$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b8b2999-e481-3499-95c4-43200cd0febc.roa File: 5b8b2999-e481-3499-95c4-43200cd0febc.roa (raw, json) Hash identifier: yb7/oZWo7KsaQN9zRXhNtqFEOWg1c2A6+rcjmL/aUXE= Subject key identifier: BD:95:2F:A7:74:73:42:59:EE:D3:42:95:F0:A1:50:C5:EE:A5:6D:93 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F51D2BC2A9BCF6951FCE81600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b8b2999-e481-3499-95c4-43200cd0febc.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 396600 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:bc:2a:9b:cf:69:51:fc:e8:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=0fe3dc50-c010-4839-be42-02c94000408f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a3:11:75:f0:3c:d5:8c:97:ee:d1:bc:4f:4c: 8b:33:8a:a1:bf:56:7a:b9:8c:2d:25:b2:2b:f9:68: 3c:ad:c9:e3:d5:c1:18:55:38:99:d8:93:e8:a4:82: 11:dd:33:c9:d3:56:1c:4c:34:10:4a:79:99:a1:20: 55:6f:9f:d3:6b:85:90:07:9d:b6:92:c1:78:e3:d6: 70:c6:9e:70:6b:27:00:7c:fb:05:d8:fa:ae:bb:12: 1c:21:31:fc:4d:e3:26:21:7e:31:20:5e:dd:12:a7: 38:76:bd:38:c5:86:dd:7d:b1:7f:f8:ef:5f:1e:3a: 5e:cd:47:f0:5f:83:82:0d:3e:a9:72:94:0d:36:f6: f7:4d:65:af:43:dc:fc:b7:77:4f:85:ef:87:28:c3: 7a:9a:a6:24:81:99:64:67:79:e6:4b:ea:d0:12:5c: 55:39:94:af:33:36:dc:b3:20:41:29:15:a8:c2:b5: 69:f1:b0:97:91:b5:50:05:f2:e0:80:a4:64:79:61: ef:a4:c2:33:71:79:94:a3:10:bd:4e:7a:c3:02:eb: 48:83:ec:a1:fb:2f:23:f1:54:49:6d:f8:4c:21:2a: db:7c:37:f6:f2:95:15:21:e5:d6:19:01:d2:01:07: a6:fd:67:2b:c1:5b:c6:78:9c:53:4b:e5:8e:fa:0b: bb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:95:2F:A7:74:73:42:59:EE:D3:42:95:F0:A1:50:C5:EE:A5:6D:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b8b2999-e481-3499-95c4-43200cd0febc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:f5:15:80:97:f9:b2:be:0a:d9:d9:bb:fc:17:b0:97:2d:3c: 2c:26:7e:30:5f:a5:bb:48:ee:cd:7c:04:24:01:d7:83:ec:d8: 31:8a:2d:ad:69:82:5e:e5:48:7c:42:4b:19:28:ff:40:c0:f2: 6a:df:0e:6b:14:b7:2a:f9:45:d3:80:03:97:ab:12:11:a0:8a: 1f:70:c8:6b:75:22:91:8a:97:50:6c:4d:39:df:9a:4e:e9:bb: 24:f2:77:d4:47:79:37:e1:c8:aa:a8:6e:16:a8:29:66:25:e5: d6:d5:2b:e1:75:2f:63:40:e5:0c:f9:d3:25:4c:3c:ff:cb:c6: 4e:d9:b7:07:bf:09:98:12:5a:5e:57:5f:c6:23:61:78:32:72: 7a:81:77:84:04:cb:33:d3:4c:85:74:80:41:15:8c:8d:38:28: 7f:0b:b4:02:b5:af:de:28:f1:46:83:60:bf:89:90:8d:07:53: 17:80:c2:69:27:d5:f4:2b:aa:f3:5f:d2:e2:57:b8:b9:46:8f: a5:c2:96:ce:0d:b1:a8:50:fe:65:af:73:09:f3:ee:92:e7:5a: da:9b:dc:30:43:14:89:2f:9b:da:1e:27:a4:92:78:04:f7:5d: 59:13:4e:6f:30:4f:03:ad:d2:b9:f1:54:7e:22:5f:d8:71:75: 25:09:c5:fa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9R0rwqm89pUfzoFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk MGZlM2RjNTAtYzAxMC00ODM5LWJlNDItMDJjOTQwMDA0MDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqMRdfA81YyX7tG8T0yLM4qhv1Z6uYwtJbIr +Wg8rcnj1cEYVTiZ2JPopIIR3TPJ01YcTDQQSnmZoSBVb5/Ta4WQB522ksF449Zw xp5waycAfPsF2PquuxIcITH8TeMmIX4xIF7dEqc4dr04xYbdfbF/+O9fHjpezUfw X4OCDT6pcpQNNvb3TWWvQ9z8t3dPhe+HKMN6mqYkgZlkZ3nmS+rQElxVOZSvMzbc syBBKRWowrVp8bCXkbVQBfLggKRkeWHvpMIzcXmUoxC9TnrDAutIg+yh+y8j8VRJ bfhMISrbfDf28pUVIeXWGQHSAQem/WcrwVvGeJxTS+WO+gu7TwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL2VL6d0c0JZ7tNClfChUMXupW2TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWI4YjI5OTktZTQ4MS0z NDk5LTk1YzQtNDMyMDBjZDBmZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAj9RWAl/myvgrZ2bv8F7CXLTwsJn4wX6W7SO7NfAQkAdeD7Ngxii2t aYJe5Uh8QksZKP9AwPJq3w5rFLcq+UXTgAOXqxIRoIofcMhrdSKRipdQbE0535pO 6bsk8nfUR3k34ciqqG4WqClmJeXW1SvhdS9jQOUM+dMlTDz/y8ZO2bcHvwmYElpe V1/GI2F4MnJ6gXeEBMsz00yFdIBBFYyNOCh/C7QCta/eKPFGg2C/iZCNB1MXgMJp J9X0K6rzX9LiV7i5Ro+lwpbODbGoUP5lr3MJ8+6S51ram9wwQxSJL5vaHiekkngE 911ZE05vME8DrdK58VR+Il/YcXUlCcX6 -----END CERTIFICATE-----Generated at Wed Oct 7 07:59:55 2026 by rpki-client