$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2cf7fbda-7891-367f-a7fb-a9707dc1bf31.roa File: 2cf7fbda-7891-367f-a7fb-a9707dc1bf31.roa (raw, json) Hash identifier: UXIWOrvZ19szrbRgIre9pueCBczviRHN50y7kI+O2u4= Subject key identifier: 91:00:19:72:2F:21:59:FA:21:08:6E:4F:86:00:8D:16:BD:89:F3:6D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F2ABD2E86D3527C395F929280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2cf7fbda-7891-367f-a7fb-a9707dc1bf31.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 26134 IP address blocks: 216.168.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:2e:86:d3:52:7c:39:5f:92:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=a24ecaec-d62f-4a3f-9f9f-831320d7084c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:52:00:67:ca:75:71:b4:0f:4f:97:c6:aa:07: d0:be:02:e7:9a:3c:81:1e:9c:b0:1d:83:16:2e:f5: 3a:a0:76:32:b6:79:cc:97:c5:21:61:71:65:1a:c6: 0b:9e:dc:f3:d2:4e:c5:77:02:19:cf:5f:a0:a8:2a: 70:35:e4:f0:ee:8e:08:0c:d1:77:35:bf:a3:1c:e1: 5a:4a:c8:a8:81:52:69:70:7b:69:4a:e5:b9:e0:f4: 87:20:03:49:a3:20:cb:fc:4f:62:60:9b:33:f3:3f: a5:60:5a:ff:17:81:b2:68:2f:c0:97:d2:5f:d1:6a: f1:a0:eb:88:b6:43:27:c7:df:95:c6:f0:bc:8b:91: ea:a2:30:5e:a9:e0:79:93:70:31:6f:ff:c0:c1:f4: 18:7b:33:a4:91:56:2c:d8:b9:1f:ed:2a:ba:95:67: 06:c2:79:15:a1:7f:d1:01:55:da:c5:f0:c0:b8:8e: c7:cd:8d:a5:5c:5c:6f:6d:51:c0:a6:f8:da:5a:93: f4:45:73:70:33:95:fb:3a:30:fd:c3:b6:a3:db:7a: 09:a9:24:99:42:dd:d2:51:c7:12:91:82:c8:42:d5: 23:b6:60:c6:db:cd:d1:eb:70:07:ec:2c:56:b0:f6: 19:eb:3d:b2:5d:6c:70:0f:a0:56:58:cf:20:66:f8: 30:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:00:19:72:2F:21:59:FA:21:08:6E:4F:86:00:8D:16:BD:89:F3:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2cf7fbda-7891-367f-a7fb-a9707dc1bf31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:e7:c4:2a:ef:8e:23:da:fb:f5:58:f1:f5:9f:13:a1:44:04: 3f:1d:dc:25:02:cc:c9:5a:cf:42:28:60:2a:50:bb:29:11:b9: 7d:e2:97:d5:fb:78:3c:49:99:8c:f7:9a:a7:2f:fe:9d:c4:3e: 90:c2:53:cc:e6:01:b3:af:63:be:a3:29:83:88:2b:cd:57:a7: 87:75:d1:b4:03:57:d4:2e:bd:d4:ac:57:bf:ad:b6:36:43:80: bc:d3:77:31:0a:3a:bb:e8:f5:db:0f:f2:d3:c9:9c:0b:f4:8a: 9f:9b:d9:79:bb:e1:64:04:56:b7:ef:8f:0b:a4:c2:09:79:87: a7:c7:ba:b3:40:b1:3d:57:4c:c9:d1:42:9a:70:6f:0f:c7:1e: 08:e3:26:14:3c:7c:27:8b:35:ed:9a:65:cd:70:76:fc:05:87: 50:a3:ce:f9:9b:11:38:01:b4:c4:f4:c2:62:62:fa:cf:78:0f: 41:78:52:3f:8f:84:f7:8d:d6:81:0e:99:b3:0c:b8:28:44:4d: b6:c6:d1:6c:e2:ab:91:f0:75:87:a9:e5:5b:e8:0c:86:4a:81: dd:d0:cd:b4:67:14:88:34:b4:60:82:5b:ad:24:55:cf:12:c8: 9a:b8:e4:0f:f4:70:5c:68:26:80:63:8a:32:2d:0e:79:5b:c8: 2e:70:24:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvS6G01J8OV+SkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk YTI0ZWNhZWMtZDYyZi00YTNmLTlmOWYtODMxMzIwZDcwODRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlIAZ8p1cbQPT5fGqgfQvgLnmjyBHpywHYMW LvU6oHYytnnMl8UhYXFlGsYLntzz0k7FdwIZz1+gqCpwNeTw7o4IDNF3Nb+jHOFa SsiogVJpcHtpSuW54PSHIANJoyDL/E9iYJsz8z+lYFr/F4GyaC/Al9Jf0WrxoOuI tkMnx9+VxvC8i5HqojBeqeB5k3Axb//AwfQYezOkkVYs2Lkf7Sq6lWcGwnkVoX/R AVXaxfDAuI7HzY2lXFxvbVHApvjaWpP0RXNwM5X7OjD9w7aj23oJqSSZQt3SUccS kYLIQtUjtmDG283R63AH7CxWsPYZ6z2yXWxwD6BWWM8gZvgwcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEAGXIvIVn6IQhuT4YAjRa9ifNtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmNmN2ZiZGEtNzg5MS0z NjdmLWE3ZmItYTk3MDdkYzFiZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPnxCrvjiPa+/VY8fWfE6FEBD8d3CUCzMlaz0IoYCpQuykRuX3il9X7 eDxJmYz3mqcv/p3EPpDCU8zmAbOvY76jKYOIK81Xp4d10bQDV9QuvdSsV7+ttjZD gLzTdzEKOrvo9dsP8tPJnAv0ip+b2Xm74WQEVrfvjwukwgl5h6fHurNAsT1XTMnR Qppwbw/HHgjjJhQ8fCeLNe2aZc1wdvwFh1CjzvmbETgBtMT0wmJi+s94D0F4Uj+P hPeN1oEOmbMMuChETbbG0Wziq5HwdYep5VvoDIZKgd3QzbRnFIg0tGCCW60kVc8S yJq45A/0cFxoJoBjijItDnlbyC5wJFY= -----END CERTIFICATE-----Generated at Mon Sep 21 04:13:46 2026 by rpki-client