$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3452058a-98d8-35f5-9181-437d017e7520.roa File: 3452058a-98d8-35f5-9181-437d017e7520.roa (raw, json) Hash identifier: 3QUkabn2XYzvNCnfkPDa3TwIsmXFRBCUrbuu0AHElv4= Subject key identifier: 1B:A9:63:BE:CD:E7:60:AB:87:DF:6A:FA:A9:62:02:C2:62:CE:7E:FA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F506D6538DDB1B64C2200CE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3452058a-98d8-35f5-9181-437d017e7520.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 396613 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:65:38:dd:b1:b6:4c:22:00:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=3d65dbc4-9612-4c1f-b5c6-f217b0d9917f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:1f:69:cb:b5:a6:1a:93:41:ef:c0:69:20: ca:cf:00:56:fc:3d:9f:b1:03:5f:47:e1:b8:72:47: fd:27:01:fb:c5:9e:2e:d4:8b:ee:44:47:ca:83:2b: 16:04:af:f9:a9:32:84:0e:69:0c:39:54:cb:07:b8: 17:de:dc:f4:6f:be:97:e3:97:83:35:0d:b4:e2:f1: 31:7b:22:1d:fb:da:d8:f9:b3:8f:8e:ee:c0:0a:bc: b5:d6:0f:98:c3:f9:a2:85:3a:8e:e8:1f:73:80:18: d2:93:3c:2c:a6:1d:ae:68:20:32:0c:3f:d4:dc:d5: da:2c:f0:f4:10:57:49:15:bc:01:6e:fa:71:df:2d: 42:b0:d1:69:7c:13:90:c0:59:85:97:81:23:89:2c: eb:b6:d0:80:91:0b:a7:80:32:4b:63:69:99:ea:cf: 12:1c:0e:72:18:62:fc:db:be:35:2f:65:1c:24:c2: 0a:ed:d6:59:45:2e:59:f6:68:41:d0:02:bb:f3:a2: e0:fa:d5:3b:eb:02:a3:67:48:97:3c:0b:e9:c5:47: f4:e5:ce:f1:4e:b0:e3:84:3b:0a:64:1e:3a:ed:cb: c1:75:6e:64:38:6f:b7:30:6c:1f:b0:59:52:01:90: d5:17:93:26:64:70:d8:ef:49:42:6f:38:0e:73:f4: 08:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A9:63:BE:CD:E7:60:AB:87:DF:6A:FA:A9:62:02:C2:62:CE:7E:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3452058a-98d8-35f5-9181-437d017e7520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ed:41:4f:d0:96:fb:7b:3e:10:e0:2c:8d:c3:b9:7c:49:e7: d8:99:39:7a:27:e8:24:ed:f8:5a:58:37:d4:dd:2e:ee:89:e2: bc:6d:23:4d:77:ce:c0:c9:f2:1d:65:11:af:63:30:35:75:6a: 87:7e:8e:30:fd:69:54:15:15:63:ae:c5:a5:20:c0:ac:a6:42: 2a:77:dc:ee:04:e0:80:b9:66:1e:84:50:61:67:b6:2d:ee:56: 10:fb:f4:99:e3:48:46:23:56:b1:6e:72:6d:8c:92:02:a4:6d: 1a:74:7c:bb:00:16:31:e4:2d:38:c6:cb:93:1e:03:b1:ae:2d: 87:4d:45:dc:f9:4d:26:fc:a1:90:ed:3a:43:28:73:a2:84:79: dc:39:67:c7:02:de:58:64:45:b2:fe:41:32:fc:54:df:4a:91: 81:5d:70:7f:2c:e5:12:6b:44:46:a2:3f:fa:45:8e:1c:a3:81: 0c:78:c0:37:6b:1a:ac:1e:1c:ac:0f:66:95:96:2e:8e:e9:65: ee:10:58:00:78:6b:07:52:b4:98:17:d1:63:52:24:85:14:40: 1c:17:e2:4c:d9:65:73:c5:49:43:a4:6e:41:35:a8:1b:46:cb: 53:0f:ac:d8:00:d4:38:81:6a:96:9d:0d:81:63:66:c0:db:c3: 5a:e4:1b:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWU43bG2TCIAzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk M2Q2NWRiYzQtOTYxMi00YzFmLWI1YzYtZjIxN2IwZDk5MTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLQfacu1phqTQe/AaSDKzwBW/D2fsQNfR+G4 ckf9JwH7xZ4u1IvuREfKgysWBK/5qTKEDmkMOVTLB7gX3tz0b76X45eDNQ204vEx eyId+9rY+bOPju7ACry11g+Yw/mihTqO6B9zgBjSkzwsph2uaCAyDD/U3NXaLPD0 EFdJFbwBbvpx3y1CsNFpfBOQwFmFl4EjiSzrttCAkQungDJLY2mZ6s8SHA5yGGL8 2741L2UcJMIK7dZZRS5Z9mhB0AK786Lg+tU76wKjZ0iXPAvpxUf05c7xTrDjhDsK ZB467cvBdW5kOG+3MGwfsFlSAZDVF5MmZHDY70lCbzgOc/QIQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBupY77N52Crh99q+qliAsJizn76MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzQ1MjA1OGEtOThkOC0z NWY1LTkxODEtNDM3ZDAxN2U3NTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATtQU/Qlvt7PhDgLI3DuXxJ59iZOXon6CTt+FpYN9TdLu6J4rxtI013 zsDJ8h1lEa9jMDV1aod+jjD9aVQVFWOuxaUgwKymQip33O4E4IC5Zh6EUGFnti3u VhD79JnjSEYjVrFucm2MkgKkbRp0fLsAFjHkLTjGy5MeA7GuLYdNRdz5TSb8oZDt OkMoc6KEedw5Z8cC3lhkRbL+QTL8VN9KkYFdcH8s5RJrREaiP/pFjhyjgQx4wDdr GqweHKwPZpWWLo7pZe4QWAB4awdStJgX0WNSJIUUQBwX4kzZZXPFSUOkbkE1qBtG y1MPrNgA1DiBapadDYFjZsDbw1rkG7Y= -----END CERTIFICATE-----Generated at Tue Oct 6 18:12:54 2026 by rpki-client