$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d5819983-7f40-3a59-a5b5-f04091977b8f.roa File: d5819983-7f40-3a59-a5b5-f04091977b8f.roa (raw, json) Hash identifier: gzbH5QTN37N/ExVNOfTDiDXTiMIvAK5bSPP0SnuLDww= Subject key identifier: C4:4B:CC:23:70:5D:6C:1C:90:90:B4:D0:25:6B:79:9C:00:98:97:ED Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F17323B9B23CACB58E993CF00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d5819983-7f40-3a59-a5b5-f04091977b8f.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 396613 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:3b:9b:23:ca:cb:58:e9:93:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=2a5c8c15-2070-4de6-9fc2-4c9268c25a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2e:69:d9:44:c1:38:fb:ee:59:2f:82:3a:c9: c1:43:99:03:02:a6:58:c7:df:26:69:16:b4:d2:5d: 90:53:5a:bf:cf:29:36:16:73:87:ea:45:78:9b:07: d4:d5:e5:61:34:65:25:51:a4:0b:36:35:dd:c1:33: 5b:e9:ae:6f:e1:6a:af:58:e6:9c:18:58:75:bf:84: 1b:9e:3e:47:20:1e:f2:76:0c:4f:29:46:75:21:f9: fd:73:33:94:48:ec:81:fd:71:43:1a:b7:40:4d:a8: c8:87:98:c1:8f:16:31:61:a8:50:b1:0b:af:91:a3: b9:46:cc:76:9a:24:d4:8f:b2:4c:bc:2f:80:45:50: 58:3a:d3:49:72:97:a9:a5:e8:4a:4e:f9:67:ac:ef: f7:74:fe:4d:aa:35:71:46:09:f6:b0:21:66:3a:2f: 77:47:32:2e:51:b7:59:78:2b:60:48:89:1d:95:c5: 7c:d3:85:b2:0c:53:f8:b6:7a:f8:d1:34:64:68:63: 7b:1e:ff:40:3a:55:1b:5f:89:e9:29:33:f8:77:4c: 60:5a:54:d6:44:e7:87:68:cf:2e:5e:b1:91:e1:5c: ab:f3:1e:3d:2c:b6:b6:dc:09:45:98:40:00:32:78: 0f:a1:a8:aa:72:a5:a7:57:4a:20:5a:e9:c5:f1:0e: 24:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4B:CC:23:70:5D:6C:1C:90:90:B4:D0:25:6B:79:9C:00:98:97:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d5819983-7f40-3a59-a5b5-f04091977b8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:8c:2d:1b:db:5c:04:fc:42:d6:b6:ea:46:eb:ec:d2:da:c0: 8a:c7:7f:0d:7b:b2:71:00:39:43:c7:9b:97:d2:68:be:19:48: 89:da:fa:17:4e:05:eb:10:d3:57:97:44:76:13:c0:09:1c:61: ab:f7:cd:1d:0f:3e:61:e2:ac:d1:07:23:97:e6:3a:09:e0:09: e9:bd:6b:dd:25:a7:66:af:14:f1:2a:37:17:6c:75:7b:ed:22: 22:6b:29:db:09:08:08:bf:97:62:bb:3c:e2:88:4e:b4:2c:4f: 2b:69:b9:02:e2:e9:07:01:45:9a:e6:3a:04:2c:d8:24:06:d9: 4b:71:24:cc:99:13:67:14:23:8c:04:e2:17:c8:b3:fa:55:c2: 9b:bf:d1:b9:db:82:cc:41:0b:b1:af:86:8c:9d:6a:b4:39:a4: 10:56:80:b2:d6:01:4d:a3:6c:c3:0b:1e:da:26:58:68:d4:ff: 46:24:26:a1:62:38:f3:23:b4:ef:f8:24:3f:37:85:99:99:5a: db:f9:c4:af:ac:31:1d:04:59:dc:70:d1:a4:6e:5f:bc:d3:50: ab:2b:9d:93:3d:02:97:27:8c:1c:8b:fa:62:e8:da:6a:fc:9f: 18:b2:92:88:05:cd:c2:e4:5a:38:92:b2:4f:05:98:0b:aa:e7: ee:9a:95:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMjubI8rLWOmTzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk MmE1YzhjMTUtMjA3MC00ZGU2LTlmYzItNGM5MjY4YzI1YTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly5p2UTBOPvuWS+COsnBQ5kDAqZYx98maRa0 0l2QU1q/zyk2FnOH6kV4mwfU1eVhNGUlUaQLNjXdwTNb6a5v4WqvWOacGFh1v4Qb nj5HIB7ydgxPKUZ1Ifn9czOUSOyB/XFDGrdATajIh5jBjxYxYahQsQuvkaO5Rsx2 miTUj7JMvC+ARVBYOtNJcpeppehKTvlnrO/3dP5NqjVxRgn2sCFmOi93RzIuUbdZ eCtgSIkdlcV804WyDFP4tnr40TRkaGN7Hv9AOlUbX4npKTP4d0xgWlTWROeHaM8u XrGR4Vyr8x49LLa23AlFmEAAMngPoaiqcqWnV0ogWunF8Q4kKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRLzCNwXWwckJC00CVreZwAmJftMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDU4MTk5ODMtN2Y0MC0z YTU5LWE1YjUtZjA0MDkxOTc3YjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiMLRvbXAT8Qta26kbr7NLawIrHfw17snEAOUPHm5fSaL4ZSIna+hdO BesQ01eXRHYTwAkcYav3zR0PPmHirNEHI5fmOgngCem9a90lp2avFPEqNxdsdXvt IiJrKdsJCAi/l2K7POKITrQsTytpuQLi6QcBRZrmOgQs2CQG2UtxJMyZE2cUI4wE 4hfIs/pVwpu/0bnbgsxBC7GvhoydarQ5pBBWgLLWAU2jbMMLHtomWGjU/0YkJqFi OPMjtO/4JD83hZmZWtv5xK+sMR0EWdxw0aRuX7zTUKsrnZM9ApcnjByL+mLo2mr8 nxiykogFzcLkWjiSsk8FmAuq5+6alQA= -----END CERTIFICATE-----Generated at Tue Sep 22 15:11:58 2026 by rpki-client