$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/335d0a9c-a461-350b-9da6-8ada62daffab.roa File: 335d0a9c-a461-350b-9da6-8ada62daffab.roa (raw, json) Hash identifier: rs21sDjQgDcSXVYg3YA3a8AspCPifd+gFFmUy6Q5ec4= Subject key identifier: 72:A5:36:12:E2:70:30:47:B3:1E:86:08:20:53:8C:09:47:9D:E6:36 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F17324138381DFEFD9DD65EDC Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/335d0a9c-a461-350b-9da6-8ada62daffab.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 397206 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:41:38:38:1d:fe:fd:9d:d6:5e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=ad8c0ad9-505c-4c5f-8caa-eb281295cfff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a4:5f:b1:7c:e8:a3:32:bc:7a:f0:3e:89:50: 91:6d:0c:61:a4:21:69:33:62:20:2e:91:6d:2f:32: 19:9b:ec:94:8a:ce:09:0c:f5:b1:7b:80:ab:45:ff: fa:1c:18:ca:a0:8d:12:4d:73:5b:ac:f8:64:95:e0: 8d:93:76:f5:3b:28:c3:ef:88:de:bb:ed:43:c8:db: da:9f:d7:11:9f:2c:9f:aa:f9:88:1f:7e:22:e2:b7: 97:d8:cf:d0:d8:03:2b:53:c2:57:65:a1:6e:05:63: 29:c1:19:97:26:01:c9:61:f3:07:a7:3b:ab:1b:77: 66:24:49:14:cb:d8:a1:bc:ce:58:2a:94:13:5e:96: aa:a1:3a:34:0c:49:3e:a5:c4:e7:85:3a:d7:75:e2: 2c:59:9e:c2:4c:dc:22:39:98:e2:a7:37:75:f3:71: 2d:50:ef:fc:0a:64:e3:e8:7d:71:1b:56:9f:ad:f7: ec:65:10:f8:e4:92:2a:0b:9f:0f:b7:0e:7f:00:53: 0c:ad:8b:c1:19:48:61:43:16:16:06:f3:b9:18:02: 5b:9e:11:af:16:9f:e8:7e:1e:38:1c:ca:ec:0c:b5: 8d:15:54:fd:e6:45:4b:90:70:0a:7c:89:fe:3f:a9: 44:a0:14:04:81:a2:a9:28:2f:ff:9c:1e:78:e7:ce: dc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A5:36:12:E2:70:30:47:B3:1E:86:08:20:53:8C:09:47:9D:E6:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/335d0a9c-a461-350b-9da6-8ada62daffab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:bf:90:e4:7b:90:df:d2:c9:79:cb:e4:4d:e5:02:63:58:d2: 76:76:80:6a:95:d2:31:10:06:e7:ff:72:ab:74:98:95:cf:b8: 35:cb:d3:bc:9b:bf:87:60:22:37:d7:cf:3d:89:2d:0d:59:99: 28:13:87:2d:89:04:f4:65:f6:8c:85:63:d9:1a:c0:d0:2d:6b: df:a8:b0:97:41:eb:9b:b4:a3:41:45:e3:22:21:fa:84:78:5b: 0a:8d:ff:e3:22:fe:e6:d3:eb:4d:2c:03:b0:11:de:08:ee:49: bf:ff:e8:db:2c:d4:87:45:53:0f:1a:bf:3d:66:fc:54:f2:3c: d0:7e:f6:fc:bf:84:1e:ce:51:99:75:fd:cf:45:fa:6b:a6:7e: 95:93:1a:22:3d:58:9e:29:9f:8e:1f:e4:68:ca:c7:e1:2c:d6: ed:66:2c:4d:b5:90:f2:94:c2:59:7d:27:6f:cb:34:77:47:ed: 34:b3:a9:a6:74:4e:04:34:6a:af:b3:df:34:e6:f6:26:a9:92: 28:56:d5:3a:e2:60:22:00:73:f0:9b:a9:33:5a:c7:e4:f7:c6: d8:fa:21:34:fd:c3:e5:42:41:82:31:5f:8a:0c:6f:33:0e:cb: a8:69:b8:fe:a7:45:22:17:8f:85:d2:42:4d:20:77:ab:a3:5f: 90:09:77:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkE4OB3+/Z3WXtwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk YWQ4YzBhZDktNTA1Yy00YzVmLThjYWEtZWIyODEyOTVjZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6RfsXzoozK8evA+iVCRbQxhpCFpM2IgLpFt LzIZm+yUis4JDPWxe4CrRf/6HBjKoI0STXNbrPhkleCNk3b1OyjD74jeu+1DyNva n9cRnyyfqvmIH34i4reX2M/Q2AMrU8JXZaFuBWMpwRmXJgHJYfMHpzurG3dmJEkU y9ihvM5YKpQTXpaqoTo0DEk+pcTnhTrXdeIsWZ7CTNwiOZjipzd183EtUO/8CmTj 6H1xG1afrffsZRD45JIqC58Ptw5/AFMMrYvBGUhhQxYWBvO5GAJbnhGvFp/ofh44 HMrsDLWNFVT95kVLkHAKfIn+P6lEoBQEgaKpKC//nB54587cRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKlNhLicDBHsx6GCCBTjAlHneY2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzM1ZDBhOWMtYTQ2MS0z NTBiLTlkYTYtOGFkYTYyZGFmZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGC/kOR7kN/SyXnL5E3lAmNY0nZ2gGqV0jEQBuf/cqt0mJXPuDXL07yb v4dgIjfXzz2JLQ1ZmSgThy2JBPRl9oyFY9kawNAta9+osJdB65u0o0FF4yIh+oR4 WwqN/+Mi/ubT600sA7AR3gjuSb//6Nss1IdFUw8avz1m/FTyPNB+9vy/hB7OUZl1 /c9F+mumfpWTGiI9WJ4pn44f5GjKx+Es1u1mLE21kPKUwll9J2/LNHdH7TSzqaZ0 TgQ0aq+z3zTm9iapkihW1TriYCIAc/CbqTNax+T3xtj6ITT9w+VCQYIxX4oMbzMO y6hpuP6nRSIXj4XSQk0gd6ujX5AJd94= -----END CERTIFICATE-----Generated at Thu Sep 24 13:47:02 2026 by rpki-client