$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/deb0c1ec-a49c-36bd-9234-43d4d3f227e5.roa File: deb0c1ec-a49c-36bd-9234-43d4d3f227e5.roa (raw, json) Hash identifier: n2UskLjFc5RgFFMDlDXS+D3p0ZFdD9wHta6D4aIf8N0= Subject key identifier: 71:4D:14:C1:4A:D7:8A:C0:F3:81:7D:40:A9:ED:24:2B:45:5C:0D:0F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F17323FC7165B07FDDC02C280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/deb0c1ec-a49c-36bd-9234-43d4d3f227e5.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 397208 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:3f:c7:16:5b:07:fd:dc:02:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=7bfa4246-92eb-4756-b8d5-dcf3bcdba3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:37:1c:87:4c:3c:75:e6:68:1f:5f:00:e5:11: 5a:31:ff:86:43:17:73:7a:c9:98:00:e0:5a:25:a5: 68:ce:1d:60:a5:87:b0:a3:75:82:b8:fd:25:15:13: ff:bd:c4:51:06:3c:19:74:8a:94:8c:2d:15:fc:b6: ad:16:e2:97:76:d3:cd:02:40:82:fb:39:d6:f5:92: 71:4e:fc:7c:05:2a:3a:be:07:ba:18:14:50:ac:7d: 5a:74:48:6e:94:75:8a:07:02:a2:af:d3:d2:33:1b: ff:aa:bd:51:17:d1:ab:a4:f1:55:45:f0:00:40:05: 6b:58:16:57:5d:fe:03:3e:b9:c7:0a:d8:25:6d:9e: 0b:7d:40:58:dc:89:b7:f3:1d:1a:39:69:e5:bd:6f: 2b:65:2d:00:3b:39:41:ce:ca:5b:33:d1:78:6e:93: c3:8e:d5:55:af:3f:0f:4b:d3:3f:2f:80:33:51:5a: 22:db:7f:15:f6:bd:33:a1:5f:87:d3:7f:e6:38:e0: a2:86:30:9a:47:18:7f:58:49:ae:e5:37:c9:fe:a5: 85:be:25:31:4d:ab:3b:63:f3:26:20:b2:86:ae:59: 4c:4c:f1:27:66:bd:5a:50:40:17:c2:85:a3:7e:2a: 41:65:ce:a2:ea:da:2c:39:33:0a:13:13:af:f0:57: 4d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4D:14:C1:4A:D7:8A:C0:F3:81:7D:40:A9:ED:24:2B:45:5C:0D:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/deb0c1ec-a49c-36bd-9234-43d4d3f227e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:bd:0a:fe:7a:4f:c6:c6:af:9e:43:38:30:69:6a:54:f7:d2: 8b:21:a5:a5:fd:16:2e:a1:a5:96:6d:ce:e6:2f:13:7a:b0:01: 7d:cf:f3:7a:13:1d:2f:0c:c6:0d:bd:aa:33:4e:e7:0d:a2:40: 8b:f4:61:0d:8b:bf:5f:bd:5d:5f:ce:96:42:b3:3e:b6:f2:3d: 9c:9a:f2:00:0f:54:bb:6b:c7:dd:5d:e1:b2:d5:cb:8e:f1:59: 05:58:78:a6:73:70:25:45:76:58:ea:73:0c:f8:11:16:c9:2d: b0:43:05:15:d8:9b:62:11:be:23:24:64:33:02:52:59:1f:ee: 3e:20:3e:a9:95:a9:85:60:eb:53:0b:5a:49:50:4f:59:e3:9f: c9:b8:86:99:89:c7:c2:be:b5:b7:00:ad:67:90:e0:78:82:67: e4:94:48:35:06:05:d6:96:1f:0c:c8:f9:69:0d:13:2f:6d:9a: 0f:f1:7b:61:68:f6:cf:e1:61:66:48:42:58:26:64:00:ea:05: f4:20:21:e4:20:50:7d:be:11:6e:9f:3a:b4:bd:7e:8c:cb:b5: d2:78:3e:9d:a0:93:b3:55:b9:80:4b:37:4d:4c:53:f2:f4:2b: 2d:f8:d8:68:30:eb:7e:6a:39:1e:fe:10:93:99:b6:70:9a:3a: 1d:f9:dd:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMj/HFlsH/dwCwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk N2JmYTQyNDYtOTJlYi00NzU2LWI4ZDUtZGNmM2JjZGJhM2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujcch0w8deZoH18A5RFaMf+GQxdzesmYAOBa JaVozh1gpYewo3WCuP0lFRP/vcRRBjwZdIqUjC0V/LatFuKXdtPNAkCC+znW9ZJx Tvx8BSo6vge6GBRQrH1adEhulHWKBwKir9PSMxv/qr1RF9GrpPFVRfAAQAVrWBZX Xf4DPrnHCtglbZ4LfUBY3Im38x0aOWnlvW8rZS0AOzlBzspbM9F4bpPDjtVVrz8P S9M/L4AzUVoi238V9r0zoV+H03/mOOCihjCaRxh/WEmu5TfJ/qWFviUxTas7Y/Mm ILKGrllMTPEnZr1aUEAXwoWjfipBZc6i6tosOTMKExOv8FdNAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFNFMFK14rA84F9QKntJCtFXA0PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGViMGMxZWMtYTQ5Yy0z NmJkLTkyMzQtNDNkNGQzZjIyN2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGu9Cv56T8bGr55DODBpalT30oshpaX9Fi6hpZZtzuYvE3qwAX3P83oT HS8Mxg29qjNO5w2iQIv0YQ2Lv1+9XV/OlkKzPrbyPZya8gAPVLtrx91d4bLVy47x WQVYeKZzcCVFdljqcwz4ERbJLbBDBRXYm2IRviMkZDMCUlkf7j4gPqmVqYVg61ML WklQT1njn8m4hpmJx8K+tbcArWeQ4HiCZ+SUSDUGBdaWHwzI+WkNEy9tmg/xe2Fo 9s/hYWZIQlgmZADqBfQgIeQgUH2+EW6fOrS9fozLtdJ4Pp2gk7NVuYBLN01MU/L0 Ky342Ggw635qOR7+EJOZtnCaOh353Sk= -----END CERTIFICATE-----Generated at Thu Sep 24 00:39:15 2026 by rpki-client