$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1df99af-0af4-36c2-9ff2-a9a0037f3b04.roa File: c1df99af-0af4-36c2-9ff2-a9a0037f3b04.roa (raw, json) Hash identifier: eApWWTDiB628LurI37MTsbRIg1iQbBjqTGvsrTxedHM= Subject key identifier: 8F:80:DB:4B:16:0C:A6:73:09:5D:1A:A7:4A:68:86:F1:A7:2D:A0:97 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F17323EAA7D7D77BF77077400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1df99af-0af4-36c2-9ff2-a9a0037f3b04.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 396599 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:3e:aa:7d:7d:77:bf:77:07:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=306a74dd-9c7e-4ab9-b3ca-916c20b6eb61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8e:2e:89:82:e7:ca:61:11:d4:36:6f:4e:1c: c9:13:f2:ed:e1:6b:db:7b:f0:6f:79:36:50:bb:95: cb:4f:a7:f3:ea:47:fc:25:88:fb:6c:e8:e1:16:f3: 8f:cb:30:56:bf:bd:b5:a8:c6:72:0f:27:a6:46:83: b6:21:a4:19:ce:ae:70:53:58:c8:f2:f0:5a:8c:85: d0:f6:91:ce:0f:e5:ac:51:16:02:f5:3c:66:ca:32: aa:54:21:62:5f:6b:07:28:19:68:8c:cb:9d:a4:9a: cd:2d:cc:e0:d7:57:85:95:32:50:0d:94:9a:9d:d8: de:96:48:1a:b5:45:bc:24:bb:e3:8d:ad:bc:26:24: 8d:c2:b4:1d:f6:1a:2a:2e:d5:60:6c:80:11:4e:3e: b5:b1:b0:a2:77:52:d5:96:f2:03:ee:30:ad:7b:a9: 4c:d6:30:61:15:f7:e4:c2:7e:cb:7a:86:da:b0:43: 03:17:58:64:f0:39:98:4c:39:38:06:62:d1:27:23: 1f:a8:b3:1b:d4:27:72:07:37:d6:ba:2a:e5:97:89: ad:d4:5e:ed:e7:4f:24:92:f9:33:66:b0:d1:8f:7f: c6:6a:ee:4c:18:86:91:53:62:c5:c8:24:07:59:7d: 6a:f7:35:92:a2:0e:40:d7:d6:fc:8a:e7:f2:a3:26: 1c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:80:DB:4B:16:0C:A6:73:09:5D:1A:A7:4A:68:86:F1:A7:2D:A0:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1df99af-0af4-36c2-9ff2-a9a0037f3b04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:09:e7:79:2b:c6:47:7b:3e:44:6d:2a:57:d2:b1:bf:94:ad: f2:a4:be:73:47:40:9b:b1:65:d8:3a:b8:2c:5c:ba:ba:18:76: 7a:83:71:ec:61:29:81:93:3f:3a:e3:c2:b8:b1:7e:66:47:d8: f0:fc:6b:4a:4a:d7:e8:f9:c0:5b:5d:1e:71:be:86:b1:80:5e: e7:8c:c8:6f:fd:6f:21:5f:a7:cf:93:0a:af:e2:6a:18:94:7a: 3c:f6:a4:1c:dd:b7:6a:c8:e6:04:eb:45:ed:ab:77:53:30:8b: af:aa:e4:91:ed:3c:86:dd:4d:b2:85:99:eb:d7:94:6b:e6:f7: 19:b3:aa:18:bd:b8:8d:92:91:a5:51:01:84:34:36:54:68:9d: 95:44:08:a5:06:d9:9a:72:ef:7a:0e:65:f5:45:85:67:26:0c: cb:07:9c:15:66:57:0e:5e:a5:dd:d9:f3:fe:52:74:c5:1e:43: f8:b6:7a:db:c5:fc:c8:f8:b7:b4:54:45:28:c5:31:65:c1:b2: 1d:11:d6:26:d0:85:c8:24:86:4c:65:78:48:87:2a:c9:5b:33: 1e:2c:9e:0a:92:f0:dc:eb:b4:57:08:b8:d5:76:63:37:9b:cc: 98:eb:c1:e6:f4:f4:55:dd:06:4b:19:cd:02:a1:6c:c1:2f:96: 49:f3:1e:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMj6qfX13v3cHdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk MzA2YTc0ZGQtOWM3ZS00YWI5LWIzY2EtOTE2YzIwYjZlYjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I4uiYLnymER1DZvThzJE/Lt4Wvbe/BveTZQ u5XLT6fz6kf8JYj7bOjhFvOPyzBWv721qMZyDyemRoO2IaQZzq5wU1jI8vBajIXQ 9pHOD+WsURYC9TxmyjKqVCFiX2sHKBlojMudpJrNLczg11eFlTJQDZSandjelkga tUW8JLvjja28JiSNwrQd9hoqLtVgbIARTj61sbCid1LVlvID7jCte6lM1jBhFffk wn7LeobasEMDF1hk8DmYTDk4BmLRJyMfqLMb1CdyBzfWuirll4mt1F7t508kkvkz ZrDRj3/Gau5MGIaRU2LFyCQHWX1q9zWSog5A19b8iufyoyYcKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+A20sWDKZzCV0ap0pohvGnLaCXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzFkZjk5YWYtMGFmNC0z NmMyLTlmZjItYTlhMDAzN2YzYjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYJ53krxkd7PkRtKlfSsb+UrfKkvnNHQJuxZdg6uCxcuroYdnqDcexh KYGTPzrjwrixfmZH2PD8a0pK1+j5wFtdHnG+hrGAXueMyG/9byFfp8+TCq/iahiU ejz2pBzdt2rI5gTrRe2rd1Mwi6+q5JHtPIbdTbKFmevXlGvm9xmzqhi9uI2SkaVR AYQ0NlRonZVECKUG2Zpy73oOZfVFhWcmDMsHnBVmVw5epd3Z8/5SdMUeQ/i2etvF /Mj4t7RURSjFMWXBsh0R1ibQhcgkhkxleEiHKslbMx4sngqS8NzrtFcIuNV2Yzeb zJjrweb09FXdBksZzQKhbMEvlknzHiE= -----END CERTIFICATE-----Generated at Mon Sep 21 13:34:33 2026 by rpki-client