$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/20cd75e1-c04e-36e1-8ede-fc98edaf1b4a.roa File: 20cd75e1-c04e-36e1-8ede-fc98edaf1b4a.roa (raw, json) Hash identifier: aJq193mktrStWnmO4J6iqzbm9IyXfTm8LcPQdetc8c4= Subject key identifier: D1:BA:6B:1D:DD:07:CA:2C:BB:A2:92:B6:C1:20:D8:CB:8F:F5:96:1D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F173243E3D2ED724ABB02E600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/20cd75e1-c04e-36e1-8ede-fc98edaf1b4a.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 36627 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:43:e3:d2:ed:72:4a:bb:02:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=83510e3b-6f95-47fa-b012-20121444a9fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8f:c6:2f:cf:4c:2d:04:60:ed:c5:d0:c9:9c: c9:74:99:e5:99:ce:a3:aa:a6:eb:bd:50:60:b4:ed: 2c:76:80:94:42:40:d5:52:48:45:f0:9a:dc:71:a4: c6:0f:06:50:46:b4:fe:9d:9e:ce:61:50:9b:8c:dc: c1:50:4a:38:d1:f0:a3:0b:33:e2:11:36:b1:b2:9c: 71:2d:80:c4:a6:0a:92:32:5b:a2:16:58:27:92:0a: d8:b7:19:99:8d:6c:70:28:27:dd:23:64:d7:76:37: 41:55:12:9f:2f:2b:0e:41:68:24:2c:67:76:3d:5b: 9f:fd:84:2c:00:69:34:b5:a5:f4:24:7d:88:a2:cc: d5:b9:ed:14:26:dd:9a:e6:85:55:1f:4b:e8:37:50: f0:d1:96:df:54:ca:e9:c9:81:0c:97:25:52:d3:09: 98:33:f2:99:a9:ff:0f:6d:31:ca:12:72:96:a1:a8: 10:7f:67:80:0c:f7:d8:ac:f5:25:96:80:d2:3d:6d: bf:d2:b8:05:f7:63:21:38:d5:40:f3:04:7d:3d:6c: 16:ea:49:c7:de:d4:f8:3b:0a:88:37:1d:1b:90:85: 09:50:10:35:c0:21:8d:5c:47:af:a2:47:c3:bb:d7: dc:cb:86:74:f8:37:5f:e5:5d:7a:bd:65:37:04:30: d3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:BA:6B:1D:DD:07:CA:2C:BB:A2:92:B6:C1:20:D8:CB:8F:F5:96:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/20cd75e1-c04e-36e1-8ede-fc98edaf1b4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:bb:a0:34:d8:1a:6c:28:3d:d0:8e:06:ab:16:b4:a2:28:9f: 1d:b5:10:75:51:2b:70:d9:ef:63:2d:b2:ce:95:29:81:73:ce: 24:bd:3c:86:8d:cb:e4:db:13:e1:2e:bc:17:47:26:28:e8:56: be:7e:82:77:eb:3f:3d:7e:99:58:bf:f0:0e:db:2b:ba:7c:a6: e7:a7:de:8b:c4:5b:bd:c9:1a:2c:ca:25:e3:a5:cf:c5:15:c3: da:a5:16:96:3d:12:06:5d:35:33:1f:89:8e:61:69:b6:f8:a1: 2a:95:cb:dd:9b:ed:7b:90:0c:7c:e0:01:c6:e5:05:db:be:56: 99:52:17:80:1a:32:bc:6b:5c:df:e6:a0:e0:1f:52:a6:e9:ad: c7:10:e5:c0:5a:a0:10:40:10:8d:ea:9b:08:8f:04:58:60:b7: 61:72:11:ab:fc:f2:b7:c7:fd:eb:75:e3:cd:8b:79:a6:df:66: 77:b4:22:0e:e8:16:a4:76:72:58:d4:be:06:b9:0e:a0:64:86: a7:f8:c7:14:8d:e8:da:00:6e:d1:9d:10:e9:1f:87:49:23:b6: 2a:d2:13:2a:68:e5:b0:19:3e:c8:3f:5c:08:f6:00:53:98:e0: 2b:59:1d:9f:93:9c:bc:32:38:6f:96:e4:00:97:fa:da:6d:18: 95:d7:e2:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkPj0u1ySrsC5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk ODM1MTBlM2ItNmY5NS00N2ZhLWIwMTItMjAxMjE0NDRhOWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjI/GL89MLQRg7cXQyZzJdJnlmc6jqqbrvVBg tO0sdoCUQkDVUkhF8JrccaTGDwZQRrT+nZ7OYVCbjNzBUEo40fCjCzPiETaxspxx LYDEpgqSMluiFlgnkgrYtxmZjWxwKCfdI2TXdjdBVRKfLysOQWgkLGd2PVuf/YQs AGk0taX0JH2IoszVue0UJt2a5oVVH0voN1Dw0ZbfVMrpyYEMlyVS0wmYM/KZqf8P bTHKEnKWoagQf2eADPfYrPUlloDSPW2/0rgF92MhONVA8wR9PWwW6knH3tT4OwqI Nx0bkIUJUBA1wCGNXEevokfDu9fcy4Z0+Ddf5V16vWU3BDDT7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNG6ax3dB8osu6KStsEg2MuP9ZYdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjBjZDc1ZTEtYzA0ZS0z NmUxLThlZGUtZmM5OGVkYWYxYjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADm7oDTYGmwoPdCOBqsWtKIonx21EHVRK3DZ72Mtss6VKYFzziS9PIaN y+TbE+EuvBdHJijoVr5+gnfrPz1+mVi/8A7bK7p8puen3ovEW73JGizKJeOlz8UV w9qlFpY9EgZdNTMfiY5habb4oSqVy92b7XuQDHzgAcblBdu+VplSF4AaMrxrXN/m oOAfUqbprccQ5cBaoBBAEI3qmwiPBFhgt2FyEav88rfH/et1482LeabfZne0Ig7o FqR2cljUvga5DqBkhqf4xxSN6NoAbtGdEOkfh0kjtirSEypo5bAZPsg/XAj2AFOY 4CtZHZ+TnLwyOG+W5ACX+tptGJXX4mg= -----END CERTIFICATE-----Generated at Fri Sep 25 05:33:40 2026 by rpki-client