$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4929e82-06a7-3c2d-85b3-300947e9fa74.roa File: a4929e82-06a7-3c2d-85b3-300947e9fa74.roa (raw, json) Hash identifier: etMWJLfGZOmAr0/1cJhOVUx7VtN4PPRJBgtxAkZfgYE= Subject key identifier: 4B:A4:C7:FD:B7:C1:92:51:A4:39:C6:13:C1:21:85:1E:5B:EB:2F:AA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F51D2BF724B64D339609E3A20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4929e82-06a7-3c2d-85b3-300947e9fa74.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 397198 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:bf:72:4b:64:d3:39:60:9e:3a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=5ee82a2f-f621-4757-aa70-fade6b1c6898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a6:d0:9b:6d:d6:f4:58:e9:e1:37:21:de:ef: 06:3b:f2:6a:b1:da:59:00:97:be:e3:f1:5c:56:f0: e2:3b:39:e6:b4:14:63:63:99:ee:6c:9b:d8:a1:a1: e0:85:eb:98:53:da:9c:76:7a:29:03:7a:14:75:e6: af:82:b4:7c:6d:49:ee:18:f4:5a:04:ee:f6:e6:a2: 71:f4:09:6d:28:aa:46:1f:e1:4b:7a:e5:e8:83:50: 06:44:ef:24:67:a6:63:3c:ab:8f:be:73:20:37:39: 19:ed:6a:fa:c9:40:bb:20:70:06:ec:2c:da:db:96: 08:4c:ea:bf:5e:fc:f7:6c:36:b7:a6:d6:9f:a3:ee: 22:ee:12:bb:56:34:62:f1:8c:9f:34:ec:8b:02:68: 62:76:4c:cb:e8:a2:c1:ce:fb:16:91:31:18:3a:95: 60:ed:61:b7:e0:08:11:45:7f:60:00:52:d6:72:9e: 45:57:ed:3c:5a:63:25:65:6f:61:04:5d:72:32:de: 92:49:99:04:54:28:7c:29:e7:96:2e:46:cc:79:72: c5:7a:63:f3:4d:51:8f:38:db:bf:b0:0b:f8:bd:f6: cc:1d:85:4e:37:97:7b:bd:28:ec:32:f4:01:29:cc: 7c:ec:9b:c3:36:bc:0a:f9:bf:2b:c8:3a:13:12:3a: 98:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A4:C7:FD:B7:C1:92:51:A4:39:C6:13:C1:21:85:1E:5B:EB:2F:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4929e82-06a7-3c2d-85b3-300947e9fa74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:25:4d:01:71:24:20:9a:e4:53:05:73:c8:93:4f:c2:56:43: db:ec:0b:a1:20:97:12:0b:e1:02:9b:02:70:29:3e:37:b6:76: 0d:bc:3b:50:6d:3d:ad:a0:b6:41:2e:f4:d2:99:fa:a1:8e:eb: 93:4f:f7:bd:6f:10:75:fe:f2:62:6f:ec:42:0a:98:d0:5c:c6: 50:d2:4c:f1:df:8f:71:e8:80:fe:01:df:f4:40:f9:4d:81:37: 50:ee:6e:fb:69:bd:13:33:39:1b:d3:4d:98:bb:75:e9:76:2f: 27:2e:72:f8:8f:f8:75:9f:e9:7e:b6:32:27:20:d7:24:30:17: da:9f:9f:8e:1a:2e:ec:a4:01:0c:7b:da:ce:0c:d4:34:8b:03: ff:b0:1a:e6:16:1a:95:24:90:45:2c:bc:2e:01:c8:76:13:28: f7:0e:b9:d8:ac:82:8e:6c:ca:13:ed:ba:74:5a:d1:1f:17:22: 82:fc:b4:64:a0:9c:ad:36:26:09:e3:f9:27:ed:01:3e:0e:1d: 2c:2a:f1:12:40:71:89:fd:aa:10:b5:c1:71:24:c8:42:75:ac: 08:23:06:50:b1:20:96:93:59:7c:a0:e6:29:62:3c:f4:57:3a: f3:6b:7d:7d:ee:86:9e:cf:bc:b6:19:cf:65:6a:14:0b:df:3d: 41:66:d8:15 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9R0r9yS2TTOWCeOiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk NWVlODJhMmYtZjYyMS00NzU3LWFhNzAtZmFkZTZiMWM2ODk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKbQm23W9Fjp4Tch3u8GO/JqsdpZAJe+4/Fc VvDiOznmtBRjY5nubJvYoaHgheuYU9qcdnopA3oUdeavgrR8bUnuGPRaBO725qJx 9AltKKpGH+FLeuXog1AGRO8kZ6ZjPKuPvnMgNzkZ7Wr6yUC7IHAG7Cza25YITOq/ Xvz3bDa3ptafo+4i7hK7VjRi8YyfNOyLAmhidkzL6KLBzvsWkTEYOpVg7WG34AgR RX9gAFLWcp5FV+08WmMlZW9hBF1yMt6SSZkEVCh8KeeWLkbMeXLFemPzTVGPONu/ sAv4vfbMHYVON5d7vSjsMvQBKcx87JvDNrwK+b8ryDoTEjqYRQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEukx/23wZJRpDnGE8EhhR5b6y+qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTQ5MjllODItMDZhNy0z YzJkLTg1YjMtMzAwOTQ3ZTlmYTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBTJU0BcSQgmuRTBXPIk0/CVkPb7AuhIJcSC+ECmwJwKT43tnYNvDtQ bT2toLZBLvTSmfqhjuuTT/e9bxB1/vJib+xCCpjQXMZQ0kzx349x6ID+Ad/0QPlN gTdQ7m77ab0TMzkb002Yu3Xpdi8nLnL4j/h1n+l+tjInINckMBfan5+OGi7spAEM e9rODNQ0iwP/sBrmFhqVJJBFLLwuAch2Eyj3DrnYrIKObMoT7bp0WtEfFyKC/LRk oJytNiYJ4/kn7QE+Dh0sKvESQHGJ/aoQtcFxJMhCdawIIwZQsSCWk1l8oOYpYjz0 Vzrza3197oaez7y2Gc9lahQL3z1BZtgV -----END CERTIFICATE-----Generated at Tue Oct 6 19:57:22 2026 by rpki-client