$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21eaa185-fe7a-35e5-9482-4011ef5eef0c.roa File: 21eaa185-fe7a-35e5-9482-4011ef5eef0c.roa (raw, json) Hash identifier: RW2gqmUEf+tw7mwpU+omnDMlyAiyHxN8RrKlxsV03IQ= Subject key identifier: 0D:BF:00:E2:06:06:3F:C8:9D:5A:2D:6C:6C:F2:FB:EC:C4:3D:63:27 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F506D66DBF0A38DBE41AFF680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21eaa185-fe7a-35e5-9482-4011ef5eef0c.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 396578 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:66:db:f0:a3:8d:be:41:af:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=151b813b-6bea-42cb-9541-1a0c1fc643dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d7:2f:02:47:0c:5f:aa:ed:f9:96:35:72:fd: d1:c8:b3:26:bd:f2:77:b2:4a:04:cc:2a:28:24:fb: 8f:47:28:75:c8:d8:e1:5e:f1:a5:29:60:13:bb:ba: b0:0e:13:38:99:9c:35:f1:c3:b9:52:b7:97:b8:37: 38:5a:15:3d:15:0b:be:1b:bd:0d:6c:83:eb:67:c8: 2b:25:52:1b:43:b4:b7:2f:38:83:ed:7a:8e:74:4c: ff:fb:20:25:7f:31:cf:80:18:1b:ff:aa:b1:3a:8d: b5:f1:fd:f4:c6:6f:df:72:5a:85:d7:ab:9e:b5:63: af:22:61:ba:10:dc:1e:b4:b6:88:a0:7b:62:95:1d: a3:a9:f2:b6:ee:db:c5:55:cb:ea:94:12:ed:d4:fe: 59:c1:da:4c:42:02:a3:9b:f8:cc:95:7e:88:34:0c: 49:79:30:80:53:31:9e:e1:05:a8:25:88:61:1e:3f: c2:81:72:ac:1e:57:87:fd:d3:8d:be:7b:38:98:0e: ee:05:62:c8:83:37:2c:e8:5f:6b:be:99:d8:fc:66: 0f:79:7d:11:c0:6a:f6:75:68:74:b6:ab:4e:79:2e: 15:74:71:99:24:d0:72:a0:ee:91:0f:7f:15:16:ef: f8:a7:74:10:bd:b9:a6:86:8b:a0:61:1d:f7:d0:24: de:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BF:00:E2:06:06:3F:C8:9D:5A:2D:6C:6C:F2:FB:EC:C4:3D:63:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21eaa185-fe7a-35e5-9482-4011ef5eef0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:1c:e8:19:44:25:2b:45:83:31:05:6c:34:74:69:99:22:22: 86:0a:be:a7:02:ab:e2:52:66:37:c1:2e:08:e0:98:9d:c6:f7: a7:eb:a4:0c:5d:49:da:06:3b:59:6f:e5:a0:68:a8:a8:49:27: 40:e5:0f:c0:8b:4c:71:8f:98:93:cd:06:f3:d7:a8:61:ea:3a: 4d:f5:a5:96:1b:58:d2:da:dc:c6:d4:98:5e:ea:15:1a:1f:4e: b2:e1:db:12:4c:fd:b0:19:aa:77:d9:17:a6:f4:c4:b8:a0:43: 8a:7e:89:24:8d:df:f5:a8:b8:40:06:db:9f:83:53:f8:11:2a: f0:9a:a0:49:d8:9c:54:f0:0d:ef:08:3d:88:bd:a2:3a:14:88: 01:7d:13:c3:af:96:5a:af:4c:32:84:23:82:fc:04:04:e9:73: 97:a7:8f:af:97:12:67:a7:19:55:2e:d6:af:31:c5:09:7d:96: d5:b7:31:a7:1c:c2:db:ee:e6:2a:6f:91:57:06:70:b1:cd:fe: 4e:e0:6b:0f:1e:f1:6a:07:3f:1f:aa:48:4d:b1:1d:83:0d:20: 1f:f8:59:ee:45:7c:32:57:62:76:45:19:78:c7:d3:56:45:13: ff:b8:a7:75:3d:9f:2c:4f:76:c5:aa:c7:ba:df:36:8e:53:1f: e6:6e:07:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWbb8KONvkGv9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk MTUxYjgxM2ItNmJlYS00MmNiLTk1NDEtMWEwYzFmYzY0M2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tcvAkcMX6rt+ZY1cv3RyLMmvfJ3skoEzCoo JPuPRyh1yNjhXvGlKWATu7qwDhM4mZw18cO5UreXuDc4WhU9FQu+G70NbIPrZ8gr JVIbQ7S3LziD7XqOdEz/+yAlfzHPgBgb/6qxOo218f30xm/fclqF16uetWOvImG6 ENwetLaIoHtilR2jqfK27tvFVcvqlBLt1P5ZwdpMQgKjm/jMlX6INAxJeTCAUzGe 4QWoJYhhHj/CgXKsHleH/dONvns4mA7uBWLIgzcs6F9rvpnY/GYPeX0RwGr2dWh0 tqtOeS4VdHGZJNByoO6RD38VFu/4p3QQvbmmhougYR330CTeRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2/AOIGBj/InVotbGzy++zEPWMnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjFlYWExODUtZmU3YS0z NWU1LTk0ODItNDAxMWVmNWVlZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAc6BlEJStFgzEFbDR0aZkiIoYKvqcCq+JSZjfBLgjgmJ3G96frpAxd SdoGO1lv5aBoqKhJJ0DlD8CLTHGPmJPNBvPXqGHqOk31pZYbWNLa3MbUmF7qFRof TrLh2xJM/bAZqnfZF6b0xLigQ4p+iSSN3/WouEAG25+DU/gRKvCaoEnYnFTwDe8I PYi9ojoUiAF9E8OvllqvTDKEI4L8BATpc5enj6+XEmenGVUu1q8xxQl9ltW3Macc wtvu5ipvkVcGcLHN/k7gaw8e8WoHPx+qSE2xHYMNIB/4We5FfDJXYnZFGXjH01ZF E/+4p3U9nyxPdsWqx7rfNo5TH+ZuB1c= -----END CERTIFICATE-----Generated at Sun Oct 11 19:03:10 2026 by rpki-client