$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e4df47-4969-3a04-8e97-881b8f84f808.roa File: 43e4df47-4969-3a04-8e97-881b8f84f808.roa (raw, json) Hash identifier: luklf8ywCJiDf4FgU0bWJ+Uq+X1bpuejOBaHCRUXLSA= Subject key identifier: BE:10:5B:E0:51:10:A0:42:88:EA:36:71:2A:E8:0F:27:BA:28:3C:F7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F51D2C066C653A8A6E03B6B20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e4df47-4969-3a04-8e97-881b8f84f808.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 396562 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:c0:66:c6:53:a8:a6:e0:3b:6b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=09fcc6dc-f7e5-438a-acc2-c4998ad2f6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:81:a7:46:a7:c1:e3:49:31:32:a5:30:e9:a5: 38:27:b6:b8:4d:35:49:05:9b:98:3f:97:68:c6:14: 27:ce:e1:65:7e:92:23:b2:eb:e6:2d:7e:09:98:51: 46:b5:29:0a:2a:92:62:80:72:9f:17:81:04:e8:e4: a6:6b:b7:1e:e3:04:e7:c4:9d:6d:20:45:73:40:43: 22:a7:c0:22:f9:0b:59:ef:d5:3d:c2:13:fe:0e:3d: cc:66:8b:4c:e2:bd:1a:c3:32:40:e8:5d:60:96:10: 51:0a:39:26:5a:6e:04:fb:3d:2e:fa:5c:81:98:b0: 12:0f:ef:0b:a5:c8:d7:c5:45:e7:14:9a:cc:18:66: af:73:ee:dc:e2:0e:79:96:50:a0:a4:e3:09:d8:3a: 76:ee:2c:a0:c8:e1:31:5c:e6:f2:c3:63:18:ab:00: 4e:0c:99:b5:71:78:71:a1:1f:f1:9e:a8:e5:c3:3b: 37:b3:66:42:47:6c:40:34:64:84:5f:d5:ca:bc:fc: a9:70:c7:7e:05:5f:d8:33:31:90:0f:23:d2:a7:c1: 1c:ba:8f:5b:f8:54:f1:4b:aa:78:dc:2d:3c:15:b7: 17:c0:f1:00:a0:f1:85:c8:68:9f:8f:9f:4f:0e:f7: d8:99:bd:ab:d0:3c:0a:64:e2:5b:c1:53:b0:e3:12: ac:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:10:5B:E0:51:10:A0:42:88:EA:36:71:2A:E8:0F:27:BA:28:3C:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e4df47-4969-3a04-8e97-881b8f84f808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:20:72:fa:ee:e0:7e:a5:07:e4:41:66:cd:ab:d6:9e:7c:cd: 26:3e:2c:d2:b0:6f:c3:fd:2e:cf:e3:74:cf:fb:80:5e:f3:77: 4b:b0:11:f1:90:51:6e:cc:3e:a8:33:3c:b4:0b:d0:2c:15:b1: 17:e0:4d:b7:a1:da:17:e9:1b:dc:00:3e:49:35:52:01:d4:a3: 18:8f:f9:54:99:e4:ca:fa:61:36:83:c7:11:88:5d:7e:fb:d3: c5:4e:59:7d:75:57:74:ca:2c:2d:33:da:2b:2d:7e:5e:d3:25: 1c:89:ad:eb:ec:30:9c:86:83:ac:86:53:5b:b2:83:dc:54:a5: 06:58:2f:2e:f2:28:b7:38:c5:40:72:a7:7a:ee:1d:3d:b3:f8: b6:8f:1d:38:17:3a:84:3e:02:52:21:c8:a7:86:f6:b1:12:90: 08:57:05:e8:7a:3a:40:d3:d3:84:0b:f2:9b:90:d5:1f:25:36: 61:18:87:5f:5e:55:eb:2d:14:62:c1:bd:5e:16:52:ea:77:8d: f6:65:d1:94:57:90:74:27:68:aa:e2:76:49:a5:bd:21:1b:ab: 89:4c:93:7e:6a:67:5b:15:b7:81:0b:6e:88:c3:49:b8:b8:a6: 52:1b:9e:6e:e5:01:c2:d3:ff:55:7a:83:51:b7:8a:ab:d0:13: 26:d3:54:9b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9R0sBmxlOopuA7ayAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk MDlmY2M2ZGMtZjdlNS00MzhhLWFjYzItYzQ5OThhZDJmNmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIGnRqfB40kxMqUw6aU4J7a4TTVJBZuYP5do xhQnzuFlfpIjsuvmLX4JmFFGtSkKKpJigHKfF4EE6OSma7ce4wTnxJ1tIEVzQEMi p8Ai+QtZ79U9whP+Dj3MZotM4r0awzJA6F1glhBRCjkmWm4E+z0u+lyBmLASD+8L pcjXxUXnFJrMGGavc+7c4g55llCgpOMJ2Dp27iygyOExXObyw2MYqwBODJm1cXhx oR/xnqjlwzs3s2ZCR2xANGSEX9XKvPypcMd+BV/YMzGQDyPSp8Ecuo9b+FTxS6p4 3C08FbcXwPEAoPGFyGifj59PDvfYmb2r0DwKZOJbwVOw4xKs5wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL4QW+BREKBCiOo2cSroDye6KDz3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDNlNGRmNDctNDk2OS0z YTA0LThlOTctODgxYjhmODRmODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZIHL67uB+pQfkQWbNq9aefM0mPizSsG/D/S7P43TP+4Be83dLsBHx kFFuzD6oMzy0C9AsFbEX4E23odoX6RvcAD5JNVIB1KMYj/lUmeTK+mE2g8cRiF1+ +9PFTll9dVd0yiwtM9orLX5e0yUcia3r7DCchoOshlNbsoPcVKUGWC8u8ii3OMVA cqd67h09s/i2jx04FzqEPgJSIcinhvaxEpAIVwXoejpA09OEC/KbkNUfJTZhGIdf XlXrLRRiwb1eFlLqd432ZdGUV5B0J2iq4nZJpb0hG6uJTJN+amdbFbeBC26Iw0m4 uKZSG55u5QHC0/9VeoNRt4qr0BMm01Sb -----END CERTIFICATE-----Generated at Mon Oct 5 06:40:28 2026 by rpki-client