$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae9d93bd-57f0-3713-9db1-f7158d8cca61.roa File: ae9d93bd-57f0-3713-9db1-f7158d8cca61.roa (raw, json) Hash identifier: 1vp6OevCBdRweJc5niC44Om4lBcqCo66ZxN+MlY3DHU= Subject key identifier: 81:24:77:69:1B:83:A8:91:82:18:2C:A3:A6:0D:48:64:F5:8B:DD:DB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F51D2BFE5CA91403D6BD9BC80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae9d93bd-57f0-3713-9db1-f7158d8cca61.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 20362 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:bf:e5:ca:91:40:3d:6b:d9:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=95aae479-e5f0-457c-a699-48a40083209a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:46:29:a0:f8:ef:05:38:74:b2:63:51:17:eb: fd:db:8a:41:5d:eb:a7:8e:e2:4a:d8:80:c5:3e:81: b7:be:1d:b2:ce:d1:78:6b:13:22:f5:cd:2d:cf:3b: 0d:2e:64:d0:a3:80:3f:65:db:51:9e:ae:68:40:c6: 55:3e:89:90:72:41:c5:e7:23:cc:bb:cd:e4:f9:13: 9b:4f:de:4c:1f:51:3b:50:38:68:08:bb:97:81:28: 45:7c:29:de:aa:ed:ac:1a:68:a0:d7:6a:00:a2:4a: ac:2a:ba:22:33:62:21:17:0c:ea:43:0a:f0:55:d2: 39:f7:1a:e2:db:7b:66:91:b4:52:04:0c:20:cf:11: 0c:8a:2b:f0:a9:2d:4d:2a:68:07:b2:be:cc:08:c8: de:8b:89:e1:64:06:f8:a6:bd:fa:5d:ea:29:63:28: f6:d2:f4:02:a4:26:3d:d2:26:ab:44:24:87:c3:a9: f2:91:e4:6b:41:cd:33:5d:aa:9b:1a:0d:b6:1e:0d: 92:d5:bc:26:ca:9d:a1:20:0a:ad:5b:a0:b5:39:50: 13:65:77:09:84:63:d0:df:41:96:49:70:99:54:f8: f9:9e:5a:ca:46:bd:c6:39:f9:2b:ee:f6:4c:ed:c2: f2:39:45:56:21:83:c9:2f:81:42:aa:f7:a5:05:82: fc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:24:77:69:1B:83:A8:91:82:18:2C:A3:A6:0D:48:64:F5:8B:DD:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae9d93bd-57f0-3713-9db1-f7158d8cca61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:dc:78:18:20:77:ed:b7:54:98:74:e5:11:9b:b2:a7:fd:b3: 9b:f2:ed:28:49:07:6e:1f:40:87:95:36:07:56:9c:c4:37:aa: b5:ee:28:64:57:9b:e1:9d:ff:51:6e:a4:04:96:04:b7:95:ee: ca:03:76:3a:55:fd:a7:be:bd:31:09:ca:e2:cb:b2:88:f1:23: 9a:36:75:6e:9b:64:ec:ac:f3:40:2f:90:cf:55:ff:6a:0a:73: bd:26:3b:d9:bf:00:a9:95:7d:5c:35:5e:6c:3a:74:cf:a8:8a: 0c:7f:26:53:d2:74:1a:f1:30:61:fb:ea:12:f2:5b:e1:0d:18: ed:bb:a3:01:c1:1c:f0:59:36:f0:b4:f2:ac:34:46:a4:04:ff: 04:cb:79:6f:ed:60:fb:f5:c0:32:32:76:31:d0:cb:ea:d4:68: 0e:5c:22:5f:8a:be:df:4c:5e:b3:d8:ec:5f:3e:b7:8a:04:54: ea:77:13:1d:7f:ba:0c:2c:b0:d0:8f:76:3a:ca:75:2d:7c:67: 6c:97:66:53:b0:02:7c:05:b4:d4:b2:be:8d:64:fd:91:0a:75: 64:12:e1:22:a8:ac:89:76:fa:3d:56:85:ba:67:62:5a:f0:58: ad:ad:88:d9:4d:5b:d3:c0:c6:01:ed:b2:8e:28:5c:35:a6:9a: ee:42:f9:da -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9R0r/lypFAPWvZvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk OTVhYWU0NzktZTVmMC00NTdjLWE2OTktNDhhNDAwODMyMDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0YpoPjvBTh0smNRF+v924pBXeunjuJK2IDF PoG3vh2yztF4axMi9c0tzzsNLmTQo4A/ZdtRnq5oQMZVPomQckHF5yPMu83k+ROb T95MH1E7UDhoCLuXgShFfCnequ2sGmig12oAokqsKroiM2IhFwzqQwrwVdI59xri 23tmkbRSBAwgzxEMiivwqS1NKmgHsr7MCMjei4nhZAb4pr36XeopYyj20vQCpCY9 0iarRCSHw6nykeRrQc0zXaqbGg22Hg2S1bwmyp2hIAqtW6C1OVATZXcJhGPQ30GW SXCZVPj5nlrKRr3GOfkr7vZM7cLyOUVWIYPJL4FCqvelBYL81QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIEkd2kbg6iRghgso6YNSGT1i93bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWU5ZDkzYmQtNTdmMC0z NzEzLTlkYjEtZjcxNThkOGNjYTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAL3HgYIHftt1SYdOURm7Kn/bOb8u0oSQduH0CHlTYHVpzEN6q17ihk V5vhnf9RbqQElgS3le7KA3Y6Vf2nvr0xCcriy7KI8SOaNnVum2TsrPNAL5DPVf9q CnO9JjvZvwCplX1cNV5sOnTPqIoMfyZT0nQa8TBh++oS8lvhDRjtu6MBwRzwWTbw tPKsNEakBP8Ey3lv7WD79cAyMnYx0Mvq1GgOXCJfir7fTF6z2OxfPreKBFTqdxMd f7oMLLDQj3Y6ynUtfGdsl2ZTsAJ8BbTUsr6NZP2RCnVkEuEiqKyJdvo9VoW6Z2Ja 8FitrYjZTVvTwMYB7bKOKFw1ppruQvna -----END CERTIFICATE-----Generated at Wed Oct 7 13:15:18 2026 by rpki-client