$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8dcd070-15e5-3fb5-b4fc-7416e5a5f7be.roa File: b8dcd070-15e5-3fb5-b4fc-7416e5a5f7be.roa (raw, json) Hash identifier: hS6oT9xVdjlYP0lsxQKc7cGsyy1Zwx2JkzumgtldXts= Subject key identifier: B1:14:D7:68:78:06:B5:C2:74:B9:FF:60:FC:B6:EC:7C:8A:B8:C8:87 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F506D6509B5DE71FF4C971880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8dcd070-15e5-3fb5-b4fc-7416e5a5f7be.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 397205 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:65:09:b5:de:71:ff:4c:97:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=c7d2047e-2a5e-4134-a5e5-0cd67d395314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:67:b6:75:9e:2b:93:4a:33:f3:c4:5b:00:da: a6:a8:a0:2d:bb:c5:9e:4c:b2:e7:3d:a6:8c:9e:1c: 59:6d:bb:b6:d3:2f:d7:e8:be:21:14:1b:1f:99:4c: 40:ed:6d:84:52:2c:43:ca:5e:60:7b:ea:40:26:79: 48:27:d4:1f:9e:a6:a4:2b:77:2c:1b:4e:ad:f8:64: 29:3f:c1:f3:b0:50:5b:ff:ed:9a:ed:7f:15:d4:b3: 24:1d:11:91:e7:49:c2:1d:35:5b:34:2b:32:e5:6f: 0d:62:d0:71:fd:ca:03:9e:87:14:04:17:3e:9c:18: c8:df:17:80:ee:b8:af:7d:5e:21:8f:a9:61:6d:ec: 4a:66:ec:f8:f4:81:41:0f:a3:d6:b9:41:95:fa:de: 71:6b:0f:73:2d:9b:35:04:67:08:c0:06:82:f1:2c: 75:a9:22:41:08:66:ab:ba:5c:8e:f2:f7:13:16:8b: 58:02:0c:4a:22:14:b8:d8:8d:dd:19:5e:5d:7e:73: a0:bf:5f:00:91:6a:da:ee:47:c2:f3:88:7a:49:f2: c7:ec:09:87:d4:23:84:cb:eb:58:e8:97:ae:6f:11: 96:8b:29:23:6e:45:31:a7:b3:50:b2:76:38:e6:ba: b5:75:de:d3:77:b1:ce:e9:a2:f3:13:7c:49:fb:1e: 7b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:14:D7:68:78:06:B5:C2:74:B9:FF:60:FC:B6:EC:7C:8A:B8:C8:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8dcd070-15e5-3fb5-b4fc-7416e5a5f7be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c9:25:4c:e5:b0:74:0b:6c:3a:74:52:2b:9f:5e:a2:31:2c: 94:25:b9:48:68:cf:d2:8c:06:78:d0:52:79:de:a7:b8:e0:7c: 6a:2c:1e:04:89:f4:27:45:68:c0:e3:8b:29:f4:0e:ee:ef:00: 7c:3a:e3:71:10:1c:cd:8f:30:94:cb:59:0c:55:c9:f1:ea:ef: 40:1c:c7:ac:a7:85:2a:1e:b5:c2:59:c2:a0:3b:43:12:55:1d: b0:12:ca:4d:0a:9b:a5:d4:33:61:f9:95:cf:b7:c4:8f:d2:5e: 5e:9c:b9:68:66:a8:97:b1:62:5b:61:05:97:d4:ea:9d:0a:39: 81:c3:f5:7f:58:a0:a1:17:4f:f6:b3:4e:f1:d3:90:20:51:9d: a3:74:1f:95:5e:4f:1e:8e:1c:66:43:c1:75:8d:01:de:16:86: 81:83:82:cd:1a:c2:94:f8:0e:10:1f:b7:7c:e5:86:37:29:9a: e0:4b:9f:b5:9c:5f:89:19:13:98:8f:a1:4e:c1:fd:37:77:c1: 33:5e:c7:97:9a:a3:af:80:cb:3d:93:17:df:ed:8b:0d:6f:a7: 9d:da:d3:68:7e:b3:d6:3f:6d:6b:c6:e9:59:9b:53:62:8c:33: 19:c8:28:14:bf:48:41:d9:2c:c5:54:70:92:55:2f:87:30:35: 05:46:e7:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWUJtd5x/0yXGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk YzdkMjA0N2UtMmE1ZS00MTM0LWE1ZTUtMGNkNjdkMzk1MzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGe2dZ4rk0oz88RbANqmqKAtu8WeTLLnPaaM nhxZbbu20y/X6L4hFBsfmUxA7W2EUixDyl5ge+pAJnlIJ9QfnqakK3csG06t+GQp P8HzsFBb/+2a7X8V1LMkHRGR50nCHTVbNCsy5W8NYtBx/coDnocUBBc+nBjI3xeA 7rivfV4hj6lhbexKZuz49IFBD6PWuUGV+t5xaw9zLZs1BGcIwAaC8Sx1qSJBCGar ulyO8vcTFotYAgxKIhS42I3dGV5dfnOgv18AkWra7kfC84h6SfLH7AmH1COEy+tY 6JeubxGWiykjbkUxp7NQsnY45rq1dd7Td7HO6aLzE3xJ+x57qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEU12h4BrXCdLn/YPy27HyKuMiHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjhkY2QwNzAtMTVlNS0z ZmI1LWI0ZmMtNzQxNmU1YTVmN2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzJJUzlsHQLbDp0UiufXqIxLJQluUhoz9KMBnjQUnnep7jgfGosHgSJ 9CdFaMDjiyn0Du7vAHw643EQHM2PMJTLWQxVyfHq70Acx6ynhSoetcJZwqA7QxJV HbASyk0Km6XUM2H5lc+3xI/SXl6cuWhmqJexYlthBZfU6p0KOYHD9X9YoKEXT/az TvHTkCBRnaN0H5VeTx6OHGZDwXWNAd4WhoGDgs0awpT4DhAft3zlhjcpmuBLn7Wc X4kZE5iPoU7B/Td3wTNex5eao6+Ayz2TF9/tiw1vp53a02h+s9Y/bWvG6VmbU2KM MxnIKBS/SEHZLMVUcJJVL4cwNQVG5+M= -----END CERTIFICATE-----Generated at Tue Oct 6 15:59:54 2026 by rpki-client