$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ffaf012d-2e1a-3583-938a-62a834478f3d.roa File: ffaf012d-2e1a-3583-938a-62a834478f3d.roa (raw, json) Hash identifier: F5Vsy+ilrVFuwry0huKAkYZk7ZKMhCRs2hQJVZaA/Z4= Subject key identifier: CB:50:2D:6A:29:54:98:32:C9:20:34:F1:73:F1:4A:19:67:A8:84:F4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F51D2BB9F47F4C10DC5919280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ffaf012d-2e1a-3583-938a-62a834478f3d.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 36625 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:bb:9f:47:f4:c1:0d:c5:91:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=fccd9f3e-b47c-4db4-b4f7-c28ac5827b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e5:ac:9f:3b:5d:a4:c1:c6:70:d8:d9:f5:fd: b2:de:a3:7f:bf:a3:e0:9c:4a:a9:71:8c:31:77:8e: fd:f9:02:c6:39:bc:50:04:23:c7:40:b3:c9:56:31: 35:54:1a:a0:37:35:ad:7e:70:1d:c4:10:51:f5:8d: 30:73:04:97:0c:dc:3d:8d:23:dd:26:6e:61:de:aa: d3:f7:e6:cc:ca:ce:fa:1d:a3:43:d5:e6:46:8a:1a: 2b:98:18:49:06:c8:06:49:db:0e:df:48:d4:43:9d: 77:2e:54:d7:4d:0d:6f:53:74:82:7c:4f:e6:a7:cb: 53:8d:4c:a1:c3:82:7d:7b:e8:58:96:81:5a:a7:52: f6:bb:75:5e:76:20:e5:6b:2c:a6:8d:1f:a4:e5:29: c5:b8:f6:99:83:c9:2e:36:b1:07:42:78:19:05:8a: 3f:66:8c:93:bb:de:d6:27:68:bf:1d:11:04:1a:c0: 69:94:40:21:ec:d1:a1:b5:79:56:a4:25:ad:d6:3b: 3f:36:b8:38:c3:70:4e:86:0f:1b:20:0d:4a:48:36: ce:2c:e7:04:64:ef:30:85:35:04:9e:b8:8b:a3:c7: 89:ab:21:7f:c5:44:eb:94:24:de:04:84:e1:4e:75: f6:0c:1f:f1:67:c5:b8:a3:33:ae:98:14:57:69:c0: 51:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:50:2D:6A:29:54:98:32:C9:20:34:F1:73:F1:4A:19:67:A8:84:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ffaf012d-2e1a-3583-938a-62a834478f3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:7b:b2:3d:c0:40:c5:3c:4c:34:8a:6d:f6:77:a3:bf:0d:40: 9a:4d:a0:83:48:df:eb:f0:9a:ec:58:99:88:d5:0d:2c:9c:22: 3e:dc:a6:51:fe:cd:ac:b2:01:b4:20:d2:b5:19:2d:16:d9:fe: ae:06:09:41:82:a7:c3:09:51:82:4b:ea:36:ad:a9:ac:77:d9: 50:6e:ba:47:49:7b:25:e4:34:35:8d:79:11:57:09:fe:7e:2c: f7:7a:a9:f0:5c:7f:63:cd:22:65:6a:ad:62:e2:54:48:c8:50: cc:12:a5:dd:21:dd:71:9d:43:e6:ce:70:32:d0:8d:f4:4b:18: 13:1d:db:eb:da:83:cf:bb:2d:a7:27:01:ad:be:78:07:ed:27: cc:ee:ed:c2:6f:88:24:69:51:7d:d6:90:0c:e9:79:b7:bd:51: 34:26:78:82:5c:24:51:e5:42:95:a2:83:5d:17:ff:2c:d9:91: b6:dd:53:e0:db:f6:79:9a:f0:4b:ac:f8:89:71:22:d3:18:6e: bd:75:39:ea:a7:9c:c2:77:e0:bc:06:e6:b2:1a:70:f6:85:57: a7:dc:bb:87:fc:34:0c:eb:18:e7:d3:df:70:a6:5a:ff:9e:63: e6:29:b4:46:f3:b4:35:2c:09:11:6e:05:f9:7c:30:cd:d2:66: fe:be:11:c4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9R0rufR/TBDcWRkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk ZmNjZDlmM2UtYjQ3Yy00ZGI0LWI0ZjctYzI4YWM1ODI3YjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuWsnztdpMHGcNjZ9f2y3qN/v6PgnEqpcYwx d479+QLGObxQBCPHQLPJVjE1VBqgNzWtfnAdxBBR9Y0wcwSXDNw9jSPdJm5h3qrT 9+bMys76HaND1eZGihormBhJBsgGSdsO30jUQ513LlTXTQ1vU3SCfE/mp8tTjUyh w4J9e+hYloFap1L2u3VediDlayymjR+k5SnFuPaZg8kuNrEHQngZBYo/ZoyTu97W J2i/HREEGsBplEAh7NGhtXlWpCWt1js/Nrg4w3BOhg8bIA1KSDbOLOcEZO8whTUE nriLo8eJqyF/xUTrlCTeBIThTnX2DB/xZ8W4ozOumBRXacBR/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMtQLWopVJgyySA08XPxShlnqIT0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmZhZjAxMmQtMmUxYS0z NTgzLTkzOGEtNjJhODM0NDc4ZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAfe7I9wEDFPEw0im32d6O/DUCaTaCDSN/r8JrsWJmI1Q0snCI+3KZR /s2ssgG0INK1GS0W2f6uBglBgqfDCVGCS+o2ramsd9lQbrpHSXsl5DQ1jXkRVwn+ fiz3eqnwXH9jzSJlaq1i4lRIyFDMEqXdId1xnUPmznAy0I30SxgTHdvr2oPPuy2n JwGtvngH7SfM7u3Cb4gkaVF91pAM6Xm3vVE0JniCXCRR5UKVooNdF/8s2ZG23VPg 2/Z5mvBLrPiJcSLTGG69dTnqp5zCd+C8BuayGnD2hVen3LuH/DQM6xjn099wplr/ nmPmKbRG87Q1LAkRbgX5fDDN0mb+vhHE -----END CERTIFICATE-----Generated at Wed Oct 7 23:02:17 2026 by rpki-client