$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/443dd13d-8099-35b4-8512-10498459190a.roa File: 443dd13d-8099-35b4-8512-10498459190a.roa (raw, json) Hash identifier: 0TpN7TUJT8Ey7mWQ2rSQw0EjWkxWGk+WcIh802WjmJc= Subject key identifier: 14:24:98:97:9C:57:96:C3:FB:7F:05:92:18:E4:DB:49:7B:EC:E6:52 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F17324D2D7E7A268DCCFAE200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/443dd13d-8099-35b4-8512-10498459190a.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 396576 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:4d:2d:7e:7a:26:8d:cc:fa:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=0a54ba2f-4c0d-46ae-8f3d-b545dde34106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f8:ee:85:73:5c:ea:5e:88:56:9c:1f:c7:2e: 28:f2:b7:93:3d:52:b4:0d:a7:3d:63:71:71:4e:ff: a0:a5:b3:61:ce:4f:40:b2:f2:4a:06:62:85:0d:45: a3:5c:66:80:04:ed:eb:38:6e:a6:5c:5e:89:f3:bb: 75:7c:79:d6:97:03:cf:5d:59:eb:eb:a5:78:8c:c5: df:17:e7:77:e8:9b:41:dc:ad:09:2a:a8:16:f7:72: 73:87:0d:10:9d:24:df:39:80:97:c9:8b:83:51:3c: 00:0e:69:0d:0b:4b:7b:ee:98:36:78:5c:be:5c:ec: 50:cc:ef:bd:85:8a:15:b6:90:d0:0a:bc:d9:8b:fd: 33:5d:71:28:20:3b:33:2b:21:c2:7f:00:5f:c5:cd: 98:8d:32:f9:fc:b5:53:27:3e:5e:0b:06:ca:78:61: 2d:69:7a:ad:ab:41:09:4c:d9:0a:68:99:36:2d:4a: 87:65:bb:48:3a:4d:6b:23:8b:7c:b7:d0:86:e3:36: 7a:80:33:2a:c6:31:a5:30:75:8b:d9:7e:ca:fe:3f: ca:31:48:79:aa:44:63:80:62:65:5f:14:5e:50:68: 2b:dd:22:14:7d:1c:1a:89:6b:ff:e4:85:e0:e3:48: b1:d1:70:7c:18:79:2f:33:3b:c9:56:ba:df:ed:67: bd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:24:98:97:9C:57:96:C3:FB:7F:05:92:18:E4:DB:49:7B:EC:E6:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/443dd13d-8099-35b4-8512-10498459190a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:58:46:76:9a:dd:87:3e:38:82:19:f0:49:b5:ca:a3:b3:70: 90:fc:6f:08:e3:29:24:86:04:96:2a:ef:21:94:b0:58:fa:6b: 81:65:f1:97:7f:12:ce:eb:f8:54:e1:af:ae:bb:2b:4b:5d:c4: dd:ea:2d:6a:ba:8b:8e:cf:a7:b7:96:ae:a0:1b:8b:24:26:42: cd:b3:a2:59:1f:c2:e4:54:3f:da:83:12:29:6b:34:a7:b4:68: 9e:58:45:7e:ca:41:8d:e4:58:55:b3:a5:91:bf:ac:78:2b:4a: 34:30:b0:98:c8:4c:c9:e3:bc:4b:37:95:79:ad:e7:eb:f9:7a: a8:3f:09:13:d5:80:a1:eb:f1:d8:cd:06:02:0d:9e:24:b5:92: d0:df:d4:59:fb:a0:63:d4:f6:a2:15:6d:2a:c9:80:85:36:d0: e7:5d:aa:1e:23:ec:6d:a4:9c:a5:9e:44:54:40:6c:50:04:f3: f7:62:71:e9:2c:34:76:dc:ed:b5:d5:36:0f:6e:7d:35:cd:94: d3:97:46:26:0b:1e:9e:2b:f5:af:1b:5c:f7:2b:54:49:d1:cb: 6a:fd:1b:94:09:4e:1c:7e:72:53:a7:ba:61:e0:53:63:47:60: 37:00:a4:ed:27:86:40:4d:34:80:5c:2f:23:38:79:6c:56:74: 0d:82:c7:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMk0tfnomjcz64gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk MGE1NGJhMmYtNGMwZC00NmFlLThmM2QtYjU0NWRkZTM0MTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfjuhXNc6l6IVpwfxy4o8reTPVK0Dac9Y3Fx Tv+gpbNhzk9AsvJKBmKFDUWjXGaABO3rOG6mXF6J87t1fHnWlwPPXVnr66V4jMXf F+d36JtB3K0JKqgW93Jzhw0QnSTfOYCXyYuDUTwADmkNC0t77pg2eFy+XOxQzO+9 hYoVtpDQCrzZi/0zXXEoIDszKyHCfwBfxc2YjTL5/LVTJz5eCwbKeGEtaXqtq0EJ TNkKaJk2LUqHZbtIOk1rI4t8t9CG4zZ6gDMqxjGlMHWL2X7K/j/KMUh5qkRjgGJl XxReUGgr3SIUfRwaiWv/5IXg40ix0XB8GHkvMzvJVrrf7We9UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQkmJecV5bD+38Fkhjk20l77OZSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDQzZGQxM2QtODA5OS0z NWI0LTg1MTItMTA0OTg0NTkxOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpYRnaa3Yc+OIIZ8Em1yqOzcJD8bwjjKSSGBJYq7yGUsFj6a4Fl8Zd/ Es7r+FThr667K0tdxN3qLWq6i47Pp7eWrqAbiyQmQs2zolkfwuRUP9qDEilrNKe0 aJ5YRX7KQY3kWFWzpZG/rHgrSjQwsJjITMnjvEs3lXmt5+v5eqg/CRPVgKHr8djN BgINniS1ktDf1Fn7oGPU9qIVbSrJgIU20Oddqh4j7G2knKWeRFRAbFAE8/diceks NHbc7bXVNg9ufTXNlNOXRiYLHp4r9a8bXPcrVEnRy2r9G5QJThx+clOnumHgU2NH YDcApO0nhkBNNIBcLyM4eWxWdA2Cx3I= -----END CERTIFICATE-----Generated at Sat Sep 26 03:46:08 2026 by rpki-client