$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b313aef3-68e7-3ec0-a977-f3576f2ee078.roa File: b313aef3-68e7-3ec0-a977-f3576f2ee078.roa (raw, json) Hash identifier: kGT+Grd4TN65+luWl8O3qGYSgGSlvCZkjseIw2IYASU= Subject key identifier: 98:45:46:5C:9B:80:FD:50:08:0D:D0:9A:60:44:DE:DF:82:3B:23:D0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F51D2BE65F7F68F666E1BDA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b313aef3-68e7-3ec0-a977-f3576f2ee078.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 397203 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:be:65:f7:f6:8f:66:6e:1b:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=4a769744-b579-4b47-a06b-903588b5b451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cc:54:95:fa:3b:44:2d:6a:c8:19:ba:03:f9: 72:20:ff:dc:d5:f6:63:6f:c7:aa:5c:b7:56:24:c9: 53:f5:d2:5b:84:79:15:66:f1:e6:55:90:44:6a:42: 15:e7:e7:e6:ac:1c:6e:d8:ca:dc:b2:07:a4:d9:d7: 3a:18:c9:f6:ab:48:5f:7f:2f:da:c6:2d:cd:83:7f: c1:bb:70:f3:f6:87:99:6a:33:fa:c8:72:49:0d:e5: 33:e0:4d:c5:8d:6d:be:bf:32:2e:b7:98:4e:8d:bd: 96:7d:98:8b:c0:11:97:2f:c3:b3:a4:40:d3:68:8b: 64:f9:a4:4b:60:0d:f3:cd:2c:92:c1:55:3c:d9:7d: 29:21:dd:96:c5:ba:45:a6:57:37:35:8a:20:33:92: 17:95:95:b2:2e:0d:aa:92:0f:1c:e6:a5:a0:3e:7b: 89:88:84:57:01:b6:ef:07:30:e0:52:6d:dc:76:74: 6a:7a:33:d0:01:9a:b6:2a:53:2a:96:c3:62:9b:6b: bf:93:b9:28:61:b4:bd:19:e0:42:56:38:3e:76:33: d9:47:60:79:ea:77:d8:ec:eb:28:81:3e:40:23:13: 30:b8:2b:c8:9b:15:31:1e:1e:30:29:45:ec:ef:cf: 64:d1:6f:b8:d7:e4:f9:13:47:30:82:28:83:2e:f2: c1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:45:46:5C:9B:80:FD:50:08:0D:D0:9A:60:44:DE:DF:82:3B:23:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b313aef3-68e7-3ec0-a977-f3576f2ee078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:6f:a6:9d:2d:31:5d:50:71:cb:34:67:4e:27:8a:08:dc:e3: 2b:03:9d:ab:5d:fa:46:70:9b:9f:1e:62:4b:86:f9:a7:ba:1a: 88:38:54:d9:18:6a:3d:51:3d:67:04:cc:3c:75:22:ad:64:be: 54:7e:a6:5c:6a:5e:8f:23:4e:cb:55:16:64:ea:42:9b:c3:2d: 39:fb:58:f5:cb:20:e1:0f:ad:14:34:1e:9f:7b:9f:0c:b7:46: e1:a6:10:dc:71:ab:4e:ba:bc:8c:07:df:d7:e1:9c:d5:d4:47: 93:de:77:f4:c1:ce:1a:70:e0:e6:63:73:65:47:3b:b4:e3:04: 9a:cc:94:77:bd:07:a9:59:c7:8b:8b:98:73:5a:fc:e6:93:4e: 23:1b:8f:ae:40:2e:c0:97:17:78:de:b1:cb:02:9c:ec:3e:3d: 01:ac:d1:f8:67:51:ab:42:4f:d5:8d:37:69:5f:a0:aa:d8:8d: 8f:c2:9a:14:70:05:36:76:b0:05:27:31:a9:91:39:f2:6f:60: 98:5c:af:ed:73:ff:8a:92:4a:02:8f:b1:6d:ab:8e:d5:9d:03: ad:b6:ee:89:95:7a:a2:07:a1:91:ad:da:82:0e:04:75:47:74: 02:93:6b:7c:59:0b:aa:74:a7:b1:fb:bb:76:c8:b9:96:d1:69: ad:10:3a:48 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9R0r5l9/aPZm4b2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk NGE3Njk3NDQtYjU3OS00YjQ3LWEwNmItOTAzNTg4YjViNDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsxUlfo7RC1qyBm6A/lyIP/c1fZjb8eqXLdW JMlT9dJbhHkVZvHmVZBEakIV5+fmrBxu2Mrcsgek2dc6GMn2q0hffy/axi3Ng3/B u3Dz9oeZajP6yHJJDeUz4E3FjW2+vzIut5hOjb2WfZiLwBGXL8OzpEDTaItk+aRL YA3zzSySwVU82X0pId2WxbpFplc3NYogM5IXlZWyLg2qkg8c5qWgPnuJiIRXAbbv BzDgUm3cdnRqejPQAZq2KlMqlsNim2u/k7koYbS9GeBCVjg+djPZR2B56nfY7Oso gT5AIxMwuCvImxUxHh4wKUXs789k0W+41+T5E0cwgiiDLvLB+wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJhFRlybgP1QCA3QmmBE3t+COyPQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjMxM2FlZjMtNjhlNy0z ZWMwLWE5NzctZjM1NzZmMmVlMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAib6adLTFdUHHLNGdOJ4oI3OMrA52rXfpGcJufHmJLhvmnuhqIOFTZ GGo9UT1nBMw8dSKtZL5UfqZcal6PI07LVRZk6kKbwy05+1j1yyDhD60UNB6fe58M t0bhphDccatOuryMB9/X4ZzV1EeT3nf0wc4acODmY3NlRzu04wSazJR3vQepWceL i5hzWvzmk04jG4+uQC7Alxd43rHLApzsPj0BrNH4Z1GrQk/VjTdpX6Cq2I2PwpoU cAU2drAFJzGpkTnyb2CYXK/tc/+KkkoCj7Ftq47VnQOttu6JlXqiB6GRrdqCDgR1 R3QCk2t8WQuqdKex+7t2yLmW0WmtEDpI -----END CERTIFICATE-----Generated at Tue Oct 6 15:07:28 2026 by rpki-client