$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8f984b0-2829-3d01-a93a-bca1e7abd40c.roa File: c8f984b0-2829-3d01-a93a-bca1e7abd40c.roa (raw, json) Hash identifier: 1WY/LTbcs+FWnDjMrKzYopS/F2Vop+638F2WoOquEbE= Subject key identifier: 81:52:18:EE:38:24:EF:7C:63:24:52:E1:12:DB:D9:FE:72:70:16:EA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F0DA74E178EAA02F56795C300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8f984b0-2829-3d01-a93a-bca1e7abd40c.roa Signing time: Thu 03 Sep 2026 14:58:03 +0000 ROA not before: Thu 03 Sep 2026 14:58:03 +0000 ROA not after: Wed 02 Dec 2026 15:58:03 +0000 asID: 0 IP address blocks: 216.87.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:a7:4e:17:8e:aa:02:f5:67:95:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 3 14:58:03 2026 GMT Not After : Dec 2 15:58:03 2026 GMT Subject: CN=e6032fbe-3473-4841-93cd-e34dae12b4c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6b:da:20:da:41:3c:a3:c8:aa:98:a4:0d:dc: 1c:0b:e1:67:e7:78:83:81:f0:52:33:9c:37:a8:09: fa:39:a6:6c:14:5d:37:12:ac:78:4f:89:1b:e4:4b: a9:79:8a:21:f7:53:cb:b0:34:b7:6e:10:55:32:9e: d0:c7:1b:b4:c3:98:e7:63:7b:2d:35:11:42:2e:f4: bd:1f:1f:44:a4:ae:64:2b:f8:c6:c9:a8:4f:89:68: ad:f7:ca:0a:b3:62:d6:02:1e:4d:00:a0:73:bf:cf: d3:a7:98:a2:86:0c:56:2e:a7:ae:cb:3d:b5:d9:90: fc:2e:57:7c:a1:ca:6f:f4:21:f8:9a:e2:52:ef:23: 9a:70:82:e8:d8:d7:e9:21:75:af:1c:0a:cf:03:66: 81:9d:86:17:a0:7d:1c:78:dd:6a:4c:26:b7:fc:f5: 52:a6:4b:be:f3:e2:f1:5c:6d:35:8b:a6:d7:09:ca: b7:a9:98:df:50:38:02:55:05:82:c0:8c:31:bd:3e: 19:eb:fa:b7:1e:a5:0a:2d:b1:c7:1b:e0:0e:72:f8: b2:a1:a6:55:46:1e:74:dc:67:6d:70:18:e6:2d:1d: 70:fb:c5:fb:a9:c2:53:75:56:4f:01:2f:31:4b:06: 7e:59:be:d4:04:31:4d:51:2a:39:7d:6c:66:c7:a4: 1b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:52:18:EE:38:24:EF:7C:63:24:52:E1:12:DB:D9:FE:72:70:16:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8f984b0-2829-3d01-a93a-bca1e7abd40c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:bd:20:89:cc:10:f4:e0:da:26:11:45:67:a9:c7:79:ba:87: 6b:76:ee:37:d9:1b:73:02:21:4d:9c:27:e3:3c:50:b0:49:e1: 91:13:b9:98:59:01:1b:87:f7:3d:74:95:78:cf:ad:e3:40:8a: 71:2d:b6:52:10:1c:1c:2f:f4:5e:39:73:0b:6d:02:a1:34:a6: ce:f1:9b:a9:ff:40:58:ff:4c:e3:0d:39:62:61:60:ac:f1:30: 23:e9:1a:a6:7c:85:eb:7a:1b:25:18:36:2f:0a:69:ab:f5:6e: 1c:10:cc:7e:90:03:1f:7a:7f:9d:1e:ab:6e:23:67:7a:1a:b1: f8:db:a4:1c:52:19:55:83:97:24:3b:32:b3:a3:85:78:20:cc: 63:59:15:ad:36:9d:fa:9c:ce:b9:25:a2:76:42:74:eb:72:c1: 69:1d:26:e8:15:41:e6:63:92:c4:74:da:08:db:c3:71:65:7e: 31:f0:2d:7a:af:c2:b9:fd:76:03:ad:1b:90:9a:7f:15:d3:83: 61:9d:3e:82:05:1d:1a:30:9e:f4:9f:d7:3c:bb:61:58:50:0e: fa:37:96:80:39:b6:1f:64:7b:af:b5:f0:0c:1e:80:d1:f3:c9: fb:54:7f:86:7c:80:39:11:47:e5:a4:b1:cb:81:6b:8a:43:79: 31:14:d7:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Np04XjqoC9WeVwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwMzE0NTgwM1oXDTI2MTIwMjE1NTgwM1owLzEtMCsGA1UEAxMk ZTYwMzJmYmUtMzQ3My00ODQxLTkzY2QtZTM0ZGFlMTJiNGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2vaINpBPKPIqpikDdwcC+Fn53iDgfBSM5w3 qAn6OaZsFF03Eqx4T4kb5EupeYoh91PLsDS3bhBVMp7Qxxu0w5jnY3stNRFCLvS9 Hx9EpK5kK/jGyahPiWit98oKs2LWAh5NAKBzv8/Tp5iihgxWLqeuyz212ZD8Lld8 ocpv9CH4muJS7yOacILo2NfpIXWvHArPA2aBnYYXoH0ceN1qTCa3/PVSpku+8+Lx XG01i6bXCcq3qZjfUDgCVQWCwIwxvT4Z6/q3HqUKLbHHG+AOcviyoaZVRh503Gdt cBjmLR1w+8X7qcJTdVZPAS8xSwZ+Wb7UBDFNUSo5fWxmx6QbjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFSGO44JO98YyRS4RLb2f5ycBbqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzhmOTg0YjAtMjgyOS0z ZDAxLWE5M2EtYmNhMWU3YWJkNDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFC9IInMEPTg2iYRRWepx3m6h2t27jfZG3MCIU2cJ+M8ULBJ4ZETuZhZ ARuH9z10lXjPreNAinEttlIQHBwv9F45cwttAqE0ps7xm6n/QFj/TOMNOWJhYKzx MCPpGqZ8het6GyUYNi8Kaav1bhwQzH6QAx96f50eq24jZ3oasfjbpBxSGVWDlyQ7 MrOjhXggzGNZFa02nfqczrklonZCdOtywWkdJugVQeZjksR02gjbw3FlfjHwLXqv wrn9dgOtG5CafxXTg2GdPoIFHRownvSf1zy7YVhQDvo3loA5th9ke6+18AwegNHz yftUf4Z8gDkRR+WkscuBa4pDeTEU1/M= -----END CERTIFICATE-----Generated at Mon Sep 21 01:01:51 2026 by rpki-client