$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/948df423-d3c5-368b-b72c-0064396e0c5c.roa File: 948df423-d3c5-368b-b72c-0064396e0c5c.roa (raw, json) Hash identifier: oeWEaiuQ83QIkwNzJbVFNWxJpUoLxFv7ru9qvLQCP48= Subject key identifier: FB:B8:E5:00:A2:A2:B7:10:16:9C:8E:71:15:5D:40:1A:87:C1:A7:73 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F1732528A18AFAB4988815580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/948df423-d3c5-368b-b72c-0064396e0c5c.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 396562 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:52:8a:18:af:ab:49:88:81:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=1e1b1e58-d65d-4de5-b4bb-d9faa544857a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:53:42:0f:68:7c:34:82:ec:30:b6:92:f4:65: 89:16:e3:2d:f0:dd:e2:5b:ad:a7:60:7b:ac:ff:d2: 82:31:20:ea:2e:e9:12:14:ac:7a:84:27:fa:96:8b: 04:9c:4e:22:d5:1c:a6:88:67:9f:2e:28:ec:3f:37: 57:9d:c3:37:48:6e:ea:0b:03:09:1f:ab:cb:9f:02: 54:37:90:3a:89:70:92:0c:2d:0f:a0:63:f4:ae:bb: 26:ec:36:0d:a7:a0:b3:c3:c3:7f:57:7b:ef:82:e2: aa:cb:e6:17:2c:95:90:7b:f9:6f:b4:2b:3b:96:d2: 61:9d:c2:72:6a:ca:20:e7:d7:e3:47:99:a8:c3:dc: 17:1a:f4:f3:f2:0d:8e:b1:0c:a3:6c:a5:40:0e:35: 6e:da:c8:ab:fd:24:5c:48:f4:b8:17:a0:e1:bc:30: ea:c1:61:f2:c9:87:56:1d:4b:ce:10:36:4d:cc:43: 89:6a:0d:bc:f5:0d:e6:b7:f4:58:ab:a2:d7:e4:5f: 31:90:71:ac:38:4f:98:51:a3:a0:7e:40:4d:5b:d6: aa:22:92:58:b6:7f:db:a0:5f:83:1b:54:8a:d2:62: 9e:87:cf:75:43:93:a8:8d:2c:bc:3b:36:61:5d:f0: bf:d5:80:97:f5:fe:89:7a:00:78:6a:4e:eb:87:9d: 93:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B8:E5:00:A2:A2:B7:10:16:9C:8E:71:15:5D:40:1A:87:C1:A7:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/948df423-d3c5-368b-b72c-0064396e0c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:b8:86:b4:36:dc:5f:ce:b8:3a:71:1b:fb:57:ee:51:ae:e5: d6:4f:62:33:7a:5d:66:c4:ee:c1:a4:33:b1:ea:70:20:9c:f4: 93:95:22:5f:dc:81:d9:53:92:c4:c8:36:6d:0b:5b:b4:06:6d: 8a:2c:01:16:0f:99:a1:4b:85:3d:66:d6:14:10:28:72:a2:57: 64:85:96:ed:12:12:33:75:1b:00:e1:64:93:0d:f8:0d:30:5b: b7:e7:aa:36:b9:0f:29:c8:49:4f:d8:58:61:1f:31:2e:4c:27: 0a:1f:9d:00:2b:a1:92:15:04:76:e9:e1:85:a4:1b:c0:48:bd: de:69:83:8d:c2:39:b0:d9:2b:69:69:07:15:d1:73:47:37:b5: 4e:88:07:0b:82:0c:22:93:07:68:b6:2e:40:98:8c:ef:e0:e4: 5e:aa:f5:59:7b:be:6e:21:60:ef:2d:e2:1e:a8:df:79:01:92: ee:2d:7b:0a:57:71:92:21:d0:69:9f:03:96:02:0b:10:45:70: b7:74:3b:91:da:25:8d:a0:b0:cd:f2:a2:c8:16:7e:f9:8d:cf: 78:14:62:88:40:ed:d4:16:e0:09:27:42:87:95:9f:c8:34:5f: 05:4b:e1:7f:69:9c:ff:fe:df:f2:26:fe:71:48:b0:eb:08:e4: 7f:3b:f1:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMlKKGK+rSYiBVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk MWUxYjFlNTgtZDY1ZC00ZGU1LWI0YmItZDlmYWE1NDQ4NTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FNCD2h8NILsMLaS9GWJFuMt8N3iW62nYHus /9KCMSDqLukSFKx6hCf6losEnE4i1RymiGefLijsPzdXncM3SG7qCwMJH6vLnwJU N5A6iXCSDC0PoGP0rrsm7DYNp6Czw8N/V3vvguKqy+YXLJWQe/lvtCs7ltJhncJy asog59fjR5mow9wXGvTz8g2OsQyjbKVADjVu2sir/SRcSPS4F6DhvDDqwWHyyYdW HUvOEDZNzEOJag289Q3mt/RYq6LX5F8xkHGsOE+YUaOgfkBNW9aqIpJYtn/boF+D G1SK0mKeh891Q5OojSy8OzZhXfC/1YCX9f6JegB4ak7rh52TIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPu45QCiorcQFpyOcRVdQBqHwadzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTQ4ZGY0MjMtZDNjNS0z NjhiLWI3MmMtMDA2NDM5NmUwYzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGe4hrQ23F/OuDpxG/tX7lGu5dZPYjN6XWbE7sGkM7HqcCCc9JOVIl/c gdlTksTINm0LW7QGbYosARYPmaFLhT1m1hQQKHKiV2SFlu0SEjN1GwDhZJMN+A0w W7fnqja5DynISU/YWGEfMS5MJwofnQAroZIVBHbp4YWkG8BIvd5pg43CObDZK2lp BxXRc0c3tU6IBwuCDCKTB2i2LkCYjO/g5F6q9Vl7vm4hYO8t4h6o33kBku4tewpX cZIh0GmfA5YCCxBFcLd0O5HaJY2gsM3yosgWfvmNz3gUYohA7dQW4AknQoeVn8g0 XwVL4X9pnP/+3/Im/nFIsOsI5H878YU= -----END CERTIFICATE-----Generated at Tue Sep 22 10:42:32 2026 by rpki-client