$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb1eb4ad-0a24-3173-8bd0-59a29ba28997.roa File: fb1eb4ad-0a24-3173-8bd0-59a29ba28997.roa (raw, json) Hash identifier: sJn0a9C03Xit+tca1doRouf/Ih/qKyU2ncfiG+SjZEE= Subject key identifier: 0A:3E:3A:7A:9E:B9:44:06:13:D8:3A:D3:1D:0A:5E:BD:28:23:A4:89 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F17325145EB250D0375DD2C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb1eb4ad-0a24-3173-8bd0-59a29ba28997.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 396582 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:51:45:eb:25:0d:03:75:dd:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=c6108bb5-3fa2-4c0e-aeb1-cb9a6c1f6d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dd:28:0f:89:94:8b:5f:31:29:ea:a1:a5:39: d2:45:90:0b:24:cc:ee:d8:3d:cf:d3:cb:62:01:ab: d6:48:b3:f0:b2:87:95:86:ae:2f:d0:a8:e2:61:77: e9:57:a4:4b:65:42:2e:6c:da:8a:a1:31:3a:42:ff: 05:d0:c2:f4:f2:38:35:19:b6:cb:b6:5c:b3:26:dd: 7c:69:8b:f9:c9:48:15:ad:e7:5d:2b:bc:e0:00:41: fe:f3:97:4e:71:ff:8f:7a:1b:6e:53:fa:d1:af:94: 2c:dc:0c:d3:fb:8b:e6:f7:33:9f:6a:9f:5a:9c:1a: da:9c:1a:c2:26:fe:ee:f9:3f:03:0b:20:f4:97:bb: bc:2b:79:b3:2e:ca:35:5b:09:04:34:04:f2:4a:c2: 78:23:d2:ea:41:dd:76:71:8d:9b:96:97:84:0f:19: 9b:88:e4:3e:47:ed:53:11:b1:8c:db:44:fa:89:c7: 6d:d1:41:dc:25:f8:de:87:62:47:eb:bb:18:6c:80: 09:30:83:a5:c6:bd:db:d0:de:10:6a:56:2b:ef:c4: 2e:8f:c6:f4:91:cd:18:94:a1:e4:48:09:46:2f:89: af:66:4e:76:d3:e7:93:82:66:20:6d:60:1b:d4:62: 94:8f:2a:2c:96:2a:70:60:84:52:9e:f2:f4:44:e3: 39:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3E:3A:7A:9E:B9:44:06:13:D8:3A:D3:1D:0A:5E:BD:28:23:A4:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb1eb4ad-0a24-3173-8bd0-59a29ba28997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:ab:1a:a1:b8:94:2e:d4:c2:a6:ff:d3:54:45:58:99:ed:47: 06:4a:53:cd:b8:b0:26:c9:13:4e:7a:bb:c3:fa:3f:20:e2:37: f5:8a:21:40:80:b4:7c:59:43:db:df:b9:21:3c:bb:35:79:91: cf:42:bb:4e:57:2d:8f:d0:28:54:12:c9:b6:7b:3b:e9:b8:80: 6e:25:36:9a:cd:15:af:3e:14:fe:6f:6e:a4:a7:2b:2a:89:e0: 4b:f2:35:70:90:03:d3:85:76:25:04:cd:8b:21:64:98:d0:d1: 24:aa:bd:95:b3:76:4d:d6:46:ea:72:eb:dc:6e:17:3f:7d:13: d0:dd:be:8e:90:16:c2:b3:8d:8d:b6:d2:7d:6d:db:c4:cb:e5: fc:1c:1b:2a:62:cf:57:98:f6:5e:37:01:91:58:c5:b7:96:e8: 75:c5:6e:13:c0:e6:31:7b:0c:2a:7a:ea:de:c1:df:4f:1f:3b: d3:28:34:2e:90:76:a7:1c:0b:5f:c2:22:7a:a1:28:be:6c:46: f8:98:6e:65:99:e3:b6:22:10:da:b1:a7:bc:4c:36:62:50:d7: 68:5e:39:17:bb:57:b6:dc:92:e2:f7:7e:b2:de:07:64:6e:e1: e1:fe:99:84:36:e7:e1:11:bc:3f:f3:54:6b:f1:ed:95:4a:81: e3:7e:f9:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMlFF6yUNA3XdLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk YzYxMDhiYjUtM2ZhMi00YzBlLWFlYjEtY2I5YTZjMWY2ZDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd0oD4mUi18xKeqhpTnSRZALJMzu2D3P08ti AavWSLPwsoeVhq4v0KjiYXfpV6RLZUIubNqKoTE6Qv8F0ML08jg1GbbLtlyzJt18 aYv5yUgVreddK7zgAEH+85dOcf+PehtuU/rRr5Qs3AzT+4vm9zOfap9anBranBrC Jv7u+T8DCyD0l7u8K3mzLso1WwkENATySsJ4I9LqQd12cY2blpeEDxmbiOQ+R+1T EbGM20T6icdt0UHcJfjeh2JH67sYbIAJMIOlxr3b0N4QalYr78Quj8b0kc0YlKHk SAlGL4mvZk520+eTgmYgbWAb1GKUjyoslipwYIRSnvL0ROM53QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAo+OnqeuUQGE9g60x0KXr0oI6SJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmIxZWI0YWQtMGEyNC0z MTczLThiZDAtNTlhMjliYTI4OTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFerGqG4lC7Uwqb/01RFWJntRwZKU824sCbJE056u8P6PyDiN/WKIUCA tHxZQ9vfuSE8uzV5kc9Cu05XLY/QKFQSybZ7O+m4gG4lNprNFa8+FP5vbqSnKyqJ 4EvyNXCQA9OFdiUEzYshZJjQ0SSqvZWzdk3WRupy69xuFz99E9Ddvo6QFsKzjY22 0n1t28TL5fwcGypiz1eY9l43AZFYxbeW6HXFbhPA5jF7DCp66t7B308fO9MoNC6Q dqccC1/CInqhKL5sRviYbmWZ47YiENqxp7xMNmJQ12heORe7V7bckuL3frLeB2Ru 4eH+mYQ25+ERvD/zVGvx7ZVKgeN++UA= -----END CERTIFICATE-----Generated at Mon Sep 21 12:43:53 2026 by rpki-client