$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9035d4c8-95b3-3585-a347-c57425b9f39a.roa File: 9035d4c8-95b3-3585-a347-c57425b9f39a.roa (raw, json) Hash identifier: IskKwe9OkSTYhyyNTLT2quFb5GGmXugIuZSmLnEF2Lg= Subject key identifier: 24:C0:8A:B5:F3:6D:14:62:DE:14:97:EB:09:EC:80:B5:FE:FF:79:98 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F506D49D77DB7F71E4E666480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9035d4c8-95b3-3585-a347-c57425b9f39a.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 396562 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:49:d7:7d:b7:f7:1e:4e:66:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=d3465c0c-3c28-4d87-a4c8-e8d492bce2c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:04:0f:05:c8:b9:70:b0:c6:d7:a7:1e:e4:33: 00:f6:da:09:fd:30:13:14:42:77:fd:6b:33:34:7b: 37:be:b3:ed:7d:aa:38:f3:60:5c:18:da:48:ba:ab: 86:04:26:fa:e1:f6:ed:80:a4:61:6e:35:39:77:52: 02:0b:a3:06:ba:4d:6f:02:c1:0c:99:f7:b3:34:b5: 25:aa:df:9d:49:15:c9:fc:0c:34:18:7b:f2:2c:cd: fe:5b:1e:5e:f9:36:42:01:03:1b:28:a3:38:7e:bf: c7:29:07:83:20:1b:27:d0:79:8b:d6:55:3e:df:c8: 5d:52:22:75:1a:74:80:35:ef:39:14:6e:d6:94:92: 9d:99:ce:00:bf:57:b7:e0:67:a3:d8:5c:53:48:0a: db:d1:b7:af:e9:dc:e4:ea:e0:49:cd:23:ed:9c:ed: fb:3c:f0:93:33:bb:d0:c6:5a:47:86:9a:09:80:f3: f9:f6:6c:e3:13:d3:77:d7:68:f9:f9:e7:44:7e:e7: b9:c1:c5:f3:ca:e8:88:16:8d:5a:9f:25:f4:28:a7: b7:22:76:ec:b2:9c:23:77:1d:f8:b2:14:5e:66:c5: dd:53:51:0e:43:de:3e:a9:79:c6:1d:26:86:d5:1c: e3:78:75:c1:68:27:f9:0c:43:35:74:a0:81:b0:4a: 90:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C0:8A:B5:F3:6D:14:62:DE:14:97:EB:09:EC:80:B5:FE:FF:79:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9035d4c8-95b3-3585-a347-c57425b9f39a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:9f:64:94:44:5c:c3:87:26:f8:30:41:08:97:0d:cd:34:f0: 59:e8:86:d3:92:0c:44:39:5d:d2:4c:df:a7:c2:4f:0f:27:2e: d8:09:1b:f7:50:e4:dd:4f:eb:e3:66:ed:09:7e:2c:b8:a1:db: e2:68:0c:25:3a:78:38:4a:eb:a1:42:35:07:88:85:72:8b:78: f3:aa:12:a3:9e:78:0e:45:42:28:c3:4c:93:9e:1b:b5:e9:78: 3d:ad:2e:94:a6:ae:54:41:09:4d:94:09:28:60:c1:0d:4e:53: 8f:4f:92:45:bc:95:29:0c:87:83:d5:9d:92:5a:81:9d:46:b7: bc:c7:6b:9e:7e:4f:2c:9e:b4:36:82:53:ea:e9:29:6c:bb:4c: 39:d9:8e:63:df:98:cc:a0:6f:6b:eb:a8:88:e7:a1:db:ab:cc: 2c:a1:c2:9d:60:ec:89:5f:c6:8b:88:da:a1:58:db:74:8b:79: 35:c9:15:0f:10:54:12:b6:d4:1a:9d:0f:6a:83:f8:7b:e0:c4: 3d:b4:7a:e4:a8:1d:72:a6:25:c8:72:9d:09:f8:81:eb:61:56: 73:61:db:64:2e:48:d6:57:f3:4d:72:ee:23:73:f6:0f:88:9d: 33:5f:d1:9e:f2:7a:74:98:74:1c:40:5b:0d:86:ca:c7:3b:cf: db:54:b1:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUnXfbf3Hk5mZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZDM0NjVjMGMtM2MyOC00ZDg3LWE0YzgtZThkNDkyYmNlMmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwQPBci5cLDG16ce5DMA9toJ/TATFEJ3/Wsz NHs3vrPtfao482BcGNpIuquGBCb64fbtgKRhbjU5d1ICC6MGuk1vAsEMmfezNLUl qt+dSRXJ/Aw0GHvyLM3+Wx5e+TZCAQMbKKM4fr/HKQeDIBsn0HmL1lU+38hdUiJ1 GnSANe85FG7WlJKdmc4Av1e34Gej2FxTSArb0bev6dzk6uBJzSPtnO37PPCTM7vQ xlpHhpoJgPP59mzjE9N312j5+edEfue5wcXzyuiIFo1anyX0KKe3Inbsspwjdx34 shReZsXdU1EOQ94+qXnGHSaG1RzjeHXBaCf5DEM1dKCBsEqQ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTAirXzbRRi3hSX6wnsgLX+/3mYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTAzNWQ0YzgtOTViMy0z NTg1LWEzNDctYzU3NDI1YjlmMzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSfZJREXMOHJvgwQQiXDc008FnohtOSDEQ5XdJM36fCTw8nLtgJG/dQ 5N1P6+Nm7Ql+LLih2+JoDCU6eDhK66FCNQeIhXKLePOqEqOeeA5FQijDTJOeG7Xp eD2tLpSmrlRBCU2UCShgwQ1OU49PkkW8lSkMh4PVnZJagZ1Gt7zHa55+TyyetDaC U+rpKWy7TDnZjmPfmMygb2vrqIjnodurzCyhwp1g7IlfxouI2qFY23SLeTXJFQ8Q VBK21BqdD2qD+HvgxD20euSoHXKmJchynQn4gethVnNh22QuSNZX801y7iNz9g+I nTNf0Z7yenSYdBxAWw2Gysc7z9tUsco= -----END CERTIFICATE-----Generated at Wed Oct 7 04:27:38 2026 by rpki-client