$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b76448b-db43-3421-ae9b-d68d11bb720c.roa File: 0b76448b-db43-3421-ae9b-d68d11bb720c.roa (raw, json) Hash identifier: votfR8xxsyc4jJBF8hU125QQsmBnaB9qVM24rUnoii0= Subject key identifier: 85:84:06:D9:19:22:A5:FF:B2:C0:88:C8:05:5E:A2:28:29:64:D2:46 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F17324BE60DEA3F9E8FF17440 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b76448b-db43-3421-ae9b-d68d11bb720c.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 396610 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:4b:e6:0d:ea:3f:9e:8f:f1:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=434edbf0-a6e8-49e1-9742-ab96a7168cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d4:ec:5f:d2:39:b6:49:bb:bf:fd:de:5d:40: 8a:70:24:61:ea:6b:ad:8a:95:4f:76:20:94:57:53: 10:55:45:52:c3:51:4c:b1:8a:37:a6:e4:98:35:6a: 34:f1:f2:7b:fe:60:2e:b5:ec:66:71:80:7f:8b:9f: f4:03:fc:cf:66:26:06:05:7d:97:3c:33:ac:5a:1c: 17:21:7f:fa:5c:e9:45:4a:6a:aa:24:63:62:82:d2: 1e:36:ac:12:04:a4:7e:82:50:19:8c:57:e2:79:27: ca:79:62:83:36:c2:ec:30:07:83:cc:c9:8c:ec:4f: 80:d2:45:c1:84:3d:6d:a0:d5:40:14:13:7e:6d:21: e1:87:3e:c3:2d:fe:4f:cd:eb:ce:a4:2f:d9:96:79: 30:fd:41:ca:8c:29:9f:99:ee:10:1e:93:8b:d1:7a: 4c:83:1b:a4:f7:5e:77:e6:38:a6:e0:15:04:d9:1d: eb:47:42:cc:7a:7e:7a:ef:60:4d:98:5f:0f:87:ce: b9:00:d8:a4:92:a8:2c:a2:05:05:3a:17:e4:53:7a: 14:f0:64:6e:5e:38:7a:c3:8d:97:48:16:2c:92:54: d2:c7:4a:ad:a1:83:cb:24:09:f1:42:44:22:02:3a: 1c:60:ee:91:02:62:33:a4:c8:30:67:f3:e3:ad:1d: 50:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:84:06:D9:19:22:A5:FF:B2:C0:88:C8:05:5E:A2:28:29:64:D2:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b76448b-db43-3421-ae9b-d68d11bb720c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c4:bc:52:ad:01:18:38:37:e0:64:ae:72:75:c1:12:66:7e: 42:9b:c4:80:66:cd:b7:39:f7:d6:a7:eb:11:98:2e:55:42:8a: 88:13:9a:a1:15:21:e8:6f:d4:df:b8:11:1a:2b:e1:8a:52:c0: 85:b1:22:c7:53:58:da:6d:a1:3a:a1:50:d0:5a:f2:ba:a8:01: 4a:9a:a7:21:d2:e8:00:84:85:65:84:7c:0e:f2:65:27:46:1f: 7f:71:c8:1b:ef:65:3a:39:72:bd:c9:c8:85:02:47:fb:04:32: 27:ae:5e:83:1c:3a:12:17:c6:8d:2d:a4:90:22:b1:d7:fb:df: c6:04:7b:83:99:cd:b2:b0:ca:be:2f:15:53:cd:c0:4f:f3:ba: 89:ed:5d:90:74:95:7c:f6:18:a3:d7:de:21:24:04:90:28:e6: f8:16:b2:eb:af:88:16:c7:f3:6c:50:11:7a:14:e2:4c:49:05: 23:36:dc:33:af:97:29:20:f4:d2:4c:2d:15:3c:2d:ac:a8:bd: fb:d2:43:76:98:b6:68:1f:e5:1e:ba:ed:da:6e:ca:3c:7b:ae: 4e:91:86:d6:6b:f1:b2:38:ea:fa:8a:70:94:ad:69:c3:ca:56: 8f:49:b4:11:b7:bc:56:73:d9:6f:0f:68:6e:58:a9:22:b3:d4: 64:70:7f:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkvmDeo/no/xdEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk NDM0ZWRiZjAtYTZlOC00OWUxLTk3NDItYWI5NmE3MTY4Y2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktTsX9I5tkm7v/3eXUCKcCRh6mutipVPdiCU V1MQVUVSw1FMsYo3puSYNWo08fJ7/mAutexmcYB/i5/0A/zPZiYGBX2XPDOsWhwX IX/6XOlFSmqqJGNigtIeNqwSBKR+glAZjFfieSfKeWKDNsLsMAeDzMmM7E+A0kXB hD1toNVAFBN+bSHhhz7DLf5PzevOpC/Zlnkw/UHKjCmfme4QHpOL0XpMgxuk9153 5jim4BUE2R3rR0LMen5672BNmF8Ph865ANikkqgsogUFOhfkU3oU8GRuXjh6w42X SBYsklTSx0qtoYPLJAnxQkQiAjocYO6RAmIzpMgwZ/PjrR1QWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWEBtkZIqX/ssCIyAVeoigpZNJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGI3NjQ0OGItZGI0My0z NDIxLWFlOWItZDY4ZDExYmI3MjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjEvFKtARg4N+BkrnJ1wRJmfkKbxIBmzbc599an6xGYLlVCiogTmqEV Iehv1N+4ERor4YpSwIWxIsdTWNptoTqhUNBa8rqoAUqapyHS6ACEhWWEfA7yZSdG H39xyBvvZTo5cr3JyIUCR/sEMieuXoMcOhIXxo0tpJAisdf738YEe4OZzbKwyr4v FVPNwE/zuontXZB0lXz2GKPX3iEkBJAo5vgWsuuviBbH82xQEXoU4kxJBSM23DOv lykg9NJMLRU8LayovfvSQ3aYtmgf5R667dpuyjx7rk6RhtZr8bI46vqKcJStacPK Vo9JtBG3vFZz2W8PaG5YqSKz1GRwf90= -----END CERTIFICATE-----Generated at Mon Sep 21 13:51:08 2026 by rpki-client