$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa41c3e6-898a-3313-a156-1d95e18083a0.roa File: fa41c3e6-898a-3313-a156-1d95e18083a0.roa (raw, json) Hash identifier: E/RW6yFJV3UZsx0y4C+Ctl76zs/izPAuCZVkX6FOYu0= Subject key identifier: D9:40:0C:11:EE:CE:5E:25:BE:81:66:E0:84:9F:B4:8C:D1:27:11:8E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F51D2C013D6AEE3B8922862E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa41c3e6-898a-3313-a156-1d95e18083a0.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 36627 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:c0:13:d6:ae:e3:b8:92:28:62:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=dc0d65ac-9c90-474e-8e5b-3a29437e53d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:22:c7:25:ed:9d:94:43:d0:57:2d:5c:21:a1: 1f:f5:3d:53:80:c1:08:9b:02:14:05:3e:9f:b3:ff: fa:78:f2:de:35:4b:d4:7c:e3:e2:10:34:36:52:5c: a8:3f:51:9a:4d:b2:34:1c:c8:75:89:e1:fa:3c:cb: b3:e2:d1:a0:dc:8a:5f:a5:e8:9f:e1:2d:e0:96:0d: 64:53:5b:bf:b0:da:64:d9:59:72:5f:84:06:fe:17: 14:8d:74:72:56:bd:23:e8:00:d7:e0:ca:91:d2:e0: b6:a4:4a:74:95:8a:3e:6e:81:e9:6a:c4:8f:a5:66: 6f:33:a4:9e:aa:56:01:20:42:cf:90:a8:98:29:da: ca:49:ef:7d:b1:f8:0c:58:13:53:c3:ce:29:1f:b6: c6:82:ca:7c:27:40:58:55:8d:5a:c9:90:51:4a:50: 2e:70:23:c5:7d:f9:41:86:c8:c0:ce:31:5a:d5:32: 6d:ef:0e:5f:4f:01:2b:14:82:90:78:e8:4f:ab:6d: 1f:9b:3c:c0:92:e1:e2:04:5a:c5:32:4b:3e:72:96: df:82:6c:95:c2:ed:b8:44:3b:72:a0:47:c2:0e:83: 51:e2:b6:4d:80:81:86:26:08:a3:75:d2:09:64:5b: ae:8a:35:79:e6:6b:c7:66:55:f0:23:b2:5d:c5:4b: 18:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:40:0C:11:EE:CE:5E:25:BE:81:66:E0:84:9F:B4:8C:D1:27:11:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa41c3e6-898a-3313-a156-1d95e18083a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:47:39:b1:33:b4:2b:68:66:20:c6:0a:f3:8c:f3:f1:79:fe: 58:78:2e:41:c6:d7:49:f7:f3:2d:b1:02:6f:6c:f1:f6:ee:26: b6:0a:ef:07:e5:07:f2:ee:12:18:32:0d:e4:16:b2:2d:19:92: 68:d4:4d:c6:88:9a:58:c6:dd:5d:ec:ab:ad:21:8e:e8:e0:a7: da:6a:36:cf:cd:38:c8:88:17:8e:47:6c:f0:45:5c:9b:1a:c1: 26:04:cf:17:9c:f1:44:5c:a1:2c:ce:c0:d8:7e:66:e3:9b:26: 96:85:95:39:7c:67:96:a3:fb:b5:5e:ed:0d:48:d9:67:55:e9: c0:ac:0d:7c:f6:a9:50:41:fc:f2:81:aa:82:07:28:b7:64:37: 43:2a:3a:00:c0:92:a9:62:2b:7f:67:6b:d3:60:37:ec:29:a8: ab:e2:5e:63:9b:46:e4:f5:c3:3d:28:66:48:70:4c:3e:34:ed: ae:bf:30:da:7d:5b:fc:e1:3e:8e:c7:ae:49:f2:91:17:b6:3b: 38:88:61:52:41:2e:2c:16:5e:50:9d:39:63:13:1e:fa:45:b4: a8:a2:99:28:fe:b4:a6:f8:cd:bd:a1:25:79:a1:02:94:08:fc: 77:95:9c:7d:2d:f2:ce:cc:ee:0d:a8:7e:23:49:d7:cc:b3:62: c9:56:99:06 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9R0sAT1q7juJIoYuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk ZGMwZDY1YWMtOWM5MC00NzRlLThlNWItM2EyOTQzN2U1M2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyLHJe2dlEPQVy1cIaEf9T1TgMEImwIUBT6f s//6ePLeNUvUfOPiEDQ2UlyoP1GaTbI0HMh1ieH6PMuz4tGg3Ipfpeif4S3glg1k U1u/sNpk2VlyX4QG/hcUjXRyVr0j6ADX4MqR0uC2pEp0lYo+boHpasSPpWZvM6Se qlYBIELPkKiYKdrKSe99sfgMWBNTw84pH7bGgsp8J0BYVY1ayZBRSlAucCPFfflB hsjAzjFa1TJt7w5fTwErFIKQeOhPq20fmzzAkuHiBFrFMks+cpbfgmyVwu24RDty oEfCDoNR4rZNgIGGJgijddIJZFuuijV55mvHZlXwI7JdxUsYEwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNlADBHuzl4lvoFm4ISftIzRJxGOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmE0MWMzZTYtODk4YS0z MzEzLWExNTYtMWQ5NWUxODA4M2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAoRzmxM7QraGYgxgrzjPPxef5YeC5BxtdJ9/MtsQJvbPH27ia2Cu8H 5Qfy7hIYMg3kFrItGZJo1E3GiJpYxt1d7KutIY7o4KfaajbPzTjIiBeOR2zwRVyb GsEmBM8XnPFEXKEszsDYfmbjmyaWhZU5fGeWo/u1Xu0NSNlnVenArA189qlQQfzy gaqCByi3ZDdDKjoAwJKpYit/Z2vTYDfsKair4l5jm0bk9cM9KGZIcEw+NO2uvzDa fVv84T6Ox65J8pEXtjs4iGFSQS4sFl5QnTljEx76RbSoopko/rSm+M29oSV5oQKU CPx3lZx9LfLOzO4NqH4jSdfMs2LJVpkG -----END CERTIFICATE-----Generated at Tue Oct 6 20:08:10 2026 by rpki-client