$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa File: cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa (raw, json) Hash identifier: rQ7XQOWfLPgnCtS1ycYURFajiORnIllOReq3Dk2Ddbk= Subject key identifier: 3C:A0:47:2C:C0:98:31:28:9E:15:0D:70:32:4A:E4:47:4C:D3:52:64 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F51D2BDF871084F21FC309730 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 397204 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:bd:f8:71:08:4f:21:fc:30:97:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=1eb853b5-449b-4d65-b811-1f91ac6d4e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9e:23:c1:d0:9d:89:ee:6d:a9:37:90:42:c6: 73:65:2c:ed:b0:9a:38:13:0f:63:5e:24:8d:96:80: 6b:38:84:2c:a1:7c:94:5b:75:f3:5c:e6:e2:72:c5: c3:ac:79:2d:77:e3:70:10:9a:d9:d6:ec:09:c4:3d: a5:ef:11:e4:7b:87:6c:74:ca:0a:03:74:dd:2c:23: c7:7f:ab:97:80:29:0b:ff:a7:de:18:80:ee:2f:5f: 7c:19:6d:1d:98:7f:d2:c5:83:b3:4d:d1:43:5c:25: 59:43:44:4b:4c:5c:ae:d5:40:00:91:88:1b:2e:bb: 86:05:15:8c:7b:2f:44:e7:d0:89:a1:e1:10:ab:aa: c5:1c:cf:23:99:d6:5d:c9:0b:0b:df:c4:b7:fe:3e: fc:04:98:f7:8b:9a:02:08:b9:05:51:21:d9:bd:4a: 76:ed:dd:6d:aa:17:e9:9d:fd:e6:ef:71:64:e2:a4: 1e:5a:b5:5c:66:ba:70:12:25:4e:2e:be:ce:c8:6a: 82:b8:ff:9d:be:2e:30:e2:60:32:4b:bc:7e:b0:58: 79:e7:28:f1:8a:1c:28:5a:51:fd:82:d9:34:c0:f7: 6c:97:57:b9:c3:a2:34:fd:e6:40:fb:a4:29:2e:20: 90:61:7e:10:c1:d9:7d:ae:db:33:c9:2a:69:b3:d9: e3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A0:47:2C:C0:98:31:28:9E:15:0D:70:32:4A:E4:47:4C:D3:52:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ed:22:5b:8b:03:8c:d4:fb:d5:c6:45:cb:b7:5d:78:a0:48: e0:69:b1:9d:a4:b2:1d:e0:13:c2:87:4c:ef:63:4d:e5:cc:e6: e0:a6:73:d9:af:5e:dc:b9:aa:8b:93:84:39:28:88:7d:8c:6e: 54:1f:82:68:8f:c7:85:a5:02:f4:3f:38:52:7f:84:69:a5:91: f6:06:bd:18:82:e5:19:b5:9d:1f:f0:9a:1f:9f:72:63:94:94: 18:64:f9:9c:05:10:95:e2:9d:45:ab:20:bf:95:08:c3:2f:94: fc:b2:d3:b6:ff:24:ec:65:6b:52:f2:fb:1a:dd:15:ec:16:14: 1d:86:8d:4d:30:b9:5b:4f:e6:cd:e7:a3:a7:e3:71:7e:ec:c7: a6:16:d0:2f:b1:cb:6f:93:36:04:18:e1:ec:f6:4a:2f:a8:3c: 56:b3:42:6c:ec:48:e9:62:7a:68:8c:eb:e7:71:f8:9e:b9:34: 6b:b2:87:06:76:33:93:e9:53:1f:76:26:64:a9:29:1c:40:19: 9e:70:d1:12:55:46:8c:64:da:74:87:35:c4:d7:c0:12:31:cc: 71:b0:71:22:c4:f6:57:69:dc:3a:15:ad:86:38:91:64:80:8c: d7:8e:69:42:31:8f:94:5a:25:e0:c1:87:08:df:b0:12:f1:54: 9a:e9:d3:f7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9R0r34cQhPIfwwlzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk MWViODUzYjUtNDQ5Yi00ZDY1LWI4MTEtMWY5MWFjNmQ0ZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo54jwdCdie5tqTeQQsZzZSztsJo4Ew9jXiSN loBrOIQsoXyUW3XzXObicsXDrHktd+NwEJrZ1uwJxD2l7xHke4dsdMoKA3TdLCPH f6uXgCkL/6feGIDuL198GW0dmH/SxYOzTdFDXCVZQ0RLTFyu1UAAkYgbLruGBRWM ey9E59CJoeEQq6rFHM8jmdZdyQsL38S3/j78BJj3i5oCCLkFUSHZvUp27d1tqhfp nf3m73Fk4qQeWrVcZrpwEiVOLr7OyGqCuP+dvi4w4mAyS7x+sFh55yjxihwoWlH9 gtk0wPdsl1e5w6I0/eZA+6QpLiCQYX4Qwdl9rtszySpps9njgwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDygRyzAmDEonhUNcDJK5EdM01JkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2YxYzhhMGEtOTFkOS0z ODVjLTk0YzYtMjk1ODJiNGYzNGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBe7SJbiwOM1PvVxkXLt114oEjgabGdpLId4BPCh0zvY03lzObgpnPZ r17cuaqLk4Q5KIh9jG5UH4Joj8eFpQL0PzhSf4RppZH2Br0YguUZtZ0f8Jofn3Jj lJQYZPmcBRCV4p1FqyC/lQjDL5T8stO2/yTsZWtS8vsa3RXsFhQdho1NMLlbT+bN 56On43F+7MemFtAvsctvkzYEGOHs9kovqDxWs0Js7EjpYnpojOvncfieuTRrsocG djOT6VMfdiZkqSkcQBmecNESVUaMZNp0hzXE18ASMcxxsHEixPZXadw6Fa2GOJFk gIzXjmlCMY+UWiXgwYcI37AS8VSa6dP3 -----END CERTIFICATE-----Generated at Tue Oct 6 14:31:24 2026 by rpki-client