$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9117add-ffbb-3991-a613-c683960a13a5.roa File: a9117add-ffbb-3991-a613-c683960a13a5.roa (raw, json) Hash identifier: yjNUKz97Iwm0vaoT45m+bPKybSTsxqmjZJLmx2RWkqI= Subject key identifier: 30:8E:E5:AE:22:7C:5D:B4:3D:38:34:7E:B8:29:EA:93:3D:26:53:E3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F51D2BDBD61F81922EA405080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9117add-ffbb-3991-a613-c683960a13a5.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 396617 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:bd:bd:61:f8:19:22:ea:40:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=39f521cd-3786-4c6b-8622-dc595dce5147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7e:54:9f:ed:fa:52:76:61:4e:18:a7:2c:09: 6b:3f:6f:5e:3c:c8:d7:bf:4d:89:14:8d:db:bf:ef: 1a:5a:23:a1:5a:17:3a:03:a2:5c:77:89:62:97:3e: 7e:9b:97:b8:78:83:58:2f:1d:e8:1d:c4:52:9a:6a: 26:11:fd:4c:6c:1e:9a:37:c3:28:51:ce:f3:f4:ba: 5c:cf:b0:f7:00:70:5b:60:2d:92:3c:aa:41:46:9b: f0:73:47:8b:d4:a5:8d:85:a7:5e:22:e5:fb:70:d9: c2:a6:11:8d:6c:5d:35:c3:8f:41:dc:36:16:0c:cd: e2:f5:f9:76:cd:9f:0d:8b:0e:d2:2b:81:d0:ae:02: 1e:ae:36:21:5a:0b:60:28:4f:4e:07:6e:86:85:31: 40:a0:de:d4:b7:95:35:e6:8a:0b:56:dc:96:0e:5c: 57:98:e5:7d:df:e2:1f:ab:0e:bf:6f:ef:fe:4c:f3: 98:07:f1:a1:9d:8a:b0:ec:f3:14:dc:6e:8d:2c:82: 6c:35:65:f0:e2:a5:c2:ac:84:d5:b3:de:f1:d9:97: f9:85:86:d0:3c:21:3d:ba:4d:36:a3:42:86:06:81: 05:1b:a1:01:34:97:77:48:2a:d4:13:14:47:2f:e9: f0:e0:85:6e:8c:bf:74:1f:47:62:fc:24:3e:98:6b: ca:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8E:E5:AE:22:7C:5D:B4:3D:38:34:7E:B8:29:EA:93:3D:26:53:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9117add-ffbb-3991-a613-c683960a13a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:7e:00:2d:c8:1e:e3:34:b9:13:2d:90:dc:43:fc:b2:81:c1: 3e:98:ab:6d:39:4c:a0:06:80:1b:1d:97:82:88:52:07:69:b8: 58:6a:b3:37:f9:58:71:d9:86:f5:07:8f:7d:b9:43:98:68:41: 69:61:78:8f:31:85:ee:f1:31:52:fa:e5:a9:04:61:46:2a:0d: 39:e9:35:94:c9:fb:6c:1c:cf:6d:6e:42:75:eb:15:ba:c8:ed: 97:72:95:4b:cf:a2:9b:b0:96:43:d3:93:63:4d:0a:70:05:bf: 47:bf:48:fc:87:79:0d:6e:04:47:8b:6a:1f:1a:f2:3b:42:9e: fa:35:ad:01:12:79:f5:aa:36:63:0d:5d:54:e6:14:08:bf:09: e2:df:1e:9b:22:6e:c5:0f:c0:41:39:51:d8:ce:ee:a0:36:52: 1c:2b:d1:5a:dd:0c:59:d4:2a:c6:29:5f:8b:d5:12:fc:69:71: 48:b7:f0:2e:df:46:3e:20:29:5a:f1:de:0b:03:64:05:a0:d7: e4:0b:af:a8:36:69:c3:00:71:0e:5b:b4:9c:5a:46:40:50:b5: 32:59:5c:e4:9a:aa:72:13:11:dc:4a:5f:75:4f:6f:18:e9:51: 1f:97:a0:e3:5c:c4:1e:74:9a:62:17:aa:10:5d:a4:0a:45:53: f4:b9:5b:f0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9R0r29YfgZIupAUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk MzlmNTIxY2QtMzc4Ni00YzZiLTg2MjItZGM1OTVkY2U1MTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX5Un+36UnZhThinLAlrP29ePMjXv02JFI3b v+8aWiOhWhc6A6Jcd4lilz5+m5e4eINYLx3oHcRSmmomEf1MbB6aN8MoUc7z9Lpc z7D3AHBbYC2SPKpBRpvwc0eL1KWNhadeIuX7cNnCphGNbF01w49B3DYWDM3i9fl2 zZ8Niw7SK4HQrgIerjYhWgtgKE9OB26GhTFAoN7Ut5U15ooLVtyWDlxXmOV93+If qw6/b+/+TPOYB/GhnYqw7PMU3G6NLIJsNWXw4qXCrITVs97x2Zf5hYbQPCE9uk02 o0KGBoEFG6EBNJd3SCrUExRHL+nw4IVujL90H0di/CQ+mGvK2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDCO5a4ifF20PTg0frgp6pM9JlPjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTkxMTdhZGQtZmZiYi0z OTkxLWE2MTMtYzY4Mzk2MGExM2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAmfgAtyB7jNLkTLZDcQ/yygcE+mKttOUygBoAbHZeCiFIHabhYarM3 +Vhx2Yb1B499uUOYaEFpYXiPMYXu8TFS+uWpBGFGKg056TWUyftsHM9tbkJ16xW6 yO2XcpVLz6KbsJZD05NjTQpwBb9Hv0j8h3kNbgRHi2ofGvI7Qp76Na0BEnn1qjZj DV1U5hQIvwni3x6bIm7FD8BBOVHYzu6gNlIcK9Fa3QxZ1CrGKV+L1RL8aXFIt/Au 30Y+ICla8d4LA2QFoNfkC6+oNmnDAHEOW7ScWkZAULUyWVzkmqpyExHcSl91T28Y 6VEfl6DjXMQedJpiF6oQXaQKRVP0uVvw -----END CERTIFICATE-----Generated at Tue Oct 6 18:08:08 2026 by rpki-client