$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8f84cc7-0013-38a3-851e-f1beead13013.roa File: b8f84cc7-0013-38a3-851e-f1beead13013.roa (raw, json) Hash identifier: 2gMuCGapQIwHleNVXKCUPt6BqSAxvN5lucH4aERSUMI= Subject key identifier: 10:64:FF:BE:02:22:CF:86:81:CF:90:DF:B3:20:8C:D0:E1:A0:C1:04 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F506D4C56A14556C08D418E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8f84cc7-0013-38a3-851e-f1beead13013.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 36626 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:4c:56:a1:45:56:c0:8d:41:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=9119148d-a189-45c4-b808-1c401bbc6041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:d5:06:c9:4a:d6:bc:30:22:a1:1d:86:6c: 49:6d:f2:80:0c:15:10:3f:0e:ed:cf:3f:70:1c:ac: e4:f7:54:14:32:d1:b7:00:7a:d1:38:dd:13:b9:df: 2a:42:9d:3e:7c:59:0c:1b:1b:1c:0f:fe:9d:f6:0e: 0e:31:18:ea:3b:b5:f4:b5:21:5e:fe:59:17:ff:de: dc:a4:55:80:f9:1f:04:4e:81:fd:af:ae:0b:08:60: a0:8d:72:24:d3:68:06:23:bb:e1:72:80:b1:39:fc: 36:5e:8d:10:2e:81:c6:ea:aa:7e:d3:c2:20:6a:2c: 26:c3:42:27:2b:e0:e0:b8:c6:bd:b2:20:9b:05:41: b8:06:8c:a9:33:69:ef:fe:19:e8:95:00:1b:2c:da: 7a:60:c6:7c:26:14:7c:97:90:72:54:3f:4d:45:67: 58:68:bb:64:29:3e:6b:bd:d5:b6:43:95:65:eb:e0: cd:64:21:72:1f:e5:3d:58:ec:ec:da:72:9a:dd:fe: e1:31:b8:49:4d:ab:fb:29:d3:4e:43:31:24:89:29: 6d:ee:23:e9:64:e8:3f:1d:14:92:b7:95:41:b9:de: ac:17:b4:c3:b6:6e:9a:d9:d8:85:e4:ab:f8:bc:39: 34:71:4b:84:38:18:98:93:76:d7:b4:e1:4a:5d:06: e7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:64:FF:BE:02:22:CF:86:81:CF:90:DF:B3:20:8C:D0:E1:A0:C1:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8f84cc7-0013-38a3-851e-f1beead13013.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:55:9c:f3:28:d3:cb:d1:94:ac:5e:6b:89:67:55:fa:ac:d2: ff:af:ea:38:9b:18:89:96:8f:67:d1:b4:3a:a2:f7:35:60:f3: c3:8a:dd:e4:75:ec:e5:2f:92:a6:e5:d9:07:cb:08:03:4d:c9: 0c:6d:50:12:bb:6e:88:f2:0a:66:16:af:dd:46:00:fe:61:69: 4c:cc:de:df:65:20:c8:66:80:95:06:a1:cd:9b:db:75:69:62: ed:cc:a9:40:f9:ca:8f:1c:5a:a0:77:22:f7:af:c8:a3:88:e7: 79:b4:3d:10:6a:77:fa:82:71:bf:0e:a5:a2:ad:ae:ce:f9:a8: d8:d2:d2:db:25:5e:a5:3e:0a:0f:18:56:c8:af:c4:1c:b0:3b: d4:55:5c:78:cc:e6:3a:c6:b3:26:a0:b5:9b:86:c6:e3:e2:cc: e3:b1:72:5d:38:6b:7a:38:94:22:41:01:f0:b2:37:74:58:25: b5:96:9d:5d:6b:b7:c0:e2:00:3b:de:3d:bd:24:51:98:4f:56: 74:bc:23:bb:81:b9:d7:d7:48:a5:b3:8a:b9:ba:29:d4:19:3f: 47:7b:49:f3:7a:c9:91:44:3d:e7:29:84:ce:e5:34:56:27:05: d3:7d:a8:cc:a1:71:cc:b9:4c:2c:31:73:7e:94:43:2c:fb:a4: 85:92:71:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUxWoUVWwI1BjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk OTExOTE0OGQtYTE4OS00NWM0LWI4MDgtMWM0MDFiYmM2MDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz/VBslK1rwwIqEdhmxJbfKADBUQPw7tzz9w HKzk91QUMtG3AHrRON0Tud8qQp0+fFkMGxscD/6d9g4OMRjqO7X0tSFe/lkX/97c pFWA+R8EToH9r64LCGCgjXIk02gGI7vhcoCxOfw2Xo0QLoHG6qp+08Igaiwmw0In K+DguMa9siCbBUG4BoypM2nv/hnolQAbLNp6YMZ8JhR8l5ByVD9NRWdYaLtkKT5r vdW2Q5Vl6+DNZCFyH+U9WOzs2nKa3f7hMbhJTav7KdNOQzEkiSlt7iPpZOg/HRSS t5VBud6sF7TDtm6a2diF5Kv4vDk0cUuEOBiYk3bXtOFKXQbncwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBk/74CIs+Ggc+Q37MgjNDhoMEEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjhmODRjYzctMDAxMy0z OGEzLTg1MWUtZjFiZWVhZDEzMDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFVnPMo08vRlKxea4lnVfqs0v+v6jibGImWj2fRtDqi9zVg88OK3eR1 7OUvkqbl2QfLCANNyQxtUBK7bojyCmYWr91GAP5haUzM3t9lIMhmgJUGoc2b23Vp Yu3MqUD5yo8cWqB3IvevyKOI53m0PRBqd/qCcb8OpaKtrs75qNjS0tslXqU+Cg8Y VsivxBywO9RVXHjM5jrGsyagtZuGxuPizOOxcl04a3o4lCJBAfCyN3RYJbWWnV1r t8DiADvePb0kUZhPVnS8I7uBudfXSKWzirm6KdQZP0d7SfN6yZFEPecphM7lNFYn BdN9qMyhccy5TCwxc36UQyz7pIWScZo= -----END CERTIFICATE-----Generated at Sun Oct 4 07:11:51 2026 by rpki-client