$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2406f6b3-3a51-392e-8324-0e5509017a74.roa File: 2406f6b3-3a51-392e-8324-0e5509017a74.roa (raw, json) Hash identifier: lk+q137GJ9scu8FVcP14iz/pVQSMmen4F0l/0TLUq40= Subject key identifier: 60:16:F2:2C:BE:43:A1:02:AB:2E:B7:F2:0D:D4:25:C5:BD:D6:A4:A0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F17323DD8A81EC09E9383FAB0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2406f6b3-3a51-392e-8324-0e5509017a74.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 396546 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:3d:d8:a8:1e:c0:9e:93:83:fa:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=d88d9978-f1b5-4ce4-b2be-b7883d25f630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e0:84:5c:23:6d:c3:7e:54:7f:85:4b:1a:67: 6b:46:a4:11:02:da:e6:0d:cb:df:f4:b0:fb:b4:04: f6:1c:46:77:13:bf:e8:ee:14:5c:b1:7b:e0:bd:0b: 96:ce:f0:bb:b9:14:08:d3:4d:73:f2:06:fd:62:8c: a6:b6:34:38:5c:81:ed:0b:f6:de:ac:89:f7:4b:5a: e5:fc:1b:25:d6:ec:9e:74:4b:bf:1c:14:21:62:75: 13:5e:f2:7c:df:4a:a9:46:a7:77:d2:54:81:a2:a6: fb:19:7e:82:3e:9c:e3:83:8c:67:ce:b7:6a:31:8c: e9:21:a8:25:cb:20:19:27:a0:86:19:51:9a:4d:8c: fe:f1:18:20:39:d8:49:a2:4d:b2:b0:dc:de:fb:cb: b4:ee:d1:7b:ed:3a:6a:43:b3:20:db:a3:5c:1e:30: ef:f3:a7:29:a6:39:5d:60:c1:18:f6:0e:a4:93:54: 77:12:7b:c0:3c:49:32:7d:59:c0:5f:29:8c:cf:cc: 97:5d:fe:d0:e3:f5:f7:6c:79:aa:4c:87:53:8f:18: f6:55:70:4f:b8:bb:96:9d:85:ea:32:af:64:e0:cc: ce:7c:c5:28:91:b4:e5:ce:b2:dc:b0:1e:45:6f:ef: 08:14:05:5b:52:73:90:4d:44:62:d4:4b:6f:80:e6: e8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:16:F2:2C:BE:43:A1:02:AB:2E:B7:F2:0D:D4:25:C5:BD:D6:A4:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2406f6b3-3a51-392e-8324-0e5509017a74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a2:27:d6:20:71:eb:be:56:27:c0:f5:41:bf:11:09:d8:33: 1c:bf:52:ad:b9:7c:a1:de:ea:ea:fa:d2:7b:c2:2e:9e:ee:48: de:9c:a7:e5:e6:23:78:40:4f:0a:76:d6:98:85:80:ab:bc:b0: 06:e9:d6:5b:87:f7:ca:36:98:25:f6:29:d3:44:bc:3e:09:7c: 35:7c:50:65:e7:83:0a:4a:e5:17:df:df:59:2b:a8:b7:23:7d: 0f:b8:48:5a:db:45:c4:5a:b0:a8:20:59:cd:2e:b2:d0:0f:33: 17:34:cf:56:59:a0:af:76:92:c3:13:ae:a7:17:75:12:44:7c: bc:f3:c7:f1:9b:21:11:49:54:ad:01:39:d0:92:a1:bb:e1:d1: 0f:c2:13:f6:38:93:5a:ed:6e:1b:ef:0e:77:2f:bc:71:c0:c5: 60:0b:a8:3f:00:88:68:9a:a0:68:d3:59:3f:ca:29:ab:d9:e0: a9:f0:3b:e2:62:6a:41:76:c3:66:cb:e9:b4:a2:1c:69:ef:48: a5:53:d4:b8:12:32:88:27:7d:1b:39:cd:11:b0:89:29:d3:5d: 9c:93:56:01:da:9a:d1:98:b4:8b:07:69:98:3d:ea:5b:ea:5b: 38:c5:ad:11:74:05:41:92:8c:da:73:db:22:b7:f8:af:94:4a: 9a:c5:21:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMj3YqB7AnpOD+rAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk ZDg4ZDk5NzgtZjFiNS00Y2U0LWIyYmUtYjc4ODNkMjVmNjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+CEXCNtw35Uf4VLGmdrRqQRAtrmDcvf9LD7 tAT2HEZ3E7/o7hRcsXvgvQuWzvC7uRQI001z8gb9YoymtjQ4XIHtC/berIn3S1rl /Bsl1uyedEu/HBQhYnUTXvJ830qpRqd30lSBoqb7GX6CPpzjg4xnzrdqMYzpIagl yyAZJ6CGGVGaTYz+8RggOdhJok2ysNze+8u07tF77TpqQ7Mg26NcHjDv86cppjld YMEY9g6kk1R3EnvAPEkyfVnAXymMz8yXXf7Q4/X3bHmqTIdTjxj2VXBPuLuWnYXq Mq9k4MzOfMUokbTlzrLcsB5Fb+8IFAVbUnOQTURi1EtvgObo0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAW8iy+Q6ECqy638g3UJcW91qSgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjQwNmY2YjMtM2E1MS0z OTJlLTgzMjQtMGU1NTA5MDE3YTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeiJ9Ygceu+VifA9UG/EQnYMxy/Uq25fKHe6ur60nvCLp7uSN6cp+Xm I3hATwp21piFgKu8sAbp1luH98o2mCX2KdNEvD4JfDV8UGXngwpK5Rff31krqLcj fQ+4SFrbRcRasKggWc0ustAPMxc0z1ZZoK92ksMTrqcXdRJEfLzzx/GbIRFJVK0B OdCSobvh0Q/CE/Y4k1rtbhvvDncvvHHAxWALqD8AiGiaoGjTWT/KKavZ4KnwO+Ji akF2w2bL6bSiHGnvSKVT1LgSMognfRs5zRGwiSnTXZyTVgHamtGYtIsHaZg96lvq WzjFrRF0BUGSjNpz2yK3+K+USprFIZs= -----END CERTIFICATE-----Generated at Tue Sep 22 16:56:14 2026 by rpki-client