$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3e59f0f-3759-3833-9a05-71cc1b1e1732.roa File: b3e59f0f-3759-3833-9a05-71cc1b1e1732.roa (raw, json) Hash identifier: Hxsx5cD+/0UOqIqxNyOTf1vBzUVLtiKEx2fkgoETpx0= Subject key identifier: FB:93:38:87:1B:D1:8A:27:50:06:14:E2:58:2C:61:55:6C:BF:12:BC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F506D63BA29BB57FE37D12100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3e59f0f-3759-3833-9a05-71cc1b1e1732.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 396542 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:63:ba:29:bb:57:fe:37:d1:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=f3423ad0-256a-4375-a22b-c1f6ec954861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1e:3f:61:72:5e:cd:95:a5:f6:82:dc:33:d2: e9:f0:d1:67:af:58:8a:38:ba:0e:bb:82:54:34:6a: 82:0e:06:0a:88:07:74:2e:81:87:6e:fd:6d:5e:35: 9d:f6:e7:31:ae:64:af:c1:a3:7d:f6:ae:a6:58:34: 15:be:7a:70:25:24:1b:70:eb:c3:76:d8:d8:78:d3: 8e:3d:22:31:15:3f:9f:34:44:d3:bc:1d:67:87:a7: de:02:ba:7b:c3:42:c0:8d:2e:7b:47:5b:bb:44:b9: 45:64:32:27:a0:56:36:f1:8b:33:53:24:d9:ad:34: a9:ab:51:5d:44:6a:a5:1a:9b:86:ed:cc:ea:6d:51: e7:fb:97:5d:88:81:be:4e:1f:00:48:cc:70:ec:3c: 93:a8:95:33:ae:e6:43:e3:4c:63:7c:7c:d5:81:b5: 55:6f:ec:70:3d:49:b1:6b:a6:18:ac:82:95:c2:86: e2:57:f6:87:69:31:b4:96:38:2d:cc:dc:f5:46:db: af:f3:96:d0:cc:9e:15:79:0d:73:a8:68:df:7e:d5: 89:f3:3b:12:08:e9:71:e7:7c:0d:d0:be:58:2e:f1: 8e:eb:ae:3a:36:4e:06:e6:81:d3:c3:1d:72:0c:cd: 4a:82:33:a6:d5:9a:dd:7c:e5:72:74:fa:cf:4a:28: e4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:93:38:87:1B:D1:8A:27:50:06:14:E2:58:2C:61:55:6C:BF:12:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3e59f0f-3759-3833-9a05-71cc1b1e1732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:5c:e7:f0:c3:03:79:dd:4c:7c:6a:b3:f8:f0:4c:a4:c9:12: 01:d7:15:83:9e:ca:db:17:af:f6:6d:bc:bb:be:90:18:ea:e8: 30:f4:82:79:ef:1c:99:8f:c3:61:4b:db:4b:2f:30:2f:38:17: 74:13:cd:c6:55:e2:20:bf:bf:72:12:f1:a1:74:98:46:35:71: 34:34:e3:6f:4d:d8:1f:33:cc:c4:74:6c:d0:0c:9a:9b:c4:70: b1:d3:f5:09:eb:e6:40:a8:63:69:5c:a7:4f:3f:2b:a9:0d:8c: 74:b9:ec:72:1e:82:b2:e0:5e:b5:bc:69:27:8c:fd:8a:43:11: df:1d:e7:91:e6:33:de:be:59:9c:62:a1:16:4c:8d:65:9c:5c: 1c:90:47:4d:80:3d:d5:17:f8:25:d0:60:13:21:6e:b2:34:2e: 18:42:14:6b:9e:59:56:02:8d:2d:24:8f:76:9a:4a:f6:cf:dd: ad:b8:ad:2d:0a:80:bc:64:92:38:d5:ba:6b:7a:3f:bd:74:ce: 12:ed:8d:77:c9:36:92:74:7f:01:90:dd:75:f1:59:10:15:85: b7:62:c7:ad:b0:0d:c1:4d:df:a5:04:b4:bf:11:4d:b3:6f:a7: c7:d3:87:92:3f:7a:5c:16:a6:f1:67:bf:39:68:6b:c7:8e:d5: 74:be:24:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWO6KbtX/jfRIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZjM0MjNhZDAtMjU2YS00Mzc1LWEyMmItYzFmNmVjOTU0ODYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR4/YXJezZWl9oLcM9Lp8NFnr1iKOLoOu4JU NGqCDgYKiAd0LoGHbv1tXjWd9ucxrmSvwaN99q6mWDQVvnpwJSQbcOvDdtjYeNOO PSIxFT+fNETTvB1nh6feArp7w0LAjS57R1u7RLlFZDInoFY28YszUyTZrTSpq1Fd RGqlGpuG7czqbVHn+5ddiIG+Th8ASMxw7DyTqJUzruZD40xjfHzVgbVVb+xwPUmx a6YYrIKVwobiV/aHaTG0ljgtzNz1Rtuv85bQzJ4VeQ1zqGjfftWJ8zsSCOlx53wN 0L5YLvGO6646Nk4G5oHTwx1yDM1KgjOm1ZrdfOVydPrPSijkqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuTOIcb0YonUAYU4lgsYVVsvxK8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjNlNTlmMGYtMzc1OS0z ODMzLTlhMDUtNzFjYzFiMWUxNzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRc5/DDA3ndTHxqs/jwTKTJEgHXFYOeytsXr/ZtvLu+kBjq6DD0gnnv HJmPw2FL20svMC84F3QTzcZV4iC/v3IS8aF0mEY1cTQ0429N2B8zzMR0bNAMmpvE cLHT9Qnr5kCoY2lcp08/K6kNjHS57HIegrLgXrW8aSeM/YpDEd8d55HmM96+WZxi oRZMjWWcXByQR02APdUX+CXQYBMhbrI0LhhCFGueWVYCjS0kj3aaSvbP3a24rS0K gLxkkjjVumt6P710zhLtjXfJNpJ0fwGQ3XXxWRAVhbdix62wDcFN36UEtL8RTbNv p8fTh5I/elwWpvFnvzloa8eO1XS+JP8= -----END CERTIFICATE-----Generated at Tue Sep 29 15:18:50 2026 by rpki-client