$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/20f86231-c14f-3af7-a26e-6c0968214399.roa File: 20f86231-c14f-3af7-a26e-6c0968214399.roa (raw, json) Hash identifier: T+blpk3Nw+y+v53WEjAgmX3oRMR99uDHgKn4w+Q3IKc= Subject key identifier: 09:F8:C5:27:BD:8D:48:98:CC:3F:0D:BE:4C:E9:AD:96:60:ED:E5:45 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F506D4282BD6F9062FAC68440 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/20f86231-c14f-3af7-a26e-6c0968214399.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 397198 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:42:82:bd:6f:90:62:fa:c6:84:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=ae2c186d-9822-4639-b5f0-29b47b0ea053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e8:92:bf:f4:6a:27:7d:01:b5:e1:87:c9:da: 32:fa:ee:67:34:22:22:68:03:c4:aa:1d:9b:9a:6a: ee:f9:22:59:06:39:c9:eb:03:cf:b8:4a:8a:4f:49: 14:b9:ff:84:e3:cd:83:66:e1:b7:17:e6:e3:7c:16: 3a:ac:11:42:c0:e1:fd:b6:b9:e9:e9:15:ce:9f:10: e9:8e:ea:33:1a:2b:ed:ea:32:41:ad:5e:14:74:ca: ec:b3:ea:d8:ba:5a:24:d1:b4:7d:d1:6c:2e:54:6f: 79:93:79:0d:0e:e7:75:41:e4:ca:26:99:a2:95:47: ac:4a:ca:e6:6a:80:ea:ba:24:d4:91:0a:42:12:80: 68:82:6b:94:5d:5c:21:9e:4e:60:52:8c:2f:2e:49: d6:ce:19:05:fe:61:47:c6:76:6f:66:e0:07:32:51: 23:28:05:ce:ae:b3:f7:96:4b:a2:5e:fd:20:e9:57: 31:bd:c4:b1:71:1f:d5:b7:5b:71:24:86:c6:fb:e6: ff:e3:06:51:32:05:9e:a7:7b:4f:8b:ca:88:e9:98: 94:bf:0d:47:78:52:50:92:2a:58:0a:b7:32:4c:21: ad:fd:ea:26:17:95:53:5b:10:5d:5d:f5:1d:c4:78: fc:38:4e:53:89:11:ab:4e:64:9c:27:57:4f:f9:fe: ff:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F8:C5:27:BD:8D:48:98:CC:3F:0D:BE:4C:E9:AD:96:60:ED:E5:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/20f86231-c14f-3af7-a26e-6c0968214399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e4:bd:eb:9a:60:1e:81:eb:ff:0a:8d:e3:22:b0:3c:31:1a: 2e:48:87:ae:10:ff:ec:46:5e:44:45:b8:f1:21:42:33:aa:98: 6f:94:97:f7:2c:a7:ef:29:32:e4:a8:54:38:8f:0f:ac:87:a2: 7f:d4:e4:d8:ed:9e:5f:49:60:74:87:43:12:fa:19:e6:fc:fc: 1d:47:9d:62:09:f4:11:ee:88:6d:d5:ec:e3:04:c1:d2:55:3f: 0b:fc:f0:b6:08:05:7c:6b:52:c5:4f:1a:3e:9b:69:b1:54:5c: 0d:48:c1:84:7d:ff:ab:3c:9d:b7:d3:c6:81:e4:8d:ea:fc:28: 05:8f:5e:46:25:1c:64:04:f3:45:a8:c9:93:86:95:24:b8:2a: 4b:d5:04:17:7b:ee:c8:5f:9c:74:37:cd:c0:e7:03:25:57:53: 9b:ab:30:59:54:a5:c9:63:c5:7b:af:4e:29:45:b3:0e:d9:d1: 43:0d:4d:bf:0c:ee:87:b7:01:36:a2:7d:3a:7f:c8:1b:2b:fe: 72:d6:52:d8:8f:fe:c1:99:e3:13:83:d4:ac:94:bc:09:fc:8f: 40:c9:1b:47:af:53:a1:6f:c8:7f:bd:d3:e8:07:d0:9c:db:6a: b2:55:74:28:57:17:d8:4a:a6:bb:90:ae:bf:17:19:64:1f:83: 64:bc:f3:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUKCvW+QYvrGhEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk YWUyYzE4NmQtOTgyMi00NjM5LWI1ZjAtMjliNDdiMGVhMDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOiSv/RqJ30BteGHydoy+u5nNCIiaAPEqh2b mmru+SJZBjnJ6wPPuEqKT0kUuf+E482DZuG3F+bjfBY6rBFCwOH9trnp6RXOnxDp juozGivt6jJBrV4UdMrss+rYulok0bR90WwuVG95k3kNDud1QeTKJpmilUesSsrm aoDquiTUkQpCEoBogmuUXVwhnk5gUowvLknWzhkF/mFHxnZvZuAHMlEjKAXOrrP3 lkuiXv0g6VcxvcSxcR/Vt1txJIbG++b/4wZRMgWep3tPi8qI6ZiUvw1HeFJQkipY CrcyTCGt/eomF5VTWxBdXfUdxHj8OE5TiRGrTmScJ1dP+f7/PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAn4xSe9jUiYzD8NvkzprZZg7eVFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjBmODYyMzEtYzE0Zi0z YWY3LWEyNmUtNmMwOTY4MjE0Mzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzkveuaYB6B6/8KjeMisDwxGi5Ih64Q/+xGXkRFuPEhQjOqmG+Ul/cs p+8pMuSoVDiPD6yHon/U5Njtnl9JYHSHQxL6Geb8/B1HnWIJ9BHuiG3V7OMEwdJV Pwv88LYIBXxrUsVPGj6babFUXA1IwYR9/6s8nbfTxoHkjer8KAWPXkYlHGQE80Wo yZOGlSS4KkvVBBd77shfnHQ3zcDnAyVXU5urMFlUpcljxXuvTilFsw7Z0UMNTb8M 7oe3ATaifTp/yBsr/nLWUtiP/sGZ4xOD1KyUvAn8j0DJG0evU6FvyH+90+gH0Jzb arJVdChXF9hKpruQrr8XGWQfg2S88ys= -----END CERTIFICATE-----Generated at Tue Oct 6 11:37:41 2026 by rpki-client