$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/796e3c25-7519-3ab8-8f6e-cf2b0ca36a24.roa File: 796e3c25-7519-3ab8-8f6e-cf2b0ca36a24.roa (raw, json) Hash identifier: Qibkl92aTNh4eq+IiNxihFW29hsQjJ66kG0l1nCbtDE= Subject key identifier: CA:A4:BA:05:56:F7:EE:0C:8F:C8:8B:54:42:71:3E:95:D6:2C:E2:6C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F2ABD2CC799BE7801BC15FA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/796e3c25-7519-3ab8-8f6e-cf2b0ca36a24.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 26134 IP address blocks: 216.168.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:2c:c7:99:be:78:01:bc:15:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=f5900017-e128-45f7-bc17-53ce3f1fd0cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4d:ac:16:0b:d4:be:4f:87:98:14:e7:99:3f: 5e:d2:03:83:46:35:73:1a:3c:4d:04:99:53:64:34: a9:8b:ad:b9:b5:66:ed:c2:7e:16:a3:01:3e:99:e2: 0a:84:ce:ee:20:b3:62:b9:99:1b:1c:59:9c:d5:7d: f4:f9:96:ef:0f:49:8d:88:4b:6f:99:af:80:71:07: 5c:12:46:01:22:71:ce:7d:17:5f:b5:ce:25:fa:77: 01:13:7b:33:c0:23:c8:26:61:32:df:6c:0b:de:16: c6:20:44:8f:56:23:91:60:b9:2b:31:e1:35:ff:c7: c0:f8:9b:f3:87:60:2a:f0:fb:1b:b0:1a:49:cc:b5: e0:77:40:c9:83:92:fc:ca:3c:c6:c7:d9:c0:c7:f7: 19:d7:55:b5:b8:d8:19:92:a5:ca:f7:d4:8c:0e:56: 35:31:5c:ec:b4:c4:28:9c:77:fb:36:9d:7a:d6:17: 37:eb:2c:3b:91:21:97:5e:0b:6a:bc:2c:2c:8d:cf: 5b:41:c7:18:b1:f3:4f:76:e9:22:b0:02:75:3f:b1: 05:40:9c:92:99:d3:68:3d:94:f8:4c:81:81:2d:04: a4:04:e0:34:ac:bd:5f:32:8d:71:aa:98:27:3e:d3: 91:04:09:82:36:95:b6:5b:c7:50:03:e7:29:1b:1a: 23:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A4:BA:05:56:F7:EE:0C:8F:C8:8B:54:42:71:3E:95:D6:2C:E2:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/796e3c25-7519-3ab8-8f6e-cf2b0ca36a24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:88:22:fa:ee:a9:2a:2f:29:e1:81:31:b9:f9:5e:a4:4c:f8: 57:9a:0b:72:9f:d3:08:d3:00:b9:a6:fd:64:c4:11:01:df:89: cd:cf:c8:f2:a4:a2:5a:87:18:b4:40:21:5e:7d:e6:8a:19:c0: 33:23:08:8a:dc:ca:fe:78:6c:1d:d0:c8:b2:f8:ce:ba:d0:3f: a9:05:cb:37:35:f9:99:4b:80:cb:49:50:b2:9d:8f:76:7e:ad: b3:be:c1:b5:8d:72:d8:b0:ea:31:b0:b9:ec:13:1b:f4:34:f7: 8b:41:a6:62:3b:a9:0a:b1:40:22:6f:89:89:5f:d7:7b:c7:4c: 85:21:9f:cf:66:b7:1f:3b:3d:0f:1c:53:6c:31:5c:c0:15:d4: 5c:41:26:c7:fb:b0:c1:f1:8e:99:e0:f9:d9:46:70:58:61:3f: b1:97:94:32:0e:d6:ef:bd:8d:20:91:b9:57:c9:72:68:c0:9d: 84:60:d6:7a:56:68:ee:7b:75:ed:1e:f8:ad:8f:20:44:e8:23: e7:d2:ed:38:a7:73:17:4d:e5:16:2b:91:14:4b:10:c0:84:b7: 8e:b0:d3:a3:50:85:9e:db:0e:72:75:92:06:4d:fc:e8:8f:a0: 6d:da:10:30:7f:d8:81:55:39:f4:62:f0:6f:19:8a:c2:2c:0c: 64:c1:71:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvSzHmb54AbwV+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk ZjU5MDAwMTctZTEyOC00NWY3LWJjMTctNTNjZTNmMWZkMGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU2sFgvUvk+HmBTnmT9e0gODRjVzGjxNBJlT ZDSpi625tWbtwn4WowE+meIKhM7uILNiuZkbHFmc1X30+ZbvD0mNiEtvma+AcQdc EkYBInHOfRdftc4l+ncBE3szwCPIJmEy32wL3hbGIESPViORYLkrMeE1/8fA+Jvz h2Aq8PsbsBpJzLXgd0DJg5L8yjzGx9nAx/cZ11W1uNgZkqXK99SMDlY1MVzstMQo nHf7Np161hc36yw7kSGXXgtqvCwsjc9bQccYsfNPdukisAJ1P7EFQJySmdNoPZT4 TIGBLQSkBOA0rL1fMo1xqpgnPtORBAmCNpW2W8dQA+cpGxojKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqkugVW9+4Mj8iLVEJxPpXWLOJsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzk2ZTNjMjUtNzUxOS0z YWI4LThmNmUtY2YyYjBjYTM2YTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASIIvruqSovKeGBMbn5XqRM+FeaC3Kf0wjTALmm/WTEEQHfic3PyPKk olqHGLRAIV595ooZwDMjCIrcyv54bB3QyLL4zrrQP6kFyzc1+ZlLgMtJULKdj3Z+ rbO+wbWNctiw6jGwuewTG/Q094tBpmI7qQqxQCJviYlf13vHTIUhn89mtx87PQ8c U2wxXMAV1FxBJsf7sMHxjpng+dlGcFhhP7GXlDIO1u+9jSCRuVfJcmjAnYRg1npW aO57de0e+K2PIEToI+fS7TincxdN5RYrkRRLEMCEt46w06NQhZ7bDnJ1kgZN/OiP oG3aEDB/2IFVOfRi8G8ZisIsDGTBcQs= -----END CERTIFICATE-----Generated at Thu Sep 24 02:49:08 2026 by rpki-client