$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68a20c58-9a80-3699-b583-558702d23887.roa File: 68a20c58-9a80-3699-b583-558702d23887.roa (raw, json) Hash identifier: O30oW+dA4I8/yq0cZZWkRvYEhya8k1Ya6uzr39fPAAQ= Subject key identifier: E2:D8:BE:38:E0:D9:FD:20:91:0E:7D:4B:6B:45:C0:B6:78:24:2B:D1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F506D4B3A118743A0C277DD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68a20c58-9a80-3699-b583-558702d23887.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 20431 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:4b:3a:11:87:43:a0:c2:77:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=2bdc5d9f-c0a9-4c95-a0a5-964e92c0f1f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:22:48:74:b1:56:2f:b9:a9:4e:e9:1f:bb:c2: f3:3f:36:16:17:88:69:23:7f:6a:04:95:1a:ce:5e: ff:a2:ec:2b:94:fa:b7:ea:a6:d7:40:d6:b5:2b:0e: d8:3a:ba:90:f9:26:ed:2a:17:5b:5e:86:5b:bd:4f: 6f:0d:8c:5f:37:bb:ca:86:b5:71:c4:bc:09:fa:2d: cf:ea:15:ed:18:15:cc:a8:5a:04:06:a4:6b:c3:0b: 37:74:93:54:72:e9:82:f9:7d:d7:03:93:77:e8:cd: c6:fd:a9:2d:ba:c4:2f:13:89:d9:f0:b9:eb:58:08: cf:b0:6d:6c:66:fc:54:ed:54:27:58:87:46:60:18: e4:62:a1:83:1f:c4:85:35:aa:15:f6:bf:ff:7e:ac: 57:a6:e1:55:4b:ce:19:f1:b8:17:90:61:e9:70:35: f2:26:52:8d:47:aa:6f:5d:ad:70:b9:73:45:42:c6: 13:53:2b:de:4f:d4:32:43:74:95:6d:17:e5:77:3c: c9:1e:09:8f:05:ac:5c:c9:23:53:b5:ae:fa:ec:21: 47:f2:c2:57:f1:c0:3e:bd:87:89:3a:3d:28:d7:f1: 16:3f:ab:95:1b:9a:7d:1c:58:ce:12:ad:0d:1f:90: e5:d7:5c:35:79:b8:62:b4:c0:35:0e:fa:0f:ae:31: a6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D8:BE:38:E0:D9:FD:20:91:0E:7D:4B:6B:45:C0:B6:78:24:2B:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68a20c58-9a80-3699-b583-558702d23887.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ad:bc:71:9c:89:6b:f2:08:fc:10:fe:5f:1d:71:59:f5:11: e6:5b:0c:0c:ca:df:7d:b4:5b:27:6d:19:7e:56:e5:05:a5:41: 66:d4:49:16:98:33:bb:fd:5c:9b:58:9c:04:a8:5e:c4:57:03: a4:7c:b9:b6:41:b0:b6:3f:46:b7:a6:54:5a:a6:d8:6e:6a:76: 14:60:a4:8d:0a:06:4e:ab:b4:59:2c:5e:50:44:2b:fd:79:05: cf:9e:65:16:3e:18:45:4f:dd:c3:6b:87:d9:71:fb:9f:e4:fb: dc:56:4a:09:3b:7b:bd:08:76:24:96:3b:85:bb:de:f7:71:05: 91:2b:c4:59:ff:8d:8e:4f:5b:28:21:21:61:8e:a7:61:95:8f: b4:8d:36:ad:a6:51:54:24:54:01:a4:34:dc:95:c9:42:6c:c4: 7e:4c:fa:e0:86:f3:27:7a:1a:fd:d3:52:23:63:9b:d5:ed:c7: 19:fb:ee:4e:ac:ed:45:24:c7:a2:7b:32:87:da:74:eb:b5:6d: b6:1e:88:e8:b0:94:fd:0b:4e:63:ef:79:41:92:72:a8:35:54: fe:43:5b:63:3b:71:3d:f6:98:0c:0a:5c:4a:86:50:cc:da:49: 3f:21:06:e7:34:13:2a:af:88:a0:c2:0b:fc:8a:7d:a6:04:c4: 1b:54:96:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUs6EYdDoMJ33YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk MmJkYzVkOWYtYzBhOS00Yzk1LWEwYTUtOTY0ZTkyYzBmMWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyJIdLFWL7mpTukfu8LzPzYWF4hpI39qBJUa zl7/ouwrlPq36qbXQNa1Kw7YOrqQ+SbtKhdbXoZbvU9vDYxfN7vKhrVxxLwJ+i3P 6hXtGBXMqFoEBqRrwws3dJNUcumC+X3XA5N36M3G/aktusQvE4nZ8LnrWAjPsG1s ZvxU7VQnWIdGYBjkYqGDH8SFNaoV9r//fqxXpuFVS84Z8bgXkGHpcDXyJlKNR6pv Xa1wuXNFQsYTUyveT9QyQ3SVbRfldzzJHgmPBaxcySNTta767CFH8sJX8cA+vYeJ Oj0o1/EWP6uVG5p9HFjOEq0NH5Dl11w1ebhitMA1DvoPrjGm+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLYvjjg2f0gkQ59S2tFwLZ4JCvRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjhhMjBjNTgtOWE4MC0z Njk5LWI1ODMtNTU4NzAyZDIzODg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCtvHGciWvyCPwQ/l8dcVn1EeZbDAzK3320WydtGX5W5QWlQWbUSRaY M7v9XJtYnASoXsRXA6R8ubZBsLY/RremVFqm2G5qdhRgpI0KBk6rtFksXlBEK/15 Bc+eZRY+GEVP3cNrh9lx+5/k+9xWSgk7e70IdiSWO4W73vdxBZErxFn/jY5PWygh IWGOp2GVj7SNNq2mUVQkVAGkNNyVyUJsxH5M+uCG8yd6Gv3TUiNjm9Xtxxn77k6s 7UUkx6J7MofadOu1bbYeiOiwlP0LTmPveUGScqg1VP5DW2M7cT32mAwKXEqGUMza ST8hBuc0EyqviKDCC/yKfaYExBtUlrQ= -----END CERTIFICATE-----Generated at Wed Oct 7 02:44:16 2026 by rpki-client