$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc0450cb-202e-3d94-9d0a-38cd56e86872.roa File: fc0450cb-202e-3d94-9d0a-38cd56e86872.roa (raw, json) Hash identifier: r4KaALxAu5I8ZNmeKN4BKgbv+xleuWGRIYE3pK9fgEI= Subject key identifier: 77:0B:58:C5:0E:99:B7:2C:3F:45:E7:C3:0B:33:EA:10:3D:D9:AC:B1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F173247AAF1A5792924B43780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc0450cb-202e-3d94-9d0a-38cd56e86872.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 397199 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:47:aa:f1:a5:79:29:24:b4:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=18a4c93d-77fc-4f08-80ba-10717a221965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2b:df:7b:5b:c4:1b:e3:22:e1:28:12:1e:03: cc:16:cb:cd:f3:0f:1f:f6:44:94:c4:09:62:eb:63: 6f:c3:c4:75:a4:fb:5e:77:a4:ac:ee:5a:1c:9f:15: b4:bf:fb:3f:c9:88:7b:5b:68:44:9c:a7:bf:97:20: ef:2e:64:25:65:4f:17:6b:59:5f:09:05:1c:8e:26: f0:1d:7d:fb:13:e5:81:28:b4:b1:8f:77:34:cf:ff: d1:37:93:4d:bc:29:32:fa:ae:75:19:60:f9:db:d1: 6e:58:4a:15:77:65:32:e2:32:e0:18:a3:e5:46:9b: ef:d3:e4:eb:d9:57:ec:7e:a5:d1:50:4b:2c:2d:d3: e8:72:e6:5f:54:d8:9b:74:5e:7e:05:dc:c4:e3:36: d4:bc:d1:28:18:04:a1:27:3e:fa:20:42:5c:a0:e7: 9f:f4:24:4c:2e:fb:74:ed:13:08:a4:b6:40:a1:4a: c4:6c:0b:90:3b:58:13:64:35:c6:b9:e5:49:5c:e2: 37:1f:0b:6c:7c:bc:a6:84:e4:5b:a0:64:37:58:c1: bb:ec:35:92:0b:9e:c8:32:1f:db:1c:2c:69:f5:7e: 31:ae:ee:e9:a6:15:3c:4a:88:3c:5b:0f:80:39:6d: e6:db:24:35:60:65:32:1c:ed:15:4e:51:e9:e6:ac: 07:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0B:58:C5:0E:99:B7:2C:3F:45:E7:C3:0B:33:EA:10:3D:D9:AC:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc0450cb-202e-3d94-9d0a-38cd56e86872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:67:5c:59:ad:af:07:1e:0b:36:d1:32:e8:a6:fc:0a:4d:3c: ed:d3:06:cc:af:ce:1a:5c:01:48:c9:7a:ed:fc:b3:f4:b4:f6: 75:e1:93:ba:85:d6:45:d3:02:09:4c:a2:17:0c:60:68:34:80: cd:e4:7b:a2:ad:4f:1e:c2:65:c1:bf:56:43:c0:9d:a1:8f:7d: fe:23:1c:07:cd:82:14:46:bf:1c:3b:93:21:c7:ed:4b:e0:fc: 23:4d:04:ca:9e:59:17:9b:a5:c8:ba:97:ff:17:18:f1:70:0e: 69:9c:c9:9d:40:07:a4:2a:49:d0:83:5f:71:2e:aa:78:83:4c: 09:9f:e8:e5:5c:e7:b3:61:1f:70:63:d2:32:86:0a:ea:23:dd: fb:84:39:7f:e1:98:27:ed:7c:cf:df:51:9f:c9:78:92:61:db: 1c:2b:be:b4:4f:c2:38:79:bf:73:89:95:6f:2b:c9:d4:49:5a: 75:1b:5e:5e:c8:b3:6b:51:2a:23:62:a4:1e:80:ae:23:db:1c: 91:86:92:be:d6:19:a0:64:03:f5:f7:2d:1f:3d:92:a0:db:8c: d3:9e:c3:87:5c:ee:c2:72:93:4a:29:44:fc:56:c1:2f:42:79: 5c:35:b5:77:29:cf:9d:1c:29:63:70:d3:f8:bd:64:b7:91:0f: 8e:a0:b8:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkeq8aV5KSS0N4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk MThhNGM5M2QtNzdmYy00ZjA4LTgwYmEtMTA3MTdhMjIxOTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCvfe1vEG+Mi4SgSHgPMFsvN8w8f9kSUxAli 62Nvw8R1pPted6Ss7locnxW0v/s/yYh7W2hEnKe/lyDvLmQlZU8Xa1lfCQUcjibw HX37E+WBKLSxj3c0z//RN5NNvCky+q51GWD529FuWEoVd2Uy4jLgGKPlRpvv0+Tr 2VfsfqXRUEssLdPocuZfVNibdF5+BdzE4zbUvNEoGAShJz76IEJcoOef9CRMLvt0 7RMIpLZAoUrEbAuQO1gTZDXGueVJXOI3HwtsfLymhORboGQ3WMG77DWSC57IMh/b HCxp9X4xru7pphU8Sog8Ww+AOW3m2yQ1YGUyHO0VTlHp5qwHYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcLWMUOmbcsP0Xnwwsz6hA92ayxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmMwNDUwY2ItMjAyZS0z ZDk0LTlkMGEtMzhjZDU2ZTg2ODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxnXFmtrwceCzbRMuim/ApNPO3TBsyvzhpcAUjJeu38s/S09nXhk7qF 1kXTAglMohcMYGg0gM3ke6KtTx7CZcG/VkPAnaGPff4jHAfNghRGvxw7kyHH7Uvg /CNNBMqeWRebpci6l/8XGPFwDmmcyZ1AB6QqSdCDX3EuqniDTAmf6OVc57NhH3Bj 0jKGCuoj3fuEOX/hmCftfM/fUZ/JeJJh2xwrvrRPwjh5v3OJlW8rydRJWnUbXl7I s2tRKiNipB6AriPbHJGGkr7WGaBkA/X3LR89kqDbjNOew4dc7sJyk0opRPxWwS9C eVw1tXcpz50cKWNw0/i9ZLeRD46guIc= -----END CERTIFICATE-----Generated at Tue Sep 22 10:20:08 2026 by rpki-client