$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/79fff64a-44b7-3fdd-aa8c-398a539f6da0.roa File: 79fff64a-44b7-3fdd-aa8c-398a539f6da0.roa (raw, json) Hash identifier: +YTKz0NP3Y3Q/Df8XNDYWLAkxGlYlOdLvFAolLO/CrI= Subject key identifier: AC:63:A0:DC:B9:9B:5D:E2:39:F7:90:81:34:27:80:2B:4A:7E:24:CC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F51D2BF7E34EFE14D5B5F4DB4 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/79fff64a-44b7-3fdd-aa8c-398a539f6da0.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 397195 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:bf:7e:34:ef:e1:4d:5b:5f:4d:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=2ed58292-8076-46b0-9ca6-711df55be5d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0e:1c:66:b8:e1:eb:51:6d:c4:1b:95:bb:8d: 82:b0:f1:d1:9f:40:45:83:ee:41:0d:8c:d2:78:dc: 0a:93:3b:e4:c7:dd:65:23:c2:6c:d0:fe:99:78:65: 92:cb:a4:71:d7:eb:09:c9:fc:23:5b:cc:db:fc:47: c2:56:24:dc:8e:9e:38:2e:4c:08:e8:1a:0c:43:78: 86:03:5a:49:7a:5f:d7:dd:d6:4f:d5:34:37:35:77: 38:91:4e:f1:32:bd:25:4a:4d:2b:ea:f0:6d:67:e8: 21:da:1a:cf:30:ba:26:19:e2:8d:09:92:3a:2c:d5: ab:46:e2:1e:31:5d:49:b2:81:f4:c7:cf:ce:d8:17: b5:00:95:23:e3:ac:10:bb:83:aa:c6:5f:97:24:34: ea:7f:f9:c3:a8:f8:d7:6e:97:3c:f9:b2:5d:19:e0: fb:38:6f:9a:ef:74:2b:df:09:d4:ce:4a:a4:cc:4a: 12:35:8a:d0:55:1c:58:69:d1:27:82:a2:02:87:83: 60:8c:18:57:68:89:42:0d:35:78:fb:ab:89:9f:12: 7f:25:c1:8f:56:a5:35:b7:22:95:a3:1c:70:43:45: f2:a6:2f:b9:7d:1b:18:d4:60:55:a9:76:62:fe:a1: ff:5e:03:20:3c:d3:60:d6:d7:20:73:b0:f7:51:10: 06:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:63:A0:DC:B9:9B:5D:E2:39:F7:90:81:34:27:80:2B:4A:7E:24:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/79fff64a-44b7-3fdd-aa8c-398a539f6da0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:5c:00:9b:00:08:84:2e:e7:65:52:0d:c1:ec:db:d8:1b:81: fc:8c:dd:f7:1d:a4:01:a1:f6:84:1a:ce:ba:62:56:dc:f1:47: 09:de:c6:ef:b2:a4:24:cc:e8:c8:7e:1d:7b:39:e2:29:42:f6: ba:89:f5:8f:3e:1f:59:06:dd:7b:24:60:42:79:e1:ff:77:d0: bf:f5:26:e4:a9:d1:00:f3:ab:29:91:38:9c:72:f3:9b:a0:d0: 47:28:f3:aa:af:fb:f9:24:b9:a5:27:7f:55:24:94:65:93:04: 86:bd:9b:77:45:d3:44:eb:db:e5:95:37:63:3f:76:f5:e3:dc: f8:59:06:3d:c9:c7:06:9f:05:77:b7:64:ae:a5:d1:d5:c9:49: 12:60:1e:bb:9b:da:f3:68:ed:fe:c8:61:b7:97:17:ec:04:3d: 8b:9c:b9:5f:60:64:b2:ff:66:43:fe:d1:6f:a3:ae:16:a9:5f: 94:4c:4e:0c:0a:6e:6d:58:a8:6a:ff:1c:2b:e4:31:88:6a:e0: 7d:f8:87:05:f7:0c:4c:7c:ee:39:71:69:ca:04:64:6b:af:9d: fd:b0:e0:fa:87:d7:d4:13:b8:4e:f9:8b:69:d7:bb:f6:1a:64: 74:fe:bf:01:c7:04:bd:37:a0:7c:e1:8b:f5:15:08:2e:00:21: 3f:88:28:9c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9R0r9+NO/hTVtfTbQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk MmVkNTgyOTItODA3Ni00NmIwLTljYTYtNzExZGY1NWJlNWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw4cZrjh61FtxBuVu42CsPHRn0BFg+5BDYzS eNwKkzvkx91lI8Js0P6ZeGWSy6Rx1+sJyfwjW8zb/EfCViTcjp44LkwI6BoMQ3iG A1pJel/X3dZP1TQ3NXc4kU7xMr0lSk0r6vBtZ+gh2hrPMLomGeKNCZI6LNWrRuIe MV1JsoH0x8/O2Be1AJUj46wQu4Oqxl+XJDTqf/nDqPjXbpc8+bJdGeD7OG+a73Qr 3wnUzkqkzEoSNYrQVRxYadEngqICh4NgjBhXaIlCDTV4+6uJnxJ/JcGPVqU1tyKV oxxwQ0Xypi+5fRsY1GBVqXZi/qH/XgMgPNNg1tcgc7D3URAGBwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKxjoNy5m13iOfeQgTQngCtKfiTMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzlmZmY2NGEtNDRiNy0z ZmRkLWFhOGMtMzk4YTUzOWY2ZGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBqXACbAAiELudlUg3B7NvYG4H8jN33HaQBofaEGs66Ylbc8UcJ3sbv sqQkzOjIfh17OeIpQva6ifWPPh9ZBt17JGBCeeH/d9C/9SbkqdEA86spkTiccvOb oNBHKPOqr/v5JLmlJ39VJJRlkwSGvZt3RdNE69vllTdjP3b149z4WQY9yccGnwV3 t2SupdHVyUkSYB67m9rzaO3+yGG3lxfsBD2LnLlfYGSy/2ZD/tFvo64WqV+UTE4M Cm5tWKhq/xwr5DGIauB9+IcF9wxMfO45cWnKBGRrr539sOD6h9fUE7hO+Ytp17v2 GmR0/r8BxwS9N6B84Yv1FQguACE/iCic -----END CERTIFICATE-----Generated at Thu Oct 8 01:13:30 2026 by rpki-client