$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef87d8d5-7336-3cde-af35-6ca9e1a1a28b.roa File: ef87d8d5-7336-3cde-af35-6ca9e1a1a28b.roa (raw, json) Hash identifier: RPgp+4qMyqq/1MziNj/7NyzE24ZnRiZ5V59ad9jueuY= Subject key identifier: 84:96:40:BE:6A:30:73:18:CA:56:41:74:C8:B7:2A:EC:80:AE:82:60 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F506D655736E1C0A91D0BA920 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef87d8d5-7336-3cde-af35-6ca9e1a1a28b.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 396587 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:65:57:36:e1:c0:a9:1d:0b:a9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=911c3950-c916-487b-969a-2a18df320a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:fa:fa:16:1e:a7:cd:4e:1c:7c:69:31:c4:1c: 9b:60:d9:02:d1:9d:d5:1e:ae:c2:e0:6d:3c:c8:ce: 99:92:36:8a:94:92:2c:66:72:3d:d8:3a:36:7b:e4: d7:63:c3:45:13:b2:91:be:e6:7d:e8:32:56:4f:5c: 22:5b:e6:77:f2:d3:24:3a:0c:63:5e:e5:3c:f6:14: ef:e3:3a:94:ec:9d:f4:0e:9e:f6:83:ef:53:b6:c5: 2b:6c:ab:c2:93:fb:ae:3c:0c:84:33:41:ec:7b:9b: 35:f0:a4:16:ce:71:ea:b4:16:32:c0:13:a2:f9:77: f5:bc:0e:62:e1:a3:58:6d:97:eb:c1:c8:04:3f:55: 2e:66:7b:f0:24:ca:ef:db:d0:d2:f8:05:e4:8f:38: 48:6b:1a:4f:f0:96:e1:88:8f:f9:95:d3:7a:b2:e4: ba:db:54:28:24:a4:c1:f7:09:8f:0c:e0:13:63:9d: f9:ed:3f:53:a9:9f:c6:e4:21:c6:2e:81:c0:a9:8d: 80:b3:91:43:33:72:62:b2:5d:76:bc:9c:f3:b1:9f: 2e:6f:2a:4b:9b:8e:20:69:f4:ab:72:a2:48:d8:df: bd:99:a4:b0:16:76:26:2e:fd:cb:d8:cc:6c:b3:71: 9c:98:43:dd:00:71:66:b1:a1:35:d9:9e:4c:59:23: e6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:96:40:BE:6A:30:73:18:CA:56:41:74:C8:B7:2A:EC:80:AE:82:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef87d8d5-7336-3cde-af35-6ca9e1a1a28b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:9e:3a:95:b9:87:76:44:62:a9:5d:96:9d:05:5c:69:a7:f9: f7:b3:74:d2:00:c4:93:65:ca:5a:b2:0b:36:92:22:62:4b:f5: 3c:0b:2f:91:68:65:96:94:4c:1b:4f:ff:29:06:88:da:cb:20: 90:e6:7e:58:cb:b2:49:55:14:ad:bd:04:1a:e7:a2:a1:17:cb: 01:c7:6c:cc:7f:98:c7:31:fc:39:f8:db:15:4f:a1:be:84:27: 80:68:95:98:e9:ac:c4:ed:55:81:88:52:8b:15:5e:b5:89:1d: cd:b0:84:01:b8:70:29:5b:c6:88:22:08:d9:b9:28:82:77:e0: 30:fe:83:1d:9d:66:16:fb:9e:1b:29:2a:a7:75:52:e7:73:52: f8:f5:2c:85:08:fc:14:93:52:f4:94:49:87:13:a2:0e:d1:dd: 94:62:05:ab:27:2e:36:0c:1f:e7:89:6b:43:ef:92:7d:c2:4f: 10:2b:32:7c:39:ad:0b:a1:e9:ac:eb:d7:75:b8:4f:85:34:ae: 2a:18:af:d1:89:8b:2b:4d:24:37:f3:27:ee:94:2f:1e:4d:3b: dd:25:fd:90:c8:78:e4:ab:25:63:bc:3b:3c:37:23:c0:83:31: 5e:91:38:f8:d9:22:89:9b:e9:85:3d:18:8c:8d:30:78:0d:5a: e1:ea:3f:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWVXNuHAqR0LqSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk OTExYzM5NTAtYzkxNi00ODdiLTk2OWEtMmExOGRmMzIwYThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/fr6Fh6nzU4cfGkxxBybYNkC0Z3VHq7C4G08 yM6ZkjaKlJIsZnI92Do2e+TXY8NFE7KRvuZ96DJWT1wiW+Z38tMkOgxjXuU89hTv 4zqU7J30Dp72g+9TtsUrbKvCk/uuPAyEM0Hse5s18KQWznHqtBYywBOi+Xf1vA5i 4aNYbZfrwcgEP1UuZnvwJMrv29DS+AXkjzhIaxpP8JbhiI/5ldN6suS621QoJKTB 9wmPDOATY5357T9TqZ/G5CHGLoHAqY2As5FDM3Jisl12vJzzsZ8ubypLm44gafSr cqJI2N+9maSwFnYmLv3L2Mxss3GcmEPdAHFmsaE12Z5MWSPmeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISWQL5qMHMYylZBdMi3KuyAroJgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWY4N2Q4ZDUtNzMzNi0z Y2RlLWFmMzUtNmNhOWUxYTFhMjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABieOpW5h3ZEYqldlp0FXGmn+fezdNIAxJNlylqyCzaSImJL9TwLL5Fo ZZaUTBtP/ykGiNrLIJDmfljLsklVFK29BBrnoqEXywHHbMx/mMcx/Dn42xVPob6E J4BolZjprMTtVYGIUosVXrWJHc2whAG4cClbxogiCNm5KIJ34DD+gx2dZhb7nhsp Kqd1UudzUvj1LIUI/BSTUvSUSYcTog7R3ZRiBasnLjYMH+eJa0Pvkn3CTxArMnw5 rQuh6azr13W4T4U0rioYr9GJiytNJDfzJ+6ULx5NO90l/ZDIeOSrJWO8Ozw3I8CD MV6ROPjZIomb6YU9GIyNMHgNWuHqPyY= -----END CERTIFICATE-----Generated at Tue Oct 6 12:31:38 2026 by rpki-client