$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2bafb2e1-3715-370b-879d-3641c6508156.roa File: 2bafb2e1-3715-370b-879d-3641c6508156.roa (raw, json) Hash identifier: cIEjjhffRRB4TZ7HQO0HNw4Qxs0IXCuhASR5Gy9sq10= Subject key identifier: E1:9A:14:2A:58:25:C9:D5:59:58:22:C3:E3:1F:73:4E:2C:C7:26:E2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D94AE88950108CF48FB347100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2bafb2e1-3715-370b-879d-3641c6508156.roa Signing time: Tue 21 Apr 2026 14:12:52 +0000 ROA not before: Tue 21 Apr 2026 14:12:52 +0000 ROA not after: Mon 20 Jul 2026 14:12:52 +0000 asID: 397203 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:ae:88:95:01:08:cf:48:fb:34:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 21 14:12:52 2026 GMT Not After : Jul 20 14:12:52 2026 GMT Subject: CN=7c2317b7-4a28-487e-ac16-dc56b10d26c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7f:87:cf:78:57:b0:d4:4e:2b:f6:72:34:f3: 06:59:b8:8c:76:ca:17:30:5a:13:8d:14:3d:a4:4d: de:73:08:52:7f:cf:3c:66:f6:d5:0e:3a:21:47:df: 32:59:65:0a:6e:7f:ea:af:b1:20:04:26:ef:ce:77: 18:a8:8c:78:60:cd:4f:2a:36:c3:61:3a:bf:9e:b4: 78:dd:13:a5:6c:b5:b2:39:46:4a:74:d2:45:51:97: ff:6f:de:70:c2:45:0f:e7:d7:d6:5a:4a:80:54:27: 6f:a2:bd:44:ad:8a:e9:8b:66:4f:c6:61:eb:62:c7: 3b:97:9d:dc:35:a4:70:7d:45:55:f7:8f:b2:a6:fc: 18:4e:7e:d0:66:03:1b:48:68:8d:9d:26:67:ed:26: 11:dd:fd:84:70:04:75:c1:a9:3a:c1:7b:7a:07:17: 6f:0a:48:09:fa:95:4b:64:99:1c:9a:93:93:dc:d9: 7e:ef:48:af:1f:56:48:3d:32:e6:dc:c8:e6:36:cc: e6:7b:72:8b:56:0a:4d:e1:e2:8e:14:fc:19:e9:70: d5:1b:90:ee:bd:eb:db:e7:ed:75:f6:48:d2:e0:76: d7:bc:28:8f:88:a4:33:da:ef:5c:15:18:7b:2f:b6: 31:43:3f:e4:4e:b5:cf:1b:45:d1:b4:6a:f2:3f:9b: 20:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9A:14:2A:58:25:C9:D5:59:58:22:C3:E3:1F:73:4E:2C:C7:26:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2bafb2e1-3715-370b-879d-3641c6508156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:dd:4e:9b:0b:b4:a2:f5:0d:89:0b:bc:20:93:8d:de:41:68: 7c:65:30:3c:e1:74:10:19:3b:ab:d8:f4:59:91:e6:fb:a5:1b: 40:50:3e:65:b1:4e:82:bc:f9:33:10:0e:40:aa:a0:ec:51:de: a9:7d:dd:59:e0:6e:12:07:88:76:ce:72:1f:6b:e4:60:61:e6: 2c:cc:38:a1:49:3e:ff:86:18:17:bd:91:8a:8e:47:18:5c:05: 2a:92:79:f2:f0:5e:fb:a0:79:33:3c:3f:26:19:3e:39:04:e4: ed:fc:20:55:a9:aa:0f:86:81:5f:0b:32:43:49:7c:d9:20:2a: d0:6a:b5:c3:24:31:5c:61:78:4a:79:1b:d4:ec:9b:94:be:ab: be:13:29:14:66:95:2a:95:a3:bf:60:d3:fc:9c:08:ce:4b:c6: 24:39:a7:f7:5f:69:00:08:b6:ba:86:ac:8a:b0:3f:77:f4:52: 45:85:e9:69:2b:8a:1b:c1:a9:46:90:7d:73:28:ca:53:34:60: 2f:08:00:68:0a:33:aa:23:e5:f8:31:2c:e4:15:2c:b8:73:4a: f9:8a:98:ea:56:48:8c:c2:05:ae:8f:bd:4e:11:ba:32:e4:f4: 68:0c:00:de:12:71:58:fb:c0:8f:0a:f7:94:99:96:25:8c:20: 44:45:e7:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2UroiVAQjPSPs0cQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMTE0MTI1MloXDTI2MDcyMDE0MTI1MlowLzEtMCsGA1UEAxMk N2MyMzE3YjctNGEyOC00ODdlLWFjMTYtZGM1NmIxMGQyNmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH+Hz3hXsNROK/ZyNPMGWbiMdsoXMFoTjRQ9 pE3ecwhSf888ZvbVDjohR98yWWUKbn/qr7EgBCbvzncYqIx4YM1PKjbDYTq/nrR4 3ROlbLWyOUZKdNJFUZf/b95wwkUP59fWWkqAVCdvor1ErYrpi2ZPxmHrYsc7l53c NaRwfUVV94+ypvwYTn7QZgMbSGiNnSZn7SYR3f2EcAR1wak6wXt6BxdvCkgJ+pVL ZJkcmpOT3Nl+70ivH1ZIPTLm3MjmNszme3KLVgpN4eKOFPwZ6XDVG5Duvevb5+11 9kjS4HbXvCiPiKQz2u9cFRh7L7YxQz/kTrXPG0XRtGryP5sgKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGaFCpYJcnVWVgiw+Mfc04sxybiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmJhZmIyZTEtMzcxNS0z NzBiLTg3OWQtMzY0MWM2NTA4MTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADndTpsLtKL1DYkLvCCTjd5BaHxlMDzhdBAZO6vY9FmR5vulG0BQPmWx ToK8+TMQDkCqoOxR3ql93VngbhIHiHbOch9r5GBh5izMOKFJPv+GGBe9kYqORxhc BSqSefLwXvugeTM8PyYZPjkE5O38IFWpqg+GgV8LMkNJfNkgKtBqtcMkMVxheEp5 G9Tsm5S+q74TKRRmlSqVo79g0/ycCM5LxiQ5p/dfaQAItrqGrIqwP3f0UkWF6Wkr ihvBqUaQfXMoylM0YC8IAGgKM6oj5fgxLOQVLLhzSvmKmOpWSIzCBa6PvU4RujLk 9GgMAN4ScVj7wI8K95SZliWMIERF50M= -----END CERTIFICATE-----Generated at Wed May 13 05:28:33 2026 by rpki-client