$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2383ad5c-9223-3580-ad15-2b553e832e5d.roa File: 2383ad5c-9223-3580-ad15-2b553e832e5d.roa (raw, json) Hash identifier: oCSTICORogXRjxOCvQVA8bmYAefrotker56oSwRRIFQ= Subject key identifier: DC:40:A9:32:D2:30:A1:F6:50:F9:DA:C1:B4:E8:58:13:08:C0:31:C7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F506D43FDADEAB0F764015100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2383ad5c-9223-3580-ad15-2b553e832e5d.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 396610 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:43:fd:ad:ea:b0:f7:64:01:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=4d8c1c92-8e4c-4e2c-9a46-79aee8d4a038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fa:5d:b8:4a:ce:52:7b:3c:f1:c5:40:a7:6e: eb:3b:89:8e:07:bb:27:46:43:a7:50:b4:8f:0f:a0: ca:b7:10:7a:a9:33:72:89:0b:f0:37:4d:06:cc:b5: 7a:5a:94:e7:77:fc:f4:0c:c6:7d:bb:57:3f:37:1f: d0:68:c8:a4:c3:15:6d:ab:88:8b:21:d5:4f:ba:21: db:d1:8f:5c:07:b9:8a:6c:b2:83:a5:ba:87:b0:11: 0a:e4:65:53:46:08:d6:22:c6:0f:4b:98:16:f3:af: dd:72:1f:da:2f:ff:ba:02:c1:99:97:a6:13:17:5c: ec:4b:38:82:06:53:b6:52:c4:46:72:8d:6e:42:09: 4d:c3:b6:7d:75:37:c4:58:80:c6:33:d2:0f:53:4b: a0:c4:9b:0b:76:70:d7:27:35:82:4f:33:83:ef:63: 17:d6:f7:83:07:e4:be:5b:0a:40:53:61:d6:34:88: b8:3f:82:f1:0f:2c:66:5e:99:61:bb:06:0b:c4:e4: 3f:29:4d:26:0d:d0:03:bf:cf:bb:1f:4d:c2:90:00: a9:b0:d1:55:5b:3f:b5:7a:07:4e:d1:b9:a3:7c:6d: 4a:2b:c6:68:b4:c3:63:a9:c7:ee:92:5a:92:a1:4e: c0:ff:7c:47:96:f3:85:d0:fc:70:48:61:df:7c:0c: 63:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:40:A9:32:D2:30:A1:F6:50:F9:DA:C1:B4:E8:58:13:08:C0:31:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2383ad5c-9223-3580-ad15-2b553e832e5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ce:6b:2c:08:ce:2c:1f:b2:a1:b0:f3:71:f8:b8:c7:9f:fb: 3a:8a:28:1f:b6:24:6b:bb:13:fb:87:d1:8f:27:89:4d:d0:2c: 2b:b7:3b:fd:d3:89:57:f8:dd:3b:03:b5:87:48:0a:b7:8a:ee: ca:fb:2e:ab:a0:5e:ee:af:2c:5a:76:e7:93:fa:0b:7b:c4:d6: 2e:30:1c:88:c6:a0:35:5d:b0:85:4f:54:c1:e2:bf:74:7c:b6: dd:7f:b0:64:98:26:4d:06:15:cf:0f:03:8e:83:de:d3:84:35: 19:bc:9f:a3:ba:31:5e:8f:ae:d9:06:da:ee:66:c2:1a:df:c6: 0c:29:9d:8e:3b:4e:cc:cc:e8:b1:2c:f2:4c:a2:6e:b9:58:39: 6b:93:77:e0:8a:b0:25:98:d2:46:fc:82:e2:54:c5:69:e1:0a: ba:0f:46:4d:e8:66:32:89:01:ca:1a:69:1a:d4:22:c2:2b:82: 75:a8:10:77:0d:e0:cb:5e:b8:f2:e9:16:3e:35:4b:28:ec:80: af:23:e0:7c:4e:66:c7:17:c1:49:0b:8e:50:af:1a:c2:e6:63: 82:cd:5c:20:de:1c:14:b7:c4:6e:bd:d9:39:3f:86:b2:af:43: be:e4:29:ba:58:c7:c1:9b:ca:1c:18:ca:47:06:56:10:24:4f: 59:13:6b:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUP9reqw92QBUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk NGQ4YzFjOTItOGU0Yy00ZTJjLTlhNDYtNzlhZWU4ZDRhMDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvpduErOUns88cVAp27rO4mOB7snRkOnULSP D6DKtxB6qTNyiQvwN00GzLV6WpTnd/z0DMZ9u1c/Nx/QaMikwxVtq4iLIdVPuiHb 0Y9cB7mKbLKDpbqHsBEK5GVTRgjWIsYPS5gW86/dch/aL/+6AsGZl6YTF1zsSziC BlO2UsRGco1uQglNw7Z9dTfEWIDGM9IPU0ugxJsLdnDXJzWCTzOD72MX1veDB+S+ WwpAU2HWNIi4P4LxDyxmXplhuwYLxOQ/KU0mDdADv8+7H03CkACpsNFVWz+1egdO 0bmjfG1KK8ZotMNjqcfuklqSoU7A/3xHlvOF0PxwSGHffAxjiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxAqTLSMKH2UPnawbToWBMIwDHHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjM4M2FkNWMtOTIyMy0z NTgwLWFkMTUtMmI1NTNlODMyZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjOaywIziwfsqGw83H4uMef+zqKKB+2JGu7E/uH0Y8niU3QLCu3O/3T iVf43TsDtYdICreK7sr7LqugXu6vLFp255P6C3vE1i4wHIjGoDVdsIVPVMHiv3R8 tt1/sGSYJk0GFc8PA46D3tOENRm8n6O6MV6PrtkG2u5mwhrfxgwpnY47TszM6LEs 8kyibrlYOWuTd+CKsCWY0kb8guJUxWnhCroPRk3oZjKJAcoaaRrUIsIrgnWoEHcN 4MteuPLpFj41SyjsgK8j4HxOZscXwUkLjlCvGsLmY4LNXCDeHBS3xG692Tk/hrKv Q77kKbpYx8GbyhwYykcGVhAkT1kTa50= -----END CERTIFICATE-----Generated at Tue Oct 6 23:13:10 2026 by rpki-client