$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4a4ff76-1b74-3eee-b223-f6c4ab223e2a.roa File: a4a4ff76-1b74-3eee-b223-f6c4ab223e2a.roa (raw, json) Hash identifier: /bAEgBXi9s2SwZB8zxwagFeLWyZIwbmmKde4nyDqQzg= Subject key identifier: 5A:89:23:CE:29:66:FC:05:A5:DF:EB:F9:79:2E:BE:5B:2A:41:58:0D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F506D41A0B91F0CDDA1F78700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4a4ff76-1b74-3eee-b223-f6c4ab223e2a.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 397208 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:41:a0:b9:1f:0c:dd:a1:f7:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=4d38d228-94a3-4e5a-8051-aa8a94565a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:ae:48:cd:9b:3d:ff:b2:00:33:33:16:97: ca:04:1d:1b:fd:95:d1:69:c6:ea:b3:e6:33:78:fa: 04:a9:54:de:fc:58:b6:1d:3f:c0:ca:1f:2c:2a:61: 16:5e:97:64:bc:51:84:7f:37:86:33:78:86:14:4a: 28:3e:3d:28:1b:7a:91:3d:6b:1d:75:d0:e5:87:5c: e7:1a:37:c1:d1:d7:b7:4c:32:86:63:8a:de:af:79: ee:7c:2d:17:e6:1a:c7:f2:30:22:df:4a:16:3e:30: fc:a0:07:31:21:c7:7f:66:14:0e:de:4c:b2:30:6a: 13:6a:08:42:67:74:34:bc:6e:2b:34:b5:30:33:ff: 70:03:bf:21:cd:66:e5:dd:1b:4d:9a:74:a9:c5:dc: 35:77:d5:70:92:30:5a:9b:c7:c6:ac:26:c6:5a:99: b0:38:23:73:b5:5d:af:6d:56:9a:89:48:ed:26:29: 65:8c:78:76:4d:f7:0c:66:ed:e7:65:70:e6:f6:f9: 12:f5:9c:ee:cd:39:d5:db:f7:21:cb:83:5a:56:7d: e9:63:05:9b:33:31:d3:b9:e5:86:f5:bf:99:68:5b: 6a:25:b2:d7:0e:ed:75:4b:ee:7a:1c:b9:e9:df:fc: 1a:11:73:cd:cf:f5:f9:da:80:be:19:df:6a:80:d5: 12:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:89:23:CE:29:66:FC:05:A5:DF:EB:F9:79:2E:BE:5B:2A:41:58:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4a4ff76-1b74-3eee-b223-f6c4ab223e2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:f9:1d:52:51:a9:5d:60:9b:4c:1b:58:38:bd:b5:d9:1f:1c: 84:f1:13:28:c7:e2:40:c3:ef:18:eb:67:0c:73:45:4d:30:06: 9b:8e:d2:71:d8:e1:d4:e2:20:b7:bd:a4:5a:cd:bb:f4:10:e6: c9:a1:fc:35:34:61:f3:fc:b5:08:bf:b2:25:80:06:c7:b1:ed: 4d:75:20:65:10:dd:83:e2:73:b6:39:db:28:99:c1:8e:a5:77: ae:e4:8e:ba:97:31:f6:ee:b5:a0:89:d0:74:34:c8:c2:ed:20: 69:7f:a8:b3:85:a2:d5:e8:b6:d6:a2:47:02:7d:3a:6c:fd:63: b2:37:f1:ff:70:4f:3a:c5:0f:66:39:8d:37:ce:b8:d9:f5:d6: c3:b9:3b:d6:50:dd:a6:9a:5f:62:1b:d3:2a:4c:3b:97:b4:7b: 3d:f2:59:84:d0:92:47:ac:23:b7:8f:d8:75:7a:64:46:85:05: bc:d7:2f:fc:24:c9:26:9b:a0:6c:10:75:38:84:00:36:3a:54: a5:74:99:0e:ea:e5:f1:98:66:7f:88:fe:b3:b3:a1:80:02:10: 65:1a:c7:a4:cc:88:ac:12:37:ae:64:19:b8:38:3b:4d:ea:b8: 7e:e8:8b:df:e2:46:fc:e8:da:7e:66:71:23:6f:e2:e7:1f:cf: 5f:e7:8c:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUGguR8M3aH3hwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk NGQzOGQyMjgtOTRhMy00ZTVhLTgwNTEtYWE4YTk0NTY1YTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYSuSM2bPf+yADMzFpfKBB0b/ZXRacbqs+Yz ePoEqVTe/Fi2HT/Ayh8sKmEWXpdkvFGEfzeGM3iGFEooPj0oG3qRPWsdddDlh1zn GjfB0de3TDKGY4rer3nufC0X5hrH8jAi30oWPjD8oAcxIcd/ZhQO3kyyMGoTaghC Z3Q0vG4rNLUwM/9wA78hzWbl3RtNmnSpxdw1d9VwkjBam8fGrCbGWpmwOCNztV2v bVaaiUjtJilljHh2TfcMZu3nZXDm9vkS9ZzuzTnV2/chy4NaVn3pYwWbMzHTueWG 9b+ZaFtqJbLXDu11S+56HLnp3/waEXPNz/X52oC+Gd9qgNUSNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqJI84pZvwFpd/r+XkuvlsqQVgNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTRhNGZmNzYtMWI3NC0z ZWVlLWIyMjMtZjZjNGFiMjIzZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIL5HVJRqV1gm0wbWDi9tdkfHITxEyjH4kDD7xjrZwxzRU0wBpuO0nHY 4dTiILe9pFrNu/QQ5smh/DU0YfP8tQi/siWABsex7U11IGUQ3YPic7Y52yiZwY6l d67kjrqXMfbutaCJ0HQ0yMLtIGl/qLOFotXottaiRwJ9Omz9Y7I38f9wTzrFD2Y5 jTfOuNn11sO5O9ZQ3aaaX2Ib0ypMO5e0ez3yWYTQkkesI7eP2HV6ZEaFBbzXL/wk ySaboGwQdTiEADY6VKV0mQ7q5fGYZn+I/rOzoYACEGUax6TMiKwSN65kGbg4O03q uH7oi9/iRvzo2n5mcSNv4ucfz1/njHo= -----END CERTIFICATE-----Generated at Tue Oct 6 20:08:32 2026 by rpki-client