$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b8a7d75-9ca1-3d27-b2a9-9af887996899.roa File: 3b8a7d75-9ca1-3d27-b2a9-9af887996899.roa (raw, json) Hash identifier: vrrYuOx0U0g3U2qjqeZMqx34rULZ8nKRUVaxE8C94yc= Subject key identifier: F2:B7:8B:20:65:96:96:E6:71:06:D5:0F:01:97:76:D4:B4:EC:DA:DD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F506D6867AB3AA93BFC766900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b8a7d75-9ca1-3d27-b2a9-9af887996899.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 396552 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:68:67:ab:3a:a9:3b:fc:76:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=a185d1eb-0af1-401e-a3da-e1b0b2d05b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:74:5f:f4:3b:ce:c2:9b:9c:6b:d5:e3:44:23: 3b:1f:60:4b:a7:05:13:4c:92:6e:c5:d8:14:45:81: 1a:45:a8:ad:2b:e3:46:ee:cf:b6:b2:96:ce:74:da: 65:a8:a2:93:8f:8e:c1:b8:25:3d:8e:19:74:64:6f: 48:f4:65:94:75:ab:4b:0a:e5:af:c1:a0:9c:0e:ba: 73:b2:4a:ee:ab:c2:36:24:2f:59:86:d9:58:79:8e: 1f:eb:8b:79:c0:47:44:9a:59:a6:3e:ed:ed:78:c6: e9:30:85:56:39:bf:ce:aa:c9:90:51:21:eb:f2:eb: f3:0c:e3:b5:80:0d:42:0c:4f:b0:db:13:fe:26:b7: 51:84:23:72:32:0c:33:7c:9a:ee:ff:02:f2:85:55: 86:19:ee:e6:e7:6f:c8:34:21:46:cd:a5:82:a8:0a: 20:37:e8:2c:5e:9b:b8:86:1a:6a:f9:a7:ff:20:d8: e9:4e:83:17:02:d0:ce:c1:2f:fd:d5:87:ea:99:11: 66:96:fc:be:4c:1d:27:91:76:1e:67:17:06:a8:45: 39:29:46:0f:d8:af:cd:2d:ef:e3:4c:55:9c:5e:2c: 9f:63:78:b7:5a:0d:4b:e6:91:80:89:fc:06:a7:ae: fd:94:a7:45:cb:e7:e4:43:73:21:b1:c9:71:70:84: f6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B7:8B:20:65:96:96:E6:71:06:D5:0F:01:97:76:D4:B4:EC:DA:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b8a7d75-9ca1-3d27-b2a9-9af887996899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:0d:af:14:62:77:de:7f:b7:19:30:eb:a0:a1:8f:5f:16:b9: 45:f1:96:97:28:a8:dc:43:9c:16:7a:03:e2:af:25:48:96:14: 72:b3:cc:22:5a:84:b8:9d:da:f1:5f:65:54:31:67:7a:ed:2a: 32:9e:c5:85:6a:7b:93:3d:d1:a0:b7:88:56:41:d7:43:dc:b2: 8d:7f:8e:37:c8:1e:87:26:93:48:17:b0:dc:de:2d:1c:22:70: 9e:11:a8:b1:f8:54:d3:27:cf:24:50:f6:a4:c4:11:ef:20:7b: 07:44:cc:d8:e9:d1:7d:47:9a:69:de:2e:c8:04:0e:ac:da:b8: 8c:1a:82:d6:76:1a:0d:a3:2d:44:0b:25:aa:e0:28:0a:f4:6c: c2:8a:d8:e9:9d:06:fa:6f:ce:1e:60:c2:a1:e7:b0:28:f0:86: f4:f9:a6:14:f9:62:58:42:93:e5:64:a7:5e:8e:1b:f7:5e:e6: 91:1b:3a:51:8f:d7:94:97:45:73:f3:a6:92:23:7b:91:96:a4: 7f:6b:b9:7f:a3:79:79:f1:29:de:89:18:67:26:b7:fb:5f:b1: 17:8f:b1:34:53:eb:94:c5:13:74:8f:04:45:61:5d:4b:31:ed: d0:06:db:d9:02:37:cb:73:f1:3b:2b:ee:31:a8:c6:55:7a:d5: 31:9a:1e:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWhnqzqpO/x2aQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk YTE4NWQxZWItMGFmMS00MDFlLWEzZGEtZTFiMGIyZDA1YjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnRf9DvOwpuca9XjRCM7H2BLpwUTTJJuxdgU RYEaRaitK+NG7s+2spbOdNplqKKTj47BuCU9jhl0ZG9I9GWUdatLCuWvwaCcDrpz skruq8I2JC9ZhtlYeY4f64t5wEdEmlmmPu3teMbpMIVWOb/OqsmQUSHr8uvzDOO1 gA1CDE+w2xP+JrdRhCNyMgwzfJru/wLyhVWGGe7m52/INCFGzaWCqAogN+gsXpu4 hhpq+af/INjpToMXAtDOwS/91YfqmRFmlvy+TB0nkXYeZxcGqEU5KUYP2K/NLe/j TFWcXiyfY3i3Wg1L5pGAifwGp679lKdFy+fkQ3MhsclxcIT2GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPK3iyBllpbmcQbVDwGXdtS07NrdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2I4YTdkNzUtOWNhMS0z ZDI3LWIyYTktOWFmODg3OTk2ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMNrxRid95/txkw66Chj18WuUXxlpcoqNxDnBZ6A+KvJUiWFHKzzCJa hLid2vFfZVQxZ3rtKjKexYVqe5M90aC3iFZB10Pcso1/jjfIHocmk0gXsNzeLRwi cJ4RqLH4VNMnzyRQ9qTEEe8gewdEzNjp0X1HmmneLsgEDqzauIwagtZ2Gg2jLUQL JargKAr0bMKK2OmdBvpvzh5gwqHnsCjwhvT5phT5YlhCk+Vkp16OG/de5pEbOlGP 15SXRXPzppIje5GWpH9ruX+jeXnxKd6JGGcmt/tfsRePsTRT65TFE3SPBEVhXUsx 7dAG29kCN8tz8Tsr7jGoxlV61TGaHlo= -----END CERTIFICATE-----Generated at Thu Oct 8 20:56:37 2026 by rpki-client