$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b11d68a-8468-3865-ac41-3035058ea95f.roa File: 1b11d68a-8468-3865-ac41-3035058ea95f.roa (raw, json) Hash identifier: kmo1rwreY9C4SGVjN1elHFVgV2tDJapULowufyYe4IM= Subject key identifier: 15:27:84:09:F5:26:5D:8E:65:4C:8D:6C:49:C9:C2:CE:E4:99:A1:6F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F51D2BCCB1217670FD315FD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b11d68a-8468-3865-ac41-3035058ea95f.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 396546 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:bc:cb:12:17:67:0f:d3:15:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=0aa31d5e-799e-40f1-a868-676561ea7e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:70:8d:b1:40:32:68:d2:51:87:31:5d:c8:4a: 55:42:21:07:8a:52:bd:72:d8:ad:12:d3:f9:75:98: 70:85:4c:e2:44:1b:32:41:d7:de:6e:70:bf:ec:3e: f8:ad:f0:cf:0f:fd:ae:1a:fe:f6:12:3f:8d:55:aa: a9:d2:b3:6d:8e:77:cc:66:e1:fe:1d:6a:66:41:fd: 76:6e:51:e4:e4:e7:2c:0c:7d:e5:98:21:1b:54:57: 0f:38:9a:76:16:bc:6e:b0:74:33:41:02:a4:d9:86: 5c:7a:ce:fa:bc:aa:fa:f5:55:ca:b2:d0:e1:26:79: 70:75:1e:08:9b:6a:5c:aa:5c:66:0e:d9:3f:12:4b: 1d:e5:76:ef:2c:52:1a:bf:3e:83:35:ad:71:ca:68: ac:3d:67:8a:cb:a6:89:e6:30:6d:38:c0:14:f7:02: c4:f0:60:d1:f0:50:81:5c:ab:44:32:69:78:bc:8c: ff:59:84:45:b0:c2:b0:7c:c5:32:07:09:28:2f:46: ed:11:4d:5d:b2:99:af:e4:2b:3d:38:68:2d:c7:83: b0:a4:e4:66:d0:bf:38:5f:d5:0e:d0:17:14:72:25: 13:95:20:18:93:cf:cd:f4:d5:e9:e9:0d:cf:9a:3b: 28:09:17:be:34:1e:c3:3c:e2:65:08:aa:24:76:af: 37:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:27:84:09:F5:26:5D:8E:65:4C:8D:6C:49:C9:C2:CE:E4:99:A1:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b11d68a-8468-3865-ac41-3035058ea95f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:15:f0:15:b3:a4:86:dd:4e:b0:b5:bb:c0:0e:b2:a8:e7:78: 41:12:0a:20:6b:0c:3e:b3:6d:ab:74:16:a6:44:7a:16:e2:2a: b0:c7:f5:6c:dd:c0:34:93:7c:f1:e1:f0:7b:19:f7:75:8e:fc: a9:82:f8:c7:4b:1d:1f:7e:1b:7e:cd:52:d9:9a:13:8f:f4:04: 21:24:94:29:f2:56:e8:a8:b3:a8:36:d4:ab:31:f0:08:99:00: d2:f4:e4:09:02:8e:46:5e:46:66:f7:0f:cd:dc:0b:1f:97:0e: 19:9b:8d:1a:da:c4:0d:84:bb:e0:5b:a3:77:5d:6f:f1:51:c9: af:4c:1d:3a:3f:2e:b7:5a:bc:e8:d1:20:8a:23:6d:be:d7:cf: bf:02:4f:b2:58:86:74:61:8d:d9:6b:23:6f:58:13:2c:c5:36: 76:9c:26:6a:fb:3a:96:95:62:8e:bb:6d:bc:e9:76:16:e0:15: da:bf:b9:db:84:70:46:0d:00:d7:d2:13:68:37:e3:2d:3d:2e: ba:4a:e7:03:c0:ad:4b:05:c4:b4:da:cb:3a:e5:c0:e1:ad:35: de:f8:bf:e8:6f:23:00:8d:28:94:2d:27:9e:7c:c1:45:60:ff: c9:2f:e4:f2:7c:e1:d9:9d:16:f5:cc:77:cb:30:e9:64:35:c0: a3:1a:8d:49 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9R0rzLEhdnD9MV/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk MGFhMzFkNWUtNzk5ZS00MGYxLWE4NjgtNjc2NTYxZWE3ZTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHCNsUAyaNJRhzFdyEpVQiEHilK9ctitEtP5 dZhwhUziRBsyQdfebnC/7D74rfDPD/2uGv72Ej+NVaqp0rNtjnfMZuH+HWpmQf12 blHk5OcsDH3lmCEbVFcPOJp2FrxusHQzQQKk2YZces76vKr69VXKstDhJnlwdR4I m2pcqlxmDtk/Eksd5XbvLFIavz6DNa1xymisPWeKy6aJ5jBtOMAU9wLE8GDR8FCB XKtEMml4vIz/WYRFsMKwfMUyBwkoL0btEU1dspmv5Cs9OGgtx4OwpORm0L84X9UO 0BcUciUTlSAYk8/N9NXp6Q3PmjsoCRe+NB7DPOJlCKokdq83jwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBUnhAn1Jl2OZUyNbEnJws7kmaFvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWIxMWQ2OGEtODQ2OC0z ODY1LWFjNDEtMzAzNTA1OGVhOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAhFfAVs6SG3U6wtbvADrKo53hBEgogaww+s22rdBamRHoW4iqwx/Vs 3cA0k3zx4fB7Gfd1jvypgvjHSx0ffht+zVLZmhOP9AQhJJQp8lboqLOoNtSrMfAI mQDS9OQJAo5GXkZm9w/N3Asflw4Zm40a2sQNhLvgW6N3XW/xUcmvTB06Py63Wrzo 0SCKI22+18+/Ak+yWIZ0YY3ZayNvWBMsxTZ2nCZq+zqWlWKOu2286XYW4BXav7nb hHBGDQDX0hNoN+MtPS66SucDwK1LBcS02ss65cDhrTXe+L/obyMAjSiULSeefMFF YP/JL+TyfOHZnRb1zHfLMOlkNcCjGo1J -----END CERTIFICATE-----Generated at Thu Oct 8 05:54:25 2026 by rpki-client