$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4af9227c-5b03-3294-9ff8-b4e25c39e237.roa File: 4af9227c-5b03-3294-9ff8-b4e25c39e237.roa (raw, json) Hash identifier: JDoKqlGiTJS4xCMulIySmVV7r+PlE3iF6u5u+Qh8IYg= Subject key identifier: 4F:54:54:36:35:A9:8C:F2:57:17:00:F5:47:12:A0:2A:77:38:30:08 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F51D2BC8491A760F3C7DDE960 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4af9227c-5b03-3294-9ff8-b4e25c39e237.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 397205 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:bc:84:91:a7:60:f3:c7:dd:e9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=4253daed-29bc-4bc1-b74a-324ac4931608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:26:2d:eb:80:f3:8c:ee:ae:4a:9f:f0:ee:62: 70:7f:76:96:72:88:ea:4c:ea:d3:58:04:42:ff:07: 91:58:9d:c3:ff:e5:00:f1:d9:6d:63:4b:ba:db:cf: c0:2c:de:af:87:5d:a7:cd:91:19:98:cc:57:65:a0: 23:e9:e7:b6:27:9a:69:bc:2b:a7:76:48:0d:1e:fb: fa:63:6a:8b:66:1a:d3:a7:09:9e:1c:43:6a:f4:13: 5e:d7:32:a7:eb:ef:c7:1e:4e:3d:e6:10:d8:34:16: 62:1f:c9:4f:96:14:a3:16:fa:71:9e:0c:db:f0:71: 94:63:0c:d0:a0:70:80:99:48:7a:01:0b:af:9c:4f: 11:f9:cf:37:aa:65:dd:96:9a:40:5f:59:28:ec:a0: 06:96:d0:88:8f:52:57:62:96:18:69:0f:43:1f:79: 0e:21:4e:53:44:0f:3f:0d:7d:be:a3:de:5a:be:08: 57:a3:fe:f9:c4:ea:20:4d:22:11:b7:7c:bc:c6:bc: 29:29:04:a6:10:46:37:0e:65:8f:35:d8:9f:90:01: e0:ee:98:81:3d:bf:e7:67:f0:12:56:25:63:e5:cc: e5:e5:81:67:bd:89:cb:60:ed:f5:05:9c:4b:e8:28: 9f:8d:f9:5f:a9:b6:08:c2:ed:3b:7c:d5:96:10:91: b7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:54:54:36:35:A9:8C:F2:57:17:00:F5:47:12:A0:2A:77:38:30:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4af9227c-5b03-3294-9ff8-b4e25c39e237.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f1:a1:ca:b5:14:30:c5:75:d1:fb:ba:d1:96:87:2e:66:df: 8a:ae:ed:fb:74:5e:98:d0:bb:af:35:be:2e:9f:71:16:ae:84: 4e:9a:76:81:f4:b5:a7:45:d4:1e:da:ad:43:9b:51:34:86:18: c5:c1:3f:3c:2d:57:0c:9c:38:ea:6b:28:df:24:3b:f1:af:a6: 2b:23:f6:c0:34:94:7b:b3:67:60:62:4d:81:26:58:9a:77:19: a7:02:b5:1d:1a:7e:73:1a:10:9e:bd:af:20:82:1f:1e:17:89: bd:5d:a6:1d:a8:8b:56:2a:10:b7:5e:4c:13:69:39:69:20:03: 4b:10:e7:6b:97:46:bb:02:a5:55:30:2f:c3:f0:9a:f6:3f:ab: 5b:4a:ae:ac:fb:9e:c8:f1:b8:19:d6:cc:f5:0a:a1:12:b6:ff: 8f:37:f5:59:ce:ee:2b:28:db:6c:8c:5f:ee:19:8b:13:7b:f2: 08:f0:0c:a0:fd:ae:32:e2:40:75:dc:46:c6:30:6a:2a:fb:73: 1c:90:06:05:63:c8:a8:da:a6:4b:6c:b5:2d:52:05:8f:2a:45: cc:80:bb:6f:c7:d2:72:57:af:3a:3d:2b:29:d0:b3:90:90:48: 7c:b0:4d:cd:7c:42:71:81:02:f0:b2:4f:ac:7c:10:da:2a:48: c0:b6:91:fe -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9R0ryEkadg88fd6WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk NDI1M2RhZWQtMjliYy00YmMxLWI3NGEtMzI0YWM0OTMxNjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCYt64DzjO6uSp/w7mJwf3aWcojqTOrTWARC /weRWJ3D/+UA8dltY0u628/ALN6vh12nzZEZmMxXZaAj6ee2J5ppvCundkgNHvv6 Y2qLZhrTpwmeHENq9BNe1zKn6+/HHk495hDYNBZiH8lPlhSjFvpxngzb8HGUYwzQ oHCAmUh6AQuvnE8R+c83qmXdlppAX1ko7KAGltCIj1JXYpYYaQ9DH3kOIU5TRA8/ DX2+o95avghXo/75xOogTSIRt3y8xrwpKQSmEEY3DmWPNdifkAHg7piBPb/nZ/AS ViVj5czl5YFnvYnLYO31BZxL6CifjflfqbYIwu07fNWWEJG3XQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE9UVDY1qYzyVxcA9UcSoCp3ODAIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGFmOTIyN2MtNWIwMy0z Mjk0LTlmZjgtYjRlMjVjMzllMjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCO8aHKtRQwxXXR+7rRlocuZt+Kru37dF6Y0LuvNb4un3EWroROmnaB 9LWnRdQe2q1Dm1E0hhjFwT88LVcMnDjqayjfJDvxr6YrI/bANJR7s2dgYk2BJlia dxmnArUdGn5zGhCeva8ggh8eF4m9XaYdqItWKhC3XkwTaTlpIANLEOdrl0a7AqVV MC/D8Jr2P6tbSq6s+57I8bgZ1sz1CqEStv+PN/VZzu4rKNtsjF/uGYsTe/II8Ayg /a4y4kB13EbGMGoq+3MckAYFY8io2qZLbLUtUgWPKkXMgLtvx9JyV686PSsp0LOQ kEh8sE3NfEJxgQLwsk+sfBDaKkjAtpH+ -----END CERTIFICATE-----Generated at Tue Oct 6 18:55:49 2026 by rpki-client