$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2bafb2e1-3715-370b-879d-3641c6508156.roa File: 2bafb2e1-3715-370b-879d-3641c6508156.roa (raw, json) Hash identifier: VoJKS5r0S+G51pRszOcitsbo2WRNI/jmDSQfosYCeAg= Subject key identifier: F7:3A:1C:FE:CB:E9:1D:14:86:58:BC:33:C0:3E:3E:18:7F:CF:D2:6D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F17323A85988C2A3BB72B7A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2bafb2e1-3715-370b-879d-3641c6508156.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 397203 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:3a:85:98:8c:2a:3b:b7:2b:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=2ca65040-b3d7-4f31-be15-32f7b0debf48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:81:e6:22:0a:a0:38:30:67:f1:57:40:40:61: 64:da:0c:79:5f:d6:26:cf:54:8f:e2:53:10:3e:ca: 43:12:71:e4:eb:bc:91:67:54:96:98:3a:26:5c:98: c6:ee:db:63:0c:c9:67:08:64:70:79:73:69:55:71: 6a:d2:ef:68:ab:77:7e:03:4a:b8:6f:38:e4:ef:2c: 88:bb:5c:aa:33:6c:97:9e:df:91:40:a2:11:95:c0: f0:85:3e:98:9c:32:66:3e:88:1f:cb:7f:68:96:01: 57:19:6a:9a:d9:99:ce:85:0f:09:b4:df:f0:ba:1e: b6:20:fa:d5:a2:af:7a:e2:26:e9:03:88:a3:36:88: 56:df:3c:ae:98:25:c0:6a:24:b7:bc:f9:47:96:34: 3a:49:e3:8a:62:bd:a2:9a:cf:15:f7:73:93:cc:de: b6:3a:26:2c:99:48:78:e1:eb:eb:bb:64:4a:5f:ef: c0:3f:0b:25:d5:ee:d9:74:e9:52:1a:59:1d:ba:4f: de:c1:72:7d:d8:fb:54:18:e0:fc:7a:9e:e1:92:d9: 9c:e9:b6:4a:27:e6:99:d4:fc:49:18:c6:2c:eb:55: 31:cf:65:f3:90:93:04:d4:55:b1:37:4b:79:43:65: 57:a5:79:7d:21:c7:ef:b4:7e:4e:f0:3f:94:4d:99: bf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:3A:1C:FE:CB:E9:1D:14:86:58:BC:33:C0:3E:3E:18:7F:CF:D2:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2bafb2e1-3715-370b-879d-3641c6508156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:13:ef:d5:a7:92:ac:f6:04:51:29:53:07:a0:83:7b:a9:ba: 6b:e7:48:b4:72:78:65:13:82:a7:29:d1:dd:b1:71:48:19:38: 5d:3e:1b:26:3d:c4:03:35:3e:a0:d2:08:8b:db:fd:f6:7f:83: 24:57:83:d7:0f:7b:a2:5b:20:99:ac:dd:f3:b8:17:ec:72:bc: a9:b4:51:ac:50:2c:a7:97:57:01:92:19:16:05:b7:f6:23:88: e4:57:e2:ce:ac:bb:a3:29:53:e1:a1:89:d6:37:12:23:fd:4b: 6d:47:4b:03:1c:c0:b3:f8:a6:bd:0a:a6:f0:9d:94:1a:8d:2a: ad:86:03:2b:4d:c6:96:5a:aa:5a:e6:f7:4a:fa:fb:77:0d:97: 93:aa:97:62:4a:77:41:7f:f2:2c:8b:06:3a:bc:34:43:0e:a1: 82:87:79:76:dc:f8:9e:07:82:b3:f8:2a:49:83:6b:9f:1d:4c: 2c:44:1c:73:62:18:ca:b4:89:84:d9:f7:43:cd:6b:93:79:40: 53:77:52:13:22:f7:01:16:91:a2:76:2c:36:a3:b8:9c:38:76: f4:d7:41:e3:01:2f:5a:56:8c:cf:12:ad:b2:af:0d:5c:65:ca: b8:e6:a9:64:f5:e1:68:3e:50:12:b3:2e:21:06:00:7b:3b:ce: af:03:6a:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMjqFmIwqO7cregAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk MmNhNjUwNDAtYjNkNy00ZjMxLWJlMTUtMzJmN2IwZGViZjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYHmIgqgODBn8VdAQGFk2gx5X9Ymz1SP4lMQ PspDEnHk67yRZ1SWmDomXJjG7ttjDMlnCGRweXNpVXFq0u9oq3d+A0q4bzjk7yyI u1yqM2yXnt+RQKIRlcDwhT6YnDJmPogfy39olgFXGWqa2ZnOhQ8JtN/wuh62IPrV oq964ibpA4ijNohW3zyumCXAaiS3vPlHljQ6SeOKYr2ims8V93OTzN62OiYsmUh4 4evru2RKX+/APwsl1e7ZdOlSGlkduk/ewXJ92PtUGOD8ep7hktmc6bZKJ+aZ1PxJ GMYs61Uxz2XzkJME1FWxN0t5Q2VXpXl9IcfvtH5O8D+UTZm/6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPc6HP7L6R0Uhli8M8A+Phh/z9JtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmJhZmIyZTEtMzcxNS0z NzBiLTg3OWQtMzY0MWM2NTA4MTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYT79Wnkqz2BFEpUwegg3upumvnSLRyeGUTgqcp0d2xcUgZOF0+GyY9 xAM1PqDSCIvb/fZ/gyRXg9cPe6JbIJms3fO4F+xyvKm0UaxQLKeXVwGSGRYFt/Yj iORX4s6su6MpU+GhidY3EiP9S21HSwMcwLP4pr0KpvCdlBqNKq2GAytNxpZaqlrm 90r6+3cNl5Oql2JKd0F/8iyLBjq8NEMOoYKHeXbc+J4HgrP4KkmDa58dTCxEHHNi GMq0iYTZ90PNa5N5QFN3UhMi9wEWkaJ2LDajuJw4dvTXQeMBL1pWjM8SrbKvDVxl yrjmqWT14Wg+UBKzLiEGAHs7zq8DatA= -----END CERTIFICATE-----Generated at Thu Sep 24 11:04:41 2026 by rpki-client