$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ddf20a7b-1309-36fe-a4f4-fd06c3b0b514.roa File: ddf20a7b-1309-36fe-a4f4-fd06c3b0b514.roa (raw, json) Hash identifier: zmnvMw55zku0Z4txB2GqFkHVBvBjWTiRF6toUteZf5Y= Subject key identifier: 7C:67:04:B5:6A:A1:F4:33:48:80:B2:D1:2C:B1:2D:C6:3D:E8:5B:09 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F17324C986B792BF70A19D100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ddf20a7b-1309-36fe-a4f4-fd06c3b0b514.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 396614 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:4c:98:6b:79:2b:f7:0a:19:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=a998e9e8-f5df-47ed-ac2b-d2bc3269bbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fa:fd:f7:e8:3a:2e:a2:14:3e:b6:79:87:43: a0:50:02:48:8e:e9:9b:04:1d:98:8b:cb:65:f8:c4: dd:22:53:c0:a4:84:a0:86:01:25:d0:f6:09:9a:71: 19:9c:50:e6:ba:74:b2:d9:d1:7c:d5:db:fa:e9:ea: fb:1f:6c:60:dd:15:78:55:b1:60:85:23:b9:19:92: bb:01:4b:e3:66:e4:83:13:d1:75:4f:07:a7:ad:44: c9:5d:fb:7c:10:13:37:cc:18:ab:a3:13:ef:c2:c7: 21:85:e5:78:f5:54:95:fc:03:21:e9:58:fb:50:b4: 0e:40:d4:3d:c6:0a:79:2e:48:75:0a:11:cc:75:00: 77:0b:18:76:b4:1b:b2:84:96:5c:d8:b7:18:91:83: 83:ef:9a:b8:90:c1:bd:bf:ec:a6:e0:4d:9b:21:d5: 50:7d:56:60:7a:e9:ec:ef:0b:3f:2a:e3:b5:aa:9f: 98:3d:9b:2a:38:3e:35:7d:43:0d:63:ac:1b:18:f9: 3b:97:db:e0:79:5d:46:17:a9:fc:1c:1f:bc:af:68: a7:73:f0:b4:79:4b:39:18:14:44:6f:16:2c:0c:93: d0:2d:5a:09:83:21:ee:7d:74:a1:fe:eb:c3:ff:d1: b7:5a:9f:a9:68:6f:94:4f:b0:61:f6:a0:c9:63:20: 64:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:67:04:B5:6A:A1:F4:33:48:80:B2:D1:2C:B1:2D:C6:3D:E8:5B:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ddf20a7b-1309-36fe-a4f4-fd06c3b0b514.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:bf:19:b3:e7:6b:4c:89:bd:76:22:ac:b3:46:70:54:81:f9: d4:6c:b7:a6:4e:be:eb:bb:0b:04:92:cc:b7:66:9b:45:7d:ef: 73:aa:54:de:4a:6c:60:2a:9f:c5:f0:52:08:85:07:47:aa:83: df:02:69:6f:ab:e1:a0:bc:f8:94:89:e0:1c:af:71:4d:0a:1b: 51:1d:92:28:1d:57:23:52:54:7d:a4:19:81:d9:e4:b3:41:0e: 24:d6:54:b2:25:09:38:04:ee:43:06:c8:3d:4e:27:24:7e:bd: ab:16:0e:64:49:09:67:92:96:70:6f:45:06:34:f3:ee:33:be: 31:f6:59:94:09:24:fd:e5:25:d7:43:b6:4a:8a:ba:82:0f:4d: 64:54:59:50:b7:26:ef:94:44:13:a8:6b:ef:ac:90:5a:ed:46: f4:45:2c:a6:72:5e:06:23:e9:03:84:37:8e:21:d2:e1:ec:0f: 4c:17:07:95:58:25:5c:46:2c:1c:cb:bc:dd:e2:eb:0f:02:7f: bd:dd:14:aa:d7:b8:99:e1:27:d0:e5:db:a1:17:df:d1:ff:e3: e7:48:c0:5e:5e:a1:a7:ea:77:16:5a:d3:6c:7c:84:28:ea:ae: bb:83:67:b2:b1:73:a6:98:59:0e:72:4b:f6:30:5e:fe:a0:97: bc:69:7e:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkyYa3kr9woZ0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk YTk5OGU5ZTgtZjVkZi00N2VkLWFjMmItZDJiYzMyNjliYmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPr99+g6LqIUPrZ5h0OgUAJIjumbBB2Yi8tl +MTdIlPApISghgEl0PYJmnEZnFDmunSy2dF81dv66er7H2xg3RV4VbFghSO5GZK7 AUvjZuSDE9F1TwenrUTJXft8EBM3zBiroxPvwschheV49VSV/AMh6Vj7ULQOQNQ9 xgp5Lkh1ChHMdQB3Cxh2tBuyhJZc2LcYkYOD75q4kMG9v+ym4E2bIdVQfVZgeuns 7ws/KuO1qp+YPZsqOD41fUMNY6wbGPk7l9vgeV1GF6n8HB+8r2inc/C0eUs5GBRE bxYsDJPQLVoJgyHufXSh/uvD/9G3Wp+paG+UT7Bh9qDJYyBk3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxnBLVqofQzSICy0SyxLcY96FsJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGRmMjBhN2ItMTMwOS0z NmZlLWE0ZjQtZmQwNmMzYjBiNTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIq/GbPna0yJvXYirLNGcFSB+dRst6ZOvuu7CwSSzLdmm0V973OqVN5K bGAqn8XwUgiFB0eqg98CaW+r4aC8+JSJ4ByvcU0KG1EdkigdVyNSVH2kGYHZ5LNB DiTWVLIlCTgE7kMGyD1OJyR+vasWDmRJCWeSlnBvRQY08+4zvjH2WZQJJP3lJddD tkqKuoIPTWRUWVC3Ju+URBOoa++skFrtRvRFLKZyXgYj6QOEN44h0uHsD0wXB5VY JVxGLBzLvN3i6w8Cf73dFKrXuJnhJ9Dl26EX39H/4+dIwF5eoafqdxZa02x8hCjq rruDZ7Kxc6aYWQ5yS/YwXv6gl7xpfig= -----END CERTIFICATE-----Generated at Mon Sep 21 16:44:50 2026 by rpki-client