$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caf08744-316a-354c-bc78-972b8b320c08.roa File: caf08744-316a-354c-bc78-972b8b320c08.roa (raw, json) Hash identifier: 8QirkUALK8/k7OJsRePQS2HFbQhUH6Uu0XPqBCb1WNk= Subject key identifier: E5:5C:70:A2:A2:87:5C:84:19:65:E6:5A:BC:BC:F6:C2:84:12:E2:FF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F506D4BD034A71E884A692300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caf08744-316a-354c-bc78-972b8b320c08.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 396597 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:4b:d0:34:a7:1e:88:4a:69:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=20815a5a-b76b-4a9b-964e-ce87e8d862d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:56:7e:96:ce:71:3e:3b:c4:3e:09:9b:1f:e3: 32:06:e3:54:59:ff:5c:3d:7b:cd:88:4e:60:28:a9: 23:7c:f4:7d:e0:2e:6f:47:2c:39:a8:f2:94:36:67: 37:43:d8:e6:a0:94:97:8f:15:b1:a6:8d:41:ad:00: 12:39:14:52:bf:26:5f:ff:dd:57:7d:64:7d:cf:13: 6e:44:0d:05:39:da:2e:7c:b3:e9:c9:29:6f:8a:1f: 85:13:c3:05:4b:9e:81:62:38:bd:57:25:bb:55:6d: 52:9b:1a:55:9c:ae:e2:31:2a:64:22:95:19:e6:db: c4:2c:ac:52:0c:99:0d:6a:c1:16:9d:e6:67:05:cf: 2e:8e:ab:f3:31:5b:f7:6e:32:0d:e8:75:0e:b8:81: a6:84:db:5a:c9:c8:9c:fb:94:ff:0f:66:cd:3e:d2: 0a:7f:92:11:1f:31:92:d1:68:af:37:b8:df:1e:27: 72:dc:7c:f8:fc:9f:02:76:d3:c7:13:44:56:69:cb: cd:3f:40:e1:03:91:eb:73:93:71:f0:cc:02:64:1f: 72:17:2f:1f:a8:28:86:84:dc:cd:4e:03:38:8f:87: 01:e0:a8:dd:32:0f:1b:4a:00:a5:f5:fe:1f:16:9a: df:c2:c9:20:fe:0e:af:30:0a:48:08:ae:13:c3:62: 66:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:5C:70:A2:A2:87:5C:84:19:65:E6:5A:BC:BC:F6:C2:84:12:E2:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caf08744-316a-354c-bc78-972b8b320c08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c3:4b:fc:f7:de:df:64:b0:78:b3:32:de:8e:aa:ac:9b:6d: db:21:b1:82:bd:d3:ef:49:51:8c:8c:47:e1:2c:31:d7:da:28: 8b:9d:7a:42:e1:52:43:09:a9:7a:69:66:5e:8b:b3:2c:2d:08: e5:c0:d0:34:1b:60:d5:9d:55:f8:d6:a2:34:8d:58:ac:b7:b1: 53:dc:e8:2a:c0:87:d4:2d:e8:e3:0d:f5:69:28:98:27:a7:d9: f8:f0:7b:78:bf:d8:a5:7c:de:93:b1:aa:29:2f:db:b6:95:10: 19:35:90:7f:96:6c:00:40:c2:c8:3a:8f:01:46:75:90:a0:ed: d1:51:32:0d:f2:ac:36:97:8f:26:53:f5:14:3b:92:bd:ee:0d: 6f:b4:3d:7b:ca:9a:a6:19:83:1f:90:e1:c6:49:97:16:72:25: 89:c8:98:1a:7d:3d:e9:dc:22:16:77:2c:8d:ce:c8:5d:58:d6: 04:54:b4:e1:9b:fd:90:22:30:36:c0:f2:97:5f:73:fe:94:3a: 30:97:19:96:92:b0:dd:7a:67:fb:c9:62:14:1f:48:79:9b:5e: 05:2d:90:6c:91:95:3e:3f:25:6f:4e:6b:45:fc:58:11:84:73: 89:b1:98:86:bd:cd:c9:27:da:cc:28:a8:da:b1:a9:d9:38:57: 5b:f5:51:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUvQNKceiEppIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk MjA4MTVhNWEtYjc2Yi00YTliLTk2NGUtY2U4N2U4ZDg2MmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVZ+ls5xPjvEPgmbH+MyBuNUWf9cPXvNiE5g KKkjfPR94C5vRyw5qPKUNmc3Q9jmoJSXjxWxpo1BrQASORRSvyZf/91XfWR9zxNu RA0FOdoufLPpySlvih+FE8MFS56BYji9VyW7VW1SmxpVnK7iMSpkIpUZ5tvELKxS DJkNasEWneZnBc8ujqvzMVv3bjIN6HUOuIGmhNtaycic+5T/D2bNPtIKf5IRHzGS 0WivN7jfHidy3Hz4/J8CdtPHE0RWacvNP0DhA5Hrc5Nx8MwCZB9yFy8fqCiGhNzN TgM4j4cB4KjdMg8bSgCl9f4fFprfwskg/g6vMApICK4Tw2JmNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVccKKih1yEGWXmWry89sKEEuL/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2FmMDg3NDQtMzE2YS0z NTRjLWJjNzgtOTcyYjhiMzIwYzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPDS/z33t9ksHizMt6OqqybbdshsYK90+9JUYyMR+EsMdfaKIudekLh UkMJqXppZl6LsywtCOXA0DQbYNWdVfjWojSNWKy3sVPc6CrAh9Qt6OMN9WkomCen 2fjwe3i/2KV83pOxqikv27aVEBk1kH+WbABAwsg6jwFGdZCg7dFRMg3yrDaXjyZT 9RQ7kr3uDW+0PXvKmqYZgx+Q4cZJlxZyJYnImBp9PencIhZ3LI3OyF1Y1gRUtOGb /ZAiMDbA8pdfc/6UOjCXGZaSsN16Z/vJYhQfSHmbXgUtkGyRlT4/JW9Oa0X8WBGE c4mxmIa9zckn2swoqNqxqdk4V1v1Ue0= -----END CERTIFICATE-----Generated at Wed Oct 7 02:43:58 2026 by rpki-client