$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac135fba-77a0-3cb6-80ee-8ea2ca218a4a.roa File: ac135fba-77a0-3cb6-80ee-8ea2ca218a4a.roa (raw, json) Hash identifier: GEyUmW3rFS0BtlhIVTJNzqoxlivpInmxYOdRTcuIfAI= Subject key identifier: 90:B7:FD:45:F0:59:07:2F:C8:1C:B0:A2:F7:B8:EA:49:FB:60:9B:FB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F51D2BD5AB726153060163F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac135fba-77a0-3cb6-80ee-8ea2ca218a4a.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 396551 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:bd:5a:b7:26:15:30:60:16:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=e09dcdc2-410e-4cf0-981b-d657e4189ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2c:13:34:3b:91:54:cf:70:0e:6e:44:48:50: be:60:ed:60:c8:93:01:f0:a4:ff:0a:80:f5:a1:33: 09:3f:df:6b:1a:37:08:4d:99:e4:06:f7:44:d4:51: 1d:70:a5:72:70:a9:59:60:10:d4:cd:bf:fc:86:87: eb:35:2d:2d:08:8e:99:62:1c:d1:b3:d5:2c:27:8e: 6a:7f:29:02:89:c1:5e:3d:ed:46:0a:b9:d0:fd:68: 8b:4d:a6:9b:41:79:39:ef:fd:44:86:b2:a3:38:ac: b4:82:f3:c7:59:47:58:f1:d4:de:84:9a:26:1e:c2: 4f:f1:51:20:be:28:40:5d:de:42:5e:52:56:f2:4e: 32:c8:ea:a7:b0:ef:d1:c6:8f:59:de:e1:dc:39:82: dc:cb:34:fb:56:0b:57:c9:17:08:09:96:1a:59:9a: 7f:96:a5:f0:ef:cf:57:c1:5d:70:70:da:f5:93:d0: af:f7:d2:1b:f4:93:48:70:fa:ab:19:3f:14:24:cc: a4:ce:62:e6:3f:52:c2:e1:9b:1a:b8:e3:c3:29:6a: 54:c6:0c:3a:11:93:95:a7:76:51:eb:83:99:49:f3: a2:8f:c8:35:54:98:0d:4b:d9:a4:5a:14:29:59:c3: 04:86:e1:6b:3a:50:20:7a:4f:2f:78:e4:39:fb:91: 59:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B7:FD:45:F0:59:07:2F:C8:1C:B0:A2:F7:B8:EA:49:FB:60:9B:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac135fba-77a0-3cb6-80ee-8ea2ca218a4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:6e:62:b3:18:fe:11:93:e6:64:22:d0:33:7f:82:04:20:38: a6:6b:72:63:77:e8:85:1b:8c:4a:25:e9:fd:bf:46:fc:74:a2: 2a:72:f0:30:df:a8:e5:7a:12:dd:36:82:b1:8d:14:56:95:d7: d2:9e:ea:b9:24:0c:fe:a0:ea:bd:9e:41:90:37:be:83:4f:5e: 07:3d:7c:b7:0a:8b:69:33:e7:c7:ba:21:78:dd:73:3a:38:4a: a5:38:d5:19:ac:dd:7f:2f:94:ea:f8:ca:af:71:0b:27:d2:ec: d1:48:5e:dd:91:fc:2b:5b:ca:b0:b4:2a:ec:67:80:f7:99:f9: 61:17:92:1a:2c:32:14:79:e4:cc:06:10:4f:cb:41:24:26:e1: 62:62:63:a9:80:d2:19:68:b4:cd:6c:cf:53:88:14:6e:fe:1b: fe:1a:9c:8b:4e:8b:9a:da:cd:9e:01:d8:aa:0b:05:ca:7f:24: bc:6f:7d:cd:36:4b:a4:13:f2:9d:70:5f:4f:65:65:58:2d:d7: bf:a5:c5:9a:8d:b1:fb:94:0d:50:29:e0:a7:46:0d:c3:eb:80: 25:c9:06:8e:5d:9e:11:75:19:72:1d:e1:7b:3a:c4:8b:cd:b2: 87:fd:8b:37:a3:69:7a:b7:b8:85:5e:a6:be:d2:c6:97:20:a9: dd:32:52:e3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9R0r1atyYVMGAWP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk ZTA5ZGNkYzItNDEwZS00Y2YwLTk4MWItZDY1N2U0MTg5YWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiwTNDuRVM9wDm5ESFC+YO1gyJMB8KT/CoD1 oTMJP99rGjcITZnkBvdE1FEdcKVycKlZYBDUzb/8hofrNS0tCI6ZYhzRs9UsJ45q fykCicFePe1GCrnQ/WiLTaabQXk57/1EhrKjOKy0gvPHWUdY8dTehJomHsJP8VEg vihAXd5CXlJW8k4yyOqnsO/Rxo9Z3uHcOYLcyzT7VgtXyRcICZYaWZp/lqXw789X wV1wcNr1k9Cv99Ib9JNIcPqrGT8UJMykzmLmP1LC4ZsauOPDKWpUxgw6EZOVp3ZR 64OZSfOij8g1VJgNS9mkWhQpWcMEhuFrOlAgek8veOQ5+5FZuQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJC3/UXwWQcvyBywove46kn7YJv7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWMxMzVmYmEtNzdhMC0z Y2I2LTgwZWUtOGVhMmNhMjE4YTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCMbmKzGP4Rk+ZkItAzf4IEIDima3Jjd+iFG4xKJen9v0b8dKIqcvAw 36jlehLdNoKxjRRWldfSnuq5JAz+oOq9nkGQN76DT14HPXy3CotpM+fHuiF43XM6 OEqlONUZrN1/L5Tq+MqvcQsn0uzRSF7dkfwrW8qwtCrsZ4D3mflhF5IaLDIUeeTM BhBPy0EkJuFiYmOpgNIZaLTNbM9TiBRu/hv+GpyLToua2s2eAdiqCwXKfyS8b33N NkukE/KdcF9PZWVYLde/pcWajbH7lA1QKeCnRg3D64AlyQaOXZ4RdRlyHeF7OsSL zbKH/Ys3o2l6t7iFXqa+0saXIKndMlLj -----END CERTIFICATE-----Generated at Tue Oct 6 14:29:57 2026 by rpki-client