$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16047eb1-993d-352d-9982-ce65fa76b56a.roa File: 16047eb1-993d-352d-9982-ce65fa76b56a.roa (raw, json) Hash identifier: 3FMkl9YHnUVLtJZEVr8oEX3mOCwZCOfLV43dqJQqoCw= Subject key identifier: 5A:7A:0F:65:0B:E8:5D:80:2A:A2:E9:E3:EA:94:97:37:1F:0E:2D:E5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F173245B46350F8A33C86ED78 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16047eb1-993d-352d-9982-ce65fa76b56a.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 396550 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:45:b4:63:50:f8:a3:3c:86:ed:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=fed3e260-23c8-4f50-9e80-b087f919b9e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:46:91:ff:67:87:8f:39:6b:be:60:ce:90:21: cc:0e:78:ae:c8:05:56:30:23:db:08:da:37:b7:41: 7e:41:5c:63:b4:6f:0c:96:2d:89:e7:41:7e:9a:6a: f7:54:4e:07:ef:72:1a:98:ec:e7:23:7e:14:80:18: f6:82:7b:85:46:ab:d8:6b:75:e1:6f:8d:5e:73:68: 48:f2:14:60:89:48:5d:fc:72:51:aa:2e:c4:ee:2c: 8c:84:fc:a5:86:2e:a6:ee:a5:7e:27:f5:ca:07:91: 1b:d0:76:bc:9a:7a:33:5e:b3:fc:25:81:01:ab:27: d7:c7:2c:e8:05:c9:f5:2d:4f:99:2f:da:ac:ff:05: 4e:bd:93:2e:99:73:6b:8d:82:10:12:83:84:2f:83: c7:7c:ec:1e:21:35:74:7a:8c:57:30:4b:31:43:12: 69:5a:da:df:db:26:21:01:ef:2c:31:7e:e8:3c:97: 39:5c:e6:75:60:17:dd:7e:d9:92:b7:d4:e5:9f:06: 95:dc:0b:8b:f8:0d:4c:b6:95:bf:3e:54:4c:9b:e4: f6:94:85:3d:d8:cb:c5:7d:19:8d:83:85:cf:e0:ca: 6e:59:9f:4c:70:29:e3:47:96:f1:20:e2:ed:c4:61: 14:3e:d8:c9:f7:47:31:1a:f2:be:10:93:ef:43:ec: 21:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7A:0F:65:0B:E8:5D:80:2A:A2:E9:E3:EA:94:97:37:1F:0E:2D:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16047eb1-993d-352d-9982-ce65fa76b56a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:de:03:c7:7d:49:e5:50:29:62:10:8c:97:10:9d:ed:8d:4d: 7e:15:ce:de:de:f3:9d:1d:03:ce:63:fe:0b:ab:ad:16:f5:0b: 85:8f:c0:b8:a5:5f:d0:e5:b8:f3:7a:27:a7:77:46:91:9f:de: d1:69:2a:87:38:94:de:4d:7a:e3:62:d5:0c:f3:56:8a:de:27: 2b:42:ab:cf:82:39:6e:5a:82:61:84:ed:9f:a6:ed:cb:25:c1: fa:97:70:0d:f8:4f:65:41:e5:3e:e4:47:58:f0:e1:9d:3c:dd: d8:58:2a:c7:6f:54:26:de:4c:23:d7:6b:fc:da:00:f5:51:7e: 35:99:54:e5:1a:a6:b7:4a:10:46:f8:3e:ee:f5:3e:e6:23:e8: 89:0b:30:c5:eb:44:96:cf:36:ee:16:5a:49:b6:84:f3:11:be: f3:cf:b8:37:c0:75:bd:02:a1:d5:2f:8f:9e:3b:eb:ca:29:8d: f0:e1:0d:aa:dd:ad:8f:92:d3:2a:92:14:3b:3a:03:d1:6a:1f: 77:9a:01:72:36:dc:54:74:6b:57:a0:ec:5b:b3:9b:65:18:b3: 48:f8:1b:54:04:0f:15:e5:2a:34:f3:9d:08:01:09:2b:58:98: 95:dc:60:96:fd:b5:54:fb:4c:32:6e:25:87:ef:9e:50:68:8c: da:37:52:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkW0Y1D4ozyG7XgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk ZmVkM2UyNjAtMjNjOC00ZjUwLTllODAtYjA4N2Y5MTliOWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUaR/2eHjzlrvmDOkCHMDniuyAVWMCPbCNo3 t0F+QVxjtG8Mli2J50F+mmr3VE4H73IamOznI34UgBj2gnuFRqvYa3Xhb41ec2hI 8hRgiUhd/HJRqi7E7iyMhPylhi6m7qV+J/XKB5Eb0Ha8mnozXrP8JYEBqyfXxyzo Bcn1LU+ZL9qs/wVOvZMumXNrjYIQEoOEL4PHfOweITV0eoxXMEsxQxJpWtrf2yYh Ae8sMX7oPJc5XOZ1YBfdftmSt9TlnwaV3AuL+A1MtpW/PlRMm+T2lIU92MvFfRmN g4XP4MpuWZ9McCnjR5bxIOLtxGEUPtjJ90cxGvK+EJPvQ+whIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFp6D2UL6F2AKqLp4+qUlzcfDi3lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTYwNDdlYjEtOTkzZC0z NTJkLTk5ODItY2U2NWZhNzZiNTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbeA8d9SeVQKWIQjJcQne2NTX4Vzt7e850dA85j/gurrRb1C4WPwLil X9DluPN6J6d3RpGf3tFpKoc4lN5NeuNi1QzzVoreJytCq8+COW5agmGE7Z+m7csl wfqXcA34T2VB5T7kR1jw4Z083dhYKsdvVCbeTCPXa/zaAPVRfjWZVOUaprdKEEb4 Pu71PuYj6IkLMMXrRJbPNu4WWkm2hPMRvvPPuDfAdb0CodUvj54768opjfDhDard rY+S0yqSFDs6A9FqH3eaAXI23FR0a1eg7Fuzm2UYs0j4G1QEDxXlKjTznQgBCStY mJXcYJb9tVT7TDJuJYfvnlBojNo3Umo= -----END CERTIFICATE-----Generated at Mon Sep 21 16:52:34 2026 by rpki-client