$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3df57bc9-d27b-3891-85cf-f70a4d96b58b.roa File: 3df57bc9-d27b-3891-85cf-f70a4d96b58b.roa (raw, json) Hash identifier: FS2Lf1br0KZaEv1x7DNffVJBNsZgb/CnGoC0Q9pwzm8= Subject key identifier: 4F:E7:25:B5:76:EF:C9:63:32:9E:F1:34:2F:6D:DF:53:7F:9C:57:D7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F506D67E4FEED02BFD418B740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3df57bc9-d27b-3891-85cf-f70a4d96b58b.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 396567 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:67:e4:fe:ed:02:bf:d4:18:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=c3870e89-0b25-446a-95d0-487d1bae38f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8e:da:f2:77:9c:1b:e2:d3:78:47:a7:17:09: 78:0d:9a:9a:e1:7f:7e:86:9c:28:02:61:dc:65:b2: 09:c4:20:40:25:87:99:9a:64:c2:80:03:82:d7:60: bb:f9:f4:14:5a:f5:7b:3b:c7:b1:4f:f8:9e:ac:61: 3b:a2:76:6e:71:d6:fb:84:3f:41:b6:1b:26:c0:06: a5:86:31:b9:45:63:8f:a7:aa:87:38:22:5d:6f:42: 33:77:eb:4f:a7:33:f8:eb:13:d3:65:6b:09:d4:47: 1a:f9:b2:96:42:60:fb:06:c3:ce:50:52:aa:c9:4b: e4:24:2c:a8:ad:1c:4b:ae:bd:51:0d:7d:23:34:78: 14:db:0a:37:96:b3:c9:e0:4a:d0:c2:2b:f7:00:e0: e2:28:4c:b7:3c:91:d0:22:79:ed:71:0e:ee:2f:86: f4:0d:0d:46:7f:2e:5d:88:3f:74:14:3b:a4:a2:46: 5c:8e:2c:6c:d4:72:bc:ae:32:9f:87:15:da:d3:92: 4e:1a:3e:c7:69:fa:3d:51:10:65:44:17:85:bb:db: 98:03:d6:4d:26:2a:1a:42:a4:72:08:3f:b1:c3:ea: 47:29:da:2c:03:5a:8e:0b:1d:bd:f5:e2:28:66:e6: b8:0a:64:e4:21:e3:c7:b8:45:63:3c:52:1e:78:f7: 15:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E7:25:B5:76:EF:C9:63:32:9E:F1:34:2F:6D:DF:53:7F:9C:57:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3df57bc9-d27b-3891-85cf-f70a4d96b58b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:0c:45:79:95:6d:65:cd:57:c2:ad:11:15:9a:62:0f:a3:d4: ec:c4:38:91:cc:db:d1:aa:e6:5d:c4:ab:92:8b:14:41:4c:9d: 08:09:b9:83:5b:48:73:4d:8e:8a:c3:7b:36:9d:79:7d:f6:33: c5:13:8d:6b:2c:2f:1f:bf:70:67:dd:6a:0d:fe:b7:f4:4b:16: 64:a9:3d:e5:91:88:98:bb:08:cc:a0:88:ae:dd:44:c5:f5:23: 96:a3:85:43:dc:04:9a:fc:86:ec:3e:24:08:2a:a0:39:db:4e: 3c:b5:7f:e6:21:b6:7d:56:7f:60:dd:b2:98:cc:cb:4a:07:f1: e9:4a:3b:e3:f8:84:c7:92:c7:ce:fa:a3:04:64:5e:ab:1b:1b: fc:2f:f0:6d:37:34:70:68:cb:17:f5:2a:8d:46:d0:f3:1c:ca: c5:c3:ab:4e:eb:c0:45:14:d0:2c:ea:64:aa:5f:fa:55:2f:29: 41:5b:fe:66:e4:44:ba:78:2c:bd:e5:35:f9:f8:3b:e6:c7:28: f8:3f:25:ea:b3:91:00:a2:62:93:43:f2:fb:01:a2:a1:fe:0f: 70:fe:76:de:80:31:87:8c:00:a6:4e:5a:de:bb:b0:e0:66:93: 0f:be:82:cf:54:ea:a4:3f:8d:b7:ef:c7:a7:98:a4:e6:8f:b0: a6:c8:47:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWfk/u0Cv9QYt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk YzM4NzBlODktMGIyNS00NDZhLTk1ZDAtNDg3ZDFiYWUzOGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA547a8necG+LTeEenFwl4DZqa4X9+hpwoAmHc ZbIJxCBAJYeZmmTCgAOC12C7+fQUWvV7O8exT/ierGE7onZucdb7hD9BthsmwAal hjG5RWOPp6qHOCJdb0Izd+tPpzP46xPTZWsJ1Eca+bKWQmD7BsPOUFKqyUvkJCyo rRxLrr1RDX0jNHgU2wo3lrPJ4ErQwiv3AODiKEy3PJHQInntcQ7uL4b0DQ1Gfy5d iD90FDukokZcjixs1HK8rjKfhxXa05JOGj7Hafo9URBlRBeFu9uYA9ZNJioaQqRy CD+xw+pHKdosA1qOCx299eIoZua4CmTkIePHuEVjPFIeePcVBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/nJbV278ljMp7xNC9t31N/nFfXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2RmNTdiYzktZDI3Yi0z ODkxLTg1Y2YtZjcwYTRkOTZiNThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgMRXmVbWXNV8KtERWaYg+j1OzEOJHM29Gq5l3Eq5KLFEFMnQgJuYNb SHNNjorDezadeX32M8UTjWssLx+/cGfdag3+t/RLFmSpPeWRiJi7CMygiK7dRMX1 I5ajhUPcBJr8huw+JAgqoDnbTjy1f+Yhtn1Wf2DdspjMy0oH8elKO+P4hMeSx876 owRkXqsbG/wv8G03NHBoyxf1Ko1G0PMcysXDq07rwEUU0CzqZKpf+lUvKUFb/mbk RLp4LL3lNfn4O+bHKPg/JeqzkQCiYpND8vsBoqH+D3D+dt6AMYeMAKZOWt67sOBm kw++gs9U6qQ/jbfvx6eYpOaPsKbIR2k= -----END CERTIFICATE-----Generated at Tue Oct 6 15:05:01 2026 by rpki-client