$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36887b9d-f1a0-31ad-a5fa-151c88b64db5.roa File: 36887b9d-f1a0-31ad-a5fa-151c88b64db5.roa (raw, json) Hash identifier: fruzO7YDhRZHSNK4SXZxcjGDd2HaX99LhKoSByE+xl8= Subject key identifier: C0:A5:33:38:14:57:B4:4F:93:F4:3F:09:9E:C9:1A:16:8A:0C:65:E3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F51D2BD801FBE5D8E074BF380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36887b9d-f1a0-31ad-a5fa-151c88b64db5.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 397199 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:bd:80:1f:be:5d:8e:07:4b:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=5322f8cc-7930-4922-99e3-6f8cf3a7ce07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:34:47:a1:af:c9:be:3d:c2:c9:74:4f:d2:e8: 82:fb:1a:40:75:d0:00:d3:48:36:6e:61:c2:9a:3c: 70:79:47:ad:e7:fb:90:2b:4f:84:79:4b:61:f8:a3: 0b:d4:68:83:5c:30:8d:3e:89:15:ea:4c:5c:4d:a4: 11:41:a7:01:b4:15:70:85:d3:c7:a5:14:0a:9b:aa: c9:26:77:90:38:06:c5:d6:1f:87:24:c3:38:5c:c6: 1d:b8:ed:75:11:53:6a:f6:8b:07:e0:49:65:e4:c6: a1:87:8e:ba:88:5f:c2:e7:3e:24:85:80:5a:e9:8f: fa:1b:dd:34:20:e5:9f:ea:ff:e6:ab:05:fd:89:0d: 01:96:fb:bb:9f:95:ba:ba:8f:a5:d9:54:b5:7c:c5: 7a:dd:e3:21:f7:d9:91:e4:1c:9a:7c:26:6b:bf:60: 78:33:c2:6b:5b:40:54:0c:81:cf:1a:06:a4:75:a2: 3d:40:53:20:b0:32:b7:73:97:0a:65:2b:bf:ef:9e: 61:e6:d8:9f:43:69:5c:a1:07:ba:60:95:cb:60:87: 12:37:a5:70:67:30:d2:60:7d:dc:20:05:d2:4c:95: e4:1b:b7:8b:77:ac:ee:06:3e:35:25:68:d6:93:bf: 16:11:d3:3a:7b:c1:78:71:1a:ad:07:80:80:2f:16: 3c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A5:33:38:14:57:B4:4F:93:F4:3F:09:9E:C9:1A:16:8A:0C:65:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36887b9d-f1a0-31ad-a5fa-151c88b64db5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:6e:11:dd:be:d9:80:fb:4c:80:2b:49:36:fc:b3:bd:9a:ad: 98:1f:36:40:ec:ac:6b:6d:3e:ba:71:a1:7d:5a:32:7d:97:3b: 56:64:39:05:93:4c:da:93:27:7d:9d:c9:19:4e:a2:76:ba:ae: 47:43:48:6a:1e:87:bb:d6:b2:06:d0:e5:4b:48:03:a1:a9:2d: de:5f:80:30:a2:88:e1:f6:e7:05:64:40:9c:90:40:fd:c0:c6: 43:99:b8:b4:a7:d0:ba:32:8a:bd:62:c4:8b:da:66:98:ed:ae: 54:48:88:77:59:ef:e8:15:b3:1a:b3:6c:97:c8:59:9f:36:76: 75:1f:5f:04:0c:08:b6:c6:c3:cb:b1:a4:cf:7f:c4:7f:0e:98: 65:33:dd:e2:52:42:c2:d3:9c:13:61:41:a5:d0:39:4f:02:5b: 48:f7:70:a1:af:30:47:4b:e2:10:cd:6a:8e:0d:76:ee:d9:fe: 99:14:77:14:7d:ec:4f:f9:1b:80:8a:e9:cd:a9:2f:eb:fc:b8: 3d:df:2b:dd:60:d4:00:c8:b9:b8:aa:a0:8e:98:82:f7:b8:a1: d8:4c:0e:2b:03:69:66:4d:89:9e:26:b0:28:6e:98:bd:24:e7: 7f:6c:5b:0c:f3:a3:35:1c:01:b2:9c:ef:b3:d8:f7:29:49:04: 4c:7a:61:8e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9R0r2AH75djgdL84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk NTMyMmY4Y2MtNzkzMC00OTIyLTk5ZTMtNmY4Y2YzYTdjZTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDRHoa/Jvj3CyXRP0uiC+xpAddAA00g2bmHC mjxweUet5/uQK0+EeUth+KML1GiDXDCNPokV6kxcTaQRQacBtBVwhdPHpRQKm6rJ JneQOAbF1h+HJMM4XMYduO11EVNq9osH4Ell5Mahh466iF/C5z4khYBa6Y/6G900 IOWf6v/mqwX9iQ0Blvu7n5W6uo+l2VS1fMV63eMh99mR5ByafCZrv2B4M8JrW0BU DIHPGgakdaI9QFMgsDK3c5cKZSu/755h5tifQ2lcoQe6YJXLYIcSN6VwZzDSYH3c IAXSTJXkG7eLd6zuBj41JWjWk78WEdM6e8F4cRqtB4CALxY8PwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMClMzgUV7RPk/Q/CZ7JGhaKDGXjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzY4ODdiOWQtZjFhMC0z MWFkLWE1ZmEtMTUxYzg4YjY0ZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBTbhHdvtmA+0yAK0k2/LO9mq2YHzZA7KxrbT66caF9WjJ9lztWZDkF k0zakyd9nckZTqJ2uq5HQ0hqHoe71rIG0OVLSAOhqS3eX4Awoojh9ucFZECckED9 wMZDmbi0p9C6Moq9YsSL2maY7a5USIh3We/oFbMas2yXyFmfNnZ1H18EDAi2xsPL saTPf8R/DphlM93iUkLC05wTYUGl0DlPAltI93ChrzBHS+IQzWqODXbu2f6ZFHcU fexP+RuAiunNqS/r/Lg93yvdYNQAyLm4qqCOmIL3uKHYTA4rA2lmTYmeJrAobpi9 JOd/bFsM86M1HAGynO+z2PcpSQRMemGO -----END CERTIFICATE-----Generated at Tue Oct 6 21:07:52 2026 by rpki-client