$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33b86f0f-9676-3652-945f-0423095a5069.roa File: 33b86f0f-9676-3652-945f-0423095a5069.roa (raw, json) Hash identifier: xJV28t5uvdPSFgPQ7VbDX4JstcZs3Bj4TVuBlPF/xoI= Subject key identifier: 21:3A:8F:80:A4:74:08:79:70:51:D9:6F:91:3A:9E:03:45:E5:02:63 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F51D2C05003F0C3A44501CF80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33b86f0f-9676-3652-945f-0423095a5069.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 25485 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:c0:50:03:f0:c3:a4:45:01:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=bb01aace-4139-42d9-9817-83f621697132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cc:2f:05:f4:df:a3:e4:6a:d3:2e:36:be:84: 75:1d:14:5b:a2:09:a3:6a:96:f5:98:eb:bc:0d:1e: 74:fb:3b:ec:dc:cd:86:0c:71:87:85:2b:ce:b5:68: 88:58:08:96:81:52:6a:63:08:66:9e:5a:14:b3:c6: 55:e4:ef:be:1e:df:4f:81:20:26:e5:53:2a:36:90: 71:21:7b:2b:fd:50:9d:ff:69:df:a9:95:a7:5e:7e: 90:a5:03:9f:58:6b:da:72:70:8c:79:d0:21:61:9e: 7c:c2:53:1e:8b:4d:25:c9:f9:fd:62:18:14:1e:fd: 6a:ed:ab:6c:10:c5:cb:6e:6b:f5:88:c2:9b:f6:95: a0:c2:89:c3:77:a4:d0:38:cb:a4:75:ec:df:a7:1f: 7b:4d:e0:28:17:e0:0f:86:0c:4c:ce:0d:52:f2:e6: 24:da:7d:db:31:90:02:dd:51:08:2a:f6:fa:29:bc: e6:e3:f2:20:95:b6:60:f2:33:95:6c:ad:77:86:8c: a1:12:f4:30:3f:40:a2:97:64:58:a5:46:3f:35:3c: 75:6d:72:1f:7d:75:5d:cc:7a:8b:8a:40:98:4a:a2: 35:93:9a:e3:62:fc:a1:19:ab:bc:e1:b9:d4:e4:66: c9:96:c0:eb:15:3b:98:fe:6c:3b:96:3d:70:6a:27: bf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3A:8F:80:A4:74:08:79:70:51:D9:6F:91:3A:9E:03:45:E5:02:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33b86f0f-9676-3652-945f-0423095a5069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:2f:04:7b:00:98:b4:6e:f4:b3:6d:21:6e:f0:fe:75:f4:bb: ea:94:2a:65:96:2a:5f:55:aa:47:e9:60:bd:25:8b:f3:c0:ef: f6:50:88:9f:d3:d2:82:46:21:1a:fb:7a:6e:89:d2:17:81:1c: a4:de:8b:ad:b0:41:b0:70:bf:01:3f:9a:83:2b:61:35:9a:fa: 85:2e:1f:a3:93:88:32:a9:33:ea:fd:89:e9:03:d9:cf:ab:4f: 3a:4c:c8:81:5d:ad:2d:3e:c7:00:fb:de:20:02:a1:9a:07:cc: 34:81:94:ae:db:b7:6d:ea:5b:c6:de:c1:a7:8c:38:9e:a5:6b: ee:ea:66:0d:ef:52:2c:9a:41:0e:1e:1b:e4:c7:a3:0b:ed:27: 00:ff:c5:0b:0b:63:93:71:2a:09:7f:23:47:73:54:4d:5b:b0: 2d:4e:5e:f4:70:8e:10:72:8e:5e:d8:b8:97:16:f9:1c:dc:e7: 34:59:20:3e:41:7d:93:34:6f:a1:7f:9c:64:46:6a:32:40:40: 1b:b5:d1:97:ac:2d:bb:9f:fb:a7:02:0b:ec:ea:6a:c9:ce:b5: 46:3d:d7:6b:34:ce:28:8a:d8:44:08:d1:74:19:86:38:a4:5b: 6f:b6:dd:97:1c:c5:bd:83:44:35:4c:2b:1c:a1:80:83:24:eb: 5e:06:8f:01 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9R0sBQA/DDpEUBz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk YmIwMWFhY2UtNDEzOS00MmQ5LTk4MTctODNmNjIxNjk3MTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMwvBfTfo+Rq0y42voR1HRRbogmjapb1mOu8 DR50+zvs3M2GDHGHhSvOtWiIWAiWgVJqYwhmnloUs8ZV5O++Ht9PgSAm5VMqNpBx IXsr/VCd/2nfqZWnXn6QpQOfWGvacnCMedAhYZ58wlMei00lyfn9YhgUHv1q7ats EMXLbmv1iMKb9pWgwonDd6TQOMukdezfpx97TeAoF+APhgxMzg1S8uYk2n3bMZAC 3VEIKvb6Kbzm4/IglbZg8jOVbK13hoyhEvQwP0Cil2RYpUY/NTx1bXIffXVdzHqL ikCYSqI1k5rjYvyhGau84bnU5GbJlsDrFTuY/mw7lj1waie/6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCE6j4CkdAh5cFHZb5E6ngNF5QJjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzNiODZmMGYtOTY3Ni0z NjUyLTk0NWYtMDQyMzA5NWE1MDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAULwR7AJi0bvSzbSFu8P519LvqlCpllipfVapH6WC9JYvzwO/2UIif 09KCRiEa+3puidIXgRyk3outsEGwcL8BP5qDK2E1mvqFLh+jk4gyqTPq/YnpA9nP q086TMiBXa0tPscA+94gAqGaB8w0gZSu27dt6lvG3sGnjDiepWvu6mYN71IsmkEO Hhvkx6ML7ScA/8ULC2OTcSoJfyNHc1RNW7AtTl70cI4Qco5e2LiXFvkc3Oc0WSA+ QX2TNG+hf5xkRmoyQEAbtdGXrC27n/unAgvs6mrJzrVGPddrNM4oithECNF0GYY4 pFtvtt2XHMW9g0Q1TCscoYCDJOteBo8B -----END CERTIFICATE-----Generated at Thu Oct 8 08:57:37 2026 by rpki-client