$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28a883eb-63e2-3889-af76-c1c78c0659f0.roa File: 28a883eb-63e2-3889-af76-c1c78c0659f0.roa (raw, json) Hash identifier: GKgX39HOLK8l68phCxV3knpqu4wwE7A0m8gVuGwgTaU= Subject key identifier: 9F:CA:F7:5C:F9:79:67:53:33:B8:51:69:D7:9A:18:39:9E:BD:A5:07 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F51D2BE35B47548554285C4C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28a883eb-63e2-3889-af76-c1c78c0659f0.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 396564 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:be:35:b4:75:48:55:42:85:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=d9432bc2-75e6-4ecd-98b2-f26af8a2ebaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b8:92:9d:ad:41:2a:d3:66:ca:22:91:e6:02: 66:33:cf:0b:67:5b:be:e6:bb:47:53:cc:a3:fd:51: ed:ac:a5:da:63:e9:13:61:63:ee:c1:54:5d:e0:3e: 1f:b0:9c:c1:03:15:7c:67:55:10:fb:08:2c:59:92: 01:36:42:33:98:68:e3:dd:9d:15:7c:e9:9b:34:a9: 49:f1:7d:34:15:0f:bb:a1:3a:51:63:bd:5c:8d:e8: 6a:c8:ea:20:b1:7f:b9:dc:13:25:8a:da:42:0f:16: 6d:af:62:d1:3b:9b:17:40:c7:6a:39:de:f1:6a:8d: 37:50:55:77:01:ec:01:9a:b1:30:ba:02:b7:81:80: 67:38:14:3d:c3:8d:d9:8d:ec:77:4b:04:db:5f:65: 51:6c:9f:1b:82:7e:dc:9a:3f:62:b0:3d:e9:27:fb: ff:83:cf:6a:e3:8b:92:ea:f8:d5:d8:bb:e0:c6:57: 95:5a:6b:1a:47:35:2e:09:38:62:b5:54:c5:13:97: 53:9a:38:73:a6:08:37:79:f0:50:5c:0b:26:c9:f4: 65:86:4d:5d:c8:3c:f4:cc:7a:4c:b6:cc:9c:d6:0b: 57:c7:d1:aa:a5:5e:9c:33:40:01:f8:a2:ef:e8:f3: 69:94:39:65:3c:cb:71:4d:13:2d:d9:b6:ea:aa:53: 56:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CA:F7:5C:F9:79:67:53:33:B8:51:69:D7:9A:18:39:9E:BD:A5:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28a883eb-63e2-3889-af76-c1c78c0659f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:32:34:85:8a:13:8e:87:d7:8a:18:1a:f9:7f:1f:be:09:72: 04:6a:1f:47:b1:50:6d:e7:65:d9:e5:c7:70:c5:00:fc:81:cd: ed:80:81:f2:2d:55:74:84:11:f9:b8:0e:4a:0b:ed:f6:ac:37: 59:2b:c7:c8:4e:d4:c8:db:23:fa:66:1b:f6:64:f1:7a:05:01: e3:28:c7:30:e2:22:95:03:37:c6:83:1c:b4:90:af:c0:d6:25: 17:2e:b9:ed:a4:bb:b0:7f:4e:45:7b:a6:d4:df:34:05:d3:16: 7e:1d:5f:36:bf:39:0b:fe:99:7b:9b:a4:a7:fc:f8:1e:6b:0c: 8a:c4:87:06:cd:7f:70:50:c9:57:7b:53:6d:25:7d:df:0b:08: 60:8b:eb:79:0a:c1:17:fa:f9:f7:6a:e0:b1:83:45:d6:68:35: 55:14:c5:07:af:79:58:d9:44:58:be:ba:3b:86:99:59:ee:53: 47:16:5b:32:49:84:8e:d7:cd:ad:4c:a0:c8:dd:0e:ff:8f:36: 3a:08:7c:dd:4c:50:67:6e:26:24:81:ca:e9:09:30:16:44:e0: 0d:09:30:f4:fd:a7:7c:2f:fe:c0:5f:14:83:10:c1:20:88:48: 9b:80:73:16:d7:30:bd:71:fd:c7:81:c0:14:aa:46:49:29:68: 7f:a3:38:27 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9R0r41tHVIVUKFxMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk ZDk0MzJiYzItNzVlNi00ZWNkLTk4YjItZjI2YWY4YTJlYmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiriSna1BKtNmyiKR5gJmM88LZ1u+5rtHU8yj /VHtrKXaY+kTYWPuwVRd4D4fsJzBAxV8Z1UQ+wgsWZIBNkIzmGjj3Z0VfOmbNKlJ 8X00FQ+7oTpRY71cjehqyOogsX+53BMlitpCDxZtr2LRO5sXQMdqOd7xao03UFV3 AewBmrEwugK3gYBnOBQ9w43Zjex3SwTbX2VRbJ8bgn7cmj9isD3pJ/v/g89q44uS 6vjV2LvgxleVWmsaRzUuCThitVTFE5dTmjhzpgg3efBQXAsmyfRlhk1dyDz0zHpM tsyc1gtXx9GqpV6cM0AB+KLv6PNplDllPMtxTRMt2bbqqlNWFQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ/K91z5eWdTM7hRadeaGDmevaUHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjhhODgzZWItNjNlMi0z ODg5LWFmNzYtYzFjNzhjMDY1OWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBvMjSFihOOh9eKGBr5fx++CXIEah9HsVBt52XZ5cdwxQD8gc3tgIHy LVV0hBH5uA5KC+32rDdZK8fITtTI2yP6Zhv2ZPF6BQHjKMcw4iKVAzfGgxy0kK/A 1iUXLrntpLuwf05Fe6bU3zQF0xZ+HV82vzkL/pl7m6Sn/PgeawyKxIcGzX9wUMlX e1NtJX3fCwhgi+t5CsEX+vn3auCxg0XWaDVVFMUHr3lY2URYvro7hplZ7lNHFlsy SYSO182tTKDI3Q7/jzY6CHzdTFBnbiYkgcrpCTAWROANCTD0/ad8L/7AXxSDEMEg iEibgHMW1zC9cf3HgcAUqkZJKWh/ozgn -----END CERTIFICATE-----Generated at Tue Oct 6 11:42:06 2026 by rpki-client