$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2cf7fbda-7891-367f-a7fb-a9707dc1bf31.roa File: 2cf7fbda-7891-367f-a7fb-a9707dc1bf31.roa (raw, json) Hash identifier: bp49iz0xuPQalTZL41vikVWZ9c0BAefheZ5F8M+EM1s= Subject key identifier: 6B:1E:BE:5F:46:58:0E:5D:D5:8B:EF:14:40:95:18:80:9D:A3:9A:3F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584FCCC6A17161D1B2848C72BA00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2cf7fbda-7891-367f-a7fb-a9707dc1bf31.roa Signing time: Wed 11 Nov 2026 02:00:12 +0000 ROA not before: Wed 11 Nov 2026 02:00:12 +0000 ROA not after: Tue 09 Feb 2027 02:00:12 +0000 asID: 26134 IP address blocks: 216.168.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cc:c6:a1:71:61:d1:b2:84:8c:72:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 11 02:00:12 2026 GMT Not After : Feb 9 02:00:12 2027 GMT Subject: CN=c0549d48-4b84-45f7-9a88-64c492bc8693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5b:db:59:04:c9:f0:7e:57:19:28:e0:3b:3b: 07:7f:37:b9:22:9c:0a:2e:c2:78:e4:71:9d:b5:56: 75:9a:1a:ee:43:db:92:13:e8:d8:94:31:99:d1:a3: 75:30:b8:b1:ff:85:b2:02:aa:af:38:a1:f2:cb:f0: 3f:e2:23:5a:20:10:75:a1:85:99:63:1f:c7:df:cb: 9e:ac:cb:09:a7:db:b9:75:98:49:b6:f4:e8:ff:82: a4:3f:0a:57:af:d0:7d:c2:dd:fa:82:85:bd:76:f3: 74:27:80:4f:50:56:a4:45:a3:a9:dd:f2:e1:42:94: c2:59:47:1b:e6:88:f9:25:d8:fd:40:b2:65:b0:e9: 59:e6:92:d9:0a:5e:c9:c4:e8:3d:c8:be:ee:a5:87: ce:d8:64:02:cb:2d:ff:9c:6e:94:23:94:ad:dc:5d: 4d:95:22:4b:7a:91:21:b4:e0:55:42:48:50:28:d7: d0:fe:cb:a2:31:38:27:cc:7d:43:fd:bc:fa:16:0c: bb:3c:f7:7e:c4:b1:22:25:67:9e:20:3c:18:a4:7b: 22:45:0f:a2:a1:fd:4d:87:df:58:a9:64:09:b1:74: 5c:75:bc:a4:28:b0:37:c6:bc:d8:a2:95:54:26:bd: b7:5e:dc:4c:26:5f:73:30:e3:77:25:48:c2:3e:67: 4b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1E:BE:5F:46:58:0E:5D:D5:8B:EF:14:40:95:18:80:9D:A3:9A:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2cf7fbda-7891-367f-a7fb-a9707dc1bf31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:41:d1:f6:3e:fb:01:1e:00:6c:6b:cb:8b:f2:47:7e:21:5f: 7f:a7:09:1e:0b:8b:47:57:f1:f6:65:90:ed:65:89:d7:16:7e: d0:6e:d2:23:d3:32:34:b0:e7:c6:28:2c:44:20:b0:6a:3c:fd: b6:a4:1e:a8:7d:c4:4f:05:e3:bd:9b:90:38:0e:ca:1d:c2:0b: b1:19:85:e5:24:0f:59:6d:a5:20:62:e8:06:7d:00:e3:cf:22: 7b:03:2d:e8:ee:b6:4b:a2:2d:f4:d5:f9:6f:88:a4:8b:d6:99: 00:4c:f5:71:9f:44:09:88:cc:40:59:0f:7f:d8:bb:c2:e9:f8: db:ed:fa:28:7a:de:15:3b:ce:a7:b0:ad:8e:52:74:23:48:52: d4:7b:6f:db:77:4c:00:e7:c8:c8:3f:cf:a4:77:0f:83:dc:40: e5:13:2a:ac:10:63:03:7f:70:9c:20:84:03:c4:c7:07:3f:3e: 42:27:a7:0c:c8:b8:d5:77:6e:bc:bd:98:ab:06:d2:d3:01:13: 20:bb:f5:ad:24:b0:f6:52:cc:7f:7c:56:e4:42:c8:f5:92:dc: 49:9e:a1:9c:ba:6f:ca:e3:69:90:9b:cc:bc:a7:ee:72:b8:78: 99:59:73:14:28:8e:e8:4a:bf:62:99:40:d6:2a:03:c7:23:30: 5c:83:bb:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/MxqFxYdGyhIxyugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTExMTAyMDAxMloXDTI3MDIwOTAyMDAxMlowLzEtMCsGA1UEAxMk YzA1NDlkNDgtNGI4NC00NWY3LTlhODgtNjRjNDkyYmM4NjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1vbWQTJ8H5XGSjgOzsHfze5IpwKLsJ45HGd tVZ1mhruQ9uSE+jYlDGZ0aN1MLix/4WyAqqvOKHyy/A/4iNaIBB1oYWZYx/H38ue rMsJp9u5dZhJtvTo/4KkPwpXr9B9wt36goW9dvN0J4BPUFakRaOp3fLhQpTCWUcb 5oj5Jdj9QLJlsOlZ5pLZCl7JxOg9yL7upYfO2GQCyy3/nG6UI5St3F1NlSJLepEh tOBVQkhQKNfQ/suiMTgnzH1D/bz6Fgy7PPd+xLEiJWeeIDwYpHsiRQ+iof1Nh99Y qWQJsXRcdbykKLA3xrzYopVUJr23XtxMJl9zMON3JUjCPmdLqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsevl9GWA5d1YvvFECVGICdo5o/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmNmN2ZiZGEtNzg5MS0z NjdmLWE3ZmItYTk3MDdkYzFiZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhB0fY++wEeAGxry4vyR34hX3+nCR4Li0dX8fZlkO1lidcWftBu0iPT MjSw58YoLEQgsGo8/bakHqh9xE8F472bkDgOyh3CC7EZheUkD1ltpSBi6AZ9AOPP InsDLejutkuiLfTV+W+IpIvWmQBM9XGfRAmIzEBZD3/Yu8Lp+Nvt+ih63hU7zqew rY5SdCNIUtR7b9t3TADnyMg/z6R3D4PcQOUTKqwQYwN/cJwghAPExwc/PkInpwzI uNV3bry9mKsG0tMBEyC79a0ksPZSzH98VuRCyPWS3EmeoZy6b8rjaZCbzLyn7nK4 eJlZcxQojuhKv2KZQNYqA8cjMFyDu04= -----END CERTIFICATE-----Generated at Sun Nov 15 17:57:04 2026 by rpki-client