$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d5ddc03-66c3-3afb-91bd-d4d3b11b0f78.roa File: 8d5ddc03-66c3-3afb-91bd-d4d3b11b0f78.roa (raw, json) Hash identifier: M3zrN6XkOmeNQT9Vl9tmgYLRw+71QFOFj862A20hHQc= Subject key identifier: B1:66:50:96:DF:8C:29:C0:A5:1B:03:15:21:4F:2E:76:61:38:9F:EC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F506D4324DDA6749338B7CD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d5ddc03-66c3-3afb-91bd-d4d3b11b0f78.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 396585 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:43:24:dd:a6:74:93:38:b7:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=7133453f-70fe-432d-9084-1b299fc4deaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0f:9c:7d:47:20:2b:26:fd:a0:64:e2:27:43: 76:dd:08:85:82:69:32:57:17:f3:2b:d3:68:b0:6e: d8:cd:9b:f3:b2:e1:6e:89:10:90:69:ef:bd:ba:14: 77:e8:20:1c:f1:82:04:9b:16:40:6b:e0:6e:8f:a4: 54:b8:ce:6a:7e:4e:a0:89:99:cb:ac:d1:e2:52:1b: 43:85:e2:84:c4:e3:40:fa:80:57:f2:34:bf:83:e4: fc:80:e7:4c:27:d9:41:85:b6:9c:e9:44:b5:e7:73: 49:48:ce:76:0f:ea:31:9b:07:25:3d:be:14:8d:b6: 08:cd:48:81:81:08:a0:27:8e:2c:7a:eb:41:b3:b2: e3:24:ad:3d:7f:cb:be:6a:4d:74:c0:9b:36:1f:fc: c9:81:98:5c:1f:6e:5f:dc:e9:19:73:3c:9d:22:1a: 5c:a7:72:c3:54:e2:ff:0b:a9:ca:2c:39:b5:ce:1d: e9:ce:b6:86:cd:eb:a0:6f:64:a9:eb:0a:43:b0:6c: 52:b6:dc:3c:a9:64:66:c9:51:c6:a0:aa:1a:2b:03: ac:8a:8b:42:29:3c:78:e8:01:59:14:db:57:fb:46: cd:f5:8c:2b:9c:8f:eb:9e:02:48:81:21:f0:4d:22: f8:2e:77:81:c7:54:b4:75:15:e7:3a:84:1b:48:31: 74:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:66:50:96:DF:8C:29:C0:A5:1B:03:15:21:4F:2E:76:61:38:9F:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d5ddc03-66c3-3afb-91bd-d4d3b11b0f78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:67:9c:b9:bb:cd:d1:ee:de:a2:3d:69:6b:ce:ca:ac:04:85: 5b:ac:d9:09:7a:a7:40:fa:04:a2:3e:6b:7e:7d:4f:40:64:cf: c1:6a:b3:ef:05:5d:ce:36:8d:28:df:86:79:81:b6:f7:dd:b8: 93:dd:c9:a3:8f:64:37:ae:19:cc:f8:08:24:24:12:49:dd:79: ba:f7:66:66:7d:a6:3e:b3:9a:25:c9:97:86:ca:55:ba:8c:83: d6:5d:de:0d:67:89:7b:3a:1b:ad:2e:03:03:e2:49:ca:4b:54: c8:aa:f3:e8:22:22:64:a3:8e:53:17:0b:12:f7:17:5a:2e:d4: 7f:01:ff:28:de:16:2f:b3:68:1f:63:79:4b:67:3b:8d:81:54: 99:51:0f:04:f0:c8:25:33:c6:f7:43:07:86:56:fd:05:6e:87: 10:98:ab:4b:f1:14:04:86:15:f9:1d:99:e4:1a:16:62:55:a2: 5f:85:27:e5:2e:c0:88:c7:74:97:2d:23:74:11:3d:3e:38:42: c0:fa:db:be:68:36:5e:20:04:32:ac:66:0e:3d:41:be:a4:cd: 4a:4f:3a:09:f1:9c:6c:8e:09:21:e4:9f:5f:5f:57:2c:f3:83: 28:9e:95:5a:38:51:a7:51:e2:c9:71:ab:59:53:fb:44:8e:47: bd:c7:7b:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUMk3aZ0kzi3zYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk NzEzMzQ1M2YtNzBmZS00MzJkLTkwODQtMWIyOTlmYzRkZWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ+cfUcgKyb9oGTiJ0N23QiFgmkyVxfzK9No sG7YzZvzsuFuiRCQae+9uhR36CAc8YIEmxZAa+Buj6RUuM5qfk6giZnLrNHiUhtD heKExONA+oBX8jS/g+T8gOdMJ9lBhbac6US153NJSM52D+oxmwclPb4UjbYIzUiB gQigJ44seutBs7LjJK09f8u+ak10wJs2H/zJgZhcH25f3OkZczydIhpcp3LDVOL/ C6nKLDm1zh3pzraGzeugb2Sp6wpDsGxSttw8qWRmyVHGoKoaKwOsiotCKTx46AFZ FNtX+0bN9YwrnI/rngJIgSHwTSL4LneBx1S0dRXnOoQbSDF02wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFmUJbfjCnApRsDFSFPLnZhOJ/sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGQ1ZGRjMDMtNjZjMy0z YWZiLTkxYmQtZDRkM2IxMWIwZjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRnnLm7zdHu3qI9aWvOyqwEhVus2Ql6p0D6BKI+a359T0Bkz8Fqs+8F Xc42jSjfhnmBtvfduJPdyaOPZDeuGcz4CCQkEkndebr3ZmZ9pj6zmiXJl4bKVbqM g9Zd3g1niXs6G60uAwPiScpLVMiq8+giImSjjlMXCxL3F1ou1H8B/yjeFi+zaB9j eUtnO42BVJlRDwTwyCUzxvdDB4ZW/QVuhxCYq0vxFASGFfkdmeQaFmJVol+FJ+Uu wIjHdJctI3QRPT44QsD6275oNl4gBDKsZg49Qb6kzUpPOgnxnGyOCSHkn19fVyzz gyielVo4UadR4slxq1lT+0SOR73He8U= -----END CERTIFICATE-----Generated at Tue Oct 6 14:38:01 2026 by rpki-client