$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac50bba1-b410-355e-9d80-f5325e4659d1.roa File: ac50bba1-b410-355e-9d80-f5325e4659d1.roa (raw, json) Hash identifier: 80PdNQfh53LlQjZF1ZgpyGTfESZfm4mgvA1E45fi+QY= Subject key identifier: A7:B0:2B:B5:D9:54:53:9A:4B:73:2B:81:B1:48:52:7C:12:48:70:91 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F63F827CFA80AA7E642E10180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac50bba1-b410-355e-9d80-f5325e4659d1.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 396565 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:27:cf:a8:0a:a7:e6:42:e1:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=a8d1014f-52e7-41c1-8872-b4a05291ddc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b0:cd:84:25:5e:bc:1e:48:dc:de:ea:4f:5c: 66:49:94:21:48:77:29:74:49:5e:16:79:81:86:85: 6d:47:bc:0f:35:c9:fc:14:f5:b5:10:a2:48:00:42: 55:3b:bf:80:29:24:ae:46:b9:ea:a5:08:b7:e8:8c: d2:3a:57:ee:92:8f:64:e7:44:2f:90:f8:f5:e2:fe: c7:ad:53:ac:e9:88:89:da:57:81:18:8d:54:38:0a: 4b:67:21:47:8d:05:01:eb:63:5b:ab:4a:92:c0:65: dd:45:fb:4a:43:d4:b1:53:ec:89:4e:32:46:e5:4f: 37:1f:d4:48:a1:c7:58:eb:e9:bd:7b:50:ac:b7:d5: 75:09:dd:69:8c:f6:6d:69:9d:a4:1b:48:6b:ce:38: 2d:3a:59:05:64:7e:d6:28:b0:a1:5a:12:46:bd:8c: 61:94:e3:ae:90:d9:a2:47:33:12:13:cb:1a:c0:75: ae:11:9d:83:21:a0:d2:53:3a:16:92:9b:34:d5:5e: d2:d5:e4:82:87:b2:de:4c:9b:69:4e:e5:b4:49:ee: 5b:30:e2:fe:ec:46:e2:c1:3c:4d:53:ff:55:eb:1c: d3:0e:f2:cd:2c:93:04:41:ca:80:f6:96:64:69:df: 1a:ad:65:81:ae:07:99:c8:2e:90:af:ce:e4:76:f4: c8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B0:2B:B5:D9:54:53:9A:4B:73:2B:81:B1:48:52:7C:12:48:70:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac50bba1-b410-355e-9d80-f5325e4659d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:d9:15:29:b2:38:a1:49:41:ff:74:18:2d:eb:7c:81:50:bf: 2f:c1:6d:8d:6c:ce:c7:92:65:45:2a:4a:09:4f:3a:75:ce:f3: 67:5a:52:89:cb:46:cc:cd:50:29:59:cd:8d:b5:b1:cb:f7:ce: 1a:a0:4b:83:9d:95:64:d5:fa:4e:6b:f2:a4:0b:c8:78:4f:c0: b5:ef:29:ef:e7:14:91:c9:e4:fd:be:7b:6c:08:4a:a1:f9:25: f1:f1:04:67:51:9a:8a:fe:1d:b0:9b:84:37:de:73:64:0e:c7: c5:75:52:ee:75:17:2f:97:ff:4c:1a:6a:de:eb:30:40:f5:91: d6:a1:00:7b:ac:b2:50:d2:e2:dc:21:00:f3:e9:d1:dc:c4:7c: 3e:42:66:7e:95:90:9d:de:f7:53:01:53:66:38:b4:fe:ed:c5: 51:89:a6:b6:1d:7c:da:73:61:8d:9a:ea:e8:de:11:72:52:96: d8:af:92:2c:dd:c5:d8:85:5d:8a:c9:d5:6d:bc:64:bb:ab:93: 0b:c2:f3:87:f1:cf:2a:63:30:37:d2:9f:09:7c:12:6e:0e:82: 93:83:6d:28:22:f2:cb:11:8a:39:0d:c7:f8:ac:e8:1e:b5:cd: 66:24:f2:d6:fc:7c:b3:b8:ed:61:00:0a:f3:66:09:45:5f:eb: d5:a9:e4:20 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9j+CfPqAqn5kLhAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk YThkMTAxNGYtNTJlNy00MWMxLTg4NzItYjRhMDUyOTFkZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorDNhCVevB5I3N7qT1xmSZQhSHcpdEleFnmB hoVtR7wPNcn8FPW1EKJIAEJVO7+AKSSuRrnqpQi36IzSOlfuko9k50QvkPj14v7H rVOs6YiJ2leBGI1UOApLZyFHjQUB62Nbq0qSwGXdRftKQ9SxU+yJTjJG5U83H9RI ocdY6+m9e1Cst9V1Cd1pjPZtaZ2kG0hrzjgtOlkFZH7WKLChWhJGvYxhlOOukNmi RzMSE8sawHWuEZ2DIaDSUzoWkps01V7S1eSCh7LeTJtpTuW0Se5bMOL+7EbiwTxN U/9V6xzTDvLNLJMEQcqA9pZkad8arWWBrgeZyC6Qr87kdvTIuwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKewK7XZVFOaS3MrgbFIUnwSSHCRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWM1MGJiYTEtYjQxMC0z NTVlLTlkODAtZjUzMjVlNDY1OWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAh2RUpsjihSUH/dBgt63yBUL8vwW2NbM7HkmVFKkoJTzp1zvNnWlKJ y0bMzVApWc2NtbHL984aoEuDnZVk1fpOa/KkC8h4T8C17ynv5xSRyeT9vntsCEqh +SXx8QRnUZqK/h2wm4Q33nNkDsfFdVLudRcvl/9MGmre6zBA9ZHWoQB7rLJQ0uLc IQDz6dHcxHw+QmZ+lZCd3vdTAVNmOLT+7cVRiaa2HXzac2GNmuro3hFyUpbYr5Is 3cXYhV2KydVtvGS7q5MLwvOH8c8qYzA30p8JfBJuDoKTg20oIvLLEYo5Dcf4rOge tc1mJPLW/HyzuO1hAArzZglFX+vVqeQg -----END CERTIFICATE-----Generated at Sun Oct 4 18:22:00 2026 by rpki-client