$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/98cb00c3-509d-3004-b9d3-6984a0e5b1f9.roa File: 98cb00c3-509d-3004-b9d3-6984a0e5b1f9.roa (raw, json) Hash identifier: Qc8UjC+ftesBBSVNzgF88zKponYV6CnBC7Ou68as0c4= Subject key identifier: 1D:22:50:FD:1A:65:27:66:10:2D:C1:6F:8A:15:A4:61:A7:DF:F2:90 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F506D449AE79F74624B57E500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/98cb00c3-509d-3004-b9d3-6984a0e5b1f9.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 396608 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:44:9a:e7:9f:74:62:4b:57:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=3fc9a1c8-08a5-4edb-8b32-69ecde08d27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:aa:3b:6d:e5:8b:54:3d:2d:b6:e2:a3:cd:ad: fb:a1:d1:22:a6:d6:46:8c:f0:0d:2c:d7:a2:5c:b4: b1:b3:01:81:62:c8:ed:3d:75:9d:62:3b:da:dc:ea: c8:e4:db:5b:c3:4f:34:dc:13:13:b9:7c:87:28:13: 95:99:f8:de:7f:f3:a5:17:19:cf:5e:60:01:5d:af: 2f:ae:64:36:b1:b6:e2:c0:24:33:08:f8:c0:29:10: fa:7d:e9:bb:e5:8c:85:3f:02:b9:17:df:0f:46:ec: a1:cb:f4:9e:59:89:30:1a:ed:4e:37:0f:86:26:2a: 27:0a:f5:3b:1b:6f:a9:ea:dd:af:aa:f1:bb:91:17: 66:79:64:65:7f:5c:c7:2e:40:aa:05:9d:0d:f8:8f: a6:67:68:e5:5b:b3:95:7e:8f:43:ba:41:58:69:47: 5b:56:f5:51:8e:57:fd:81:0d:25:c8:f5:12:a1:7a: d0:3d:ae:23:f3:21:67:a8:d2:b0:f9:a7:4d:29:17: fd:d3:fa:86:4c:49:2d:8a:15:b6:b3:64:af:db:f1: 44:85:47:5c:f2:9e:f8:f0:8c:67:96:e8:8a:86:73: 5c:cf:0e:c5:ac:b9:26:9b:9c:36:61:fd:43:57:9f: 26:ab:55:72:53:ab:24:11:0d:6c:3a:13:52:10:3f: c6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:22:50:FD:1A:65:27:66:10:2D:C1:6F:8A:15:A4:61:A7:DF:F2:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/98cb00c3-509d-3004-b9d3-6984a0e5b1f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:71:88:54:47:88:2b:b5:07:da:e9:ce:ce:ac:f9:46:34:e8: df:2b:1b:bc:45:03:32:43:e6:18:43:30:05:a0:f2:fe:e7:ba: 85:34:4d:3a:96:b5:71:9f:15:fa:67:83:57:7b:ca:8b:be:46: 93:f7:03:6a:06:f5:22:09:73:7b:9b:0a:e1:8f:6a:68:67:c6: 65:88:e5:39:25:a7:78:50:ff:52:87:d4:45:b9:12:bc:6e:10: bd:f7:d5:43:98:d8:30:df:c9:32:38:d2:9a:e2:5d:df:08:3e: ec:eb:c6:14:80:a4:84:5b:4e:a7:d3:c5:17:0f:00:ce:04:ca: ec:01:0e:a1:bc:ce:9b:4d:e8:eb:de:2e:5f:f0:3f:af:94:ab: 0e:3f:fe:d1:4a:01:a6:36:8e:f2:20:b9:23:3d:47:a9:0e:78: aa:6e:b8:d2:30:f9:45:85:ea:c8:73:0e:ae:0e:6f:2b:6d:8f: f8:2e:dc:ac:32:aa:d4:75:36:aa:41:b0:d0:94:69:61:cb:15: 31:8d:92:37:68:2a:ed:09:41:c1:c9:36:d6:6d:3d:51:91:5b: ae:aa:82:dd:3c:64:db:4e:37:13:9b:b2:27:cf:b4:ce:1e:dd: 3c:09:5c:1c:be:96:87:5a:a1:04:8d:5e:18:5b:73:d3:57:cb: ed:07:34:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUSa5590YktX5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk M2ZjOWExYzgtMDhhNS00ZWRiLThiMzItNjllY2RlMDhkMjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qo7beWLVD0ttuKjza37odEiptZGjPANLNei XLSxswGBYsjtPXWdYjva3OrI5Ntbw0803BMTuXyHKBOVmfjef/OlFxnPXmABXa8v rmQ2sbbiwCQzCPjAKRD6fem75YyFPwK5F98PRuyhy/SeWYkwGu1ONw+GJionCvU7 G2+p6t2vqvG7kRdmeWRlf1zHLkCqBZ0N+I+mZ2jlW7OVfo9DukFYaUdbVvVRjlf9 gQ0lyPUSoXrQPa4j8yFnqNKw+adNKRf90/qGTEktihW2s2Sv2/FEhUdc8p748Ixn luiKhnNczw7FrLkmm5w2Yf1DV58mq1VyU6skEQ1sOhNSED/GbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0iUP0aZSdmEC3Bb4oVpGGn3/KQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOThjYjAwYzMtNTA5ZC0z MDA0LWI5ZDMtNjk4NGEwZTViMWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZxiFRHiCu1B9rpzs6s+UY06N8rG7xFAzJD5hhDMAWg8v7nuoU0TTqW tXGfFfpng1d7you+RpP3A2oG9SIJc3ubCuGPamhnxmWI5Tklp3hQ/1KH1EW5Erxu EL331UOY2DDfyTI40priXd8IPuzrxhSApIRbTqfTxRcPAM4EyuwBDqG8zptN6Ove Ll/wP6+Uqw4//tFKAaY2jvIguSM9R6kOeKpuuNIw+UWF6shzDq4Obyttj/gu3Kwy qtR1NqpBsNCUaWHLFTGNkjdoKu0JQcHJNtZtPVGRW66qgt08ZNtONxObsifPtM4e 3TwJXBy+lodaoQSNXhhbc9NXy+0HNCI= -----END CERTIFICATE-----Generated at Wed Oct 7 19:28:00 2026 by rpki-client