$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4bea65bf-94af-3f68-bf4e-a594f8411897.roa File: 4bea65bf-94af-3f68-bf4e-a594f8411897.roa (raw, json) Hash identifier: Y8xWJ3NO1X4tLppdRth8CYW7tAiA30ym6DXDIAFVcFw= Subject key identifier: 21:04:FD:A0:A0:7E:5C:49:27:46:F4:8C:B2:EA:1D:53:7D:FB:61:CF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F0672641B9B3AD419F95094C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4bea65bf-94af-3f68-bf4e-a594f8411897.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 7342 IP address blocks: 216.168.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:64:1b:9b:3a:d4:19:f9:50:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=828b61e4-28f7-4909-843d-318e608989ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c3:e8:f0:58:c2:14:4f:2b:fa:c2:c6:0c:a4: 51:94:6c:d0:21:85:8c:ae:cb:68:ba:49:bd:b1:77: e9:ae:13:98:34:16:a8:54:24:dd:73:1a:bb:0f:4a: ef:f6:83:32:d5:0c:92:23:28:02:3d:ad:3a:56:ea: a7:ab:e9:2e:0b:ad:d5:91:11:c8:dc:be:0e:6f:41: 2b:87:fd:99:09:48:29:d1:91:53:5b:29:9c:38:a2: 88:e9:1e:84:b7:ed:b9:75:6a:5d:22:60:a0:26:fb: a3:83:9f:59:c2:1e:a2:8e:2a:39:e1:db:da:41:73: c7:5b:e8:bc:c8:2a:a6:95:a7:5b:eb:c4:ee:79:89: 85:a8:49:8a:40:27:e6:79:4f:5f:c6:dc:b6:da:73: 47:3f:ca:ad:b5:a6:68:c8:f1:61:88:4f:dd:36:fa: 97:5a:4f:9b:3f:55:68:8a:c4:bb:a9:fd:29:d4:4d: 26:4e:3e:8f:a8:5a:2c:f5:18:ac:bf:9b:2e:38:c2: fd:d5:4f:c6:6e:5d:22:02:61:b4:e6:59:30:b4:84: 1f:3e:56:c2:e2:b3:44:98:21:b6:45:3c:b4:e6:9f: f4:d6:7b:50:58:dc:d1:e1:4d:4c:1d:1f:89:4e:f8: fa:32:43:d4:b0:33:09:b3:0a:f6:fb:9b:bd:38:51: c1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:04:FD:A0:A0:7E:5C:49:27:46:F4:8C:B2:EA:1D:53:7D:FB:61:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4bea65bf-94af-3f68-bf4e-a594f8411897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:36:38:55:a5:6f:54:e2:67:53:f6:c7:e0:60:4c:d7:35:f8: 73:f0:b8:49:37:7d:81:b3:81:30:57:f9:33:92:7f:78:35:27: f7:57:3f:ce:dd:cb:92:ee:c0:24:5c:4a:a4:ba:25:a4:8c:40: d7:f2:19:66:dd:53:aa:3a:60:16:a2:35:22:d5:2d:07:6f:b1: 17:16:1b:c1:07:bf:bf:40:fa:31:6c:f2:48:87:ff:f5:97:a0: 69:61:ea:3f:af:8a:e5:28:04:e1:e1:55:20:c8:19:a1:2e:8e: c7:8a:b9:1f:57:a5:36:81:35:b5:cc:43:97:62:df:63:4b:81: 21:2e:b8:7e:1c:b0:12:58:2a:97:91:9f:93:39:68:48:c8:6f: 29:f7:15:53:f6:fa:e5:ef:e3:e1:b0:d2:59:38:1e:a3:90:f8: da:56:b4:ee:2c:f5:1f:d8:2a:ba:8b:c6:87:2e:aa:95:8d:9b: f1:cf:9d:c5:37:a0:22:f2:ef:3c:89:a6:77:d1:8c:c9:c0:51: 75:78:5e:38:84:6b:c4:10:2a:bf:d9:a1:be:e2:0f:fe:2d:c7: 99:4c:00:b0:3e:37:13:11:ca:e1:a5:33:e9:71:7b:86:b7:14: d9:34:41:fb:dc:50:80:1b:2d:91:6c:ec:36:03:46:fa:4c:4f: fa:3a:95:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcmQbmzrUGflQlMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk ODI4YjYxZTQtMjhmNy00OTA5LTg0M2QtMzE4ZTYwODk4OWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMPo8FjCFE8r+sLGDKRRlGzQIYWMrstoukm9 sXfprhOYNBaoVCTdcxq7D0rv9oMy1QySIygCPa06Vuqnq+kuC63VkRHI3L4Ob0Er h/2ZCUgp0ZFTWymcOKKI6R6Et+25dWpdImCgJvujg59Zwh6ijio54dvaQXPHW+i8 yCqmladb68TueYmFqEmKQCfmeU9fxty22nNHP8qttaZoyPFhiE/dNvqXWk+bP1Vo isS7qf0p1E0mTj6PqFos9Risv5suOML91U/Gbl0iAmG05lkwtIQfPlbC4rNEmCG2 RTy05p/01ntQWNzR4U1MHR+JTvj6MkPUsDMJswr2+5u9OFHBTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEE/aCgflxJJ0b0jLLqHVN9+2HPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGJlYTY1YmYtOTRhZi0z ZjY4LWJmNGUtYTU5NGY4NDExODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc2OFWlb1TiZ1P2x+BgTNc1+HPwuEk3fYGzgTBX+TOSf3g1J/dXP87d y5LuwCRcSqS6JaSMQNfyGWbdU6o6YBaiNSLVLQdvsRcWG8EHv79A+jFs8kiH//WX oGlh6j+viuUoBOHhVSDIGaEujseKuR9XpTaBNbXMQ5di32NLgSEuuH4csBJYKpeR n5M5aEjIbyn3FVP2+uXv4+Gw0lk4HqOQ+NpWtO4s9R/YKrqLxocuqpWNm/HPncU3 oCLy7zyJpnfRjMnAUXV4XjiEa8QQKr/Zob7iD/4tx5lMALA+NxMRyuGlM+lxe4a3 FNk0QfvcUIAbLZFs7DYDRvpMT/o6lWg= -----END CERTIFICATE-----Generated at Tue Sep 22 10:10:56 2026 by rpki-client