$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caf090ec-a1b2-31ee-8699-62c9bbebe17e.roa File: caf090ec-a1b2-31ee-8699-62c9bbebe17e.roa (raw, json) Hash identifier: wNiuUA0cQe7jRUcyb4FA1XjkpoD6ucoAIoyl4AFWruY= Subject key identifier: C0:BF:92:BF:C5:E4:10:17:B2:A4:BD:D4:95:8A:47:B2:8A:E3:C5:6B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F17323D91A74D6F340D42F480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caf090ec-a1b2-31ee-8699-62c9bbebe17e.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 22547 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:3d:91:a7:4d:6f:34:0d:42:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=b790cc54-bada-4495-a0ff-41726e3c8d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2f:1f:2e:cb:81:47:ce:66:99:71:10:b1:52: 32:5c:54:1a:2c:03:79:9a:31:6a:40:43:b6:03:f1: 97:e0:21:cc:b3:84:ec:1f:6d:26:2b:01:81:ad:f6: 31:b6:1a:e6:a6:aa:2f:29:8f:55:f2:3e:75:de:88: 98:75:18:af:55:74:8e:86:15:1f:0c:17:c5:59:fd: 2f:1d:90:03:3f:46:b8:d6:9c:81:50:7d:46:47:46: 87:d6:e9:73:db:03:46:d2:01:40:b0:88:a6:ee:aa: 25:a3:40:20:6c:49:ab:c3:6f:c8:6e:f5:e3:69:51: 29:48:e1:33:9c:10:fe:c0:33:94:99:82:b0:51:d4: 29:74:d6:14:da:0f:cb:f9:ff:a2:2b:6e:f1:52:00: 38:f3:49:98:1b:cc:09:b8:a7:b5:59:1e:ce:11:06: 10:b6:6e:33:5d:2a:2c:5e:f4:5f:d9:56:76:b2:49: a4:d2:24:b3:45:be:3f:00:3c:2e:22:2a:be:33:c1: 64:1f:e9:2e:37:a7:b1:08:f1:98:97:db:d3:07:89: 7c:95:89:86:df:db:13:0b:e1:ab:87:89:50:dd:c8: cb:c0:8f:12:07:4b:40:5b:ea:fa:58:d3:47:d3:67: dd:06:fa:57:47:7c:24:9c:59:6c:f4:34:fb:fc:c8: ea:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BF:92:BF:C5:E4:10:17:B2:A4:BD:D4:95:8A:47:B2:8A:E3:C5:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caf090ec-a1b2-31ee-8699-62c9bbebe17e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:1b:27:b1:b3:19:02:b5:d1:a5:18:b9:3c:37:ac:b4:26:00: 04:21:ab:5e:be:84:fb:9b:1a:78:7b:9f:91:20:2a:e8:76:4f: e1:b1:da:0c:a6:49:ad:e4:63:58:6a:4d:f4:96:5f:d2:c5:53: fc:d6:10:73:af:28:b4:e1:12:ee:51:45:e8:52:51:f8:de:8c: 15:b7:90:19:af:00:ee:3e:c3:37:c7:51:73:fb:85:6d:0c:dc: 83:c0:c2:11:28:46:4b:46:de:6e:a1:ad:5a:bd:27:14:61:4b: cb:a0:b8:71:b6:27:b1:5c:59:83:5d:45:79:74:18:a5:a1:cf: 91:62:5f:7c:6d:4d:8a:3d:4c:bd:76:75:c1:3a:ba:f1:eb:99: f4:68:f1:6f:8f:39:3b:24:32:6f:92:2b:ca:66:33:dc:c3:60: 50:82:10:d6:01:82:7c:5b:de:5f:81:eb:44:c4:d9:42:4a:b6: f0:09:a8:09:b9:6a:63:df:ca:86:95:8a:a7:ea:84:12:ae:97: fc:45:6d:15:bb:46:59:88:01:ed:72:e7:be:e4:8f:d4:0f:e1: df:1b:f0:90:38:fb:c3:72:c4:e1:34:ce:4c:bb:cb:8d:ad:7f: 7e:84:64:36:d0:df:f9:03:a1:08:bc:c2:88:82:29:c2:97:41: e9:03:5c:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMj2Rp01vNA1C9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk Yjc5MGNjNTQtYmFkYS00NDk1LWEwZmYtNDE3MjZlM2M4ZDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy8fLsuBR85mmXEQsVIyXFQaLAN5mjFqQEO2 A/GX4CHMs4TsH20mKwGBrfYxthrmpqovKY9V8j513oiYdRivVXSOhhUfDBfFWf0v HZADP0a41pyBUH1GR0aH1ulz2wNG0gFAsIim7qolo0AgbEmrw2/IbvXjaVEpSOEz nBD+wDOUmYKwUdQpdNYU2g/L+f+iK27xUgA480mYG8wJuKe1WR7OEQYQtm4zXSos XvRf2VZ2skmk0iSzRb4/ADwuIiq+M8FkH+kuN6exCPGYl9vTB4l8lYmG39sTC+Gr h4lQ3cjLwI8SB0tAW+r6WNNH02fdBvpXR3wknFls9DT7/MjqdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMC/kr/F5BAXsqS91JWKR7KK48VrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2FmMDkwZWMtYTFiMi0z MWVlLTg2OTktNjJjOWJiZWJlMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcbJ7GzGQK10aUYuTw3rLQmAAQhq16+hPubGnh7n5EgKuh2T+Gx2gym Sa3kY1hqTfSWX9LFU/zWEHOvKLThEu5RRehSUfjejBW3kBmvAO4+wzfHUXP7hW0M 3IPAwhEoRktG3m6hrVq9JxRhS8uguHG2J7FcWYNdRXl0GKWhz5FiX3xtTYo9TL12 dcE6uvHrmfRo8W+POTskMm+SK8pmM9zDYFCCENYBgnxb3l+B60TE2UJKtvAJqAm5 amPfyoaViqfqhBKul/xFbRW7RlmIAe1y577kj9QP4d8b8JA4+8NyxOE0zky7y42t f36EZDbQ3/kDoQi8woiCKcKXQekDXO4= -----END CERTIFICATE-----Generated at Wed Sep 23 09:57:21 2026 by rpki-client