$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d83babde-e486-342e-97c5-bc53d8d6f29e.roa File: d83babde-e486-342e-97c5-bc53d8d6f29e.roa (raw, json) Hash identifier: MR7VAN1ZuU1Oq6K+0NUrxUHiJrWrWGa4+lF3H+cAzxM= Subject key identifier: AA:E0:E2:B7:54:A3:A5:CA:25:C3:28:F0:B8:1E:64:72:1C:03:98:EA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F17324EC5B0CDAB8834CC9940 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d83babde-e486-342e-97c5-bc53d8d6f29e.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 396566 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:4e:c5:b0:cd:ab:88:34:cc:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=63de067e-63d5-4836-b1b7-be06f32431d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8e:74:1c:e6:d9:6c:c8:d0:72:71:74:f3:3f: 63:6a:6a:c9:7b:e5:6c:45:6f:cb:29:d3:f4:d9:2f: b3:5e:f3:4e:5c:5e:cf:d7:7b:21:cb:6f:d3:92:22: a7:12:83:c1:d2:b7:ac:1a:ed:cd:78:70:0e:fb:bc: fd:5a:48:c4:ac:1e:f0:78:ab:58:00:e8:d7:32:c3: 57:ca:e2:d1:1d:fd:a9:5b:4b:04:94:f9:a1:43:c2: c3:14:fc:be:f2:0c:15:62:b9:ea:46:f3:7a:8e:06: 35:a4:cd:ec:99:f2:9a:86:59:09:ad:e5:23:ae:30: 44:bd:6a:94:fb:1a:38:d5:52:50:31:70:e8:a3:fe: 00:40:bf:36:01:cf:98:1c:b9:e7:93:1f:b6:15:a9: b4:a9:7b:65:cb:7b:99:6a:04:cd:eb:d1:f5:e3:25: 51:3f:83:b4:05:ba:a9:dd:49:d6:51:20:f3:2a:67: ed:ee:76:71:d1:b3:b8:9f:0a:5f:8e:78:37:3f:1b: 00:25:26:ac:be:fe:a7:16:4a:26:94:be:f2:97:44: 3b:4f:b7:ad:c5:2f:10:65:0f:33:c2:39:db:53:9e: 82:ab:9d:44:1b:82:f6:59:d8:b0:87:29:06:97:6e: a9:e4:db:02:bc:b2:9b:d4:16:ab:c8:48:09:0b:06: af:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E0:E2:B7:54:A3:A5:CA:25:C3:28:F0:B8:1E:64:72:1C:03:98:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d83babde-e486-342e-97c5-bc53d8d6f29e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:e0:2c:21:1f:90:a0:d8:3e:10:b4:24:2d:26:0b:ee:f6:43: 3d:0c:2e:30:aa:fc:2b:77:ac:f0:ce:09:4c:ce:77:42:c2:79: 7d:33:f5:27:e1:3c:00:27:b3:00:a3:04:19:42:02:1c:cc:c3: 11:11:0a:4a:ae:c7:56:1c:96:7d:54:b6:b4:1d:76:03:db:07: 49:d8:8f:48:1d:46:ff:8e:5f:ce:0c:b7:52:f3:94:d5:12:eb: 5d:3e:c6:55:0f:12:bc:25:f6:03:d4:7f:3c:eb:eb:d5:be:c1: 9c:84:2f:1b:16:b0:95:63:27:b3:3a:21:74:47:81:cc:98:e9: cf:c1:30:2b:fc:e6:05:30:bf:f6:71:60:9d:56:34:e9:08:d1: b7:2c:26:87:78:8e:59:ad:c8:08:8a:28:cf:7b:40:7e:90:20: 37:37:0a:a9:9e:6c:ff:62:5e:99:90:00:dd:81:ac:f1:10:1f: 60:ff:71:b9:e7:1b:cd:93:fa:b0:0f:82:c9:34:c0:31:9f:be: f1:96:aa:00:07:47:db:6f:6d:cc:48:4f:18:47:2f:3a:fb:94: 26:36:2d:56:35:63:86:18:92:cb:e0:a7:f3:3d:b4:9e:96:e6: 1a:14:0d:61:e3:f6:a0:64:13:f4:1e:c4:0c:29:99:ef:76:80: 4f:49:ad:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMk7FsM2riDTMmUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk NjNkZTA2N2UtNjNkNS00ODM2LWIxYjctYmUwNmYzMjQzMWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo50HObZbMjQcnF08z9jamrJe+VsRW/LKdP0 2S+zXvNOXF7P13shy2/TkiKnEoPB0resGu3NeHAO+7z9WkjErB7weKtYAOjXMsNX yuLRHf2pW0sElPmhQ8LDFPy+8gwVYrnqRvN6jgY1pM3smfKahlkJreUjrjBEvWqU +xo41VJQMXDoo/4AQL82Ac+YHLnnkx+2Fam0qXtly3uZagTN69H14yVRP4O0Bbqp 3UnWUSDzKmft7nZx0bO4nwpfjng3PxsAJSasvv6nFkomlL7yl0Q7T7etxS8QZQ8z wjnbU56Cq51EG4L2WdiwhykGl26p5NsCvLKb1BaryEgJCwavGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrg4rdUo6XKJcMo8LgeZHIcA5jqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDgzYmFiZGUtZTQ4Ni0z NDJlLTk3YzUtYmM1M2Q4ZDZmMjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7gLCEfkKDYPhC0JC0mC+72Qz0MLjCq/Ct3rPDOCUzOd0LCeX0z9Sfh PAAnswCjBBlCAhzMwxERCkqux1Ycln1UtrQddgPbB0nYj0gdRv+OX84Mt1LzlNUS 610+xlUPErwl9gPUfzzr69W+wZyELxsWsJVjJ7M6IXRHgcyY6c/BMCv85gUwv/Zx YJ1WNOkI0bcsJod4jlmtyAiKKM97QH6QIDc3CqmebP9iXpmQAN2BrPEQH2D/cbnn G82T+rAPgsk0wDGfvvGWqgAHR9tvbcxITxhHLzr7lCY2LVY1Y4YYksvgp/M9tJ6W 5hoUDWHj9qBkE/QexAwpme92gE9JraE= -----END CERTIFICATE-----Generated at Mon Sep 21 14:06:16 2026 by rpki-client