$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e111e66-290b-3cf3-ae1d-362c72b4d182.roa File: 2e111e66-290b-3cf3-ae1d-362c72b4d182.roa (raw, json) Hash identifier: BwM2pjv6szGv7Jxl9m3mFUqFaVAA2JdNcvALmVzScbw= Subject key identifier: F3:B9:1F:5F:B4:6C:96:45:F1:6E:6A:9F:95:41:5F:B5:3B:F6:28:49 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F2ABD2ED11AFD8D74C06FC000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e111e66-290b-3cf3-ae1d-362c72b4d182.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 26134 IP address blocks: 216.168.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:2e:d1:1a:fd:8d:74:c0:6f:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=af6b2f88-c279-4b8c-9304-b7a75dc55209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9b:cb:c3:24:c8:7a:ad:f9:f5:e5:5d:22:32: ba:43:1f:0d:97:39:93:c6:07:70:73:39:09:cd:db: 6c:48:e0:e3:f5:d7:4a:c9:67:c4:93:78:55:4d:b5: b9:c7:c3:33:47:fd:e3:fd:1c:b2:52:be:55:ff:bc: 58:4f:e0:a5:0a:1f:1f:8f:55:3d:6b:d3:b5:c0:35: a7:3c:89:16:c2:c8:1f:60:93:5c:7c:9a:92:98:b5: 73:5c:64:05:e8:80:b8:6d:d6:ff:83:cd:e2:02:22: be:20:35:4c:b2:4d:30:ef:bb:0b:0a:56:a5:e2:ea: 13:26:d2:8b:05:32:b6:cb:30:8f:ab:d9:4c:1c:5c: 02:3a:94:e6:9a:64:1b:77:f0:db:f8:61:d8:54:38: 38:de:db:38:5c:dc:b8:01:65:8e:83:dc:d6:e4:f8: 0a:3d:b2:aa:ae:2f:52:64:62:b9:5e:b0:64:e8:c4: 5e:2d:3f:f3:fb:dd:8a:78:f5:e4:d1:2c:58:08:19: 9c:e3:07:38:4f:e6:b4:d1:44:5c:a4:74:f2:f2:5e: 5e:d1:e2:ec:e3:e7:9e:73:d6:c4:62:82:af:9e:bb: a3:c8:0d:ca:b1:57:2d:a7:a4:66:aa:e0:9b:e9:e5: f9:fe:6c:34:d2:46:a5:bf:cd:ae:9f:e2:97:50:06: e3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B9:1F:5F:B4:6C:96:45:F1:6E:6A:9F:95:41:5F:B5:3B:F6:28:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e111e66-290b-3cf3-ae1d-362c72b4d182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ad:44:95:20:f3:ca:28:ea:60:9a:b4:9d:0b:ea:b0:03:58: ac:6f:d1:cb:e3:fe:54:87:35:72:18:ff:21:7c:82:f6:95:0f: 8b:d0:9a:e4:07:9c:24:17:3b:dd:e4:c6:ca:b9:10:c0:7c:e2: e4:44:03:ad:a0:5a:35:fc:4b:ea:1d:0a:db:5a:aa:6b:47:85: 99:4f:79:e2:34:25:71:6e:b3:78:ec:7b:d9:04:af:8c:b9:12: 88:9f:35:53:58:47:68:b3:70:84:26:04:66:f7:89:a3:ab:eb: 69:86:89:92:1a:2f:57:a4:21:be:4c:f5:6b:8b:fd:99:a0:ee: 47:4d:03:a1:1f:e4:ab:69:f0:e9:e5:72:68:ba:a4:72:a8:4f: 26:d7:37:03:9e:05:e4:50:04:06:44:e6:5b:f6:47:6b:9e:3f: e6:18:56:55:9a:83:ca:d1:94:0e:18:ed:5a:91:68:27:91:91: 63:d2:b8:f1:77:81:de:29:16:2b:f6:8a:9a:a8:43:06:29:a1: 6a:50:f6:f3:92:16:7d:59:00:8a:95:a3:b9:58:8e:0e:6d:27: c4:6e:21:08:43:83:3b:96:79:5c:77:6e:df:f4:14:41:27:6d: 1d:8d:6b:93:2c:da:5f:a7:e7:e7:8d:a2:d4:a0:c3:7e:26:f7: b3:3f:55:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvS7RGv2NdMBvwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk YWY2YjJmODgtYzI3OS00YjhjLTkzMDQtYjdhNzVkYzU1MjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpvLwyTIeq359eVdIjK6Qx8NlzmTxgdwczkJ zdtsSODj9ddKyWfEk3hVTbW5x8MzR/3j/RyyUr5V/7xYT+ClCh8fj1U9a9O1wDWn PIkWwsgfYJNcfJqSmLVzXGQF6IC4bdb/g83iAiK+IDVMsk0w77sLClal4uoTJtKL BTK2yzCPq9lMHFwCOpTmmmQbd/Db+GHYVDg43ts4XNy4AWWOg9zW5PgKPbKqri9S ZGK5XrBk6MReLT/z+92KePXk0SxYCBmc4wc4T+a00URcpHTy8l5e0eLs4+eec9bE YoKvnrujyA3KsVctp6RmquCb6eX5/mw00kalv82un+KXUAbjlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPO5H1+0bJZF8W5qn5VBX7U79ihJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmUxMTFlNjYtMjkwYi0z Y2YzLWFlMWQtMzYyYzcyYjRkMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACitRJUg88oo6mCatJ0L6rADWKxv0cvj/lSHNXIY/yF8gvaVD4vQmuQH nCQXO93kxsq5EMB84uREA62gWjX8S+odCttaqmtHhZlPeeI0JXFus3jse9kEr4y5 EoifNVNYR2izcIQmBGb3iaOr62mGiZIaL1ekIb5M9WuL/Zmg7kdNA6Ef5Ktp8Onl cmi6pHKoTybXNwOeBeRQBAZE5lv2R2ueP+YYVlWag8rRlA4Y7VqRaCeRkWPSuPF3 gd4pFiv2ipqoQwYpoWpQ9vOSFn1ZAIqVo7lYjg5tJ8RuIQhDgzuWeVx3bt/0FEEn bR2Na5Ms2l+n5+eNotSgw34m97M/VRA= -----END CERTIFICATE-----Generated at Mon Sep 21 03:35:42 2026 by rpki-client