$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/429f7c1a-8390-31a5-94f2-b319fb1a5deb.roa File: 429f7c1a-8390-31a5-94f2-b319fb1a5deb.roa (raw, json) Hash identifier: uD6+U4rjxV4fqd1Qec6bnAZQR6z34vhnv90UH88zETE= Subject key identifier: A5:7E:52:CA:38:4C:4E:B7:A9:DE:39:D4:F8:CC:F1:65:28:77:03:77 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F1732411D1DD9F3F840368EB0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/429f7c1a-8390-31a5-94f2-b319fb1a5deb.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 32651 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:41:1d:1d:d9:f3:f8:40:36:8e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=05391965-29ee-445f-b076-52976fc021a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fc:22:86:e3:5c:74:b0:43:fc:2b:36:f2:0f: 21:cd:6d:76:0a:50:d1:5c:89:94:5e:2d:e7:fd:bb: cc:ef:c4:88:79:fe:f2:34:b9:90:42:32:3d:22:6b: 84:2d:ac:09:a4:50:83:2b:2b:0d:3f:6a:d1:17:70: 2a:89:29:31:b8:84:69:1e:cc:90:27:0b:90:c7:5a: 95:ae:92:e3:a9:c3:4e:93:4d:00:c8:c0:69:e7:a3: fe:03:aa:a5:5f:36:f9:61:32:5c:46:5b:e5:54:f3: b9:4b:96:3e:01:cb:73:5b:34:82:e5:d2:99:d1:52: 53:37:a4:ba:15:03:72:0d:ad:7d:f3:fc:5a:33:9a: ef:bc:39:01:78:3c:88:4a:8f:27:13:91:2f:ac:36: 18:13:e7:46:1c:79:0f:51:ca:f0:f9:c4:ae:a2:02: f4:43:eb:61:00:37:c4:b1:5a:b1:ba:0f:51:c3:c9: 96:e3:7b:54:d2:c9:27:7e:46:7d:74:fd:c3:56:7e: 46:fd:02:ae:08:22:7c:ea:34:01:16:30:36:95:11: a3:1a:59:ba:37:4b:98:03:f1:15:50:f6:56:05:88: 24:44:61:e8:4f:ee:5b:9b:04:fa:19:c8:d2:20:9a: 8e:53:70:67:db:28:68:53:11:fd:e0:11:db:d9:e4: d5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7E:52:CA:38:4C:4E:B7:A9:DE:39:D4:F8:CC:F1:65:28:77:03:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/429f7c1a-8390-31a5-94f2-b319fb1a5deb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:85:15:96:2f:69:b9:c1:81:39:03:aa:75:f7:8d:1e:9d:f0: 62:92:ca:8c:e6:29:6d:ed:c1:76:db:b8:30:fb:93:9c:16:f2: e2:a6:b0:ae:aa:c0:02:f9:03:ff:9a:98:e3:91:c5:66:79:48: 45:38:ac:56:66:14:a8:47:8c:20:50:f4:89:62:9f:bd:ef:78: db:fb:a5:a3:7d:fb:65:87:57:78:eb:7f:93:6d:06:9f:dd:b5: da:3c:0d:d2:cf:41:46:a8:23:47:59:f2:ec:44:40:63:91:41: 17:42:45:8a:fb:2b:bd:37:e9:57:03:01:30:55:89:54:1c:86: 45:84:8f:c6:32:19:a9:16:82:d4:ed:6c:a8:f7:ae:83:bf:9e: d0:f7:5f:13:43:58:77:92:78:b2:9b:8b:d0:2e:c4:ba:e8:49: ed:cc:a3:bf:e1:1d:49:e4:ba:bc:6d:59:cd:79:9f:97:29:41: 2a:00:61:0f:57:8f:60:22:e5:70:5c:fe:db:b4:55:08:69:59: 30:34:8a:13:09:3c:b0:b9:10:99:f8:01:dc:ef:fe:3c:77:5a: 73:eb:f1:d4:a5:c7:bb:dc:d1:8a:3b:10:fa:51:a8:d2:1d:a2: b2:de:70:f1:98:19:46:d5:c8:ca:91:0c:fe:76:dd:83:13:20: 32:0e:fc:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkEdHdnz+EA2jrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk MDUzOTE5NjUtMjllZS00NDVmLWIwNzYtNTI5NzZmYzAyMWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPwihuNcdLBD/Cs28g8hzW12ClDRXImUXi3n /bvM78SIef7yNLmQQjI9ImuELawJpFCDKysNP2rRF3AqiSkxuIRpHsyQJwuQx1qV rpLjqcNOk00AyMBp56P+A6qlXzb5YTJcRlvlVPO5S5Y+ActzWzSC5dKZ0VJTN6S6 FQNyDa198/xaM5rvvDkBeDyISo8nE5EvrDYYE+dGHHkPUcrw+cSuogL0Q+thADfE sVqxug9Rw8mW43tU0sknfkZ9dP3DVn5G/QKuCCJ86jQBFjA2lRGjGlm6N0uYA/EV UPZWBYgkRGHoT+5bmwT6GcjSIJqOU3Bn2yhoUxH94BHb2eTVMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKV+Uso4TE63qd451PjM8WUodwN3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDI5ZjdjMWEtODM5MC0z MWE1LTk0ZjItYjMxOWZiMWE1ZGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyFFZYvabnBgTkDqnX3jR6d8GKSyozmKW3twXbbuDD7k5wW8uKmsK6q wAL5A/+amOORxWZ5SEU4rFZmFKhHjCBQ9Ilin73veNv7paN9+2WHV3jrf5NtBp/d tdo8DdLPQUaoI0dZ8uxEQGORQRdCRYr7K7036VcDATBViVQchkWEj8YyGakWgtTt bKj3roO/ntD3XxNDWHeSeLKbi9AuxLroSe3Mo7/hHUnkurxtWc15n5cpQSoAYQ9X j2Ai5XBc/tu0VQhpWTA0ihMJPLC5EJn4Adzv/jx3WnPr8dSlx7vc0Yo7EPpRqNId orLecPGYGUbVyMqRDP523YMTIDIO/DU= -----END CERTIFICATE-----Generated at Tue Sep 22 16:42:04 2026 by rpki-client