:7a:7a:3e:6f:42:c8:f3:8d:ae:08:0d:3b:d2:f8: cf:49:19:19:32:a2:3a:b2:73:72:9c:b4:db:1b:28:ed:a0:74: a2:8a:b4:bb:1b:a3:6e:6c:64:d5:e4:04:ea:bf:e1:5a:04:08: c1:57:fa:3f:49:58:26:7f:45:1b:5a:9e:64:c5:5c:2e:12:cd: 79:98:8b:1c:4e:05:87:9c:40:5b:eb:c0:a7:58:d7:14:7d:68: 15:99:3d:f8:d9:a3:63:61:e2:e3:22:0e:4a:3a:c8:4d:34:31: 2a:2a:31:ea:37:e6:62:d5:7d:b3:f0:ed:9e:40:92:f8:d9:c6: dc:87:da:df:22:44:06:19:8e:7b:10:be:b7:74:cb:e3:3a:a5: 12:74:b1:78:d2:cf:e0:13:8d:f2:a1:1a:1b:75:f7:d0:f7:a2: 75:95:fb:90:1f:02:0c:1d:b5:ba:97:66:01:6a:9a:a6:a8:4a: b6:9d:e9:7a:10:2a:7c:1c:6b:8a:21:43:2b:16:25:dc:9a:c7: 97:8a:54:ce:a7:59:cc:3c:5d:c0:d6:c5:bf:16:de:03:ac:63: de:e2:48:32:0d:de:a5:d9:fa:12:c1:9d:c1:70:a7:36:1c:e3: 9c:9c:8e:48 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9R0r7xTVRJQ44TeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk M2ZlMTA1MWMtZGQ4OC00NGU1LThkZjYtODlmMjMwZmMwYjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqXdIqKPhBXXjoLmXYEFn6AQ2DajQ9/nafBw qGmuLSJxNX0/eJ27LDl4zkouQ103mHflPbWkPygRHlgTmiygQOEZCq5f1Fr7nUdr tKpT2QSm+RKZZOFGE1Mj0DRUSB9fZ6xb/UL3JbivbiTgnZzTQhhWV6FG7nYn/6UG RhUZA0TMMerGVGnz+vVnxw7ZmIKGXu3tXNmWXDz58p80Iwkfea+WZJNSQUSMyazM nBzhgKeOXaA2f6JQSlW7EMVRbd3BtTGHzW6oizDOaEyfqTs2ogw54PaXb0/BIv1I pUv6dnYZrsYiYJYNaltgmy8HtGYmE92lwVk2QjfARwQGhmsQTQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK3GiCu0l8Z9hQ9+AxvoU+5r5pWpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTFhMmY5NjUtOTk2Zi0z N2Y2LWFkMjUtYjI5ODhhOGQ2MDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBPaS5VJexpo6MXXrmX4n5WlfehZ9Q9eno+b0LI842uCA070vjPSRkZ MqI6snNynLTbGyjtoHSiirS7G6NubGTV5ATqv+FaBAjBV/o/SVgmf0UbWp5kxVwu Es15mIscTgWHnEBb68CnWNcUfWgVmT342aNjYeLjIg5KOshNNDEqKjHqN+Zi1X2z 8O2eQJL42cbch9rfIkQGGY57EL63dMvjOqUSdLF40s/gE43yoRobdffQ96J1lfuQ HwIMHbW6l2YBapqmqEq2nel6ECp8HGuKIUMrFiXcmseXilTOp1nMPF3A1sW/Ft4D rGPe4kgyDd6l2foSwZ3BcKc2HOOcnI5I -----END CERTIFICATE-----Generated at Tue Oct 6 14:44:07 2026 by rpki-client