$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31ef6804-c222-38b5-9deb-838a0569e02a.roa File: 31ef6804-c222-38b5-9deb-838a0569e02a.roa (raw, json) Hash identifier: nDtFktTlZscrWqAJE3J7CzGurwwclnyKZVtsGvZaT6A= Subject key identifier: 62:25:C7:10:8C:12:F3:00:44:DE:14:F2:BC:5B:90:28:B7:32:6B:9C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F506D668982E85D879C4E2B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31ef6804-c222-38b5-9deb-838a0569e02a.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 396599 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:66:89:82:e8:5d:87:9c:4e:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=9da096ec-b349-43bd-b1b8-712efbb19696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:17:69:5b:85:13:e9:26:fe:1a:e7:6e:90:66: 1b:4b:f9:8c:43:aa:c9:83:a8:f1:b8:67:3e:c0:b3: 80:e1:ac:44:b7:af:5a:72:b0:96:40:74:0f:50:15: ff:3d:69:61:e6:4f:10:0d:08:01:dd:4c:78:a2:ed: 3c:f0:a0:43:b3:f6:dd:12:a6:52:04:8e:19:6d:2d: 11:4b:67:ac:11:12:81:21:64:68:20:02:65:11:17: ee:b5:b0:c4:fd:bd:b3:d9:46:92:91:59:ff:07:3f: d4:4d:e8:01:2b:3d:09:6a:fa:4f:78:6a:f2:76:c4: 44:f8:23:a4:93:e0:7b:59:a2:54:4a:ea:68:93:02: 67:c5:62:e8:5f:4e:8d:ab:17:d0:64:a7:44:e9:b3: 59:11:2f:45:3f:c0:45:9d:6c:4e:31:93:37:06:04: 4a:f7:3b:74:5c:40:08:e1:9f:16:cf:3d:12:21:ef: f4:6e:6a:48:e7:e6:51:66:df:64:06:14:cb:c0:b5: 7b:0a:8a:af:62:1b:95:38:41:41:f0:5c:f1:76:e7: 38:ec:c9:37:c2:aa:7e:66:ac:6a:6c:4c:ed:56:ce: 28:10:b4:8d:4e:3f:b9:b8:a7:34:c0:9b:f2:46:87: 5b:82:30:24:a5:a1:8c:96:2f:62:a8:5d:23:da:fc: 97:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:25:C7:10:8C:12:F3:00:44:DE:14:F2:BC:5B:90:28:B7:32:6B:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31ef6804-c222-38b5-9deb-838a0569e02a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:89:30:40:20:b7:09:1c:04:29:30:ff:0b:b2:71:33:8c:ff: b8:86:ab:17:e2:e3:85:6d:02:be:d1:bb:7d:35:99:0c:36:4a: be:07:8e:c8:4b:9c:2d:28:b8:f7:ab:33:d7:a7:8b:77:a4:d9: 09:25:f0:38:68:25:7a:42:e6:34:3a:bf:a7:24:ad:bf:73:ef: f9:f4:6c:8d:3e:16:34:9c:1d:b7:62:7a:45:4b:e6:6b:fd:38: ab:52:b3:6f:82:74:43:c5:b5:41:f5:d7:3a:f8:d0:46:ce:c6: 6d:53:03:db:a6:76:f7:07:4d:67:1c:47:3e:97:9e:f1:5d:6e: f0:24:a5:06:ad:17:c4:20:7a:7b:73:36:2e:64:58:34:da:b4: 4f:77:61:70:f1:e5:10:48:95:7b:40:24:59:9e:87:52:76:fe: 89:a8:43:bc:4e:75:37:2c:33:ec:17:76:20:c9:0e:00:0f:b1: 2c:aa:23:9b:8c:0c:bf:56:d7:1c:80:4b:83:c9:d8:fa:e1:a6: 50:a2:70:d2:52:09:ee:80:b0:c4:11:a7:ff:7b:ca:2b:ed:f7: 0c:a4:2f:81:1f:c6:92:b0:2c:8c:c1:59:d1:11:3d:7e:41:6d: 35:9b:84:eb:cf:c6:6c:0e:63:17:a1:92:ae:ae:4b:6f:21:bb: db:60:b0:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWaJguhdh5xOK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk OWRhMDk2ZWMtYjM0OS00M2JkLWIxYjgtNzEyZWZiYjE5Njk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBdpW4UT6Sb+GudukGYbS/mMQ6rJg6jxuGc+ wLOA4axEt69acrCWQHQPUBX/PWlh5k8QDQgB3Ux4ou088KBDs/bdEqZSBI4ZbS0R S2esERKBIWRoIAJlERfutbDE/b2z2UaSkVn/Bz/UTegBKz0JavpPeGrydsRE+COk k+B7WaJUSupokwJnxWLoX06NqxfQZKdE6bNZES9FP8BFnWxOMZM3BgRK9zt0XEAI 4Z8Wzz0SIe/0bmpI5+ZRZt9kBhTLwLV7CoqvYhuVOEFB8Fzxduc47Mk3wqp+Zqxq bEztVs4oELSNTj+5uKc0wJvyRodbgjAkpaGMli9iqF0j2vyXQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIlxxCMEvMARN4U8rxbkCi3MmucMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzFlZjY4MDQtYzIyMi0z OGI1LTlkZWItODM4YTA1NjllMDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSJMEAgtwkcBCkw/wuycTOM/7iGqxfi44VtAr7Ru301mQw2Sr4HjshL nC0ouPerM9eni3ek2Qkl8DhoJXpC5jQ6v6ckrb9z7/n0bI0+FjScHbdiekVL5mv9 OKtSs2+CdEPFtUH11zr40EbOxm1TA9umdvcHTWccRz6XnvFdbvAkpQatF8Qgentz Ni5kWDTatE93YXDx5RBIlXtAJFmeh1J2/omoQ7xOdTcsM+wXdiDJDgAPsSyqI5uM DL9W1xyAS4PJ2PrhplCicNJSCe6AsMQRp/97yivt9wykL4EfxpKwLIzBWdERPX5B bTWbhOvPxmwOYxehkq6uS28hu9tgsAM= -----END CERTIFICATE-----Generated at Thu Oct 1 10:44:25 2026 by rpki-client