$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32a5b28a-eed1-3c80-907f-6a1b787516eb.roa File: 32a5b28a-eed1-3c80-907f-6a1b787516eb.roa (raw, json) Hash identifier: qhs3GooAjTivYC6VO6+i3ac1Y26bUpTGKDUNQRYVHjM= Subject key identifier: 1A:96:FF:C9:4B:99:31:23:A8:F5:82:BC:2E:DC:11:C3:D6:B2:B4:A1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F51D2BB6F924B9202570BA000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32a5b28a-eed1-3c80-907f-6a1b787516eb.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 21313 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:bb:6f:92:4b:92:02:57:0b:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=3fa1c985-179f-4e79-aa61-f5e2e4700095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a3:ee:4e:14:47:95:84:e2:ad:7c:4d:00:8c: 48:69:8a:11:9f:ce:04:51:57:90:e1:c0:2d:18:ce: ad:01:aa:02:c2:fd:3f:a9:92:18:0a:52:20:98:2d: a7:76:4a:b7:5c:f6:98:a6:26:9b:85:6d:d2:f1:d2: 93:8c:5b:7b:0c:73:7e:46:0a:d4:23:47:75:f5:be: d3:0f:9b:d6:49:6e:fa:e7:a3:59:06:d0:48:51:1d: c5:e0:a0:0d:ea:d9:00:67:9f:70:c1:14:d2:11:4a: 1e:b6:af:b3:01:6a:77:da:7d:84:cd:ce:4b:15:d7: 41:c2:a8:f4:30:a2:2c:34:e4:ec:fe:6a:bd:3c:09: 48:3c:57:44:26:9a:d0:d8:96:d6:d3:1b:d9:9e:e1: 15:2f:b2:30:f0:ed:f8:30:18:df:47:30:51:13:72: a7:5c:89:ec:b9:32:c0:f6:6d:17:ee:da:e1:3f:0e: 87:e4:32:f8:47:75:d7:10:39:79:9e:84:83:26:6c: 36:62:db:09:18:93:5c:86:2b:8a:8c:01:35:62:58: 11:f1:68:f6:ff:80:e5:92:e8:fa:a2:9f:0e:19:fc: 92:cc:c3:99:d0:e0:68:99:01:6b:1a:8d:78:35:2b: be:61:61:79:86:a0:3e:e9:be:9c:2c:25:4b:3a:ae: 9c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:96:FF:C9:4B:99:31:23:A8:F5:82:BC:2E:DC:11:C3:D6:B2:B4:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32a5b28a-eed1-3c80-907f-6a1b787516eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e4:f3:cb:b2:81:80:62:4a:73:c7:be:95:a2:51:7d:12:e8: 62:19:31:d4:4b:71:6f:f0:ea:64:2f:1f:54:4d:ff:10:4b:7d: c8:7a:a8:22:5a:fa:f0:7f:2a:b1:65:a9:56:bc:68:55:75:af: 71:3b:5e:8e:aa:e6:e5:6b:49:dd:3c:37:28:39:87:ec:b3:30: 0b:89:e2:89:55:1a:13:3a:22:cb:cb:d2:ed:f4:03:97:43:01: e6:8a:5d:d4:89:44:d5:83:4c:e2:03:35:25:de:ac:fb:bb:8c: 47:5b:5e:eb:8c:5f:69:a7:9a:e2:26:25:69:32:b8:18:41:99: 90:0b:82:b1:74:74:21:74:52:ae:4e:ff:75:b5:0a:da:f0:fc: 5a:89:85:5a:71:09:39:0c:1e:3e:f5:3d:fb:11:7f:d1:62:34: 9c:83:82:76:f9:ec:9c:89:71:ee:ad:7f:cb:0d:b9:ff:be:18: e6:ca:6c:6e:1b:2f:5a:c3:f1:29:8a:34:a2:80:c4:74:cc:05: 7f:3b:28:dd:14:fd:5c:25:80:19:28:1a:fc:dc:47:af:c8:ba: 3a:68:78:98:6e:1b:8a:27:e3:dd:32:8b:4a:37:0e:85:4c:b9: ce:cf:88:d3:7c:7b:1f:af:7b:d1:4f:a1:e8:db:05:77:db:3e: 7f:b1:17:90 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9R0rtvkkuSAlcLoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk M2ZhMWM5ODUtMTc5Zi00ZTc5LWFhNjEtZjVlMmU0NzAwMDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKPuThRHlYTirXxNAIxIaYoRn84EUVeQ4cAt GM6tAaoCwv0/qZIYClIgmC2ndkq3XPaYpiabhW3S8dKTjFt7DHN+RgrUI0d19b7T D5vWSW7656NZBtBIUR3F4KAN6tkAZ59wwRTSEUoetq+zAWp32n2Ezc5LFddBwqj0 MKIsNOTs/mq9PAlIPFdEJprQ2JbW0xvZnuEVL7Iw8O34MBjfRzBRE3KnXInsuTLA 9m0X7trhPw6H5DL4R3XXEDl5noSDJmw2YtsJGJNchiuKjAE1YlgR8Wj2/4Dlkuj6 op8OGfySzMOZ0OBomQFrGo14NSu+YWF5hqA+6b6cLCVLOq6cXQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBqW/8lLmTEjqPWCvC7cEcPWsrShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzJhNWIyOGEtZWVkMS0z YzgwLTkwN2YtNmExYjc4NzUxNmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBX5PPLsoGAYkpzx76VolF9EuhiGTHUS3Fv8OpkLx9UTf8QS33Ieqgi WvrwfyqxZalWvGhVda9xO16Oqubla0ndPDcoOYfsszALieKJVRoTOiLLy9Lt9AOX QwHmil3UiUTVg0ziAzUl3qz7u4xHW17rjF9pp5riJiVpMrgYQZmQC4KxdHQhdFKu Tv91tQra8PxaiYVacQk5DB4+9T37EX/RYjScg4J2+eyciXHurX/LDbn/vhjmymxu Gy9aw/EpijSigMR0zAV/OyjdFP1cJYAZKBr83EevyLo6aHiYbhuKJ+PdMotKNw6F TLnOz4jTfHsfr3vRT6Ho2wV32z5/sReQ -----END CERTIFICATE-----Generated at Tue Oct 6 14:58:06 2026 by rpki-client