$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2d940ba4-43a4-30d6-b32b-13928dc0e484.roa File: 2d940ba4-43a4-30d6-b32b-13928dc0e484.roa (raw, json) Hash identifier: XwQ7OQb0fQCS3sdObwLtQMnJ37jCHwKZOgPvyrnrH+Y= Subject key identifier: B6:A0:C9:F7:74:F1:5D:8F:7E:C7:6B:F8:8A:50:82:BB:60:B5:E0:FE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F1732452DFEB0FFB557973A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2d940ba4-43a4-30d6-b32b-13928dc0e484.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 396611 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:45:2d:fe:b0:ff:b5:57:97:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=2c7cec66-eefe-4bd0-b822-9af9efe03397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:df:bd:e0:12:a0:f7:a0:da:e3:88:fe:c3:37: ae:17:9b:29:f8:ab:bb:95:17:13:aa:ef:28:a9:ed: 38:16:bd:37:6d:84:96:d5:ee:3f:8f:12:4d:f7:23: 4f:21:b2:fc:9e:71:66:2c:c3:a7:7d:88:66:9f:17: 66:e5:12:1a:ea:9e:02:9a:a9:75:d4:3d:6b:31:8c: ca:42:e9:10:33:6d:10:84:bb:a9:92:ae:4a:90:2e: 39:dc:b9:f3:ab:0e:28:c9:6e:74:89:bb:cf:1a:9b: 5b:5d:39:ae:72:35:f5:88:93:4c:e3:db:0e:50:22: 03:ab:86:8b:42:50:d6:6b:58:e9:80:ed:7d:1a:5d: 9a:36:41:05:d2:a3:19:11:d2:2b:26:27:6a:fe:fc: 83:48:a2:f7:5d:78:41:8d:0d:de:62:09:b3:7c:5b: 1e:ea:5c:00:e7:d3:0b:63:73:08:4d:42:aa:25:6c: 44:a7:ef:15:83:62:c2:fd:d2:bf:18:81:7f:1e:7e: e1:98:47:3b:88:a7:42:21:63:d4:17:83:3e:92:20: b6:7a:c2:76:1c:ec:69:d2:45:52:ca:27:ce:16:c2: 62:0e:67:74:41:6c:a7:e8:c9:ee:d5:74:76:f7:10: 15:cf:97:a4:85:3b:5f:95:c1:5e:59:83:cf:0f:a2: 7b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A0:C9:F7:74:F1:5D:8F:7E:C7:6B:F8:8A:50:82:BB:60:B5:E0:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2d940ba4-43a4-30d6-b32b-13928dc0e484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:05:d3:60:cf:72:7b:47:6e:3b:f6:00:c3:91:27:d3:3e:ad: 39:22:0c:e1:18:31:96:e3:0b:fd:11:cd:55:09:3c:21:dd:b2: 47:80:ce:10:df:1c:0c:e1:2a:ef:09:39:c5:12:7a:8f:b4:6c: 88:92:93:ba:0c:14:88:15:bb:43:d0:b1:73:35:fc:02:af:fd: b1:25:3f:56:f4:6b:31:88:84:00:c8:d4:34:21:be:c6:72:27: ed:a2:f8:cb:2e:df:0f:be:4d:0e:7c:45:06:1c:c3:6e:a2:31: 1d:ce:01:d2:09:d4:90:c4:db:96:0a:30:f6:3b:76:4e:c9:48: 7f:8f:a3:3f:ca:92:a9:67:65:12:5c:ea:06:ee:9d:3c:56:b1: a7:c0:80:e8:ab:53:2b:5b:6a:1b:e5:12:6d:12:32:0a:ae:cc: 39:41:11:03:f9:bf:57:a0:10:a6:48:8e:09:f1:34:27:01:bd: 9c:2d:4c:93:6c:85:2a:53:10:8d:ce:1a:79:98:7d:91:55:7f: 87:99:75:15:33:cf:d3:52:e0:40:c6:99:98:86:53:3e:9f:ad: 92:9c:db:c6:5a:be:81:0c:dd:48:70:95:53:68:e5:b2:33:b9: 81:da:ee:d1:a9:78:0e:df:ea:28:b1:96:32:e0:6b:bc:54:8f: 0b:4e:16:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkUt/rD/tVeXOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk MmM3Y2VjNjYtZWVmZS00YmQwLWI4MjItOWFmOWVmZTAzMzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9+94BKg96Da44j+wzeuF5sp+Ku7lRcTqu8o qe04Fr03bYSW1e4/jxJN9yNPIbL8nnFmLMOnfYhmnxdm5RIa6p4Cmql11D1rMYzK QukQM20QhLupkq5KkC453Lnzqw4oyW50ibvPGptbXTmucjX1iJNM49sOUCIDq4aL QlDWa1jpgO19Gl2aNkEF0qMZEdIrJidq/vyDSKL3XXhBjQ3eYgmzfFse6lwA59ML Y3MITUKqJWxEp+8Vg2LC/dK/GIF/Hn7hmEc7iKdCIWPUF4M+kiC2esJ2HOxp0kVS yifOFsJiDmd0QWyn6Mnu1XR29xAVz5ekhTtflcFeWYPPD6J7twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLagyfd08V2Pfsdr+IpQgrtgteD+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmQ5NDBiYTQtNDNhNC0z MGQ2LWIzMmItMTM5MjhkYzBlNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAF02DPcntHbjv2AMORJ9M+rTkiDOEYMZbjC/0RzVUJPCHdskeAzhDf HAzhKu8JOcUSeo+0bIiSk7oMFIgVu0PQsXM1/AKv/bElP1b0azGIhADI1DQhvsZy J+2i+Msu3w++TQ58RQYcw26iMR3OAdIJ1JDE25YKMPY7dk7JSH+Poz/KkqlnZRJc 6gbunTxWsafAgOirUytbahvlEm0SMgquzDlBEQP5v1egEKZIjgnxNCcBvZwtTJNs hSpTEI3OGnmYfZFVf4eZdRUzz9NS4EDGmZiGUz6frZKc28ZavoEM3UhwlVNo5bIz uYHa7tGpeA7f6iixljLga7xUjwtOFl0= -----END CERTIFICATE-----Generated at Tue Sep 22 18:07:10 2026 by rpki-client