$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0bfd918-56d6-3e11-a3c0-43db32c6ef1a.roa File: a0bfd918-56d6-3e11-a3c0-43db32c6ef1a.roa (raw, json) Hash identifier: BQyccfZs9SNLf+sRmXycAD356ibIZ8SPTp+zq/iS4RA= Subject key identifier: 3E:B0:18:89:A5:3E:34:7B:DA:8B:C8:20:44:54:7D:3D:89:E7:1C:27 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F506D690116A0EBBED498AA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0bfd918-56d6-3e11-a3c0-43db32c6ef1a.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 396571 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:69:01:16:a0:eb:be:d4:98:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=d5953cbf-d176-4078-91e9-4691e0298a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7a:43:07:c5:99:67:b1:52:65:0b:16:f6:b8: ab:36:79:2d:f3:03:e8:36:12:25:2d:7e:67:ce:6d: 77:7e:2e:f7:43:fa:71:aa:b9:70:9c:a8:90:44:eb: 05:bc:15:92:88:76:e4:de:21:2f:92:dc:01:c8:d9: 34:cf:fc:a6:a9:9c:96:c2:f7:3e:df:4b:c0:35:36: a7:cb:f7:b1:f0:30:fe:d8:5b:dc:4d:5c:15:17:60: 03:f7:3d:ff:15:a6:fd:77:e6:ed:b4:1f:33:7d:d2: 1d:4e:9a:1c:7e:bc:98:a7:17:18:f4:63:d9:7d:4d: 33:6d:3f:cb:da:8c:d2:83:10:5b:8b:00:33:d2:44: 6b:23:38:11:f2:f7:17:72:ef:bd:a6:4a:a2:11:cd: df:7c:ae:bc:8f:13:20:a2:3f:81:c2:36:f1:69:8e: b6:76:cd:40:40:af:5a:58:69:90:d0:d6:a5:e8:46: 63:27:ce:91:d4:af:82:e8:aa:97:71:92:ca:e0:82: a6:9a:d1:6d:67:6f:51:78:6e:0e:5b:2e:20:ed:ec: a8:ef:08:54:8e:9e:14:2a:f9:9e:ac:7e:3f:0e:4f: 42:0f:21:cb:62:1f:e6:41:a3:c2:53:17:a0:27:82: 62:21:7f:71:44:64:8c:02:e5:7d:22:ee:dd:77:7a: f1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B0:18:89:A5:3E:34:7B:DA:8B:C8:20:44:54:7D:3D:89:E7:1C:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0bfd918-56d6-3e11-a3c0-43db32c6ef1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:51:ef:24:d2:38:84:55:79:09:0d:e1:ff:28:75:02:2b:e6: 83:94:03:78:41:8b:df:cf:2d:c8:d6:71:93:9b:45:cc:d3:c5: ac:14:70:27:3b:5e:36:69:5e:a9:a2:df:68:69:98:f8:e1:16: ce:3a:13:d2:9e:f9:72:df:39:e2:89:e1:9b:80:0c:3b:e3:0c: 92:04:f9:a5:a0:60:c7:51:a2:dd:34:e2:73:e4:41:94:37:21: ff:66:e6:23:9c:a0:57:f2:59:50:2b:6d:ea:3b:e4:d2:b6:2f: f7:fd:1c:b2:68:e2:a4:03:2d:e8:77:98:47:e9:e9:5b:4a:a3: b1:29:90:54:b8:6c:f5:6e:3f:14:6c:21:d5:62:e4:98:ef:3a: 8c:db:57:eb:fd:09:29:b5:d7:77:0a:a1:cb:0d:d2:cb:9a:6d: 3a:3b:81:97:95:6f:10:58:8b:e6:a0:45:ed:58:24:e7:fc:b5: d1:5d:ab:fd:e6:ad:08:bd:2b:a0:ba:aa:4c:c2:55:da:1f:40: 83:2b:28:1d:89:bf:bc:fd:a4:25:0f:c6:f4:2a:68:6a:d8:ea: 20:5c:c6:46:b8:09:b3:f5:bb:95:44:e1:59:d1:e4:2f:a8:25: 26:13:d8:4a:92:4f:b7:4b:5f:5c:55:61:22:aa:9e:b7:d0:82: 09:6e:8d:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWkBFqDrvtSYqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZDU5NTNjYmYtZDE3Ni00MDc4LTkxZTktNDY5MWUwMjk4YTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3pDB8WZZ7FSZQsW9rirNnkt8wPoNhIlLX5n zm13fi73Q/pxqrlwnKiQROsFvBWSiHbk3iEvktwByNk0z/ymqZyWwvc+30vANTan y/ex8DD+2FvcTVwVF2AD9z3/Fab9d+bttB8zfdIdTpocfryYpxcY9GPZfU0zbT/L 2ozSgxBbiwAz0kRrIzgR8vcXcu+9pkqiEc3ffK68jxMgoj+BwjbxaY62ds1AQK9a WGmQ0Nal6EZjJ86R1K+C6KqXcZLK4IKmmtFtZ29ReG4OWy4g7eyo7whUjp4UKvme rH4/Dk9CDyHLYh/mQaPCUxegJ4JiIX9xRGSMAuV9Iu7dd3rxuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6wGImlPjR72ovIIERUfT2J5xwnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTBiZmQ5MTgtNTZkNi0z ZTExLWEzYzAtNDNkYjMyYzZlZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhR7yTSOIRVeQkN4f8odQIr5oOUA3hBi9/PLcjWcZObRczTxawUcCc7 XjZpXqmi32hpmPjhFs46E9Ke+XLfOeKJ4ZuADDvjDJIE+aWgYMdRot004nPkQZQ3 If9m5iOcoFfyWVArbeo75NK2L/f9HLJo4qQDLeh3mEfp6VtKo7EpkFS4bPVuPxRs IdVi5JjvOozbV+v9CSm113cKocsN0suabTo7gZeVbxBYi+agRe1YJOf8tdFdq/3m rQi9K6C6qkzCVdofQIMrKB2Jv7z9pCUPxvQqaGrY6iBcxka4CbP1u5VE4VnR5C+o JSYT2EqST7dLX1xVYSKqnrfQgglujcw= -----END CERTIFICATE-----Generated at Wed Oct 7 06:12:34 2026 by rpki-client