$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/536cc683-07f6-38b3-b079-b2c0fd050c3b.roa File: 536cc683-07f6-38b3-b079-b2c0fd050c3b.roa (raw, json) Hash identifier: zhYBpHsAVpqaHQP9zv1DDUevMgmHmCS41Z9mkcW8Xx0= Subject key identifier: E8:FD:98:25:D9:C9:1B:65:47:31:D1:B9:4F:03:97:71:B0:46:9D:57 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F51D2BD13B3623CFB11D03980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/536cc683-07f6-38b3-b079-b2c0fd050c3b.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 396571 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:bd:13:b3:62:3c:fb:11:d0:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=588cf9be-5c3e-43ef-be1b-4eb4505b21d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6b:8d:1f:f0:98:59:f7:4a:b6:1f:80:9e:b1: c2:b5:df:9f:83:6a:18:f4:6f:0c:cc:25:e4:06:6c: f3:91:96:28:0d:b4:3a:a0:c2:4b:2c:bf:d3:c1:41: ca:57:53:a4:c9:4b:f8:0f:53:26:a0:20:f4:75:f8: aa:28:4c:39:7c:fb:1d:de:c1:4d:48:cb:86:f3:24: 8a:58:81:41:54:10:a0:88:ed:15:25:27:d0:04:37: a4:a4:35:c5:aa:a3:cc:c0:28:f0:95:13:20:92:40: 70:a7:bf:63:34:00:7e:96:80:ce:89:a6:ad:e4:d5: 34:35:e2:1c:21:c1:e7:f5:68:fa:28:09:fb:e6:bf: 10:85:7a:f2:a5:ac:ba:83:22:65:20:9c:29:81:7d: ef:e1:bc:3f:a1:24:36:c2:7f:1d:7e:b5:bc:23:eb: ab:54:de:8b:a2:0b:8e:53:f4:8f:e0:f0:3e:55:e2: 6b:ee:a9:cf:5e:c4:1d:7c:7d:74:87:86:4b:38:94: 2d:da:30:05:b2:5f:2d:24:91:b5:0a:d6:e5:fb:e2: c0:2a:96:01:76:f7:53:06:d0:0f:68:a7:b8:93:58: 75:4c:da:d3:7f:db:8c:2b:3a:0c:8a:3b:2d:79:68: 02:ff:a8:ef:d2:d2:c7:9e:5b:0c:ff:79:10:48:81: 28:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FD:98:25:D9:C9:1B:65:47:31:D1:B9:4F:03:97:71:B0:46:9D:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/536cc683-07f6-38b3-b079-b2c0fd050c3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:02:fd:d4:80:5c:28:66:a5:82:73:d1:99:33:24:24:b5:be: 59:56:21:6c:4a:00:2f:36:66:dd:ea:61:58:b5:ba:d8:03:28: 96:71:f7:12:ef:d7:59:54:62:4d:0c:0d:de:06:30:64:d3:c3: 2e:75:ca:ea:7b:94:f4:7c:12:a5:1c:62:0c:41:f0:f0:6e:4f: 96:8c:4d:18:85:73:7d:8d:46:5c:e8:94:12:30:2c:de:6a:a4: ad:f6:93:15:cb:3b:0b:b4:4b:72:9e:02:63:8c:00:fb:bb:f8: 27:6b:65:58:09:e2:f5:c0:b7:26:d5:32:be:a6:e2:15:32:19: cd:38:e6:6e:2e:97:67:8b:05:15:55:9b:09:a5:d4:20:ae:5f: 91:74:4e:44:87:f8:27:ff:aa:4e:b9:a5:56:e9:d3:c9:26:7d: e9:6f:36:ed:4a:0b:d8:c4:5a:59:6e:a2:30:70:80:30:94:1b: 93:0e:57:a4:37:2a:31:3a:a6:b8:56:71:44:7f:98:21:31:24: e1:10:4c:40:ba:9d:70:df:5e:e3:e8:60:61:64:e9:57:bc:fa: 44:fb:a5:8b:d2:ee:f2:11:62:35:68:15:99:75:a5:bc:50:09: 71:c6:3a:a8:7b:d7:c3:ff:f7:4a:df:12:a7:28:0e:1e:3f:5d: 9a:27:74:b9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9R0r0Ts2I8+xHQOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk NTg4Y2Y5YmUtNWMzZS00M2VmLWJlMWItNGViNDUwNWIyMWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWuNH/CYWfdKth+AnrHCtd+fg2oY9G8MzCXk BmzzkZYoDbQ6oMJLLL/TwUHKV1OkyUv4D1MmoCD0dfiqKEw5fPsd3sFNSMuG8ySK WIFBVBCgiO0VJSfQBDekpDXFqqPMwCjwlRMgkkBwp79jNAB+loDOiaat5NU0NeIc IcHn9Wj6KAn75r8QhXrypay6gyJlIJwpgX3v4bw/oSQ2wn8dfrW8I+urVN6LoguO U/SP4PA+VeJr7qnPXsQdfH10h4ZLOJQt2jAFsl8tJJG1Ctbl++LAKpYBdvdTBtAP aKe4k1h1TNrTf9uMKzoMijsteWgC/6jv0tLHnlsM/3kQSIEoOwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOj9mCXZyRtlRzHRuU8Dl3GwRp1XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTM2Y2M2ODMtMDdmNi0z OGIzLWIwNzktYjJjMGZkMDUwYzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBjAv3UgFwoZqWCc9GZMyQktb5ZViFsSgAvNmbd6mFYtbrYAyiWcfcS 79dZVGJNDA3eBjBk08Mudcrqe5T0fBKlHGIMQfDwbk+WjE0YhXN9jUZc6JQSMCze aqSt9pMVyzsLtEtyngJjjAD7u/gna2VYCeL1wLcm1TK+puIVMhnNOOZuLpdniwUV VZsJpdQgrl+RdE5Eh/gn/6pOuaVW6dPJJn3pbzbtSgvYxFpZbqIwcIAwlBuTDlek NyoxOqa4VnFEf5ghMSThEExAup1w317j6GBhZOlXvPpE+6WL0u7yEWI1aBWZdaW8 UAlxxjqoe9fD//dK3xKnKA4eP12aJ3S5 -----END CERTIFICATE-----Generated at Tue Oct 6 18:11:09 2026 by rpki-client