$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/35af359a-b54b-355f-aa40-889bd4721006.roa File: 35af359a-b54b-355f-aa40-889bd4721006.roa (raw, json) Hash identifier: Qj9zEkekcR2uazI+BfPoTaqcUSkmTKPMof4cxpkemIU= Subject key identifier: 46:F4:D5:D0:8D:A6:30:78:51:BE:C7:A0:52:87:75:96:E4:C6:43:64 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F17323A966931B9B3DFC00980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/35af359a-b54b-355f-aa40-889bd4721006.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 396553 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:3a:96:69:31:b9:b3:df:c0:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=0894dc34-f67e-4ed8-9900-8b07b5ffd570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:00:1b:2b:04:c1:a8:c5:f1:75:0a:57:9c:11: ef:e2:b0:4c:41:79:1f:98:7e:72:bb:4a:9a:cd:46: 3b:6e:a9:9b:1f:98:48:d5:33:03:37:1c:f4:72:5d: 3f:50:f0:da:7b:7b:2b:da:61:b1:8e:e1:e1:f1:a3: ab:d6:4b:88:e4:29:02:a3:d1:ff:1f:64:72:9d:84: eb:74:d7:fe:31:ca:9c:e2:bc:7e:f5:eb:0f:74:11: 9c:57:da:f9:50:1b:74:19:f2:98:61:e0:0d:0e:17: fb:b2:cd:d1:04:fd:80:fc:e1:99:a0:db:13:d8:6f: ba:8a:5a:12:93:fb:70:9e:e9:b0:8f:62:99:a7:61: 86:a5:99:cc:ba:e2:0a:25:0c:f6:63:d4:8b:4c:e6: 32:57:0b:3a:49:41:b9:1d:0e:50:06:9c:b0:82:20: 44:5a:8d:06:58:aa:dd:cd:56:df:2b:bb:55:17:ae: 5f:05:92:36:14:67:03:f3:46:b9:af:77:9a:46:54: 4e:8e:7d:af:d0:e9:e9:d0:e7:bd:3b:72:56:5d:42: c5:6e:1a:31:95:cc:56:c1:61:03:94:ac:7e:f2:0d: 43:e8:6e:5c:24:78:29:87:ff:c9:f8:af:96:b1:8a: 89:85:1a:ad:88:e0:27:3b:f0:b6:4c:39:23:13:b8: 8c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F4:D5:D0:8D:A6:30:78:51:BE:C7:A0:52:87:75:96:E4:C6:43:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/35af359a-b54b-355f-aa40-889bd4721006.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:4c:2b:c7:42:d4:40:bc:c7:e0:57:85:50:a2:e1:05:95:2b: 55:80:d9:64:c0:f8:b1:d4:73:d5:80:78:a1:a3:5a:d2:fa:81: d6:08:e3:dc:46:e9:27:4c:45:61:3b:a0:b7:62:f6:eb:a6:40: d8:e1:14:de:a8:56:9a:d0:f2:d5:27:87:5d:12:6f:53:69:ab: fa:cb:5a:78:06:72:b5:b3:97:4e:a8:de:00:f3:ed:1c:67:85: 1a:3c:45:49:cb:0b:0a:37:b4:9a:19:04:c2:b0:7d:f3:30:d8: 79:76:3e:07:5f:ac:53:26:65:c9:63:c0:7a:33:22:00:d3:70: 9d:cf:01:41:d2:57:eb:a3:3e:61:ec:d7:61:d4:23:c6:69:20: e6:db:2e:7c:5d:ba:c4:85:12:c0:49:00:94:c7:86:9a:46:6d: 1f:14:07:77:8b:76:9f:52:01:77:87:04:23:25:69:ba:b6:7f: 66:7b:07:51:e7:8d:3c:4a:03:f3:b9:aa:b8:6f:59:a1:a5:e8: d8:d4:f3:dc:31:3d:76:13:3c:cb:df:db:ac:bd:a3:52:e7:9a: 66:41:04:f6:0d:d7:fe:5e:fe:6f:9b:d5:f6:2e:08:79:e4:1b: 85:4b:cb:b2:d9:fe:fb:09:c9:6d:e8:20:32:a7:6f:ce:4d:84: 1c:5c:63:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMjqWaTG5s9/ACYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk MDg5NGRjMzQtZjY3ZS00ZWQ4LTk5MDAtOGIwN2I1ZmZkNTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAAbKwTBqMXxdQpXnBHv4rBMQXkfmH5yu0qa zUY7bqmbH5hI1TMDNxz0cl0/UPDae3sr2mGxjuHh8aOr1kuI5CkCo9H/H2RynYTr dNf+Mcqc4rx+9esPdBGcV9r5UBt0GfKYYeANDhf7ss3RBP2A/OGZoNsT2G+6iloS k/twnumwj2KZp2GGpZnMuuIKJQz2Y9SLTOYyVws6SUG5HQ5QBpywgiBEWo0GWKrd zVbfK7tVF65fBZI2FGcD80a5r3eaRlROjn2v0Onp0Oe9O3JWXULFbhoxlcxWwWED lKx+8g1D6G5cJHgph//J+K+WsYqJhRqtiOAnO/C2TDkjE7iMLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEb01dCNpjB4Ub7HoFKHdZbkxkNkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzVhZjM1OWEtYjU0Yi0z NTVmLWFhNDAtODg5YmQ0NzIxMDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJMK8dC1EC8x+BXhVCi4QWVK1WA2WTA+LHUc9WAeKGjWtL6gdYI49xG 6SdMRWE7oLdi9uumQNjhFN6oVprQ8tUnh10Sb1Npq/rLWngGcrWzl06o3gDz7Rxn hRo8RUnLCwo3tJoZBMKwffMw2Hl2PgdfrFMmZcljwHozIgDTcJ3PAUHSV+ujPmHs 12HUI8ZpIObbLnxdusSFEsBJAJTHhppGbR8UB3eLdp9SAXeHBCMlabq2f2Z7B1Hn jTxKA/O5qrhvWaGl6NjU89wxPXYTPMvf26y9o1LnmmZBBPYN1/5e/m+b1fYuCHnk G4VLy7LZ/vsJyW3oIDKnb85NhBxcY30= -----END CERTIFICATE-----Generated at Tue Sep 22 13:02:34 2026 by rpki-client