$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/04f64006-7bfd-3698-8c4a-f13fb80ea07e.roa File: 04f64006-7bfd-3698-8c4a-f13fb80ea07e.roa (raw, json) Hash identifier: xxU0+cB0G7EfDNVpa1XHF2FPJqJdaVolf7izE9fmT00= Subject key identifier: 25:FC:E7:1B:7D:3F:0D:67:85:8B:EA:8A:30:AD:21:9F:9E:C3:33:FB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F17324614ED4D88E27290E280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/04f64006-7bfd-3698-8c4a-f13fb80ea07e.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 397212 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:46:14:ed:4d:88:e2:72:90:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=71c2917f-48fe-4ebd-8306-1ed3a9af8ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ae:ba:ed:53:25:4a:07:ef:50:bf:24:4d:b4: f0:52:be:f1:43:37:c8:f3:a7:89:77:37:d3:fd:46: 31:c7:c9:31:52:cf:6c:84:02:9a:82:29:9e:fa:48: ce:39:7c:d0:43:cf:ab:2d:52:ba:04:62:80:71:98: 6b:82:1b:58:e4:17:50:30:73:cc:76:eb:92:36:be: b6:89:85:06:d9:d6:fc:3c:0a:57:86:b8:fd:c6:e6: f6:bb:f6:d8:f0:72:f0:1b:62:48:ef:4b:e1:c5:c3: 1f:04:bb:9c:46:46:c8:d7:15:5b:92:c2:0e:21:3d: 4e:e9:55:4b:39:cd:e6:0b:6a:70:b1:63:a1:68:cd: 71:4c:20:41:1d:3e:b4:28:90:78:b7:9e:51:24:f8: 33:ec:f4:28:9a:7e:b5:2b:9c:86:80:6e:2e:7b:25: 67:b8:10:d9:30:80:5f:0a:22:6d:20:c5:dc:25:ff: 22:18:d3:4b:98:e7:2f:3c:47:d0:a3:ea:fe:3f:f7: a1:cd:27:fc:5b:8a:6d:2b:ab:b1:46:27:32:f7:17: 89:85:e3:c9:94:e2:f0:a6:9b:bb:05:77:ee:ec:ac: 81:2b:af:14:88:71:62:59:95:71:96:5c:12:ed:cb: 89:45:37:1e:8a:6c:17:29:e1:4f:3d:ff:09:70:7f: 15:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FC:E7:1B:7D:3F:0D:67:85:8B:EA:8A:30:AD:21:9F:9E:C3:33:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/04f64006-7bfd-3698-8c4a-f13fb80ea07e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:23:74:56:ab:55:a2:02:2c:e1:d2:f6:66:12:fb:66:74:ea: 9c:ae:7f:20:18:44:cf:67:a9:ce:8f:fe:99:f2:89:0c:89:97: 14:57:36:b9:17:4d:63:88:9e:f2:2f:cb:8e:3f:a0:2f:22:73: 09:94:cd:b6:0e:1f:e6:95:b5:0f:57:d3:11:6f:3f:02:e0:95: 59:43:38:9f:13:c1:4e:79:78:07:c6:78:f9:b1:c2:c3:24:c2: 63:b0:8a:83:f3:a2:1c:7e:82:8d:c4:da:df:b2:47:ce:f7:79: 9c:a9:2d:88:9c:5a:ae:76:10:d7:0d:23:d9:9c:90:9a:81:62: 22:8e:65:04:82:0f:01:66:06:d9:27:3f:26:33:1d:2d:70:8a: 45:56:a3:89:ab:33:79:b1:da:d6:c2:a9:5a:3e:e9:68:77:fd: d6:94:25:ae:a6:03:b3:46:ee:0f:11:7d:3f:13:28:7a:88:cc: be:af:f6:80:a7:8c:11:aa:62:f1:b1:e0:b0:33:81:bd:21:60: 4c:ed:fb:c0:34:af:32:1e:84:f8:47:cb:70:d9:c1:de:71:df: 4a:6b:85:87:a0:ec:c1:8e:e2:58:9b:83:4a:4e:58:7c:4c:8d: af:84:99:1b:39:29:5d:b2:cc:94:cf:54:ce:2b:3f:7c:b2:1b: d1:04:ed:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkYU7U2I4nKQ4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk NzFjMjkxN2YtNDhmZS00ZWJkLTgzMDYtMWVkM2E5YWY4YmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiq667VMlSgfvUL8kTbTwUr7xQzfI86eJdzfT /UYxx8kxUs9shAKagime+kjOOXzQQ8+rLVK6BGKAcZhrghtY5BdQMHPMduuSNr62 iYUG2db8PApXhrj9xub2u/bY8HLwG2JI70vhxcMfBLucRkbI1xVbksIOIT1O6VVL Oc3mC2pwsWOhaM1xTCBBHT60KJB4t55RJPgz7PQomn61K5yGgG4ueyVnuBDZMIBf CiJtIMXcJf8iGNNLmOcvPEfQo+r+P/ehzSf8W4ptK6uxRicy9xeJhePJlOLwppu7 BXfu7KyBK68UiHFiWZVxllwS7cuJRTceimwXKeFPPf8JcH8VQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCX85xt9Pw1nhYvqijCtIZ+ewzP7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDRmNjQwMDYtN2JmZC0z Njk4LThjNGEtZjEzZmI4MGVhMDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAjdFarVaICLOHS9mYS+2Z06pyufyAYRM9nqc6P/pnyiQyJlxRXNrkX TWOInvIvy44/oC8icwmUzbYOH+aVtQ9X0xFvPwLglVlDOJ8TwU55eAfGePmxwsMk wmOwioPzohx+go3E2t+yR873eZypLYicWq52ENcNI9mckJqBYiKOZQSCDwFmBtkn PyYzHS1wikVWo4mrM3mx2tbCqVo+6Wh3/daUJa6mA7NG7g8RfT8TKHqIzL6v9oCn jBGqYvGx4LAzgb0hYEzt+8A0rzIehPhHy3DZwd5x30prhYeg7MGO4libg0pOWHxM ja+EmRs5KV2yzJTPVM4rP3yyG9EE7Tg= -----END CERTIFICATE-----Generated at Mon Sep 21 05:05:19 2026 by rpki-client