$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb5c2efc-e021-3217-80e8-26fe6b2974ff.roa File: bb5c2efc-e021-3217-80e8-26fe6b2974ff.roa (raw, json) Hash identifier: 79gUKO222Rm5k/9UTkMCpFvyoUwvedo5NOcGwqvqVfI= Subject key identifier: E4:6E:11:D5:75:B3:A7:69:2B:90:AD:E9:40:83:3D:68:69:9C:EE:21 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F71EDAB68DCD7ADD56D541240 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb5c2efc-e021-3217-80e8-26fe6b2974ff.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 7342 IP address blocks: 216.87.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:ab:68:dc:d7:ad:d5:6d:54:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=5aea4731-1914-4a6c-bf06-65c702a4cfa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:af:00:6f:da:f0:c5:17:cf:af:7b:d3:15:78: 4f:e1:97:81:c2:0f:00:87:14:24:e3:5b:db:99:94: 54:73:58:db:5f:13:22:3e:3e:03:29:9b:fd:14:32: 17:20:b4:f4:4e:8b:7f:d2:70:cc:84:44:22:62:d8: 97:94:7f:d8:17:13:83:3f:ba:42:93:d2:53:ad:3c: dd:bd:93:a0:6d:0a:62:54:05:ef:de:bd:49:ea:c6: 32:c7:dd:80:02:64:00:a7:2a:ba:06:13:5f:34:1b: ff:78:6a:d1:fc:97:82:44:d1:dd:76:4a:3d:e5:b4: 93:7a:1f:07:5c:6f:aa:36:57:b9:fa:48:34:ac:af: 47:fa:64:48:1c:5c:4f:44:b5:ff:12:a5:ed:35:ba: 12:6d:77:21:2e:47:c5:f5:42:65:d8:8f:f2:c0:f4: d2:6e:07:55:0f:86:e9:26:a1:48:0c:67:9c:82:d9: 10:c2:cb:a2:5d:b6:f5:92:8d:67:80:a5:55:09:e6: 92:df:c6:9d:45:49:e9:e4:91:95:ec:1c:6b:19:2a: 70:ec:d2:ee:eb:2d:e0:9b:3d:9c:93:16:04:9e:b7: 42:38:83:85:9e:5c:6f:72:95:64:86:87:71:45:ac: a7:90:15:28:6b:73:d7:d3:a3:00:3d:e6:7c:34:66: 33:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6E:11:D5:75:B3:A7:69:2B:90:AD:E9:40:83:3D:68:69:9C:EE:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb5c2efc-e021-3217-80e8-26fe6b2974ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:08:4d:d8:d2:ab:e7:7e:79:a7:b8:64:57:e1:eb:58:58:e6: 46:d8:8c:c7:2d:ed:dc:97:18:b8:74:4e:05:b7:67:6b:07:ba: 0c:8b:a3:cc:0b:ad:44:79:28:45:71:84:78:05:98:7e:1f:62: 98:7d:26:6e:38:99:eb:09:f6:fe:40:93:36:39:35:b5:99:b1: a6:ab:34:8a:60:74:c8:9c:b0:14:46:66:75:89:b0:a0:1b:8b: 43:b8:76:ac:c9:05:20:bc:b2:08:20:8f:29:98:af:a5:f5:30: 69:ca:d9:1d:5f:48:99:6c:22:07:b3:6d:a4:c4:83:fd:a3:19: b3:11:ba:a6:fb:2b:ca:c9:81:63:39:89:5e:70:18:43:be:27: d8:65:b4:80:e4:c3:97:96:c7:7b:7e:aa:91:1a:ff:03:70:12: 44:19:4b:38:ec:38:34:a5:74:1a:fc:29:f8:96:53:7f:aa:1d: d5:71:d3:54:0a:30:89:bb:a8:71:b4:e9:da:ca:e7:0f:e4:f1: 55:63:f6:7c:b2:97:c2:d3:86:ff:c0:a3:01:9b:9b:29:a4:fd: d4:2f:6f:df:39:f9:8d:3b:a2:dd:91:87:57:e2:ec:74:7f:d0: 6c:08:0b:57:56:15:4f:e0:94:0e:53:f1:c5:96:8b:03:20:f0: c2:19:9e:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7ato3Net1W1UEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk NWFlYTQ3MzEtMTkxNC00YTZjLWJmMDYtNjVjNzAyYTRjZmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh68Ab9rwxRfPr3vTFXhP4ZeBwg8AhxQk41vb mZRUc1jbXxMiPj4DKZv9FDIXILT0Tot/0nDMhEQiYtiXlH/YFxODP7pCk9JTrTzd vZOgbQpiVAXv3r1J6sYyx92AAmQApyq6BhNfNBv/eGrR/JeCRNHddko95bSTeh8H XG+qNle5+kg0rK9H+mRIHFxPRLX/EqXtNboSbXchLkfF9UJl2I/ywPTSbgdVD4bp JqFIDGecgtkQwsuiXbb1ko1ngKVVCeaS38adRUnp5JGV7BxrGSpw7NLu6y3gmz2c kxYEnrdCOIOFnlxvcpVkhodxRaynkBUoa3PX06MAPeZ8NGYzLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORuEdV1s6dpK5Ct6UCDPWhpnO4hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmI1YzJlZmMtZTAyMS0z MjE3LTgwZTgtMjZmZTZiMjk3NGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FefMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0ITdjSq+d+eae4ZFfh61hY5kbYjMct7dyXGLh0TgW3Z2sHugyLo8wL rUR5KEVxhHgFmH4fYph9Jm44mesJ9v5AkzY5NbWZsaarNIpgdMicsBRGZnWJsKAb i0O4dqzJBSC8sgggjymYr6X1MGnK2R1fSJlsIgezbaTEg/2jGbMRuqb7K8rJgWM5 iV5wGEO+J9hltIDkw5eWx3t+qpEa/wNwEkQZSzjsODSldBr8KfiWU3+qHdVx01QK MIm7qHG06drK5w/k8VVj9nyyl8LThv/AowGbmymk/dQvb985+Y07ot2Rh1fi7HR/ 0GwIC1dWFU/glA5T8cWWiwMg8MIZnhY= -----END CERTIFICATE-----Generated at Sun Nov 15 14:53:35 2026 by rpki-client