$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c3ea5ad-970d-3ca2-9594-c92c8d9f20de.roa File: 4c3ea5ad-970d-3ca2-9594-c92c8d9f20de.roa (raw, json) Hash identifier: xsCSzq2JPRaykHKhSruASjiKFCCs2LAqfgdun78eMgk= Subject key identifier: 68:87:83:A3:22:1F:AE:3B:29:63:DC:58:9C:0B:D3:2C:A9:47:61:06 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F17324D39F84492702D4B2980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c3ea5ad-970d-3ca2-9594-c92c8d9f20de.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 40647 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:4d:39:f8:44:92:70:2d:4b:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=76260a1a-4e69-4913-b4c0-8354e5edcb9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0f:f4:dd:bf:fc:2a:c2:48:89:18:88:cc:1d: 67:e5:64:79:b9:30:c7:dd:8e:9e:90:04:48:ae:49: 3b:57:d1:84:b7:1a:35:44:00:7b:ee:f1:0e:73:e0: 3a:0c:63:04:7e:0a:2b:3e:cb:fd:60:ba:9c:b9:25: 28:0b:2a:62:2a:1d:91:97:62:da:80:63:56:03:0d: 3e:66:99:64:b4:0b:fa:e2:a1:40:8e:1f:7c:31:2e: d4:75:71:f3:c1:1a:fb:e4:e5:fd:9a:3e:20:ff:de: 7a:9d:17:f4:2d:4c:4c:c1:fe:18:6c:25:29:13:40: ee:31:55:6d:3e:7f:1f:14:aa:b4:04:98:a2:8c:d6: b4:79:a9:11:2e:0a:58:44:bc:ea:05:ab:59:d3:f3: 8a:1e:da:ae:57:bf:90:bf:1c:eb:c0:5e:ac:30:3f: 75:fb:36:c7:e0:f7:c3:29:2e:80:05:9c:84:5c:97: 40:ca:3b:bc:d0:03:9c:66:76:92:d6:09:58:e0:c2: 6f:e2:19:a0:40:10:c5:39:10:f1:cb:0c:02:09:30: 0c:dd:e2:34:57:11:a5:82:76:46:a3:18:67:78:46: e2:1f:17:df:c4:96:94:3d:65:6d:ec:64:ad:f0:df: 4e:7a:fc:55:0a:ca:af:62:78:02:ea:8f:36:6f:30: ce:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:87:83:A3:22:1F:AE:3B:29:63:DC:58:9C:0B:D3:2C:A9:47:61:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c3ea5ad-970d-3ca2-9594-c92c8d9f20de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:4e:a4:b9:61:7c:a0:d2:69:bb:65:da:ae:86:4a:16:1b:5b: 2f:a5:4c:e3:4b:98:9a:df:8e:df:79:d3:0c:26:ea:16:ba:16: c1:06:67:9f:61:fb:30:51:c9:09:21:35:3a:28:e1:bf:79:46: 86:8b:5b:a9:c0:e0:c3:03:95:8c:67:63:24:39:a3:31:36:18: 16:d5:c9:e1:61:5d:d4:28:fc:64:60:66:91:f2:91:59:b3:5f: b9:fb:e0:b5:33:d3:f4:ad:d3:98:3b:aa:f3:0a:6c:a7:7c:ab: 6f:25:04:b6:9a:aa:f3:27:5d:5a:94:24:d4:b6:92:f4:a9:33: 91:25:fe:13:6d:60:05:d9:cd:8d:f7:25:fb:13:0b:ae:dd:76: c6:37:50:12:b8:40:5e:38:fa:c7:76:b6:ef:a8:36:60:1a:5b: 2f:98:89:ec:be:d0:ac:fd:4c:4b:d9:5a:d1:95:40:01:09:ba: 79:7d:b4:8b:ce:73:47:3e:e2:15:31:ab:28:c7:34:db:d5:07: de:06:a0:5a:89:b3:d2:ee:93:4b:9b:6a:19:9a:cc:88:e3:f4: f3:1f:05:d7:b3:5c:db:90:1e:ce:46:5f:2a:96:26:43:8a:18: c8:13:5a:43:e7:e3:ec:5c:af:7d:37:8a:b8:f5:b1:ad:ca:ad: 0b:a8:4b:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMk05+ESScC1LKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk NzYyNjBhMWEtNGU2OS00OTEzLWI0YzAtODM1NGU1ZWRjYjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw/03b/8KsJIiRiIzB1n5WR5uTDH3Y6ekARI rkk7V9GEtxo1RAB77vEOc+A6DGMEfgorPsv9YLqcuSUoCypiKh2Rl2LagGNWAw0+ ZplktAv64qFAjh98MS7UdXHzwRr75OX9mj4g/956nRf0LUxMwf4YbCUpE0DuMVVt Pn8fFKq0BJiijNa0eakRLgpYRLzqBatZ0/OKHtquV7+QvxzrwF6sMD91+zbH4PfD KS6ABZyEXJdAyju80AOcZnaS1glY4MJv4hmgQBDFORDxywwCCTAM3eI0VxGlgnZG oxhneEbiHxffxJaUPWVt7GSt8N9OevxVCsqvYngC6o82bzDO/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiHg6MiH647KWPcWJwL0yypR2EGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGMzZWE1YWQtOTcwZC0z Y2EyLTk1OTQtYzkyYzhkOWYyMGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxOpLlhfKDSabtl2q6GShYbWy+lTONLmJrfjt950wwm6ha6FsEGZ59h +zBRyQkhNToo4b95RoaLW6nA4MMDlYxnYyQ5ozE2GBbVyeFhXdQo/GRgZpHykVmz X7n74LUz0/St05g7qvMKbKd8q28lBLaaqvMnXVqUJNS2kvSpM5El/hNtYAXZzY33 JfsTC67ddsY3UBK4QF44+sd2tu+oNmAaWy+Yiey+0Kz9TEvZWtGVQAEJunl9tIvO c0c+4hUxqyjHNNvVB94GoFqJs9Luk0ubahmazIjj9PMfBdezXNuQHs5GXyqWJkOK GMgTWkPn4+xcr303irj1sa3KrQuoS24= -----END CERTIFICATE-----Generated at Wed Sep 23 02:58:31 2026 by rpki-client