$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51ce9d29-e28a-3aa7-94b3-6eb366e4d3ea.roa File: 51ce9d29-e28a-3aa7-94b3-6eb366e4d3ea.roa (raw, json) Hash identifier: X8H4O+rOEMWI3oISYEI4uiOOmf81sSX6STbpBmSX4Uk= Subject key identifier: 58:80:5D:B9:75:E1:13:8A:4B:F2:15:4B:E2:FF:30:2F:B6:EB:F4:71 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F173246744EFCCE9C55DE8640 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51ce9d29-e28a-3aa7-94b3-6eb366e4d3ea.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 396615 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:46:74:4e:fc:ce:9c:55:de:86:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=96fdef36-ca4d-44bb-a375-0bd10c579fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:36:f4:99:42:6b:e3:86:ef:77:45:e1:61:49: 5b:51:9e:94:42:0c:98:0b:2c:1a:61:d7:18:ff:5a: 82:8c:50:64:a6:29:fe:4f:94:9a:50:19:37:3c:8e: b8:d1:6f:91:02:32:88:fe:39:46:8f:ea:c3:71:68: 45:19:d8:14:35:bf:f5:98:f8:8f:98:64:5c:3e:14: 03:cb:5f:a8:f3:ae:fc:1d:a9:c5:33:0d:e3:8e:16: 86:c6:e7:ef:74:20:7e:38:6b:d3:1d:8e:cd:f7:ce: ed:95:fd:7c:c8:a9:67:ad:af:ae:69:42:5a:b8:69: 67:78:03:88:84:89:ff:a7:e2:94:6c:8d:7c:61:31: fb:ea:e1:ac:b9:b5:65:37:64:a9:d7:d5:83:74:30: b7:80:ce:38:86:bd:b1:3b:cc:91:3e:21:15:99:65: 7c:1f:dc:11:4b:17:4e:8f:a6:fe:35:98:e0:c8:15: ec:b2:8f:93:22:3c:76:33:2a:01:43:51:00:8e:6d: e7:3e:47:3d:03:8d:82:e7:6b:18:55:04:94:90:fa: 48:f0:00:4a:56:3e:4d:45:d3:07:b8:29:a8:ec:86: fe:98:78:dc:ac:24:27:44:db:0a:b7:d2:d9:37:1a: 9e:d2:f0:40:9a:2f:05:50:6a:43:6a:37:a9:d3:a2: da:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:80:5D:B9:75:E1:13:8A:4B:F2:15:4B:E2:FF:30:2F:B6:EB:F4:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51ce9d29-e28a-3aa7-94b3-6eb366e4d3ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:b7:02:9f:e7:11:e2:02:1c:c8:a7:04:f2:91:cf:2c:13:18: 28:fb:45:e6:46:32:1e:7a:7c:12:24:84:a4:11:2d:62:70:17: 3d:10:fa:b0:c7:d4:05:b7:f0:83:2b:5a:8e:27:6a:f6:40:24: b9:16:8d:84:e0:b6:d2:bf:3a:2e:84:d8:91:88:3c:65:d0:fa: 70:fd:bc:ca:29:35:82:92:6e:03:7b:8d:7e:e1:7f:bd:df:33: de:c1:30:12:03:a2:8a:0f:93:af:a1:3a:c0:39:66:7b:53:d6: 20:90:35:c8:4b:04:86:56:e3:66:e0:0b:e2:99:51:9e:e7:f8: ff:8a:f6:83:20:0e:15:4e:a2:13:f6:a4:66:fe:1e:21:6a:69: 16:07:15:31:d5:8d:1b:08:12:f4:6f:22:15:03:f8:df:c8:84: a1:9d:f9:c3:8d:80:f4:2a:31:ed:8c:ca:10:11:40:fb:56:81: 4f:02:8b:a6:46:18:d4:dd:43:30:ad:ae:8d:be:50:3a:9d:69: a9:07:55:3f:90:31:34:04:49:9e:a5:b5:64:f2:10:82:bb:3d: 19:cf:2b:36:43:85:58:3e:b0:c9:1c:8f:2b:d8:58:a2:88:b5: 03:da:dc:03:7c:56:77:a0:c3:40:a1:5d:51:ee:70:aa:23:e0: fa:b3:cc:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkZ0TvzOnFXehkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk OTZmZGVmMzYtY2E0ZC00NGJiLWEzNzUtMGJkMTBjNTc5ZmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTb0mUJr44bvd0XhYUlbUZ6UQgyYCywaYdcY /1qCjFBkpin+T5SaUBk3PI640W+RAjKI/jlGj+rDcWhFGdgUNb/1mPiPmGRcPhQD y1+o8678HanFMw3jjhaGxufvdCB+OGvTHY7N987tlf18yKlnra+uaUJauGlneAOI hIn/p+KUbI18YTH76uGsubVlN2Sp19WDdDC3gM44hr2xO8yRPiEVmWV8H9wRSxdO j6b+NZjgyBXsso+TIjx2MyoBQ1EAjm3nPkc9A42C52sYVQSUkPpI8ABKVj5NRdMH uCmo7Ib+mHjcrCQnRNsKt9LZNxqe0vBAmi8FUGpDajep06LaXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiAXbl14ROKS/IVS+L/MC+26/RxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTFjZTlkMjktZTI4YS0z YWE3LTk0YjMtNmViMzY2ZTRkM2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADW3Ap/nEeICHMinBPKRzywTGCj7ReZGMh56fBIkhKQRLWJwFz0Q+rDH 1AW38IMrWo4navZAJLkWjYTgttK/Oi6E2JGIPGXQ+nD9vMopNYKSbgN7jX7hf73f M97BMBIDoooPk6+hOsA5ZntT1iCQNchLBIZW42bgC+KZUZ7n+P+K9oMgDhVOohP2 pGb+HiFqaRYHFTHVjRsIEvRvIhUD+N/IhKGd+cONgPQqMe2MyhARQPtWgU8Ci6ZG GNTdQzCtro2+UDqdaakHVT+QMTQESZ6ltWTyEIK7PRnPKzZDhVg+sMkcjyvYWKKI tQPa3AN8Vnegw0ChXVHucKoj4PqzzJQ= -----END CERTIFICATE-----Generated at Mon Sep 21 00:08:30 2026 by rpki-client