$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9f54f08b-9d21-337f-9316-81fed31762b1.roa File: 9f54f08b-9d21-337f-9316-81fed31762b1.roa (raw, json) Hash identifier: FEp3XVsZwR9EkRi8RN1f90lXg+OwV1eYjyOkICj8Dog= Subject key identifier: 29:48:C3:BD:C6:B5:26:1B:45:8C:1C:4F:2E:AD:0C:39:4F:98:7A:8A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F173242B446FC5BF8ECCBB600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9f54f08b-9d21-337f-9316-81fed31762b1.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 36624 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:42:b4:46:fc:5b:f8:ec:cb:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=7df40435-8fff-4e2b-8293-c6b7d8abccb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:31:07:c6:15:bd:7b:67:b2:0c:a3:19:48:35: d4:fb:15:ea:d2:65:0c:c5:7a:6b:96:5a:e3:1e:ea: 3c:5d:cd:e6:ef:ba:15:05:75:53:eb:31:cf:d3:ad: da:ca:68:d0:5f:2c:57:0d:5f:a0:d5:96:21:fd:be: 9c:d2:51:31:fb:c7:92:6a:ab:1b:b5:e3:3e:94:23: f6:36:a5:c5:ea:8d:63:a9:c8:df:e3:70:28:8b:72: 56:b3:20:f1:17:5d:f0:d6:95:53:9d:34:ad:96:47: e1:b7:2e:a9:1b:09:a4:79:4b:8b:53:57:55:eb:73: d0:32:56:24:87:fb:ff:ca:af:13:50:b5:f6:b8:5b: 68:5e:82:0b:8d:00:da:45:1c:53:c5:b9:13:15:0e: 55:cf:64:d3:bf:3b:6b:e7:03:21:96:ab:2f:26:dc: 84:df:30:83:7e:52:3a:1d:ea:17:d3:b6:24:04:d1: ec:70:03:c9:d6:93:25:2a:f8:6a:ea:08:49:4d:d2: 77:08:40:86:12:72:94:24:df:67:5b:7f:ed:f4:f4: 8b:38:a5:e8:ae:dc:33:26:ac:16:e4:a1:07:fb:76: e4:ec:bd:f6:f5:2e:de:83:d4:2e:61:e3:c9:25:b7: 18:00:67:b3:fe:10:88:bc:70:83:5a:8c:38:df:33: d3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:48:C3:BD:C6:B5:26:1B:45:8C:1C:4F:2E:AD:0C:39:4F:98:7A:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9f54f08b-9d21-337f-9316-81fed31762b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:7f:fc:17:a3:b1:7c:24:45:9f:bd:ec:bf:81:0d:2a:cb:12: c1:9f:2c:4b:3d:4a:a7:d5:db:43:de:3c:38:f6:20:6b:97:8a: 38:62:3b:6d:56:7d:24:aa:4e:7f:52:43:d9:33:72:9e:8b:13: 0e:e1:25:37:33:6b:5e:f0:6b:5c:1c:e0:4d:96:30:af:47:bf: 6b:33:cf:15:5f:e1:39:99:ce:1c:fb:84:af:96:1e:fb:50:9a: 58:51:0e:d5:e3:72:18:46:17:4b:e2:c0:5a:5d:2d:96:45:84: e7:eb:59:26:8e:52:16:0d:db:87:ec:11:8a:9f:05:a3:3f:20: 3e:a1:77:02:10:21:50:61:02:fb:34:5a:37:f8:b0:e0:31:61: 2f:97:c9:e6:ef:d2:eb:78:d4:0f:90:cf:ec:c9:a7:ef:06:e4: 35:e5:27:c0:8a:a6:75:a5:2d:06:89:d0:ce:75:67:d4:21:a2: 20:a8:28:e2:9b:bb:fd:28:69:dd:fe:0e:48:83:85:e8:e0:d3: 6d:5f:43:e6:f0:2e:80:e5:aa:bb:6d:db:a8:eb:13:10:22:43: d3:88:fc:00:3f:35:87:d2:df:a5:51:ce:f8:d0:3b:e0:1c:1a: 93:75:60:05:b7:bd:74:d1:96:3a:8e:02:84:29:63:14:b7:51: cb:8d:09:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkK0Rvxb+OzLtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk N2RmNDA0MzUtOGZmZi00ZTJiLTgyOTMtYzZiN2Q4YWJjY2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzEHxhW9e2eyDKMZSDXU+xXq0mUMxXprllrj Huo8Xc3m77oVBXVT6zHP063aymjQXyxXDV+g1ZYh/b6c0lEx+8eSaqsbteM+lCP2 NqXF6o1jqcjf43Aoi3JWsyDxF13w1pVTnTStlkfhty6pGwmkeUuLU1dV63PQMlYk h/v/yq8TULX2uFtoXoILjQDaRRxTxbkTFQ5Vz2TTvztr5wMhlqsvJtyE3zCDflI6 HeoX07YkBNHscAPJ1pMlKvhq6ghJTdJ3CECGEnKUJN9nW3/t9PSLOKXortwzJqwW 5KEH+3bk7L329S7eg9QuYePJJbcYAGez/hCIvHCDWow43zPTBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClIw73GtSYbRYwcTy6tDDlPmHqKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWY1NGYwOGItOWQyMS0z MzdmLTkzMTYtODFmZWQzMTc2MmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJ//BejsXwkRZ+97L+BDSrLEsGfLEs9SqfV20PePDj2IGuXijhiO21W fSSqTn9SQ9kzcp6LEw7hJTcza17wa1wc4E2WMK9Hv2szzxVf4TmZzhz7hK+WHvtQ mlhRDtXjchhGF0viwFpdLZZFhOfrWSaOUhYN24fsEYqfBaM/ID6hdwIQIVBhAvs0 Wjf4sOAxYS+Xyebv0ut41A+Qz+zJp+8G5DXlJ8CKpnWlLQaJ0M51Z9QhoiCoKOKb u/0oad3+DkiDhejg021fQ+bwLoDlqrtt26jrExAiQ9OI/AA/NYfS36VRzvjQO+Ac GpN1YAW3vXTRljqOAoQpYxS3UcuNCc0= -----END CERTIFICATE-----Generated at Tue Sep 22 11:56:46 2026 by rpki-client