$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1749735c-c733-3c4c-8b43-c2856d1431a4.roa File: 1749735c-c733-3c4c-8b43-c2856d1431a4.roa (raw, json) Hash identifier: ob+AMKyf66HzJdq34P3Cck/DM5fB/AZr/yseZSmIbAA= Subject key identifier: 8D:C2:C5:D2:0C:22:88:B6:6B:8D:CD:83:F3:B0:08:AA:10:31:50:E2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F173248349C656AE04BE2DCB8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1749735c-c733-3c4c-8b43-c2856d1431a4.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 397195 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:48:34:9c:65:6a:e0:4b:e2:dc:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=a261f191-594f-4b4d-80e6-c95dde9e9ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e3:9e:06:76:75:79:77:33:97:90:bd:a6:1f: f8:e7:51:d3:04:33:55:fa:4f:81:e3:f7:2b:a8:79: 31:9a:86:c1:ff:c1:1d:8b:f9:7b:10:c3:c1:30:37: 2b:d8:c5:e2:ed:b9:61:41:1c:88:b2:25:27:dc:13: 42:4c:b1:cd:f2:26:ab:cb:f9:d4:1c:c5:e3:77:5e: 16:bd:c1:d0:e6:a4:78:7c:a5:43:32:50:2d:84:97: e9:28:90:d0:ee:4e:a0:ec:9a:6d:03:7a:f5:4d:df: c9:ff:18:69:3d:64:90:e7:8b:a1:d8:9a:67:6d:14: 7c:3d:be:f1:43:21:41:3b:d5:fb:5d:23:20:fa:8e: cb:86:7d:93:43:9d:42:d0:a6:2a:74:37:63:ca:2a: ee:6f:79:34:03:93:bc:7f:ba:bb:20:d7:41:e5:e2: 80:f7:0a:09:49:2d:52:91:b1:ec:65:fa:c8:39:d7: 21:ed:4c:9c:f9:cc:6e:a9:d8:45:ae:19:c3:b1:6b: 96:4b:fb:09:f5:ce:da:46:13:e7:b2:64:75:c8:bf: 77:24:3c:3d:af:2d:17:8f:89:3d:44:7e:14:46:d2: 53:06:fe:43:ef:d1:53:22:59:54:d1:5b:d0:3a:3e: 49:d6:85:04:ca:ed:ca:40:7c:e5:ba:3a:1b:a4:b8: 21:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C2:C5:D2:0C:22:88:B6:6B:8D:CD:83:F3:B0:08:AA:10:31:50:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1749735c-c733-3c4c-8b43-c2856d1431a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:91:48:d2:42:f5:16:8a:36:21:da:f4:a9:0d:f0:44:ca:43: 45:27:95:1f:42:e0:3b:e6:91:44:94:fd:d3:e9:34:85:d1:a0: e6:b2:7f:97:45:23:f9:aa:1f:e6:a4:2f:63:e6:e4:e5:f5:ab: d8:a3:fa:52:65:14:d9:6f:2a:87:ff:ec:32:1f:37:f1:a7:57: 98:c7:cb:11:68:b1:4f:5d:12:21:e9:b8:43:d5:92:9f:b4:2c: 31:20:65:6f:03:8e:9b:8c:a6:7f:ef:42:03:a9:c7:bb:f9:58: f5:9e:a0:a5:95:e1:b0:9a:93:cf:e9:44:df:c5:b4:13:e5:5c: 04:20:6a:0b:e0:f3:19:09:41:dc:91:d2:f3:de:83:e8:87:48: 0c:3b:2d:fd:95:e9:9d:e9:a1:59:65:9e:3e:18:38:ba:39:ec: b4:1c:12:ed:cd:33:7c:c4:11:cc:b6:5d:e2:94:18:e3:43:ea: 56:22:b3:0d:f8:06:9b:3b:bf:b0:77:d9:dc:c2:f5:44:b0:55: 5d:b8:9d:6d:47:8d:68:10:c7:38:27:16:9c:7b:86:a6:11:f1: 9e:23:1c:35:6a:71:5a:4f:b6:1f:6b:75:aa:ff:9c:e9:c2:04: 25:ec:c0:64:c7:f3:a5:ea:c9:29:28:8d:e3:20:1f:1b:02:41: d5:43:24:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkg0nGVq4Evi3LgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk YTI2MWYxOTEtNTk0Zi00YjRkLTgwZTYtYzk1ZGRlOWU5YWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eOeBnZ1eXczl5C9ph/451HTBDNV+k+B4/cr qHkxmobB/8Edi/l7EMPBMDcr2MXi7blhQRyIsiUn3BNCTLHN8iary/nUHMXjd14W vcHQ5qR4fKVDMlAthJfpKJDQ7k6g7JptA3r1Td/J/xhpPWSQ54uh2JpnbRR8Pb7x QyFBO9X7XSMg+o7Lhn2TQ51C0KYqdDdjyirub3k0A5O8f7q7INdB5eKA9woJSS1S kbHsZfrIOdch7Uyc+cxuqdhFrhnDsWuWS/sJ9c7aRhPnsmR1yL93JDw9ry0Xj4k9 RH4URtJTBv5D79FTIllU0VvQOj5J1oUEyu3KQHzlujobpLgh7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3CxdIMIoi2a43Ng/OwCKoQMVDiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTc0OTczNWMtYzczMy0z YzRjLThiNDMtYzI4NTZkMTQzMWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiRSNJC9RaKNiHa9KkN8ETKQ0UnlR9C4DvmkUSU/dPpNIXRoOayf5dF I/mqH+akL2Pm5OX1q9ij+lJlFNlvKof/7DIfN/GnV5jHyxFosU9dEiHpuEPVkp+0 LDEgZW8DjpuMpn/vQgOpx7v5WPWeoKWV4bCak8/pRN/FtBPlXAQgagvg8xkJQdyR 0vPeg+iHSAw7Lf2V6Z3poVllnj4YOLo57LQcEu3NM3zEEcy2XeKUGOND6lYisw34 Bps7v7B32dzC9USwVV24nW1HjWgQxzgnFpx7hqYR8Z4jHDVqcVpPth9rdar/nOnC BCXswGTH86XqySkojeMgHxsCQdVDJA0= -----END CERTIFICATE-----Generated at Tue Sep 22 10:47:59 2026 by rpki-client