$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/108c1184-37fc-3187-acc6-953d05fb5fd1.roa File: 108c1184-37fc-3187-acc6-953d05fb5fd1.roa (raw, json) Hash identifier: AQwe7S2UYjoAif4RIAk1SLL/J6DkAFAX4d8nW2tglZE= Subject key identifier: 89:20:E2:47:01:52:1E:2B:16:B3:11:C4:7C:AD:CC:99:40:24:63:02 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F506D67D9A37B750438278300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/108c1184-37fc-3187-acc6-953d05fb5fd1.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 40647 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:67:d9:a3:7b:75:04:38:27:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=da99d41e-fa0c-4b77-a2c1-c7b36cd9eab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1f:b4:61:5c:88:55:bd:86:bb:0f:e3:43:a1: f9:ac:b4:97:07:fe:01:9b:dd:32:fb:e5:6b:e8:9b: 5c:70:8f:f4:41:4f:48:02:c4:d5:66:2e:3f:e9:01: 84:8b:1f:29:7f:2b:77:42:06:d8:64:24:98:7f:6b: 16:83:a4:0b:fb:aa:8c:12:0a:b6:be:5f:86:47:8b: 53:54:d4:e4:2e:51:cd:c4:4a:63:73:72:26:1e:b2: d4:73:38:74:02:bb:c7:0a:91:58:a8:f0:2e:29:80: 65:61:95:ce:d8:91:05:fb:57:49:fe:86:fb:98:ee: 6d:7d:4b:b4:ad:df:81:ba:41:41:21:8a:64:55:7f: ed:ca:57:af:5f:85:85:18:30:a6:d5:bb:f4:63:6d: fe:64:e9:20:3c:d6:7d:8c:e1:77:a9:17:06:47:70: 49:df:62:27:27:b2:dc:47:b2:8d:5c:db:46:38:e0: ad:ef:30:d9:a9:5e:b6:02:10:92:2f:da:d6:9d:e5: 44:d1:69:f4:66:11:30:a2:18:a3:a0:e9:52:52:02: 20:88:e4:8c:2e:4b:c4:b3:d6:59:5e:f7:95:92:de: 79:45:a9:b9:36:5a:14:07:82:8c:2b:aa:0c:ac:5a: 2d:27:8f:4d:bb:21:99:6f:f1:02:e1:13:99:a8:12: f8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:20:E2:47:01:52:1E:2B:16:B3:11:C4:7C:AD:CC:99:40:24:63:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/108c1184-37fc-3187-acc6-953d05fb5fd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:39:0a:57:b5:81:00:07:ee:1b:40:16:0c:06:36:a2:e5:66: 95:28:56:b0:30:8d:da:88:c6:f7:d3:75:7e:c6:ec:50:aa:9e: ed:81:1c:6b:55:53:1d:9b:c6:5e:1b:ae:5f:d1:91:b2:af:9b: 12:16:54:dc:c1:33:b0:42:67:55:4f:00:54:e4:85:9d:66:5c: 9b:8c:d8:bd:25:03:73:02:d0:99:07:3d:cf:e6:9c:de:fe:5a: e8:02:ff:82:35:c2:31:2d:fd:16:48:6b:be:84:14:d2:f7:41: e9:4b:35:7d:73:2f:b9:aa:80:1a:25:fe:2c:f7:06:b1:25:b0: fc:4e:d2:3e:0a:4f:5e:8f:db:95:89:8c:f2:38:1f:3a:b2:eb: 01:a3:1a:29:51:0f:19:a1:08:46:3f:d0:93:eb:98:8a:01:c5: da:be:b1:f6:f9:be:c2:44:5c:02:e9:10:c8:cb:ca:f3:6b:ff: e2:8c:95:96:4f:3c:a1:77:53:3d:0d:64:bc:fb:c7:b9:a6:09: c4:fa:03:02:da:a9:36:38:96:1b:79:4b:b2:60:3a:cd:1a:ec: 9a:48:09:2d:b1:7f:8d:3e:b3:2d:17:d9:bf:43:1d:1f:84:81: ac:37:61:83:56:ca:48:e9:45:21:10:ce:10:a6:da:e7:ae:7e: ca:b2:1c:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWfZo3t1BDgngwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZGE5OWQ0MWUtZmEwYy00Yjc3LWEyYzEtYzdiMzZjZDllYWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx+0YVyIVb2Guw/jQ6H5rLSXB/4Bm90y++Vr 6JtccI/0QU9IAsTVZi4/6QGEix8pfyt3QgbYZCSYf2sWg6QL+6qMEgq2vl+GR4tT VNTkLlHNxEpjc3ImHrLUczh0ArvHCpFYqPAuKYBlYZXO2JEF+1dJ/ob7mO5tfUu0 rd+BukFBIYpkVX/tylevX4WFGDCm1bv0Y23+ZOkgPNZ9jOF3qRcGR3BJ32InJ7Lc R7KNXNtGOOCt7zDZqV62AhCSL9rWneVE0Wn0ZhEwohijoOlSUgIgiOSMLkvEs9ZZ XveVkt55Ram5NloUB4KMK6oMrFotJ49NuyGZb/EC4ROZqBL4zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkg4kcBUh4rFrMRxHytzJlAJGMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTA4YzExODQtMzdmYy0z MTg3LWFjYzYtOTUzZDA1ZmI1ZmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFg5Cle1gQAH7htAFgwGNqLlZpUoVrAwjdqIxvfTdX7G7FCqnu2BHGtV Ux2bxl4brl/RkbKvmxIWVNzBM7BCZ1VPAFTkhZ1mXJuM2L0lA3MC0JkHPc/mnN7+ WugC/4I1wjEt/RZIa76EFNL3QelLNX1zL7mqgBol/iz3BrElsPxO0j4KT16P25WJ jPI4Hzqy6wGjGilRDxmhCEY/0JPrmIoBxdq+sfb5vsJEXALpEMjLyvNr/+KMlZZP PKF3Uz0NZLz7x7mmCcT6AwLaqTY4lht5S7JgOs0a7JpICS2xf40+sy0X2b9DHR+E gaw3YYNWykjpRSEQzhCm2ueufsqyHDw= -----END CERTIFICATE-----Generated at Tue Sep 29 15:50:25 2026 by rpki-client