$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb6a1037-05a7-34df-aed8-5be3322fa089.roa File: fb6a1037-05a7-34df-aed8-5be3322fa089.roa (raw, json) Hash identifier: yqFmv9Esypjb2b6jQpctruKxIWJh6H0A0qDAxSG+dNQ= Subject key identifier: 9C:E7:2B:55:33:00:CA:7D:A0:C7:16:66:C2:C1:92:A3:DF:D0:45:B0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F17323FE457A1C4DF73C7F8C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb6a1037-05a7-34df-aed8-5be3322fa089.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 396571 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:3f:e4:57:a1:c4:df:73:c7:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=58634790-5d31-4bd5-88d1-50db3e410f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d6:8c:ba:e5:6d:b6:fd:f5:19:0f:96:b3:6d: 2e:90:27:f7:07:4c:69:00:03:c6:bf:87:59:c5:d5: d1:9b:d2:ba:80:3a:44:b9:a8:a1:3e:2d:91:2e:85: 2b:e5:80:5b:08:28:f7:4b:a4:e6:0e:70:e5:70:41: 28:82:a6:91:04:57:d3:f6:06:5b:c8:1f:a0:29:12: f6:b4:2b:8e:0e:7d:57:e5:74:3a:9d:28:8c:f5:d4: 9a:cc:8e:a1:75:2e:75:d3:23:2b:2d:0f:1b:38:ed: b1:93:bf:ed:5b:1c:5c:78:27:57:76:ed:eb:f3:cb: c0:89:e4:93:ce:16:df:54:9e:00:d9:a8:07:3c:9a: 5b:31:84:e9:dc:0b:dc:7a:f4:7d:03:74:e1:23:b0: e9:52:cd:67:25:09:f5:40:5f:ac:fd:60:a9:b4:76: 13:d2:ac:58:77:95:b7:b7:1a:9e:8c:d4:dd:aa:7a: 90:b5:8a:d0:76:f6:29:1d:ea:13:88:6b:9a:12:6e: 99:d2:a8:e2:17:89:dd:90:e5:11:7b:da:b9:4a:78: 82:10:d2:89:c5:5d:d5:90:c0:71:01:ad:09:01:60: e4:1c:e0:64:3d:26:2a:70:4e:47:c0:ae:f4:ab:17: e9:9f:49:9c:ec:27:ff:95:6a:17:6a:5c:7d:62:9b: 0c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E7:2B:55:33:00:CA:7D:A0:C7:16:66:C2:C1:92:A3:DF:D0:45:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb6a1037-05a7-34df-aed8-5be3322fa089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:30:30:ca:5a:ec:51:b4:01:e2:44:c9:46:f2:1b:63:69:3b: 03:a7:bf:24:57:bd:30:52:5c:0f:28:95:3b:74:a4:db:b6:33: ed:d4:d8:c3:aa:f7:ae:a0:41:1e:c6:51:f4:66:9b:f3:66:70: 64:33:ff:5b:5e:77:8d:3a:eb:7a:59:91:1f:4d:6e:34:d4:c2: bd:07:cc:61:47:5e:b8:71:5d:15:4a:35:b0:2b:45:21:ed:83: 84:f0:c0:ab:2f:d2:89:d7:9b:27:91:36:65:ec:78:56:12:ce: 32:58:29:eb:a8:41:10:94:4c:3d:ac:3b:73:86:ec:94:4c:f0: 33:75:fe:c8:5c:cb:d8:cf:84:84:16:a2:4b:51:bf:50:15:47: 9b:7e:91:d3:5c:b9:84:98:a2:6f:5d:cc:a7:da:f5:cc:9f:c5: 12:4a:f7:2d:bc:74:cc:91:94:dc:8f:78:9c:67:9c:4c:86:7f: e3:49:d0:1d:01:73:83:e6:31:6b:60:96:87:c7:64:02:2a:aa: 6c:0b:fb:5e:84:af:8c:98:f2:7f:ce:4b:60:87:fb:69:91:5f: c4:fb:ba:2b:2e:1f:59:01:7a:dd:d7:22:83:09:f3:45:ed:71: 68:38:52:cc:5d:4c:42:f1:9d:76:03:66:d0:2d:8a:f0:97:f1: 70:59:d4:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMj/kV6HE33PH+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk NTg2MzQ3OTAtNWQzMS00YmQ1LTg4ZDEtNTBkYjNlNDEwZjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8taMuuVttv31GQ+Ws20ukCf3B0xpAAPGv4dZ xdXRm9K6gDpEuaihPi2RLoUr5YBbCCj3S6TmDnDlcEEogqaRBFfT9gZbyB+gKRL2 tCuODn1X5XQ6nSiM9dSazI6hdS510yMrLQ8bOO2xk7/tWxxceCdXdu3r88vAieST zhbfVJ4A2agHPJpbMYTp3AvcevR9A3ThI7DpUs1nJQn1QF+s/WCptHYT0qxYd5W3 txqejNTdqnqQtYrQdvYpHeoTiGuaEm6Z0qjiF4ndkOURe9q5SniCENKJxV3VkMBx Aa0JAWDkHOBkPSYqcE5HwK70qxfpn0mc7Cf/lWoXalx9YpsMJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJznK1UzAMp9oMcWZsLBkqPf0EWwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmI2YTEwMzctMDVhNy0z NGRmLWFlZDgtNWJlMzMyMmZhMDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAwMMpa7FG0AeJEyUbyG2NpOwOnvyRXvTBSXA8olTt0pNu2M+3U2MOq 966gQR7GUfRmm/NmcGQz/1ted40663pZkR9NbjTUwr0HzGFHXrhxXRVKNbArRSHt g4TwwKsv0onXmyeRNmXseFYSzjJYKeuoQRCUTD2sO3OG7JRM8DN1/shcy9jPhIQW oktRv1AVR5t+kdNcuYSYom9dzKfa9cyfxRJK9y28dMyRlNyPeJxnnEyGf+NJ0B0B c4PmMWtglofHZAIqqmwL+16Er4yY8n/OS2CH+2mRX8T7uisuH1kBet3XIoMJ80Xt cWg4UsxdTELxnXYDZtAtivCX8XBZ1F0= -----END CERTIFICATE-----Generated at Mon Sep 21 13:42:00 2026 by rpki-client