$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da6da85c-d240-3bb3-8248-3a8de9713ce4.roa File: da6da85c-d240-3bb3-8248-3a8de9713ce4.roa (raw, json) Hash identifier: m4v9ypSIO/knEfB4tXkyrDD4O3DuZYVeRLYW1frb6ck= Subject key identifier: 37:2B:62:AA:5E:42:43:EF:DD:B6:06:D2:93:57:92:A6:D3:78:1F:3D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F506D4396AA1E9A5CDB1E6240 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da6da85c-d240-3bb3-8248-3a8de9713ce4.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 25485 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:43:96:aa:1e:9a:5c:db:1e:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=179da792-afcd-44ee-923d-d237354bab9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8e:a3:e5:3a:d4:b4:96:7f:f7:9b:fb:3f:8f: 98:af:f4:6d:4c:bd:04:13:15:a2:da:ce:df:bf:f2: 44:b1:46:0e:6d:54:a5:32:18:6c:b7:e7:ef:19:c0: 6d:21:a9:2e:96:68:b5:40:57:49:98:67:b5:41:b0: 56:ec:f0:1b:db:83:ab:92:01:6c:26:22:d2:43:93: c0:c6:71:e6:48:e2:53:a2:5e:42:0e:2e:47:65:29: fd:7f:84:47:74:86:9c:e2:70:2d:da:5a:cd:7f:66: 9c:d5:1e:c2:16:11:8e:44:fe:b5:b4:2d:a1:91:51: 52:d4:0a:0f:34:b0:dd:d9:57:f5:8e:7a:bd:df:91: dd:a2:82:34:dc:ad:55:3e:6a:6e:64:8b:22:f2:30: 3d:7e:0b:c7:be:bb:9a:ef:09:c1:29:fb:72:87:f8: 2c:f3:10:6f:84:20:79:d1:7a:5c:88:b3:ad:c9:bb: 1e:86:ac:d0:4b:df:b5:1a:2e:de:ae:1b:c7:d5:5c: 5d:e4:e3:f2:24:4a:b0:92:a7:1b:05:24:5f:69:19: c4:c0:c6:cf:f8:d9:63:20:79:90:a8:fc:de:46:02: 35:cb:3c:1a:e0:6a:6d:1e:a6:5d:95:60:65:df:1e: d6:bc:85:53:d6:87:a9:62:72:1c:16:66:38:87:b0: 09:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2B:62:AA:5E:42:43:EF:DD:B6:06:D2:93:57:92:A6:D3:78:1F:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da6da85c-d240-3bb3-8248-3a8de9713ce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:fd:32:a3:90:ef:e3:8c:77:96:f7:0e:cd:7a:71:ec:9a:17: 6b:ba:e9:a7:b1:2f:4f:96:91:ea:0a:df:55:8d:f0:46:95:be: c6:d7:6d:03:2d:32:a0:67:b8:30:03:78:a6:3b:c2:cc:66:38: fe:b0:29:c7:2e:99:8e:46:1f:08:2d:1c:6e:23:b1:25:c5:23: 0f:4f:b4:1c:ce:6e:11:1c:9d:a1:57:b9:7b:05:ba:e6:72:b8: a7:4d:bf:5d:9e:89:86:39:99:07:d5:9d:f3:0d:03:38:35:66: 93:08:ee:67:b0:ef:4e:5e:5a:f8:9a:36:84:5d:32:d5:79:96: 81:56:89:05:dc:bc:2f:87:31:56:f0:ac:e8:98:b8:92:00:b4: 0c:6e:fe:ff:ba:d1:7b:99:89:bf:86:ff:a2:35:cb:88:61:95: d3:9a:aa:80:ad:5f:f2:f3:df:b1:1d:85:08:62:1c:de:a6:19: a4:be:e7:d0:07:c1:fd:55:84:bf:7f:16:20:ea:31:7e:1b:2c: 9e:71:7e:5d:20:a4:76:0a:8d:7b:a4:a9:30:ab:8e:b5:57:6d: 58:8c:4b:0e:f1:ca:20:79:2d:06:a3:68:01:cc:27:f9:9d:09: 2a:10:7a:c3:9a:49:fb:a6:28:88:8d:ca:34:24:68:2f:39:4c: 62:17:b2:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUOWqh6aXNseYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk MTc5ZGE3OTItYWZjZC00NGVlLTkyM2QtZDIzNzM1NGJhYjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Y6j5TrUtJZ/95v7P4+Yr/RtTL0EExWi2s7f v/JEsUYObVSlMhhst+fvGcBtIakulmi1QFdJmGe1QbBW7PAb24OrkgFsJiLSQ5PA xnHmSOJTol5CDi5HZSn9f4RHdIac4nAt2lrNf2ac1R7CFhGORP61tC2hkVFS1AoP NLDd2Vf1jnq935HdooI03K1VPmpuZIsi8jA9fgvHvrua7wnBKftyh/gs8xBvhCB5 0XpciLOtybsehqzQS9+1Gi7erhvH1Vxd5OPyJEqwkqcbBSRfaRnEwMbP+NljIHmQ qPzeRgI1yzwa4GptHqZdlWBl3x7WvIVT1oepYnIcFmY4h7AJfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcrYqpeQkPv3bYG0pNXkqbTeB89MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGE2ZGE4NWMtZDI0MC0z YmIzLTgyNDgtM2E4ZGU5NzEzY2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHH9MqOQ7+OMd5b3Ds16ceyaF2u66aexL0+WkeoK31WN8EaVvsbXbQMt MqBnuDADeKY7wsxmOP6wKccumY5GHwgtHG4jsSXFIw9PtBzObhEcnaFXuXsFuuZy uKdNv12eiYY5mQfVnfMNAzg1ZpMI7mew705eWviaNoRdMtV5loFWiQXcvC+HMVbw rOiYuJIAtAxu/v+60XuZib+G/6I1y4hhldOaqoCtX/Lz37EdhQhiHN6mGaS+59AH wf1VhL9/FiDqMX4bLJ5xfl0gpHYKjXukqTCrjrVXbViMSw7xyiB5LQajaAHMJ/md CSoQesOaSfumKIiNyjQkaC85TGIXsrI= -----END CERTIFICATE-----Generated at Wed Oct 7 05:09:02 2026 by rpki-client