$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f5f9bbb-5291-3c61-9e9d-2cda7b9e8146.roa File: 0f5f9bbb-5291-3c61-9e9d-2cda7b9e8146.roa (raw, json) Hash identifier: Ar0ODsMLyRw2j5lp7FIPHVnVFsrkj1UKNelICCNCvQI= Subject key identifier: 4A:13:CB:10:BA:E4:19:73:D7:95:67:7F:30:3E:BC:A2:69:F4:AC:85 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584FB93BC4E72882BBDD806D2040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f5f9bbb-5291-3c61-9e9d-2cda7b9e8146.roa Signing time: Wed 04 Nov 2026 02:00:13 +0000 ROA not before: Wed 04 Nov 2026 02:00:13 +0000 ROA not after: Tue 02 Feb 2027 02:00:13 +0000 asID: 36630 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b9:3b:c4:e7:28:82:bb:dd:80:6d:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 4 02:00:13 2026 GMT Not After : Feb 2 02:00:13 2027 GMT Subject: CN=cae5e461-39ae-48cf-8022-954d35d2d918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fd:46:49:1f:a5:00:f2:6c:37:e8:41:ac:bc: ee:97:dd:3a:c1:ca:a7:e4:64:64:4e:9b:4f:6f:30: 5c:45:91:fc:54:97:eb:f6:4c:d4:a6:51:ba:f8:00: 0a:a7:f1:ea:28:dc:aa:8f:33:ab:a7:29:f3:f8:3d: 3d:39:d0:64:2c:e9:b1:69:2b:d2:be:3a:04:a5:a3: 1e:94:fb:f7:d9:79:9b:c2:5a:f4:82:33:68:00:49: c9:bc:d6:57:26:af:65:01:cc:31:2a:22:fb:7b:57: 11:d3:d8:f2:d7:b2:ea:6f:41:0d:92:11:ba:fd:f1: 4c:32:75:98:37:50:c8:8a:61:41:8e:85:a6:95:d9: de:44:84:08:34:6a:38:37:a2:e3:10:b7:d2:a3:8d: 33:3c:a6:92:10:d1:45:4a:71:18:99:36:89:ac:36: c5:d8:bc:21:22:c6:30:7d:28:db:29:d8:9f:98:15: 34:9a:16:56:c0:62:84:10:83:8f:8c:60:f5:bb:0a: 22:2a:3b:22:2f:ce:f4:73:cd:77:e7:77:8c:ca:18: 9c:cd:d3:05:8b:4f:a7:3e:6b:32:4b:1b:f6:ed:63: dd:12:28:80:a3:b4:4a:81:2f:6d:87:e0:17:87:2e: 00:3c:e8:13:fe:da:de:3b:67:3a:f1:ee:08:44:86: b3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:13:CB:10:BA:E4:19:73:D7:95:67:7F:30:3E:BC:A2:69:F4:AC:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f5f9bbb-5291-3c61-9e9d-2cda7b9e8146.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:3a:44:a1:f4:d9:ae:8d:36:28:fe:a5:22:16:4e:20:59:ea: 28:54:81:91:f4:33:d4:66:b6:a8:60:20:bb:b8:e7:1b:a8:1b: f7:03:53:ab:d2:00:a9:2f:b7:08:3e:e8:c4:6c:29:31:87:bd: 47:a1:52:f1:ad:6a:76:60:b6:5d:c6:20:68:88:f7:bc:f2:a7: 65:b4:d0:0b:93:e6:27:8c:d6:9a:66:2a:ee:ee:6c:d6:13:66: e4:2e:ad:36:37:3a:bd:84:41:7e:d1:a6:85:de:f4:46:a3:36: 9c:3f:39:48:a5:0f:0c:a2:89:b5:fd:e5:dd:10:0c:05:34:3a: f5:49:04:76:4c:6b:28:fe:6d:c9:47:09:72:68:43:4a:f3:a6: 15:54:07:b3:4d:1e:30:9d:6d:b1:30:f7:aa:56:41:b4:b1:fb: 46:76:b6:01:fb:33:b0:13:cd:ea:95:8f:13:8c:8d:a7:bc:92: 36:03:9f:ae:c0:f3:02:51:9a:ea:7a:fd:a5:0f:b1:64:b7:42: e5:11:73:5d:0e:2e:84:38:1b:af:c3:63:f2:aa:82:8e:fe:4a: 47:cd:0e:24:23:5e:4f:2b:cc:47:cb:7b:85:6e:e0:83:90:a9: 1b:46:82:a3:18:40:11:20:64:7a:9e:b5:23:7b:e6:95:0a:ae: c2:d0:4b:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+5O8TnKIK73YBtIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTEwNDAyMDAxM1oXDTI3MDIwMjAyMDAxM1owLzEtMCsGA1UEAxMk Y2FlNWU0NjEtMzlhZS00OGNmLTgwMjItOTU0ZDM1ZDJkOTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf1GSR+lAPJsN+hBrLzul906wcqn5GRkTptP bzBcRZH8VJfr9kzUplG6+AAKp/HqKNyqjzOrpynz+D09OdBkLOmxaSvSvjoEpaMe lPv32Xmbwlr0gjNoAEnJvNZXJq9lAcwxKiL7e1cR09jy17Lqb0ENkhG6/fFMMnWY N1DIimFBjoWmldneRIQINGo4N6LjELfSo40zPKaSENFFSnEYmTaJrDbF2LwhIsYw fSjbKdifmBU0mhZWwGKEEIOPjGD1uwoiKjsiL870c81353eMyhiczdMFi0+nPmsy Sxv27WPdEiiAo7RKgS9th+AXhy4APOgT/treO2c68e4IRIazywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoTyxC65Blz15VnfzA+vKJp9KyFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGY1ZjliYmItNTI5MS0z YzYxLTllOWQtMmNkYTdiOWU4MTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEg6RKH02a6NNij+pSIWTiBZ6ihUgZH0M9RmtqhgILu45xuoG/cDU6vS AKkvtwg+6MRsKTGHvUehUvGtanZgtl3GIGiI97zyp2W00AuT5ieM1ppmKu7ubNYT ZuQurTY3Or2EQX7RpoXe9EajNpw/OUilDwyiibX95d0QDAU0OvVJBHZMayj+bclH CXJoQ0rzphVUB7NNHjCdbbEw96pWQbSx+0Z2tgH7M7ATzeqVjxOMjae8kjYDn67A 8wJRmup6/aUPsWS3QuURc10OLoQ4G6/DY/Kqgo7+SkfNDiQjXk8rzEfLe4Vu4IOQ qRtGgqMYQBEgZHqetSN75pUKrsLQS+g= -----END CERTIFICATE-----Generated at Sun Nov 15 17:52:38 2026 by rpki-client