$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0f7308a-fe9f-3622-93ee-4cb662e549db.roa File: a0f7308a-fe9f-3622-93ee-4cb662e549db.roa (raw, json) Hash identifier: Rq3ilUTlIh4Y0azpSqQvqsYYxTOdOfod9zElXxqf82Q= Subject key identifier: 3C:2D:F0:8D:2C:F9:EA:E9:FD:B3:38:9A:D4:C4:FF:47:27:57:2E:6C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F51D2BEC33A8E877790CCE980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0f7308a-fe9f-3622-93ee-4cb662e549db.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 396592 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:be:c3:3a:8e:87:77:90:cc:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=98cb0351-a2cd-4590-9cb8-0a8389cabeec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:37:65:01:d3:4f:23:02:1d:5e:8d:2d:e7:d7: f4:25:7b:72:ba:65:2c:29:d6:92:e0:f4:10:cb:3e: cd:c4:af:da:95:32:0a:5f:4f:cd:fe:5e:8c:6d:01: a8:69:6d:b0:6f:47:66:e4:21:32:18:e9:b3:60:56: 3b:03:3f:20:18:47:66:74:2b:6d:77:4e:0b:29:0b: 13:77:14:8d:99:ae:87:f4:f7:47:e7:b4:d5:77:04: 18:36:77:39:5b:eb:b5:06:d4:8f:14:83:e2:1d:f5: 89:76:c9:9e:88:11:f6:3c:e5:4d:c6:50:40:1c:cc: 87:28:b7:d5:6e:35:fd:6a:72:0c:0e:ba:a5:36:13: 77:bf:0a:73:25:55:e0:7b:b8:f4:46:2a:50:29:02: 96:80:27:43:6f:6c:61:83:14:6c:cf:3f:de:32:f1: 69:09:a3:e6:73:0f:c4:df:4f:14:12:9c:5b:6e:4f: b3:f0:f9:d5:0e:45:91:ad:86:d3:c2:8e:c6:14:3f: d9:2e:1d:6b:37:e6:b1:14:95:86:81:aa:7e:17:54: e8:9b:88:8f:ac:42:fb:02:3c:cb:96:d9:1d:38:ca: 54:41:a7:68:05:7f:de:c0:aa:f6:3f:a3:48:8d:a5: 95:db:f1:dc:8e:6c:35:4a:73:d8:ec:02:6a:13:92: e1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2D:F0:8D:2C:F9:EA:E9:FD:B3:38:9A:D4:C4:FF:47:27:57:2E:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0f7308a-fe9f-3622-93ee-4cb662e549db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:65:bc:bc:af:a7:b4:46:e1:5c:a1:44:e9:23:82:0a:44:b0: f7:8b:1f:9e:f2:a0:74:c0:26:c1:b7:4e:52:be:6e:33:e4:37: 5a:6e:50:ed:c2:cb:4e:03:0e:6e:91:10:65:5d:fb:08:af:c4: 37:e7:65:9e:03:ad:7d:fd:50:60:64:e0:bc:0a:51:e4:f4:38: 16:55:c2:ed:06:75:b1:07:f0:44:5c:b2:a2:30:0c:91:05:71: 70:43:56:76:42:9b:97:73:ec:b0:d9:59:df:84:3a:35:70:c0: b6:17:70:0d:47:d7:a6:dc:98:eb:26:67:8b:ef:b2:c2:2f:57: 97:c2:dc:4a:20:ad:66:40:d8:64:9b:bc:e1:73:bf:d9:7f:b6: 3b:66:38:30:f6:dc:6e:84:a0:fc:b1:49:63:fc:73:d4:4b:2f: 6d:67:8a:a5:2b:e5:12:b5:b2:90:bf:5d:1d:42:45:75:21:21: 23:3f:a4:c7:e8:c2:4e:e5:78:5d:14:af:47:8e:93:1f:eb:05: fe:a6:59:48:bb:81:f7:52:8d:ee:27:ca:10:79:25:1d:f4:9b: d8:65:de:31:ef:0d:b5:fe:f2:30:b5:5f:94:b1:a7:09:ab:10: 44:7a:13:fc:20:8c:74:8c:f8:95:23:71:d5:2f:f9:b1:72:99: 67:7c:64:c2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9R0r7DOo6Hd5DM6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk OThjYjAzNTEtYTJjZC00NTkwLTljYjgtMGE4Mzg5Y2FiZWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDdlAdNPIwIdXo0t59f0JXtyumUsKdaS4PQQ yz7NxK/alTIKX0/N/l6MbQGoaW2wb0dm5CEyGOmzYFY7Az8gGEdmdCttd04LKQsT dxSNma6H9PdH57TVdwQYNnc5W+u1BtSPFIPiHfWJdsmeiBH2POVNxlBAHMyHKLfV bjX9anIMDrqlNhN3vwpzJVXge7j0RipQKQKWgCdDb2xhgxRszz/eMvFpCaPmcw/E 308UEpxbbk+z8PnVDkWRrYbTwo7GFD/ZLh1rN+axFJWGgap+F1Tom4iPrEL7AjzL ltkdOMpUQadoBX/ewKr2P6NIjaWV2/Hcjmw1SnPY7AJqE5LhAwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDwt8I0s+erp/bM4mtTE/0cnVy5sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTBmNzMwOGEtZmU5Zi0z NjIyLTkzZWUtNGNiNjYyZTU0OWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBRZby8r6e0RuFcoUTpI4IKRLD3ix+e8qB0wCbBt05Svm4z5DdablDt wstOAw5ukRBlXfsIr8Q352WeA619/VBgZOC8ClHk9DgWVcLtBnWxB/BEXLKiMAyR BXFwQ1Z2QpuXc+yw2VnfhDo1cMC2F3ANR9em3JjrJmeL77LCL1eXwtxKIK1mQNhk m7zhc7/Zf7Y7Zjgw9txuhKD8sUlj/HPUSy9tZ4qlK+UStbKQv10dQkV1ISEjP6TH 6MJO5XhdFK9HjpMf6wX+pllIu4H3Uo3uJ8oQeSUd9JvYZd4x7w21/vIwtV+UsacJ qxBEehP8IIx0jPiVI3HVL/mxcplnfGTC -----END CERTIFICATE-----Generated at Wed Oct 7 14:42:32 2026 by rpki-client