$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba1a1a16-ef0f-310f-8aef-e850123604ed.roa File: ba1a1a16-ef0f-310f-8aef-e850123604ed.roa (raw, json) Hash identifier: QMqkKl0Z5YfP7RJanH8JjIYhrRcAET8rT+rHEwV0oQo= Subject key identifier: CE:E5:BC:BF:48:D3:53:DB:49:69:61:C9:D6:E0:F5:0D:C0:E5:06:C7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F506D4C4A2C264AD123736580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba1a1a16-ef0f-310f-8aef-e850123604ed.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 396617 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:4c:4a:2c:26:4a:d1:23:73:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=8549c840-4b1a-494d-8bc3-1c0b3875ff12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e8:01:31:f2:77:7a:ab:19:1d:04:d1:f9:77: 47:f3:a7:6a:cf:6f:bf:8a:13:c5:2f:82:22:b9:12: b2:89:86:c7:a9:d8:df:36:8f:d3:9c:20:30:1f:e5: 5a:a8:43:10:15:90:3f:02:22:b1:63:d7:d1:76:05: a2:9a:85:32:be:af:6e:b4:d0:5e:53:34:86:22:68: de:e2:49:c9:51:38:58:de:36:41:68:ac:6b:90:e5: 76:ed:d0:8e:79:c2:68:94:d0:d8:e1:f3:84:67:2c: 48:6a:0b:0c:b2:32:d1:d5:e9:33:5a:99:92:6c:a6: 24:6c:af:17:f3:cd:67:54:f9:3c:11:f0:47:d5:74: f8:ef:4c:32:ad:e2:1f:8f:18:fb:f1:7f:95:7e:10: 5a:e7:ac:62:d7:ae:50:5f:1d:ce:82:f5:91:02:1c: 35:d6:20:f6:a8:88:c6:34:d4:11:6c:5c:9f:cf:bd: 0e:9d:df:78:27:4c:ce:0d:81:45:72:82:e9:66:92: 8c:c3:21:3d:f8:4a:d7:46:67:96:e7:5c:d2:3a:fa: ad:d1:52:1c:f2:f8:ca:2a:e2:70:a8:1d:42:8a:68: 89:b2:10:b3:ba:a8:c7:a1:9b:88:c3:31:ba:74:a2: 2e:92:b4:24:68:9c:a1:9c:eb:9f:49:04:68:32:0e: 04:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E5:BC:BF:48:D3:53:DB:49:69:61:C9:D6:E0:F5:0D:C0:E5:06:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba1a1a16-ef0f-310f-8aef-e850123604ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:07:b2:20:d3:b9:91:a2:a0:a1:97:f8:44:f5:b1:f6:73:fb: 9f:9b:a1:58:ea:c9:4e:bf:62:a4:d5:1c:52:84:f0:63:dd:d4: 37:4e:6e:f9:cf:3b:4f:9e:6f:14:ce:0c:bb:a7:01:5c:87:c4: 96:fb:98:52:80:12:8f:a3:95:2d:61:65:18:0b:79:dc:dd:07: 1c:37:8f:41:ff:42:b7:38:20:f2:90:e4:28:27:59:20:e6:1f: 68:ca:70:d9:12:58:db:1f:58:e4:8a:bb:71:b2:84:1e:8b:d7: 44:d2:15:06:43:fd:76:89:dc:26:a4:0c:3d:61:d9:3d:6b:80: 32:72:60:84:06:af:68:0c:00:37:39:e4:30:15:f2:80:c5:02: 40:b5:4d:90:b2:26:9e:35:50:3d:cc:b8:1f:18:ad:b2:57:d8: f2:88:00:74:69:e0:37:56:01:26:d1:20:45:c5:98:45:04:84: e0:4a:7d:bc:d6:3b:51:e3:da:bb:3b:59:ff:03:81:c5:50:44: 53:e4:7a:05:fa:72:47:c5:be:be:fb:8c:db:ee:30:ec:34:62: b1:39:a3:6e:a3:72:f4:62:6e:18:de:aa:a3:a3:00:b6:3a:e5: b7:04:77:8a:7a:31:00:bf:a4:ca:fc:d3:ea:79:cd:03:c3:09: e1:e7:3e:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUxKLCZK0SNzZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ODU0OWM4NDAtNGIxYS00OTRkLThiYzMtMWMwYjM4NzVmZjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+gBMfJ3eqsZHQTR+XdH86dqz2+/ihPFL4Ii uRKyiYbHqdjfNo/TnCAwH+VaqEMQFZA/AiKxY9fRdgWimoUyvq9utNBeUzSGImje 4knJUThY3jZBaKxrkOV27dCOecJolNDY4fOEZyxIagsMsjLR1ekzWpmSbKYkbK8X 881nVPk8EfBH1XT470wyreIfjxj78X+VfhBa56xi165QXx3OgvWRAhw11iD2qIjG NNQRbFyfz70Ond94J0zODYFFcoLpZpKMwyE9+ErXRmeW51zSOvqt0VIc8vjKKuJw qB1CimiJshCzuqjHoZuIwzG6dKIukrQkaJyhnOufSQRoMg4E3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7lvL9I01PbSWlhydbg9Q3A5QbHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmExYTFhMTYtZWYwZi0z MTBmLThhZWYtZTg1MDEyMzYwNGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0HsiDTuZGioKGX+ET1sfZz+5+boVjqyU6/YqTVHFKE8GPd1DdObvnP O0+ebxTODLunAVyHxJb7mFKAEo+jlS1hZRgLedzdBxw3j0H/Qrc4IPKQ5CgnWSDm H2jKcNkSWNsfWOSKu3GyhB6L10TSFQZD/XaJ3CakDD1h2T1rgDJyYIQGr2gMADc5 5DAV8oDFAkC1TZCyJp41UD3MuB8YrbJX2PKIAHRp4DdWASbRIEXFmEUEhOBKfbzW O1Hj2rs7Wf8DgcVQRFPkegX6ckfFvr77jNvuMOw0YrE5o26jcvRibhjeqqOjALY6 5bcEd4p6MQC/pMr80+p5zQPDCeHnPkc= -----END CERTIFICATE-----Generated at Wed Oct 7 11:19:21 2026 by rpki-client