$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/419fdd20-23b5-3ca4-9968-8a8ec1e998e5.roa File: 419fdd20-23b5-3ca4-9968-8a8ec1e998e5.roa (raw, json) Hash identifier: jBYyBn7ruAwmS6EyLnL47SzUoNve6oG/KzxC6CyYpjE= Subject key identifier: 95:92:50:4A:1F:62:77:70:65:E2:6C:47:66:2D:A3:09:E4:95:2D:A0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F17324B50F69B0FD0DD3A8E60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/419fdd20-23b5-3ca4-9968-8a8ec1e998e5.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 396609 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:4b:50:f6:9b:0f:d0:dd:3a:8e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=b2021f14-73a4-47c3-80aa-fd66b13a1568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bc:c0:be:3e:d2:36:59:d5:9d:81:1d:4d:a8: 69:e3:05:f2:ef:e3:72:96:06:b3:d2:a7:1c:a9:17: 62:97:de:60:c9:5d:da:0e:ec:4c:30:f7:03:1c:3f: 7d:44:7f:23:b1:db:a2:aa:5a:51:3c:39:51:ba:0d: b1:e2:ea:65:e4:fd:f7:6a:87:a4:19:69:f8:03:e2: c1:89:4c:c6:bb:69:62:be:f7:32:00:02:85:c0:64: 63:12:33:84:f7:96:23:06:f3:66:ef:6f:63:e4:ec: fc:ef:07:9b:f0:44:0b:77:a6:98:c0:d6:fa:af:a8: 99:b8:7a:aa:27:02:8d:44:52:d0:80:e3:c6:b9:94: dc:6c:26:12:16:c5:1b:1e:8d:74:61:57:e0:3b:d9: 3e:35:77:7a:db:7f:36:7f:e9:00:3f:51:90:97:17: 66:5c:fc:b2:94:df:f0:83:5f:9e:2e:23:d4:0c:5c: 02:12:62:85:b4:7f:12:e7:04:7b:fb:a6:3e:c1:9f: 23:c7:7c:57:3f:94:9a:24:d6:28:10:1b:0c:34:6f: 6a:bb:22:27:45:02:82:3c:dd:ac:44:79:3f:7a:7b: 2a:56:0a:0c:0f:64:15:2b:57:9c:99:19:e0:77:41: 94:1d:99:0c:d2:18:4c:90:ae:5d:de:28:c8:da:06: ce:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:92:50:4A:1F:62:77:70:65:E2:6C:47:66:2D:A3:09:E4:95:2D:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/419fdd20-23b5-3ca4-9968-8a8ec1e998e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:2a:6c:1c:52:7b:c1:a5:6c:f0:7a:2e:d6:f1:c0:69:b8:37: d5:cc:bf:82:e3:66:59:79:ba:1d:74:fb:f4:1a:ef:53:50:65: 14:df:86:43:bc:7c:57:7c:25:08:23:49:4c:0c:56:f5:3d:ad: 3b:ea:db:19:f2:75:c6:82:a3:b0:12:30:77:34:5d:83:8a:87: 0d:2e:1a:84:c6:b6:b7:b3:79:a7:f2:44:2a:1a:bc:fe:41:4d: 9e:56:3f:cb:41:20:e6:fc:8a:38:da:94:1b:79:9b:ff:63:b6: c4:e9:f2:1c:79:05:e0:94:e7:51:5e:14:49:6d:49:30:65:30: 64:64:2a:dd:3b:a8:c4:1f:1e:c7:4e:03:5d:6b:d8:d8:92:29: d9:10:03:af:0a:56:a7:e5:a4:d2:80:b0:94:0b:2e:95:41:73: db:a9:2c:20:0c:59:0c:ee:3a:2b:39:ce:84:a3:cf:b0:3d:b4: fe:83:91:16:9e:99:32:75:51:b6:80:f3:27:82:ae:08:1c:a7: 00:07:b3:c9:ce:89:3a:32:78:5a:e5:36:a2:ff:41:07:81:8b: 32:a0:63:fd:8a:4b:2c:8c:dd:9b:e0:3b:7a:8e:42:33:81:7f: e2:45:f3:89:72:6b:e2:49:28:d1:e2:5a:59:18:58:28:fa:ff: f9:81:cf:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMktQ9psP0N06jmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk YjIwMjFmMTQtNzNhNC00N2MzLTgwYWEtZmQ2NmIxM2ExNTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirzAvj7SNlnVnYEdTahp4wXy7+Nylgaz0qcc qRdil95gyV3aDuxMMPcDHD99RH8jsduiqlpRPDlRug2x4upl5P33aoekGWn4A+LB iUzGu2livvcyAAKFwGRjEjOE95YjBvNm729j5Oz87web8EQLd6aYwNb6r6iZuHqq JwKNRFLQgOPGuZTcbCYSFsUbHo10YVfgO9k+NXd62382f+kAP1GQlxdmXPyylN/w g1+eLiPUDFwCEmKFtH8S5wR7+6Y+wZ8jx3xXP5SaJNYoEBsMNG9quyInRQKCPN2s RHk/ensqVgoMD2QVK1ecmRngd0GUHZkM0hhMkK5d3ijI2gbO/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWSUEofYndwZeJsR2YtownklS2gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDE5ZmRkMjAtMjNiNS0z Y2E0LTk5NjgtOGE4ZWMxZTk5OGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkqbBxSe8GlbPB6LtbxwGm4N9XMv4LjZll5uh10+/Qa71NQZRTfhkO8 fFd8JQgjSUwMVvU9rTvq2xnydcaCo7ASMHc0XYOKhw0uGoTGtrezeafyRCoavP5B TZ5WP8tBIOb8ijjalBt5m/9jtsTp8hx5BeCU51FeFEltSTBlMGRkKt07qMQfHsdO A11r2NiSKdkQA68KVqflpNKAsJQLLpVBc9upLCAMWQzuOis5zoSjz7A9tP6DkRae mTJ1UbaA8yeCrggcpwAHs8nOiToyeFrlNqL/QQeBizKgY/2KSyyM3ZvgO3qOQjOB f+JF84lya+JJKNHiWlkYWCj6//mBz6Y= -----END CERTIFICATE-----Generated at Wed Sep 23 19:42:42 2026 by rpki-client