$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de711909-cd03-3946-8e5c-b3a1fa2db960.roa File: de711909-cd03-3946-8e5c-b3a1fa2db960.roa (raw, json) Hash identifier: 2pdPIw4FcOB2f1Fgf4RH551zO3Ir1vsmfI0XhRcDnPo= Subject key identifier: 34:92:0B:21:0C:A0:F3:31:14:3B:A9:61:58:76:99:97:FC:D6:66:1A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F506D446B33F7475655ABDF80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de711909-cd03-3946-8e5c-b3a1fa2db960.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 396609 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:44:6b:33:f7:47:56:55:ab:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=586265b5-9b5b-4e81-abe4-b7a198331947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2f:8f:b9:2e:0c:a0:98:80:c3:30:66:a1:50: 83:27:d5:c6:a2:a0:87:26:16:6e:79:a3:56:de:f4: 60:24:23:e6:89:15:b5:b5:31:a6:5e:0d:e3:ad:ee: 94:e9:21:fc:f4:06:75:29:22:ee:19:91:44:34:55: 2e:7b:9c:79:1e:29:8c:02:21:1f:5d:13:9f:75:29: c9:9b:c8:a6:fc:ee:4e:f9:3a:5f:eb:be:8c:2a:14: 6e:e1:8a:d2:af:84:ee:68:71:80:23:1c:63:f0:8c: da:33:5c:d1:f5:64:6f:5d:3f:02:8c:ed:83:48:c9: a2:5c:c1:72:c5:39:cb:aa:6c:fc:28:b5:ac:eb:a0: 17:a7:0f:46:93:9d:f5:8c:fc:cb:56:87:ef:69:1b: 93:50:3b:11:1b:63:60:0c:06:f4:d9:e2:9b:08:7a: 28:8b:ee:71:ab:0d:b5:9b:60:3a:44:06:9b:a9:b8: b0:cf:1b:bd:95:ed:16:43:79:31:2a:7f:ea:bd:15: 69:d9:2e:8e:88:28:dd:dd:61:3f:58:41:46:28:81: a5:e7:b9:fb:fb:75:70:d0:82:df:9e:f9:eb:31:9a: bc:bb:88:9c:b9:3c:00:53:c9:dc:7e:5d:ef:f1:01: 58:90:38:83:50:c3:e5:b4:a6:2e:46:2c:e2:b3:5b: ca:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:92:0B:21:0C:A0:F3:31:14:3B:A9:61:58:76:99:97:FC:D6:66:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de711909-cd03-3946-8e5c-b3a1fa2db960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:69:b8:5b:2b:2a:13:91:cc:c8:57:4b:9e:74:bb:b3:4e:c6: 08:0a:46:79:36:26:eb:d5:c1:ef:e5:fc:4b:ef:5d:b5:13:17: e9:47:3c:ef:b5:09:c3:12:1a:73:dd:2a:8b:d5:b6:54:2c:68: 16:68:34:bb:9b:9c:02:d8:ac:8e:f3:0b:68:62:59:01:a5:6c: 90:3e:4b:3e:ab:bb:cb:a0:91:f4:37:b9:d7:4e:8a:aa:3b:85: 8b:c6:a2:9b:9c:2e:cd:01:78:38:ba:70:cd:6f:49:28:ec:f7: 5b:5a:7f:99:02:52:b5:89:26:3c:5b:0f:21:2b:0b:bf:ec:b5: 8d:dc:56:67:b8:7f:be:86:25:3d:4e:14:ab:de:fa:08:07:80: a3:84:f2:5e:4c:cb:6f:7c:d5:83:dd:09:8a:84:e3:9d:d3:e2: be:86:f5:c6:de:5e:cf:84:2c:17:f2:5e:7f:e7:8c:1c:69:10: 56:68:ab:04:7f:6f:45:d3:ae:1d:da:5e:fe:4e:1a:84:de:6a: 35:a2:4d:ac:f4:0d:14:e6:55:5b:c2:f1:88:00:66:82:26:08: e4:86:38:3c:76:22:a2:be:f2:bc:52:0e:50:e2:8a:96:b6:75: 59:87:6a:72:f4:fe:aa:e5:de:f0:bc:1b:65:ae:7f:9c:a8:c9: 54:c8:bf:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbURrM/dHVlWr34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk NTg2MjY1YjUtOWI1Yi00ZTgxLWFiZTQtYjdhMTk4MzMxOTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy+PuS4MoJiAwzBmoVCDJ9XGoqCHJhZueaNW 3vRgJCPmiRW1tTGmXg3jre6U6SH89AZ1KSLuGZFENFUue5x5HimMAiEfXROfdSnJ m8im/O5O+Tpf676MKhRu4YrSr4TuaHGAIxxj8IzaM1zR9WRvXT8CjO2DSMmiXMFy xTnLqmz8KLWs66AXpw9Gk531jPzLVofvaRuTUDsRG2NgDAb02eKbCHooi+5xqw21 m2A6RAabqbiwzxu9le0WQ3kxKn/qvRVp2S6OiCjd3WE/WEFGKIGl57n7+3Vw0ILf nvnrMZq8u4icuTwAU8ncfl3v8QFYkDiDUMPltKYuRizis1vKtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSSCyEMoPMxFDupYVh2mZf81mYaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGU3MTE5MDktY2QwMy0z OTQ2LThlNWMtYjNhMWZhMmRiOTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9puFsrKhORzMhXS550u7NOxggKRnk2JuvVwe/l/EvvXbUTF+lHPO+1 CcMSGnPdKovVtlQsaBZoNLubnALYrI7zC2hiWQGlbJA+Sz6ru8ugkfQ3uddOiqo7 hYvGopucLs0BeDi6cM1vSSjs91taf5kCUrWJJjxbDyErC7/stY3cVme4f76GJT1O FKve+ggHgKOE8l5My2981YPdCYqE453T4r6G9cbeXs+ELBfyXn/njBxpEFZoqwR/ b0XTrh3aXv5OGoTeajWiTaz0DRTmVVvC8YgAZoImCOSGODx2IqK+8rxSDlDiipa2 dVmHanL0/qrl3vC8G2Wuf5yoyVTIvx4= -----END CERTIFICATE-----Generated at Thu Oct 8 05:26:05 2026 by rpki-client