$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a470a0a7-32d7-3bb8-be68-42d66277d66d.roa File: a470a0a7-32d7-3bb8-be68-42d66277d66d.roa (raw, json) Hash identifier: EOX9Um9+r18EsLLVUPYIBj7Z4DUPk1C+0UlCPiLOs/o= Subject key identifier: 3E:CB:10:5C:FA:06:37:62:D2:91:92:A7:84:94:0D:78:E5:A2:59:A2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F506D6602894186A440BE4A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a470a0a7-32d7-3bb8-be68-42d66277d66d.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 396611 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:66:02:89:41:86:a4:40:be:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=532f251c-6f03-4489-a323-1470a7a7844b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:da:7a:9b:67:5e:9f:2f:d9:99:96:f6:74:16: 34:c4:d4:92:c0:f6:db:aa:4f:a5:8e:66:27:b9:6e: 3a:d1:6d:a8:1d:2a:a3:96:64:e2:6b:31:03:38:83: 12:0e:a1:d3:e8:3a:dd:88:ed:0d:c9:c7:f2:17:e6: 8b:d6:e5:19:b8:75:31:68:4d:bc:60:68:6d:59:96: 2e:1f:cb:bd:46:a0:32:8f:a6:fa:d1:f4:14:d7:5e: cd:02:b7:42:c2:a0:fa:35:c6:20:2b:19:4b:b8:17: a9:45:e6:76:cf:2e:e1:09:d3:f5:78:28:7e:ae:f8: 4f:bd:b4:27:7d:82:55:4a:59:c5:69:19:3a:20:37: 3a:66:b9:4c:db:53:35:2e:93:dc:1b:00:c1:e2:56: 1f:88:66:4b:72:d7:52:25:c1:fe:30:0c:ba:9d:13: ce:4b:40:3d:37:22:5e:c1:52:a4:ed:5d:f5:00:6a: 76:54:57:16:c3:86:ba:e5:34:ab:df:1f:c9:a9:a1: 73:fe:20:ce:1e:74:e0:51:b6:cf:aa:98:1b:1c:1f: d1:ff:39:61:b6:5f:38:f5:e5:91:2d:8e:4e:0d:6e: de:71:87:02:60:24:73:c1:46:78:c0:24:74:8a:a7: 44:62:a0:ae:30:96:f1:0d:8c:bd:c4:7a:7b:ec:55: a0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CB:10:5C:FA:06:37:62:D2:91:92:A7:84:94:0D:78:E5:A2:59:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a470a0a7-32d7-3bb8-be68-42d66277d66d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:c0:f0:89:60:af:cc:50:2b:75:78:19:a0:78:3f:ef:91:95: 6c:20:c0:c6:e8:5a:d0:12:6c:39:37:96:24:66:45:13:8f:a7: 2b:ba:fc:2d:8a:5a:49:99:04:f2:12:47:d4:b0:f4:ca:c2:32: 85:2e:72:a3:94:57:69:17:c7:68:35:18:ed:60:9f:38:74:3a: 6c:a3:19:6d:b7:de:ce:04:2c:fa:5b:c6:1c:34:23:7c:76:bb: f3:d1:24:a8:40:54:1d:70:f4:fe:e7:90:4e:ac:2e:48:19:4b: 3e:57:0e:72:7f:6e:c7:19:1f:a0:87:09:60:e6:31:1c:2f:57: 36:93:34:b2:6d:3b:9b:a9:39:eb:18:03:93:a0:d6:f2:6f:9f: 2b:3e:0b:28:09:c1:99:20:cc:0c:4a:fa:fc:e7:fb:9b:4a:a9: d3:51:75:ad:d9:f5:b6:9c:f8:c4:2e:ad:4a:c2:b4:0f:e4:bd: b5:1c:ad:dc:c2:61:79:8e:6f:34:b7:61:57:cf:51:91:f1:d9: 0b:8f:b7:c0:a4:9d:49:bc:4f:96:6d:ef:cb:7a:0a:95:ff:d4: 3b:f0:af:c8:f3:cf:87:97:01:44:f5:5c:a2:93:24:8b:75:63: c4:70:cf:91:77:11:15:43:24:5b:b3:97:64:86:e6:58:0a:56: 17:28:c7:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWYCiUGGpEC+SgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk NTMyZjI1MWMtNmYwMy00NDg5LWEzMjMtMTQ3MGE3YTc4NDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdp6m2deny/ZmZb2dBY0xNSSwPbbqk+ljmYn uW460W2oHSqjlmTiazEDOIMSDqHT6DrdiO0NycfyF+aL1uUZuHUxaE28YGhtWZYu H8u9RqAyj6b60fQU117NArdCwqD6NcYgKxlLuBepReZ2zy7hCdP1eCh+rvhPvbQn fYJVSlnFaRk6IDc6ZrlM21M1LpPcGwDB4lYfiGZLctdSJcH+MAy6nRPOS0A9NyJe wVKk7V31AGp2VFcWw4a65TSr3x/JqaFz/iDOHnTgUbbPqpgbHB/R/zlhtl849eWR LY5ODW7ecYcCYCRzwUZ4wCR0iqdEYqCuMJbxDYy9xHp77FWgkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7LEFz6Bjdi0pGSp4SUDXjlolmiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTQ3MGEwYTctMzJkNy0z YmI4LWJlNjgtNDJkNjYyNzdkNjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjA8Ilgr8xQK3V4GaB4P++RlWwgwMboWtASbDk3liRmRROPpyu6/C2K WkmZBPISR9Sw9MrCMoUucqOUV2kXx2g1GO1gnzh0OmyjGW233s4ELPpbxhw0I3x2 u/PRJKhAVB1w9P7nkE6sLkgZSz5XDnJ/bscZH6CHCWDmMRwvVzaTNLJtO5upOesY A5Og1vJvnys+CygJwZkgzAxK+vzn+5tKqdNRda3Z9bac+MQurUrCtA/kvbUcrdzC YXmObzS3YVfPUZHx2QuPt8CknUm8T5Zt78t6CpX/1Dvwr8jzz4eXAUT1XKKTJIt1 Y8Rwz5F3ERVDJFuzl2SG5lgKVhcox+k= -----END CERTIFICATE-----Generated at Wed Oct 7 05:07:31 2026 by rpki-client