$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b6c5851-bb98-3b93-85d1-3d8892c6f102.roa File: 0b6c5851-bb98-3b93-85d1-3d8892c6f102.roa (raw, json) Hash identifier: R4Rl3tdHdyEQCYOqqW8D+poOCsUWgIQ6aBXGvUkjWJY= Subject key identifier: FC:CF:89:2D:31:31:7A:67:DC:C1:F8:E9:57:E4:03:E0:DC:A4:58:0D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F17324FC25016EAAE577E77C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b6c5851-bb98-3b93-85d1-3d8892c6f102.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 27544 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:4f:c2:50:16:ea:ae:57:7e:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=7129e40d-b14b-4da5-bc26-ca19e092b9a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dd:6d:72:bb:2e:86:fc:f9:60:82:36:88:a9: 08:3c:7a:71:5c:a4:be:08:ad:ea:19:20:34:99:4e: 0d:ad:49:a2:24:fe:ea:7d:bc:55:7a:83:18:a1:f8: 15:c4:93:f3:a1:28:28:e0:84:9b:a1:f1:30:84:1e: a1:65:2f:5d:9b:04:01:3b:2c:08:2d:0b:03:82:2d: 32:19:a7:fc:f0:1a:42:ad:ca:00:a5:62:77:37:9f: fb:ce:1a:8b:00:fd:b9:ef:1d:95:83:9b:f4:eb:b7: 48:aa:32:19:48:0f:16:89:0d:d0:e1:b6:05:f9:4f: 05:12:53:93:b0:fc:7e:28:a7:8c:21:99:c8:a4:36: ee:65:a1:10:05:34:df:e3:ff:bf:ea:2f:d5:cc:d6: c4:22:4f:e3:4b:3b:4c:f3:9f:3d:f6:ab:91:e3:2a: f9:c7:c8:b4:0c:57:3f:05:00:5c:4f:2f:d7:ab:8a: 3f:59:a7:d0:60:1a:bd:78:00:97:74:38:dc:fe:99: 6e:d7:d8:a0:58:71:15:55:b8:0b:f3:bb:1e:db:c0: ca:02:2d:ef:3b:18:d1:b1:4b:83:fa:9d:16:dd:2c: f9:e5:8f:fb:68:59:8f:e6:a4:6a:64:14:b3:bb:6d: 4f:08:7c:49:3e:e3:a7:ef:60:76:05:fe:fb:c0:cc: 91:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CF:89:2D:31:31:7A:67:DC:C1:F8:E9:57:E4:03:E0:DC:A4:58:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b6c5851-bb98-3b93-85d1-3d8892c6f102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:16:65:e5:1f:b9:09:a7:16:5a:22:65:9c:09:00:78:4d:96: c3:7a:98:92:57:03:3f:3a:78:60:e8:da:42:8d:c3:8c:18:08: d6:54:72:93:d7:f9:74:9f:ba:59:6b:f6:c9:cc:41:0e:7e:91: 1f:4a:e5:04:b5:30:67:32:27:ca:07:77:b9:42:48:bd:06:60: 1d:8b:fe:23:6f:48:c0:0a:81:13:a4:70:b5:b5:ef:23:0d:da: 65:91:98:8d:0c:e8:8e:16:5c:a7:4b:54:01:29:49:1b:36:20: df:a7:1e:12:ea:53:8f:9b:6b:fd:aa:ee:9f:8d:90:4f:e3:04: 9b:0c:a0:70:e0:3e:7f:66:74:7f:49:15:61:33:ed:66:25:5b: f1:f6:1a:5d:d7:7e:78:82:6f:9e:c5:24:1c:ad:fa:c3:80:27: 57:86:1b:90:09:d6:99:1e:06:5a:b3:70:25:c9:f9:97:c4:13: f3:e7:6a:d6:3d:98:80:2b:f6:88:1b:8c:7b:d6:8a:b4:32:0f: 8e:fb:09:47:3c:1a:08:3a:3b:01:e9:81:3f:cd:20:e9:1b:b5: e2:32:86:ef:b6:8e:9d:ae:bd:0e:ef:17:ed:50:e8:ed:8a:21: 19:53:dd:38:17:4d:6f:19:0a:45:7d:2f:52:12:45:58:9a:da: 26:63:2b:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMk/CUBbqrld+d8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk NzEyOWU0MGQtYjE0Yi00ZGE1LWJjMjYtY2ExOWUwOTJiOWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt91tcrsuhvz5YII2iKkIPHpxXKS+CK3qGSA0 mU4NrUmiJP7qfbxVeoMYofgVxJPzoSgo4ISbofEwhB6hZS9dmwQBOywILQsDgi0y Gaf88BpCrcoApWJ3N5/7zhqLAP257x2Vg5v067dIqjIZSA8WiQ3Q4bYF+U8FElOT sPx+KKeMIZnIpDbuZaEQBTTf4/+/6i/VzNbEIk/jSztM85899quR4yr5x8i0DFc/ BQBcTy/Xq4o/WafQYBq9eACXdDjc/plu19igWHEVVbgL87se28DKAi3vOxjRsUuD +p0W3Sz55Y/7aFmP5qRqZBSzu21PCHxJPuOn72B2Bf77wMyRTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzPiS0xMXpn3MH46VfkA+DcpFgNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGI2YzU4NTEtYmI5OC0z YjkzLTg1ZDEtM2Q4ODkyYzZmMTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0WZeUfuQmnFloiZZwJAHhNlsN6mJJXAz86eGDo2kKNw4wYCNZUcpPX +XSfullr9snMQQ5+kR9K5QS1MGcyJ8oHd7lCSL0GYB2L/iNvSMAKgROkcLW17yMN 2mWRmI0M6I4WXKdLVAEpSRs2IN+nHhLqU4+ba/2q7p+NkE/jBJsMoHDgPn9mdH9J FWEz7WYlW/H2Gl3XfniCb57FJByt+sOAJ1eGG5AJ1pkeBlqzcCXJ+ZfEE/PnatY9 mIAr9ogbjHvWirQyD477CUc8Ggg6OwHpgT/NIOkbteIyhu+2jp2uvQ7vF+1Q6O2K IRlT3TgXTW8ZCkV9L1ISRVia2iZjK/4= -----END CERTIFICATE-----Generated at Thu Sep 24 11:54:36 2026 by rpki-client