$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4de38486-00f8-322f-ab21-b6f3878c6517.roa File: 4de38486-00f8-322f-ab21-b6f3878c6517.roa (raw, json) Hash identifier: 3qIJe0pUXwGPAV/wtbp8MMfd1U4NEzT3vsZTY49Pw2E= Subject key identifier: 37:80:9A:57:1D:77:0B:9C:D1:D0:66:25:0C:16:F4:72:D7:F7:73:68 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F51D2BC134E5C97FDA9B50D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4de38486-00f8-322f-ab21-b6f3878c6517.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 36630 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:bc:13:4e:5c:97:fd:a9:b5:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=3b930886-759d-4754-9c99-22f1e9215408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:20:20:20:20:84:08:b4:9b:04:2e:02:e7:4e: 53:9c:23:e4:2b:94:86:8c:c6:03:bc:ad:8b:cf:5f: a4:62:61:af:a7:e7:06:7c:51:b1:53:bf:6d:82:cc: e2:2d:18:09:5c:f6:ca:78:a9:f4:ef:fe:8c:be:5e: bc:24:a9:2a:e9:55:c4:64:b7:2f:cb:63:06:40:57: fa:93:fe:d5:59:0a:ff:9d:e8:3e:43:59:9b:b5:d1: 72:54:b1:4b:e1:af:1e:98:d9:a5:31:ea:35:9b:f3: 91:fc:8d:68:43:cc:1f:e9:b1:23:01:c4:05:80:fa: f8:1d:f6:4e:01:d3:a9:ad:18:92:b8:1c:b3:5d:8b: 58:47:93:00:91:f1:f9:0a:da:9e:d6:36:3f:e5:2f: 5d:88:9c:ac:0d:03:9a:2b:67:48:df:a9:14:7f:04: b4:e6:8a:9d:c1:ae:ec:0b:56:4b:68:d8:0e:c6:d5: 9c:48:3e:33:bb:fc:c9:76:dd:30:20:c6:ed:66:d8: b5:f6:81:2f:a2:44:25:d5:06:38:7a:ad:d5:ca:33: 76:eb:8a:56:39:39:47:67:b7:86:e9:c7:66:ab:92: c3:43:c7:79:03:17:37:0e:f0:14:c0:4b:d8:54:e7: 73:06:87:1d:6a:c9:b2:8a:e3:e9:8f:37:b1:ff:d5: e1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:80:9A:57:1D:77:0B:9C:D1:D0:66:25:0C:16:F4:72:D7:F7:73:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4de38486-00f8-322f-ab21-b6f3878c6517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:c9:5d:41:de:ed:57:77:3b:23:4a:d5:68:fd:e0:e5:df:8d: b4:e9:10:41:02:11:69:1c:83:8a:14:ff:2f:8e:22:f7:f2:b9: 93:72:3f:79:b6:17:69:51:5e:55:7e:89:55:6c:56:7c:70:d9: 1f:e7:28:03:48:d9:48:5d:5c:5c:bb:c9:f8:23:33:ef:3d:1e: fc:46:e3:0c:34:42:41:6a:b1:b7:34:27:2a:5d:ed:e0:d2:0a: d8:e0:3a:44:a8:f0:52:6d:d7:ab:33:08:8e:d7:49:a3:e8:5c: 9b:da:93:e5:cc:d6:8e:b0:da:d6:90:23:5d:a3:4a:a2:68:fe: 42:c0:bb:f9:b6:4d:88:98:8b:6d:18:fc:3c:47:96:f8:d8:c2: 8d:02:73:d6:9d:f3:48:ab:cd:ac:6b:ad:9c:b8:1c:34:0f:9b: c4:23:bf:43:5f:4f:6a:8f:b4:32:25:91:77:1e:b8:08:d3:0b: 91:71:ed:fa:f9:48:41:40:9f:c3:a2:9e:88:d9:ed:a1:8d:80: bb:d3:f8:d0:36:4e:ad:21:21:f7:a1:0a:c4:32:ce:1d:9e:ff: c8:b4:66:f6:73:b2:06:1c:2e:b3:36:e6:b8:c5:c0:23:bd:36: 7a:bb:9f:6d:59:12:b3:27:17:62:b2:d2:23:5a:14:30:4c:0d: 76:00:d0:46 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9R0rwTTlyX/am1DQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk M2I5MzA4ODYtNzU5ZC00NzU0LTljOTktMjJmMWU5MjE1NDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviAgICCECLSbBC4C505TnCPkK5SGjMYDvK2L z1+kYmGvp+cGfFGxU79tgsziLRgJXPbKeKn07/6Mvl68JKkq6VXEZLcvy2MGQFf6 k/7VWQr/neg+Q1mbtdFyVLFL4a8emNmlMeo1m/OR/I1oQ8wf6bEjAcQFgPr4HfZO AdOprRiSuByzXYtYR5MAkfH5Ctqe1jY/5S9diJysDQOaK2dI36kUfwS05oqdwa7s C1ZLaNgOxtWcSD4zu/zJdt0wIMbtZti19oEvokQl1QY4eq3VyjN264pWOTlHZ7eG 6cdmq5LDQ8d5Axc3DvAUwEvYVOdzBocdasmyiuPpjzex/9XhtQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDeAmlcddwuc0dBmJQwW9HLX93NoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGRlMzg0ODYtMDBmOC0z MjJmLWFiMjEtYjZmMzg3OGM2NTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAAyV1B3u1XdzsjStVo/eDl34206RBBAhFpHIOKFP8vjiL38rmTcj95 thdpUV5VfolVbFZ8cNkf5ygDSNlIXVxcu8n4IzPvPR78RuMMNEJBarG3NCcqXe3g 0grY4DpEqPBSbderMwiO10mj6Fyb2pPlzNaOsNrWkCNdo0qiaP5CwLv5tk2ImItt GPw8R5b42MKNAnPWnfNIq82sa62cuBw0D5vEI79DX09qj7QyJZF3HrgI0wuRce36 +UhBQJ/Dop6I2e2hjYC70/jQNk6tISH3oQrEMs4dnv/ItGb2c7IGHC6zNua4xcAj vTZ6u59tWRKzJxdistIjWhQwTA12ANBG -----END CERTIFICATE-----Generated at Tue Oct 6 18:38:53 2026 by rpki-client