$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be05ca50-0d6c-3382-8455-829b5533c399.roa File: be05ca50-0d6c-3382-8455-829b5533c399.roa (raw, json) Hash identifier: 7QvVQREQ8HOy09BkfWgFc4W92yZ83eZ7logsr1zZMiw= Subject key identifier: 95:13:28:A0:DF:A6:0D:FE:8A:60:B7:7B:EB:2A:33:14:5E:46:65:84 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F1732515E4E38111D46139E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be05ca50-0d6c-3382-8455-829b5533c399.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 396565 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:51:5e:4e:38:11:1d:46:13:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=ee6b2f5e-75ba-4115-97db-91b2524ab08e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0a:13:3c:0c:e4:35:63:10:80:b0:94:89:03: c8:ed:bf:73:2d:51:c4:2f:54:89:79:2e:eb:4f:6e: c9:73:59:58:a7:e2:dc:61:3c:e9:dc:da:f8:99:1a: 09:37:11:a1:25:15:f6:d2:ef:89:d7:fc:bc:9d:9d: db:58:ba:2a:d0:4e:a3:3d:c2:4a:2d:04:72:fa:b0: a6:5d:cb:7a:fd:88:b0:c6:ce:83:73:a6:24:5f:4e: f9:8b:66:bf:b1:c4:63:a6:26:6a:8a:ef:94:d5:13: df:b9:ab:e9:4d:2f:ca:73:f9:8f:09:cc:b0:71:97: e1:d6:05:42:4f:46:88:e6:1f:2a:85:ce:ac:4a:df: 26:43:c5:be:9a:ca:9e:cf:a0:e8:47:a3:31:a0:f4: 59:ce:b6:ec:45:d4:fe:cd:4a:26:54:36:e1:27:83: 96:0c:c4:32:e4:a1:4b:ba:ea:23:13:fe:dc:ee:70: 32:a2:b8:57:60:c6:3a:ca:6f:22:07:5c:7e:b5:38: 24:ef:3a:6e:3b:70:48:19:c8:2e:37:54:57:72:6c: 31:3a:39:5e:43:7c:89:14:c8:fb:75:bb:95:4c:cb: 9b:e4:37:34:64:ef:a0:24:8c:7d:94:3c:8d:fc:18: 0e:c8:b8:63:dd:de:74:6d:69:59:2a:2d:24:fb:00: 93:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:13:28:A0:DF:A6:0D:FE:8A:60:B7:7B:EB:2A:33:14:5E:46:65:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be05ca50-0d6c-3382-8455-829b5533c399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:19:df:ab:58:22:61:66:2f:43:b7:60:93:91:8f:c9:8c:83: 1d:3d:4d:7d:62:bd:bd:90:3e:ca:46:d9:02:32:5d:e2:ad:93: 7e:2b:e2:d8:a6:d4:1b:b6:c8:45:f2:a6:89:02:54:5c:6f:ab: 0d:35:03:0c:ef:f7:65:86:47:15:aa:35:55:6a:30:94:50:54: 68:d7:10:54:fc:27:42:1d:f7:61:e7:7c:32:0c:34:97:cc:c8: 3f:a0:72:6a:a9:d7:14:34:71:a4:73:4b:79:1e:dd:61:f1:d9: e6:f6:f6:eb:74:9e:57:4c:25:e4:eb:45:28:cb:b7:45:05:7f: 0d:1b:34:30:06:f4:dc:27:33:aa:4f:09:40:07:1e:ee:7e:68: 25:42:4a:93:cd:db:ba:98:11:45:71:19:b4:66:15:d6:ae:f8: 84:66:6e:39:e1:1f:ce:26:48:b2:8a:f5:a6:8f:b4:29:a5:93: 61:34:28:38:a8:54:d4:6b:98:e9:cf:33:8d:a9:4a:ab:56:e7: ae:57:b4:e5:8b:09:96:53:c7:55:c1:33:8a:2e:39:44:8b:1a: 12:12:ba:89:87:74:ee:0e:70:14:0a:78:da:d3:4b:fe:f0:f0: 49:8e:25:ae:90:67:16:cf:de:34:b1:99:41:06:46:d4:4f:d9: 90:01:d3:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMlFeTjgRHUYTnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk ZWU2YjJmNWUtNzViYS00MTE1LTk3ZGItOTFiMjUyNGFiMDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QoTPAzkNWMQgLCUiQPI7b9zLVHEL1SJeS7r T27Jc1lYp+LcYTzp3Nr4mRoJNxGhJRX20u+J1/y8nZ3bWLoq0E6jPcJKLQRy+rCm Xct6/Yiwxs6Dc6YkX075i2a/scRjpiZqiu+U1RPfuavpTS/Kc/mPCcywcZfh1gVC T0aI5h8qhc6sSt8mQ8W+msqez6DoR6MxoPRZzrbsRdT+zUomVDbhJ4OWDMQy5KFL uuojE/7c7nAyorhXYMY6ym8iB1x+tTgk7zpuO3BIGcguN1RXcmwxOjleQ3yJFMj7 dbuVTMub5Dc0ZO+gJIx9lDyN/BgOyLhj3d50bWlZKi0k+wCT6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUTKKDfpg3+imC3e+sqMxReRmWEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmUwNWNhNTAtMGQ2Yy0z MzgyLTg0NTUtODI5YjU1MzNjMzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEZ36tYImFmL0O3YJORj8mMgx09TX1ivb2QPspG2QIyXeKtk34r4tim 1Bu2yEXypokCVFxvqw01Awzv92WGRxWqNVVqMJRQVGjXEFT8J0Id92HnfDIMNJfM yD+gcmqp1xQ0caRzS3ke3WHx2eb29ut0nldMJeTrRSjLt0UFfw0bNDAG9NwnM6pP CUAHHu5+aCVCSpPN27qYEUVxGbRmFdau+IRmbjnhH84mSLKK9aaPtCmlk2E0KDio VNRrmOnPM42pSqtW565XtOWLCZZTx1XBM4ouOUSLGhISuomHdO4OcBQKeNrTS/7w 8EmOJa6QZxbP3jSxmUEGRtRP2ZAB08I= -----END CERTIFICATE-----Generated at Tue Sep 22 21:11:12 2026 by rpki-client