$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d51efc8c-0e81-303a-8669-75bf3ad2e229.roa File: d51efc8c-0e81-303a-8669-75bf3ad2e229.roa (raw, json) Hash identifier: ITvzLmFl8yKvoKEhIGdU5OdMfy+ajfD2diV1KyWe+iw= Subject key identifier: 10:C0:0E:1F:14:1A:D9:74:11:C4:4E:41:8B:98:3F:DF:07:D8:7C:8D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F51D2BE1D592505E84B515400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d51efc8c-0e81-303a-8669-75bf3ad2e229.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 396560 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:be:1d:59:25:05:e8:4b:51:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=096e34ad-2c9e-4112-85db-4b0b7d89c6ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:20:a4:9f:b4:ba:a2:56:00:77:a2:05:3f:6e: fb:b5:bc:3d:ef:f1:d6:ca:61:ef:58:62:c2:25:2d: 5d:0d:28:ed:e6:f0:4a:d9:2e:8f:8b:f0:65:88:77: fc:6e:d3:13:3e:be:67:b6:66:07:49:dd:c1:e9:34: b2:40:9a:d3:fb:49:9a:8b:74:68:d9:1e:c9:ec:31: 74:8d:bb:04:80:c8:b9:69:6a:7c:fd:ed:95:aa:15: ac:12:e4:ca:47:49:e3:1e:7f:5c:a5:ab:2d:a9:66: fe:07:f7:2c:f8:f9:90:e9:dc:28:e5:6f:f6:35:8d: e6:d1:bc:eb:45:b3:cd:0c:27:dd:2b:ab:31:41:7c: ac:f3:2d:2d:c0:cb:8e:4d:d0:dc:1a:dd:dc:5b:9a: 68:39:01:5d:97:52:b6:8c:a4:c6:c3:86:8f:53:87: 1c:f1:c6:13:75:c0:41:5f:c9:21:6d:1e:71:4c:6f: 1a:48:54:7d:49:03:59:5d:e2:e1:31:3a:01:ff:0e: 60:5e:da:1b:2e:e0:38:0a:04:a2:ab:4d:63:eb:b5: 25:de:77:a9:74:7e:32:03:60:a9:9a:1b:7d:43:66: 07:11:09:ff:f0:aa:c1:1a:b8:28:26:12:bc:5a:05: a4:b7:b7:01:f7:bf:10:71:d6:d3:dc:05:23:39:57: 78:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C0:0E:1F:14:1A:D9:74:11:C4:4E:41:8B:98:3F:DF:07:D8:7C:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d51efc8c-0e81-303a-8669-75bf3ad2e229.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:1b:92:4f:cf:bd:1a:e9:71:3d:9c:48:ac:e2:36:31:76:ac: 75:32:cf:02:cf:fc:0b:e3:3f:4e:f3:08:d2:2f:6f:af:35:17: 9e:28:44:e5:e7:3e:84:e0:b1:63:29:23:07:ff:b2:9e:8d:4e: 4b:c2:13:d6:b7:4a:b0:87:50:ed:f5:a6:b5:af:4d:46:83:b6: fa:cd:04:74:39:08:34:13:52:a2:cc:18:ae:2a:03:34:43:9e: 80:5f:6a:12:a5:99:1d:f9:30:29:e9:aa:a2:60:ba:20:43:df: 5c:d5:ef:6d:73:b3:54:4c:fe:a5:72:9c:0c:6c:7f:4e:b4:bc: 42:fb:82:d7:66:84:bc:49:49:ea:18:cc:aa:57:a9:91:d4:05: 18:89:b1:eb:ff:93:bb:c8:6a:ce:18:4f:c6:9c:c0:c6:45:50: 18:24:d1:c3:11:a0:ad:6c:f2:bd:64:60:56:37:f5:6a:48:ee: 6e:1e:7d:8b:f7:b5:0a:bd:ec:93:87:24:75:ee:f0:ad:32:88: ce:79:2a:c6:93:46:13:a4:0b:9e:58:45:38:56:84:0e:0d:d3: dc:0a:68:dd:35:fa:d0:ff:3f:f6:d4:22:d8:af:f7:dd:cf:47: 8d:69:5c:2e:df:29:cc:c7:64:83:90:50:6b:cb:f7:ff:d7:27: 0b:65:50:d2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9R0r4dWSUF6EtRVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk MDk2ZTM0YWQtMmM5ZS00MTEyLTg1ZGItNGIwYjdkODljNmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCCkn7S6olYAd6IFP277tbw97/HWymHvWGLC JS1dDSjt5vBK2S6Pi/BliHf8btMTPr5ntmYHSd3B6TSyQJrT+0mai3Ro2R7J7DF0 jbsEgMi5aWp8/e2VqhWsEuTKR0njHn9cpastqWb+B/cs+PmQ6dwo5W/2NY3m0bzr RbPNDCfdK6sxQXys8y0twMuOTdDcGt3cW5poOQFdl1K2jKTGw4aPU4cc8cYTdcBB X8khbR5xTG8aSFR9SQNZXeLhMToB/w5gXtobLuA4CgSiq01j67Ul3nepdH4yA2Cp mht9Q2YHEQn/8KrBGrgoJhK8WgWkt7cB978QcdbT3AUjOVd4owIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBDADh8UGtl0EcROQYuYP98H2HyNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDUxZWZjOGMtMGU4MS0z MDNhLTg2NjktNzViZjNhZDJlMjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAGG5JPz70a6XE9nEis4jYxdqx1Ms8Cz/wL4z9O8wjSL2+vNReeKETl 5z6E4LFjKSMH/7KejU5LwhPWt0qwh1Dt9aa1r01Gg7b6zQR0OQg0E1KizBiuKgM0 Q56AX2oSpZkd+TAp6aqiYLogQ99c1e9tc7NUTP6lcpwMbH9OtLxC+4LXZoS8SUnq GMyqV6mR1AUYibHr/5O7yGrOGE/GnMDGRVAYJNHDEaCtbPK9ZGBWN/VqSO5uHn2L 97UKveyThyR17vCtMojOeSrGk0YTpAueWEU4VoQODdPcCmjdNfrQ/z/21CLYr/fd z0eNaVwu3ynMx2SDkFBry/f/1ycLZVDS -----END CERTIFICATE-----Generated at Tue Oct 6 15:35:52 2026 by rpki-client