$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/429f7c1a-8390-31a5-94f2-b319fb1a5deb.roa File: 429f7c1a-8390-31a5-94f2-b319fb1a5deb.roa (raw, json) Hash identifier: oYQ7loMkfI5C2voCOehzlcnGBvK2p75SUafCN6kHFlY= Subject key identifier: 2D:46:F9:3A:17:9E:5A:F8:75:E9:5D:94:47:29:D5:AD:51:DB:76:50 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D94AE87C9B1CBBEBFB1B637A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/429f7c1a-8390-31a5-94f2-b319fb1a5deb.roa Signing time: Tue 21 Apr 2026 14:12:52 +0000 ROA not before: Tue 21 Apr 2026 14:12:52 +0000 ROA not after: Mon 20 Jul 2026 14:12:52 +0000 asID: 32651 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:ae:87:c9:b1:cb:be:bf:b1:b6:37:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 21 14:12:52 2026 GMT Not After : Jul 20 14:12:52 2026 GMT Subject: CN=f72a3ece-a18b-47f3-a3b4-37f506c10d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:75:f5:38:a2:11:43:07:4c:8e:6b:6e:e6:2d: 37:45:2c:0a:2a:bd:f0:ab:2d:aa:12:b1:4c:62:c4: 3a:9d:71:b5:1d:0c:90:fc:60:06:93:8a:44:d8:e9: c5:9a:9b:33:2e:99:5c:31:8f:64:10:5b:fd:b7:55: 12:3c:0f:dc:17:77:ec:19:45:90:25:e8:7c:c1:b2: 6d:98:8e:fd:74:2f:59:70:51:72:a2:e7:5a:3d:95: 6c:2f:ac:89:0c:48:2c:a9:6a:f6:11:49:52:37:f8: a8:1e:dd:9f:97:67:7d:23:39:75:cd:8c:99:a7:e5: 0d:ef:17:b4:0a:b6:88:e9:1c:e4:41:bb:43:77:84: 49:42:b5:2a:c5:2c:9e:7d:e3:f1:61:77:46:c4:62: 59:39:33:97:76:0a:8c:fe:9c:f6:35:cd:61:48:9c: d7:26:07:bb:15:4d:63:fc:06:c2:a2:22:47:12:b1: 1e:37:72:57:85:b8:03:e3:2b:36:20:ea:a9:38:71: 48:e3:dc:37:71:16:b9:01:76:fe:a3:33:cd:48:da: 76:ce:a9:9d:b9:0a:5b:32:72:06:47:fd:18:4a:cc: 1d:3f:61:60:c7:8c:52:58:f3:f5:34:b2:92:80:07: 46:df:33:66:b0:7e:93:62:5f:4e:b3:11:d8:7d:15: ff:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:46:F9:3A:17:9E:5A:F8:75:E9:5D:94:47:29:D5:AD:51:DB:76:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/429f7c1a-8390-31a5-94f2-b319fb1a5deb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:76:62:38:d2:93:1b:e7:e4:3e:cf:b9:2d:b4:35:fd:55:18: a2:49:f5:f8:75:05:2c:92:10:ea:33:da:28:59:0a:c6:d7:94: 3d:8e:ed:f1:39:a2:1f:33:67:0e:fb:ee:45:28:c6:68:46:4d: d7:6f:a1:cf:4f:14:7b:4a:b6:1c:aa:8c:e3:b9:47:5a:89:57: 38:68:b4:77:22:04:28:28:50:15:2b:dc:c7:10:8e:bd:16:52: 36:3e:45:c7:e4:c4:05:a6:db:52:e5:10:4d:88:cf:ca:07:b4: e7:62:68:2c:17:e9:99:5c:b7:a5:d1:57:5a:05:4c:b4:7b:5d: 58:3a:03:71:99:b2:62:27:9e:f4:03:ce:34:6a:a9:d9:1a:f9: aa:b7:65:95:8f:d8:6d:b0:eb:51:63:f4:04:5f:25:04:83:55: af:26:fd:4a:69:1c:cc:4e:e8:15:93:7b:61:a7:06:13:84:cd: e2:16:61:67:c2:d3:57:d1:27:af:84:77:f7:c7:47:7c:7a:6f: 2c:66:1c:77:d1:28:92:c0:b2:de:bc:50:56:53:11:06:f5:2f: 6d:b5:e6:4c:71:2c:b8:1d:1f:25:0c:6f:54:f0:5d:96:4a:ae: f0:c5:85:ea:6b:ca:14:c0:8e:9e:4d:bd:bc:d2:4b:9a:e4:48: b2:0c:1a:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2UrofJscu+v7G2N6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMTE0MTI1MloXDTI2MDcyMDE0MTI1MlowLzEtMCsGA1UEAxMk ZjcyYTNlY2UtYTE4Yi00N2YzLWEzYjQtMzdmNTA2YzEwZDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63X1OKIRQwdMjmtu5i03RSwKKr3wqy2qErFM YsQ6nXG1HQyQ/GAGk4pE2OnFmpszLplcMY9kEFv9t1USPA/cF3fsGUWQJeh8wbJt mI79dC9ZcFFyoudaPZVsL6yJDEgsqWr2EUlSN/ioHt2fl2d9Izl1zYyZp+UN7xe0 CraI6RzkQbtDd4RJQrUqxSyefePxYXdGxGJZOTOXdgqM/pz2Nc1hSJzXJge7FU1j /AbCoiJHErEeN3JXhbgD4ys2IOqpOHFI49w3cRa5AXb+ozPNSNp2zqmduQpbMnIG R/0YSswdP2Fgx4xSWPP1NLKSgAdG3zNmsH6TYl9OsxHYfRX/VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1G+ToXnlr4deldlEcp1a1R23ZQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDI5ZjdjMWEtODM5MC0z MWE1LTk0ZjItYjMxOWZiMWE1ZGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGB2YjjSkxvn5D7PuS20Nf1VGKJJ9fh1BSySEOoz2ihZCsbXlD2O7fE5 oh8zZw777kUoxmhGTddvoc9PFHtKthyqjOO5R1qJVzhotHciBCgoUBUr3McQjr0W UjY+RcfkxAWm21LlEE2Iz8oHtOdiaCwX6Zlct6XRV1oFTLR7XVg6A3GZsmInnvQD zjRqqdka+aq3ZZWP2G2w61Fj9ARfJQSDVa8m/UppHMxO6BWTe2GnBhOEzeIWYWfC 01fRJ6+Ed/fHR3x6byxmHHfRKJLAst68UFZTEQb1L2215kxxLLgdHyUMb1TwXZZK rvDFhepryhTAjp5NvbzSS5rkSLIMGu0= -----END CERTIFICATE-----Generated at Wed May 13 05:37:56 2026 by rpki-client