$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d98c9ca0-79f3-3412-9065-a9b7771a9450.roa File: d98c9ca0-79f3-3412-9065-a9b7771a9450.roa (raw, json) Hash identifier: O6OueY7Neq9Mmb91nLboFiCw6eQYYZoMo5cBlvYtUdM= Subject key identifier: 60:A7:0A:79:61:9B:85:21:AF:A2:58:45:5B:FB:74:60:01:F8:EF:C8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F17323E8032711A1299AD4C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d98c9ca0-79f3-3412-9065-a9b7771a9450.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 396587 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:3e:80:32:71:1a:12:99:ad:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=045bda7e-21fb-4723-bc6f-d3169e89e191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:41:71:82:3b:2a:4c:64:65:eb:52:70:dd:45: cd:a4:e0:90:48:46:ca:fd:f3:0d:72:1a:15:5f:b7: 30:1a:6b:a0:ef:e1:68:22:80:86:b9:6d:50:d4:ed: 4f:ca:ba:16:e1:d7:05:a9:5a:60:5b:1e:0b:58:ea: 69:b5:46:2c:b9:cb:63:fa:78:1b:70:b1:18:e0:61: d5:05:24:a2:d5:fb:d1:1a:bf:99:c7:78:1e:a2:13: 8d:a3:88:6f:fe:f9:a9:c4:98:a5:0e:9e:d0:19:cd: f6:37:ab:d2:18:ea:89:9a:80:b3:41:8b:43:03:a4: c3:9a:d5:dc:4a:01:06:c0:48:2b:a0:96:0a:8b:e3: 11:90:f1:cd:0e:27:dd:dd:3d:19:99:d0:a1:78:39: 08:ee:f3:26:73:39:0b:c1:72:99:24:50:92:b7:cb: 09:b1:ca:90:ff:91:c9:12:d4:29:08:ea:e7:8c:3a: a7:6d:e7:e5:b4:53:27:37:3d:09:d9:6f:9f:6a:7e: 1a:fa:68:25:75:f6:92:c3:70:54:57:75:c5:db:cf: e7:c1:b0:7d:d3:df:81:8f:b9:7e:a9:0e:01:41:13: de:f0:3b:ee:f4:f4:9d:8e:06:a7:b5:0e:83:10:b3: e0:cb:65:8b:fa:be:37:9f:0a:aa:ad:9b:1d:f2:25: 7c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A7:0A:79:61:9B:85:21:AF:A2:58:45:5B:FB:74:60:01:F8:EF:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d98c9ca0-79f3-3412-9065-a9b7771a9450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:e6:56:1a:59:49:a9:fe:09:7e:09:ed:a2:f6:c0:58:fe:82: 36:4a:23:4e:ca:a6:82:4a:72:44:5e:16:e2:90:30:75:b4:c4: 9a:85:e1:0f:3f:76:c6:71:d4:91:3f:df:98:dd:af:a1:7d:3e: 40:9d:51:0c:8a:d0:66:29:60:86:f5:26:37:39:3e:42:7c:2d: 46:7e:c7:a5:a1:3e:71:05:ef:d5:ca:45:d4:21:ac:67:1b:35: ea:00:9f:31:2b:a2:d2:c4:22:26:23:a9:32:0f:a0:9b:e2:34: 86:79:8f:33:7a:84:f0:b0:ae:26:58:77:35:b6:3d:48:92:c8: c7:9f:e9:be:5c:7b:10:d7:0c:b0:06:a4:c0:37:c1:47:3f:d4: 13:5c:1e:db:27:f9:97:a6:5e:3d:89:5e:58:5a:63:a2:a3:ea: ff:ba:52:77:86:00:da:9f:20:24:48:41:19:39:5b:72:19:96: f2:8c:c5:15:6c:8f:54:0c:b6:84:35:db:0d:c3:88:95:f1:29: 8b:5d:48:d8:39:be:18:d9:d5:62:93:98:fa:e1:aa:a7:f1:fe: 53:b5:29:2d:89:1a:38:2c:78:c3:41:e2:39:d4:12:13:89:d6: 6e:a0:20:19:bc:2c:b9:06:ed:72:49:cf:ea:d0:c1:36:27:e1: c3:40:b0:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMj6AMnEaEpmtTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk MDQ1YmRhN2UtMjFmYi00NzIzLWJjNmYtZDMxNjllODllMTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkFxgjsqTGRl61Jw3UXNpOCQSEbK/fMNchoV X7cwGmug7+FoIoCGuW1Q1O1PyroW4dcFqVpgWx4LWOpptUYsuctj+ngbcLEY4GHV BSSi1fvRGr+Zx3geohONo4hv/vmpxJilDp7QGc32N6vSGOqJmoCzQYtDA6TDmtXc SgEGwEgroJYKi+MRkPHNDifd3T0ZmdCheDkI7vMmczkLwXKZJFCSt8sJscqQ/5HJ EtQpCOrnjDqnbefltFMnNz0J2W+fan4a+mgldfaSw3BUV3XF28/nwbB909+Bj7l+ qQ4BQRPe8Dvu9PSdjgantQ6DELPgy2WL+r43nwqqrZsd8iV8iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCnCnlhm4Uhr6JYRVv7dGAB+O/IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDk4YzljYTAtNzlmMy0z NDEyLTkwNjUtYTliNzc3MWE5NDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnmVhpZSan+CX4J7aL2wFj+gjZKI07KpoJKckReFuKQMHW0xJqF4Q8/ dsZx1JE/35jdr6F9PkCdUQyK0GYpYIb1Jjc5PkJ8LUZ+x6WhPnEF79XKRdQhrGcb NeoAnzErotLEIiYjqTIPoJviNIZ5jzN6hPCwriZYdzW2PUiSyMef6b5cexDXDLAG pMA3wUc/1BNcHtsn+ZemXj2JXlhaY6Kj6v+6UneGANqfICRIQRk5W3IZlvKMxRVs j1QMtoQ12w3DiJXxKYtdSNg5vhjZ1WKTmPrhqqfx/lO1KS2JGjgseMNB4jnUEhOJ 1m6gIBm8LLkG7XJJz+rQwTYn4cNAsGI= -----END CERTIFICATE-----Generated at Tue Sep 22 05:28:10 2026 by rpki-client