$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa File: af8f6829-25f2-342c-8e95-5e209025a010.roa (raw, json) Hash identifier: mKuaIN9NfCYPp+GxM057Cgo9AEMFd+371LFcZ9oPoUs= Subject key identifier: 54:89:22:8C:CB:12:DF:90:12:A7:72:31:17:37:4C:CD:9A:A3:80:6A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F51D2BCFB52203F5FB7466100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 20431 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:bc:fb:52:20:3f:5f:b7:46:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=e3ec1eee-0e21-4ede-8821-0634c2c83a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1f:76:88:b2:f1:d4:fa:1e:87:ad:37:ae:ff: cf:da:10:49:3f:bc:1f:c3:cd:5e:92:3c:79:36:b1: 9b:0f:30:99:54:bb:c5:da:7b:3e:8d:2f:8c:05:f9: 74:0a:47:1a:e1:50:ff:e9:8f:87:75:91:ed:fa:c2: 8c:44:90:11:f6:66:f2:fa:56:b0:dc:76:bf:ba:ea: 07:77:58:01:c6:8f:76:a1:9f:84:95:0c:44:aa:21: b7:72:1c:77:c7:6f:38:41:f6:c3:25:a1:c3:d0:bf: a0:92:49:e3:6a:dc:f1:67:e2:0e:68:cf:c1:63:00: de:67:3e:fa:27:34:9b:f5:93:8f:ae:e1:a5:5e:18: 9a:86:6a:7d:fa:76:56:4b:d7:63:2a:4e:22:cf:a8: bd:87:8b:c3:f4:e5:aa:ca:7d:98:e4:16:72:4c:41: 54:b1:2d:7e:15:6e:ec:12:f0:d6:66:20:70:7f:2c: c5:ff:94:64:aa:11:62:1d:2e:98:f6:6d:2f:bb:2d: 4d:e1:de:71:c6:60:15:91:4e:f5:f5:74:56:09:cf: 06:f4:c1:ae:66:a8:43:32:51:13:f3:c2:86:f4:b0: ee:0b:8f:3a:9e:94:85:34:53:3c:49:ae:40:5e:27: 67:07:17:3b:a7:3b:b3:21:f2:61:1a:e1:e7:74:ae: ef:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:89:22:8C:CB:12:DF:90:12:A7:72:31:17:37:4C:CD:9A:A3:80:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:d6:40:8c:05:36:a9:1a:22:8f:85:40:c5:35:c7:80:61:ed: 57:a9:b4:23:f6:41:d4:4d:bf:87:6c:83:58:0a:1b:93:21:82: 54:21:68:61:1d:5b:88:94:f5:92:4f:5d:39:4f:c0:d0:fc:cb: 41:3d:b7:91:d1:fb:9e:cb:a0:15:5c:7e:dc:ba:2b:c6:38:08: 8c:8c:72:c8:db:4d:f9:bb:42:51:aa:33:a6:fd:f9:2f:7d:f9: 65:68:f2:df:23:5f:ed:b6:08:a4:2e:e9:c7:eb:0c:46:31:ca: 5d:52:ac:f8:b6:a1:6e:bc:3f:d1:6f:dd:c6:4d:a5:7a:29:ce: 5d:15:7e:3b:93:b3:ed:f9:5f:2c:47:2f:89:1c:46:5e:ef:b9: e1:b9:ce:84:f0:9a:02:f9:36:7f:71:38:a1:5e:3f:f6:49:fd: ff:72:cb:e8:d6:03:5b:4b:ec:17:0b:c1:6b:ca:73:4a:a1:a4: eb:a6:2c:3c:5a:42:37:ec:52:ad:52:3b:8c:2e:c7:aa:b9:43: 4a:68:b7:a2:e2:fd:6e:3b:3f:04:1f:c6:8e:35:9e:4d:b1:aa: 5c:8a:d0:81:9c:59:07:eb:c5:fb:2b:53:3d:93:d8:24:e2:91: 6d:c6:ca:b8:92:d0:9f:fb:25:81:6d:70:08:94:f9:17:27:e7: ad:67:fd:a8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9R0rz7UiA/X7dGYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk ZTNlYzFlZWUtMGUyMS00ZWRlLTg4MjEtMDYzNGMyYzgzYTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR92iLLx1Poeh603rv/P2hBJP7wfw81ekjx5 NrGbDzCZVLvF2ns+jS+MBfl0Ckca4VD/6Y+HdZHt+sKMRJAR9mby+law3Ha/uuoH d1gBxo92oZ+ElQxEqiG3chx3x284QfbDJaHD0L+gkknjatzxZ+IOaM/BYwDeZz76 JzSb9ZOPruGlXhiahmp9+nZWS9djKk4iz6i9h4vD9OWqyn2Y5BZyTEFUsS1+FW7s EvDWZiBwfyzF/5RkqhFiHS6Y9m0vuy1N4d5xxmAVkU719XRWCc8G9MGuZqhDMlET 88KG9LDuC486npSFNFM8Sa5AXidnBxc7pzuzIfJhGuHndK7vhQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFSJIozLEt+QEqdyMRc3TM2ao4BqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWY4ZjY4MjktMjVmMi0z NDJjLThlOTUtNWUyMDkwMjVhMDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA21kCMBTapGiKPhUDFNceAYe1XqbQj9kHUTb+HbINYChuTIYJUIWhh HVuIlPWST105T8DQ/MtBPbeR0fuey6AVXH7cuivGOAiMjHLI2035u0JRqjOm/fkv ffllaPLfI1/ttgikLunH6wxGMcpdUqz4tqFuvD/Rb93GTaV6Kc5dFX47k7Pt+V8s Ry+JHEZe77nhuc6E8JoC+TZ/cTihXj/2Sf3/csvo1gNbS+wXC8FrynNKoaTrpiw8 WkI37FKtUjuMLsequUNKaLei4v1uOz8EH8aONZ5NsapcitCBnFkH68X7K1M9k9gk 4pFtxsq4ktCf+yWBbXAIlPkXJ+etZ/2o -----END CERTIFICATE-----Generated at Tue Oct 6 20:08:30 2026 by rpki-client