$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5336d21-dc18-3fb5-b9e1-eea227f5a2c8.roa File: a5336d21-dc18-3fb5-b9e1-eea227f5a2c8.roa (raw, json) Hash identifier: gXg7/UoShc3SamtS+sY83y100kP8H8pmLgJfCLdaiqU= Subject key identifier: A6:D2:27:8E:24:B5:3F:AD:B9:FB:B1:C1:56:87:D8:6D:8C:FE:4A:AB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F0DA74E319383D1108EFB6480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5336d21-dc18-3fb5-b9e1-eea227f5a2c8.roa Signing time: Thu 03 Sep 2026 14:58:03 +0000 ROA not before: Thu 03 Sep 2026 14:58:03 +0000 ROA not after: Wed 02 Dec 2026 15:58:03 +0000 asID: 0 IP address blocks: 216.87.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:a7:4e:31:93:83:d1:10:8e:fb:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 3 14:58:03 2026 GMT Not After : Dec 2 15:58:03 2026 GMT Subject: CN=71870539-81e0-4874-871c-0c34e9fb6f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:53:1d:18:a5:c2:4e:5e:22:27:ca:0f:d2:88: a1:8c:51:bf:cc:42:79:f3:a9:7f:81:e2:67:7f:7a: d8:9e:b0:94:9e:e7:72:20:12:cc:d7:45:9e:c6:5e: 89:9f:d9:de:67:44:fe:f9:48:cb:a0:79:1a:96:36: 61:ea:5a:b7:6a:43:8d:d4:48:6b:f7:d4:3b:bd:b2: 65:10:1f:ed:89:f4:99:27:25:2b:5b:59:f0:a3:e1: 22:3f:28:18:5a:17:07:9d:e9:69:f6:3a:3b:1c:68: 0b:37:ab:9d:4d:91:00:a0:4c:34:79:75:2a:8c:08: 22:4a:27:4c:35:0a:4f:16:db:37:dc:5b:61:5f:80: 4e:e4:55:e1:72:17:f7:33:90:ba:1c:10:83:f8:37: 3e:d4:90:26:29:d9:ae:6f:22:9e:10:de:88:1e:fc: 24:8d:0e:f2:bf:66:00:e9:82:25:bd:62:65:2c:ca: 20:ee:a7:cd:1e:b5:21:8e:96:52:fd:26:27:2e:79: d0:c3:7e:db:60:8b:0e:7f:9e:41:b3:c1:dd:aa:24: 59:11:0c:22:2c:5b:1e:96:08:f2:17:9d:c6:db:8f: 24:d6:06:59:a9:30:04:d5:d9:4b:1a:12:78:ec:61: 39:e0:de:c2:c1:2f:46:6f:15:d4:94:23:8b:77:b8: 6f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D2:27:8E:24:B5:3F:AD:B9:FB:B1:C1:56:87:D8:6D:8C:FE:4A:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5336d21-dc18-3fb5-b9e1-eea227f5a2c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:be:f9:66:6f:d8:0d:2e:74:48:12:b2:71:22:58:d5:e8:47: 4c:a6:4f:8e:05:85:27:66:08:31:45:53:f6:41:93:ee:56:61: 92:c0:a7:ce:72:ff:7d:46:fc:74:45:5a:0d:69:de:88:6d:76: 44:df:a6:91:8b:00:1b:4a:b6:17:5c:f1:a2:17:cd:f4:10:cf: 37:46:56:8c:83:64:9b:38:57:67:54:40:b2:0b:d0:d7:23:c9: 1e:f7:d3:bb:9c:4f:b5:9b:e4:bd:69:6c:a0:a6:d5:14:d5:8d: a2:f2:c4:e6:f5:3f:c9:18:33:8b:76:fc:8f:79:ec:d2:77:80: 48:b5:45:21:29:f0:da:66:8c:f0:85:22:a0:d9:23:2d:f2:79: 24:57:8f:fc:a8:92:d0:94:0d:f9:2d:f3:06:1a:a3:39:4f:ca: 74:f7:b9:c9:1d:5c:23:15:94:32:a1:29:d2:b1:1e:dd:c9:62: 2c:38:40:f3:a0:ff:cc:7a:97:d0:26:85:23:2c:ab:a8:49:19: af:a4:96:0d:bf:c7:06:26:32:93:54:1c:35:2b:b6:49:12:aa: b8:47:07:98:65:61:e5:23:d3:2d:f3:aa:c7:d9:1a:7a:d5:ad: e8:74:88:08:e4:9c:51:a0:fe:94:ec:7b:ea:25:6a:e9:40:76: a5:6c:76:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Np04xk4PREI77ZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwMzE0NTgwM1oXDTI2MTIwMjE1NTgwM1owLzEtMCsGA1UEAxMk NzE4NzA1MzktODFlMC00ODc0LTg3MWMtMGMzNGU5ZmI2ZjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlMdGKXCTl4iJ8oP0oihjFG/zEJ586l/geJn f3rYnrCUnudyIBLM10Wexl6Jn9neZ0T++UjLoHkaljZh6lq3akON1Ehr99Q7vbJl EB/tifSZJyUrW1nwo+EiPygYWhcHnelp9jo7HGgLN6udTZEAoEw0eXUqjAgiSidM NQpPFts33FthX4BO5FXhchf3M5C6HBCD+Dc+1JAmKdmubyKeEN6IHvwkjQ7yv2YA 6YIlvWJlLMog7qfNHrUhjpZS/SYnLnnQw37bYIsOf55Bs8HdqiRZEQwiLFselgjy F53G248k1gZZqTAE1dlLGhJ47GE54N7CwS9GbxXUlCOLd7hvdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbSJ44ktT+tufuxwVaH2G2M/kqrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTUzMzZkMjEtZGMxOC0z ZmI1LWI5ZTEtZWVhMjI3ZjVhMmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAe++WZv2A0udEgSsnEiWNXoR0ymT44FhSdmCDFFU/ZBk+5WYZLAp85y /31G/HRFWg1p3ohtdkTfppGLABtKthdc8aIXzfQQzzdGVoyDZJs4V2dUQLIL0Ncj yR7307ucT7Wb5L1pbKCm1RTVjaLyxOb1P8kYM4t2/I957NJ3gEi1RSEp8NpmjPCF IqDZIy3yeSRXj/yoktCUDfkt8wYaozlPynT3uckdXCMVlDKhKdKxHt3JYiw4QPOg /8x6l9AmhSMsq6hJGa+klg2/xwYmMpNUHDUrtkkSqrhHB5hlYeUj0y3zqsfZGnrV reh0iAjknFGg/pTse+olaulAdqVsdvY= -----END CERTIFICATE-----Generated at Sun Sep 20 19:50:19 2026 by rpki-client