$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fff78cce-f360-3a80-832d-c9c1d18b4ff9.roa File: fff78cce-f360-3a80-832d-c9c1d18b4ff9.roa (raw, json) Hash identifier: nQWcsYmqz1BlXXiHef2WmhDG0Vzt3PB0A1hZng1FoBw= Subject key identifier: 11:C4:F5:DF:6A:C0:AB:80:28:EA:3D:58:C6:AC:E5:D1:D3:4A:55:F9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F17324F56F3DCE77592850260 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fff78cce-f360-3a80-832d-c9c1d18b4ff9.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 397197 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:4f:56:f3:dc:e7:75:92:85:02:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=5fd21c41-18f0-49ce-8198-0afb8e360d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fa:08:b5:98:16:20:a5:90:70:21:47:d0:ce: 02:6b:0c:92:73:f9:eb:70:dd:03:29:e0:1e:bb:92: 34:82:58:aa:25:14:2e:5b:f3:39:96:5d:8e:a3:29: 05:df:bb:c6:24:0c:ab:13:ec:8d:11:41:5a:f7:35: df:14:46:39:30:5d:f2:3c:c4:56:90:1d:a4:60:b4: ff:a6:ab:68:89:e6:c2:26:8b:5c:56:8e:ab:84:a4: de:a0:cb:a9:e4:98:63:00:c2:16:aa:5e:37:58:ef: 31:6c:dc:89:48:45:7d:10:6f:12:37:27:0a:26:75: 0c:16:48:ce:89:2e:9b:32:25:3e:d1:b1:6e:24:11: c7:4f:f2:72:02:b0:5e:31:d4:7d:0d:ff:c0:52:ff: ae:67:fa:37:39:2e:e5:82:f6:14:06:ed:ab:87:62: e6:cc:a8:22:74:80:a2:8a:08:72:e3:ab:37:ad:20: 1a:73:b8:30:b3:16:d7:ed:aa:66:a5:ce:1e:1d:e2: bc:75:82:6b:4f:27:6b:f5:78:52:68:d7:7e:64:94: f5:f6:50:49:79:4c:46:c7:b6:42:3b:6f:e5:8e:24: d4:85:b2:56:d0:23:f0:65:6c:51:8c:77:34:de:49: db:98:c2:cf:fc:6b:3f:94:41:de:3e:db:8a:c5:35: ca:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C4:F5:DF:6A:C0:AB:80:28:EA:3D:58:C6:AC:E5:D1:D3:4A:55:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fff78cce-f360-3a80-832d-c9c1d18b4ff9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:a2:7f:c7:29:dc:ca:2d:a3:a9:ab:40:44:86:c1:7a:bc:c3: a9:ca:63:50:4f:c2:29:98:90:e4:3b:37:bd:73:27:3d:35:8c: 57:be:96:3c:0b:fb:b9:20:5b:f2:0b:0a:db:10:99:93:c9:ea: da:0f:84:e6:39:01:63:b3:22:bc:2d:4e:61:b6:74:b3:9e:52: df:c1:e7:b8:3d:a8:e1:34:d8:1f:36:bf:f7:9e:b2:8e:26:7e: 24:9d:b2:fa:fa:cf:20:45:31:df:66:2b:23:d0:f6:67:00:87: 73:da:7f:c9:a6:d0:fe:6d:42:39:85:56:6f:86:16:69:30:a2: 09:b1:db:6f:6f:b2:da:c0:22:05:d7:af:f3:99:5a:05:3f:77: 7e:71:1e:ce:19:33:64:84:6a:75:65:92:c6:38:b3:67:7b:0a: ad:55:0a:1e:5f:7c:ec:d4:88:c0:24:1a:3f:8e:f6:22:42:5b: b3:0e:95:51:03:54:8b:b5:2c:df:01:a9:68:bc:72:66:7a:da: a7:70:0f:10:61:de:5b:b0:aa:34:2c:df:a5:9a:0a:c8:c8:f1: 75:d7:20:86:2f:f6:13:84:4a:36:b1:8a:aa:8a:42:1e:70:26: 34:31:70:56:b9:5e:38:38:e9:77:a5:68:78:ff:30:03:97:f1: ca:71:bd:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMk9W89zndZKFAmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk NWZkMjFjNDEtMThmMC00OWNlLTgxOTgtMGFmYjhlMzYwZDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvoItZgWIKWQcCFH0M4CawySc/nrcN0DKeAe u5I0gliqJRQuW/M5ll2OoykF37vGJAyrE+yNEUFa9zXfFEY5MF3yPMRWkB2kYLT/ pqtoiebCJotcVo6rhKTeoMup5JhjAMIWql43WO8xbNyJSEV9EG8SNycKJnUMFkjO iS6bMiU+0bFuJBHHT/JyArBeMdR9Df/AUv+uZ/o3OS7lgvYUBu2rh2LmzKgidICi ighy46s3rSAac7gwsxbX7apmpc4eHeK8dYJrTydr9XhSaNd+ZJT19lBJeUxGx7ZC O2/ljiTUhbJW0CPwZWxRjHc03knbmMLP/Gs/lEHePtuKxTXK1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHE9d9qwKuAKOo9WMas5dHTSlX5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmZmNzhjY2UtZjM2MC0z YTgwLTgzMmQtYzljMWQxOGI0ZmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeif8cp3Moto6mrQESGwXq8w6nKY1BPwimYkOQ7N71zJz01jFe+ljwL +7kgW/ILCtsQmZPJ6toPhOY5AWOzIrwtTmG2dLOeUt/B57g9qOE02B82v/eeso4m fiSdsvr6zyBFMd9mKyPQ9mcAh3Paf8mm0P5tQjmFVm+GFmkwogmx229vstrAIgXX r/OZWgU/d35xHs4ZM2SEanVlksY4s2d7Cq1VCh5ffOzUiMAkGj+O9iJCW7MOlVED VIu1LN8BqWi8cmZ62qdwDxBh3luwqjQs36WaCsjI8XXXIIYv9hOESjaxiqqKQh5w JjQxcFa5Xjg46XelaHj/MAOX8cpxvZk= -----END CERTIFICATE-----Generated at Mon Sep 21 14:19:41 2026 by rpki-client