$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45e96cea-d8b9-3c70-a645-be0455a1b391.roa File: 45e96cea-d8b9-3c70-a645-be0455a1b391.roa (raw, json) Hash identifier: 0i6f8puAMEiNAKiVSC+YkMMp5aYGXG/uaI+Xb0I1EFU= Subject key identifier: 13:58:27:D0:74:10:76:37:99:EE:B8:5C:D4:87:3B:56:40:2A:A7:52 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D94AE85AD3BF665401D09CC40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45e96cea-d8b9-3c70-a645-be0455a1b391.roa Signing time: Tue 21 Apr 2026 14:12:51 +0000 ROA not before: Tue 21 Apr 2026 14:12:51 +0000 ROA not after: Mon 20 Jul 2026 14:12:51 +0000 asID: 396545 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:ae:85:ad:3b:f6:65:40:1d:09:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 21 14:12:51 2026 GMT Not After : Jul 20 14:12:51 2026 GMT Subject: CN=32a82751-9be2-42c2-9be0-ad438f1f39ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6d:59:f9:ae:42:c7:be:69:d4:f0:ff:f8:6b: a6:83:72:a0:3e:b5:6f:a6:25:bc:32:9a:04:dc:5b: 57:b4:c6:69:ae:5f:e3:62:97:ca:82:23:21:48:ed: 07:e6:3e:25:84:c4:40:25:97:bf:ed:87:6f:eb:05: 03:2d:82:de:73:5a:7c:66:aa:dc:a4:66:56:dd:c6: 97:e8:3f:12:79:cc:31:1b:a9:e2:93:08:69:9a:7d: 83:de:7b:7f:ed:ca:9d:12:cb:80:0e:83:22:5b:a8: 2b:56:10:c1:9b:d6:ca:48:f5:d3:13:4b:35:3b:63: 14:8f:a0:3f:bf:b0:41:f3:c3:93:b9:12:de:7d:8a: 3d:da:89:42:cd:2b:b6:e6:4e:08:ea:ad:58:46:08: af:3e:6b:80:08:82:5e:89:5d:24:51:b9:3a:1a:ef: 81:1b:b6:49:0a:b5:05:4a:3f:fd:0f:b4:96:ff:74: f9:33:d3:ae:f4:67:de:eb:e9:94:48:11:66:77:c5: 34:57:60:a9:aa:52:d5:b1:24:66:ed:42:25:11:cc: 62:4a:39:7f:e9:8f:f6:7b:00:51:20:06:11:80:33: 16:e5:51:95:8b:af:6b:23:79:87:65:f6:f6:93:3b: 3b:d4:80:9c:d8:05:04:27:d3:d4:e3:f2:01:35:6b: 63:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:58:27:D0:74:10:76:37:99:EE:B8:5C:D4:87:3B:56:40:2A:A7:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45e96cea-d8b9-3c70-a645-be0455a1b391.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:85:6c:79:80:d7:18:c1:81:ff:38:83:d1:62:ae:df:7e:b1: d4:f6:e7:8d:81:e6:9c:da:30:e9:6f:62:6e:fd:b0:42:02:3d: 5f:50:44:1c:11:64:2f:8e:52:b4:7c:c9:dd:1e:cd:cb:ad:d8: ff:58:f8:e8:69:a2:9f:e9:9d:2e:72:b8:80:b9:7e:22:39:36: 1b:42:14:64:52:db:1f:5f:60:e6:9a:26:0c:8e:36:38:fe:31: f6:e1:44:56:7f:2d:cf:14:0f:ff:15:1d:63:aa:76:5a:44:e8: c3:00:29:2c:f4:e1:82:b4:3d:5b:78:b3:0c:41:a9:53:2b:8b: 56:71:50:a8:f0:44:ae:63:2e:80:3b:be:81:b3:4d:26:4e:63: 23:0b:36:96:bd:51:2a:32:c1:0d:80:24:fd:92:79:82:47:04: e3:12:68:70:b7:28:cf:1d:b4:c3:ad:54:e5:df:63:09:81:6e: 15:b8:07:45:19:26:c1:de:c9:62:96:01:9d:31:0e:68:95:ed: 02:6c:ab:db:35:ee:a0:90:8b:cc:de:b0:d8:01:12:54:ce:f5: 4c:d9:de:87:f5:89:e9:4f:41:19:3e:57:3b:97:15:0e:df:cc: 10:f0:a4:d8:ec:8e:d2:34:54:c3:9e:46:14:87:28:8a:85:9e: e5:6f:60:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2UroWtO/ZlQB0JzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMTE0MTI1MVoXDTI2MDcyMDE0MTI1MVowLzEtMCsGA1UEAxMk MzJhODI3NTEtOWJlMi00MmMyLTliZTAtYWQ0MzhmMWYzOWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW1Z+a5Cx75p1PD/+Gumg3KgPrVvpiW8MpoE 3FtXtMZprl/jYpfKgiMhSO0H5j4lhMRAJZe/7Ydv6wUDLYLec1p8ZqrcpGZW3caX 6D8SecwxG6nikwhpmn2D3nt/7cqdEsuADoMiW6grVhDBm9bKSPXTE0s1O2MUj6A/ v7BB88OTuRLefYo92olCzSu25k4I6q1YRgivPmuACIJeiV0kUbk6Gu+BG7ZJCrUF Sj/9D7SW/3T5M9Ou9Gfe6+mUSBFmd8U0V2CpqlLVsSRm7UIlEcxiSjl/6Y/2ewBR IAYRgDMW5VGVi69rI3mHZfb2kzs71ICc2AUEJ9PU4/IBNWtjnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNYJ9B0EHY3me64XNSHO1ZAKqdSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDVlOTZjZWEtZDhiOS0z YzcwLWE2NDUtYmUwNDU1YTFiMzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6FbHmA1xjBgf84g9Firt9+sdT2542B5pzaMOlvYm79sEICPV9QRBwR ZC+OUrR8yd0ezcut2P9Y+Ohpop/pnS5yuIC5fiI5NhtCFGRS2x9fYOaaJgyONjj+ MfbhRFZ/Lc8UD/8VHWOqdlpE6MMAKSz04YK0PVt4swxBqVMri1ZxUKjwRK5jLoA7 voGzTSZOYyMLNpa9USoywQ2AJP2SeYJHBOMSaHC3KM8dtMOtVOXfYwmBbhW4B0UZ JsHeyWKWAZ0xDmiV7QJsq9s17qCQi8zesNgBElTO9UzZ3of1ielPQRk+VzuXFQ7f zBDwpNjsjtI0VMOeRhSHKIqFnuVvYD0= -----END CERTIFICATE-----Generated at Wed May 13 04:26:51 2026 by rpki-client