$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aff1a37f-616f-3674-b41e-d09a1f0f52db.roa File: aff1a37f-616f-3674-b41e-d09a1f0f52db.roa (raw, json) Hash identifier: RL3Yu0vk+Bo+ucLGOjKf9Gn5nKPaoKaGB5Df5yvLj38= Subject key identifier: 82:62:33:CC:C5:82:BA:5C:24:4D:A8:17:27:9D:C8:F4:5C:F4:83:A1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F1732512222ADC19AA43514C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aff1a37f-616f-3674-b41e-d09a1f0f52db.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 36616 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:51:22:22:ad:c1:9a:a4:35:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=7ce7080a-6694-4d2c-bae7-c74d3b34c707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:60:4e:19:c8:ff:39:0b:3d:ee:05:b0:41:de: 57:92:b9:67:49:0f:e1:af:e3:49:85:3a:5a:5b:ec: b0:0e:c9:48:b0:f0:33:07:d9:d3:95:04:40:67:7a: ff:3e:0d:d5:5b:2c:31:ac:09:80:7b:b6:da:89:69: 70:b4:0f:60:90:7e:55:93:f5:31:84:46:67:e7:73: 3a:7c:73:52:ea:cf:c2:67:f8:c1:ca:e1:b3:a3:0e: 8b:56:30:85:ca:ef:c4:7a:0e:a9:27:36:8a:be:42: f6:1a:58:06:73:72:d8:68:8e:e0:7e:b5:a0:e4:c1: df:8f:fd:f4:ce:f8:0a:90:24:39:cf:ce:0c:30:e9: 44:81:37:84:63:1e:21:b0:ea:e0:ff:ba:d6:99:16: 12:4d:f3:2c:52:9e:2c:54:ee:7d:0f:49:89:11:0c: 8c:99:56:be:20:ae:28:fa:8d:3c:35:5d:9f:f5:c4: 0f:2c:16:3a:85:5b:1f:42:c8:05:53:e3:9f:ac:86: e2:9a:21:db:97:10:e6:ac:73:55:4e:6c:06:1d:35: 6e:02:72:f4:76:0e:c8:7e:84:b2:e7:ef:88:2f:4b: 7b:f3:8e:bb:b2:52:48:a0:c2:6e:a1:a6:a4:46:a4: 48:aa:b7:ab:11:01:d3:ba:97:b0:05:e6:42:17:58: 15:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:62:33:CC:C5:82:BA:5C:24:4D:A8:17:27:9D:C8:F4:5C:F4:83:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aff1a37f-616f-3674-b41e-d09a1f0f52db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:c0:de:09:8f:7b:3a:31:12:34:02:a4:fb:39:c1:06:47:5f: 51:be:15:dd:77:a2:c0:47:fe:8e:da:ac:ce:97:b6:85:0a:a4: 26:d4:71:ff:98:1a:63:1a:65:4a:94:a1:bc:56:af:79:1c:92: 8c:55:32:dc:d6:c1:1e:17:26:33:ba:b2:9d:fa:9a:e7:73:2a: dc:9f:c2:5d:ec:1d:52:86:9c:fc:a2:03:7d:2a:f4:e7:69:4b: cb:ee:03:81:06:56:f0:4d:66:0b:b0:c3:e1:2f:05:36:f6:ad: 86:27:f3:ef:75:69:9f:3b:c0:3e:6e:cd:ca:1f:b9:96:15:74: 27:02:a4:4e:65:15:5e:cb:1f:43:83:b7:ac:22:87:de:e4:bb: 4e:45:d6:c6:39:49:49:4d:2d:e9:3e:1e:61:33:9e:0c:de:02: 1c:ae:fb:97:f8:98:1a:76:ff:74:83:6d:3a:4f:33:7e:9a:12: da:3c:30:be:da:3f:e3:f9:c4:65:2a:8d:fc:e5:d8:fd:dc:e7: 95:eb:46:fa:9f:ce:97:3f:64:95:e2:1b:5a:43:d7:3f:02:91: 88:d3:b6:56:a8:99:a1:02:20:c6:4e:ff:d5:69:75:e4:65:5b: e6:55:f7:f9:77:77:bd:bc:a6:1a:15:11:1b:ec:2a:ce:1f:0c: 5b:c8:ac:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMlEiIq3BmqQ1FMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk N2NlNzA4MGEtNjY5NC00ZDJjLWJhZTctYzc0ZDNiMzRjNzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGBOGcj/OQs97gWwQd5XkrlnSQ/hr+NJhTpa W+ywDslIsPAzB9nTlQRAZ3r/Pg3VWywxrAmAe7baiWlwtA9gkH5Vk/UxhEZn53M6 fHNS6s/CZ/jByuGzow6LVjCFyu/Eeg6pJzaKvkL2GlgGc3LYaI7gfrWg5MHfj/30 zvgKkCQ5z84MMOlEgTeEYx4hsOrg/7rWmRYSTfMsUp4sVO59D0mJEQyMmVa+IK4o +o08NV2f9cQPLBY6hVsfQsgFU+OfrIbimiHblxDmrHNVTmwGHTVuAnL0dg7IfoSy 5++IL0t78467slJIoMJuoaakRqRIqrerEQHTupewBeZCF1gVAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJiM8zFgrpcJE2oFyedyPRc9IOhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWZmMWEzN2YtNjE2Zi0z Njc0LWI0MWUtZDA5YTFmMGY1MmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzA3gmPezoxEjQCpPs5wQZHX1G+Fd13osBH/o7arM6XtoUKpCbUcf+Y GmMaZUqUobxWr3kckoxVMtzWwR4XJjO6sp36mudzKtyfwl3sHVKGnPyiA30q9Odp S8vuA4EGVvBNZguww+EvBTb2rYYn8+91aZ87wD5uzcofuZYVdCcCpE5lFV7LH0OD t6wih97ku05F1sY5SUlNLek+HmEzngzeAhyu+5f4mBp2/3SDbTpPM36aEto8ML7a P+P5xGUqjfzl2P3c55XrRvqfzpc/ZJXiG1pD1z8CkYjTtlaomaECIMZO/9VpdeRl W+ZV9/l3d728phoVERvsKs4fDFvIrHU= -----END CERTIFICATE-----Generated at Mon Sep 21 13:35:16 2026 by rpki-client