$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49842488-b8f2-3197-b84f-2ccfc3f642c2.roa File: 49842488-b8f2-3197-b84f-2ccfc3f642c2.roa (raw, json) Hash identifier: JyKRUMTYr1cpTirTEF3dheBPr+Nabyyn8vr5glyUkdM= Subject key identifier: F8:92:68:8B:8A:81:BA:83:F7:14:1C:71:B1:18:5D:35:1C:86:B5:5C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F17324930289B98A16995F860 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49842488-b8f2-3197-b84f-2ccfc3f642c2.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 396583 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:49:30:28:9b:98:a1:69:95:f8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=591614dd-485d-4a3a-9f86-8757090b194a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:da:f5:ad:b0:bb:8e:60:43:b4:85:f7:07:6d: db:cc:a9:48:f6:09:b2:bd:3b:e8:3a:6f:0d:a7:a9: ce:1e:47:5a:15:ea:67:64:25:01:dc:95:8e:e4:03: 8a:28:6c:8d:04:51:33:45:06:fa:6a:c1:65:3e:93: 16:fe:11:92:45:d7:e4:c7:0a:48:74:e6:0b:08:04: ff:04:61:4f:3c:51:13:29:54:6a:a7:a5:68:9d:62: a3:e0:b2:4e:ec:c5:f1:c4:b6:69:5a:d6:f9:04:1c: 02:9b:b5:39:b9:54:58:c4:5e:53:fb:b9:9f:6c:e0: 3f:c2:64:f8:1d:86:2f:00:8c:d0:0b:78:98:56:a5: fc:14:a4:99:71:31:c1:2d:95:1b:a3:e3:cd:94:1f: 58:54:44:59:57:8a:8c:d8:4e:2a:1f:ce:fd:79:5d: ff:06:a7:12:0c:68:9d:9e:81:1a:0a:c3:a3:ba:e3: 94:33:04:81:51:b4:0f:5a:49:b2:51:85:fb:67:a3: 00:2a:b3:62:e9:59:90:51:36:77:79:d1:43:96:aa: c2:80:01:a8:78:e3:85:3b:7d:32:b8:e2:ae:ce:50: 20:3c:04:2a:12:0b:a8:5b:73:03:f3:f3:48:4f:7b: d1:50:d1:ff:86:c2:1b:05:20:71:39:64:47:68:a5: 78:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:92:68:8B:8A:81:BA:83:F7:14:1C:71:B1:18:5D:35:1C:86:B5:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49842488-b8f2-3197-b84f-2ccfc3f642c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:3e:07:fe:d9:24:11:e4:ca:45:a5:0f:e7:39:f6:b6:e2:c7: 5e:53:3c:52:f8:05:4f:fc:69:cd:6a:b0:98:c2:23:23:0a:88: 0d:1f:10:1c:03:fc:3b:17:6d:7c:91:e7:eb:9f:55:be:df:29: 3f:4d:7a:57:a9:a8:f5:aa:ea:93:8e:a5:74:28:a1:53:64:88: 84:77:f8:df:1b:6a:0c:e8:73:6b:67:6f:18:8a:73:d4:5d:6b: 34:56:49:cc:40:e3:74:ed:57:2e:2a:a8:87:66:97:79:b6:79: d3:11:a1:20:8a:f0:29:36:b2:96:75:13:3c:21:9a:21:ba:c1: d1:33:3b:be:db:90:79:8f:15:83:f9:ae:3b:a2:d8:43:9f:98: 2a:80:cf:c2:90:52:0e:45:1d:a9:02:0b:e9:78:db:2f:17:04: 7b:cb:0c:84:d9:2b:b9:29:f4:fa:78:d4:0d:eb:04:f0:f2:4f: aa:b5:db:52:c3:aa:fc:6c:ee:88:53:c0:cc:87:31:2d:22:4e: 44:bd:2f:c2:20:a0:45:be:8a:9f:ee:28:10:f0:ba:b8:0f:c0: 67:c7:92:58:7f:ef:0e:29:3c:fc:c9:42:a7:87:cb:89:5d:db: 2d:6e:c1:ec:10:f5:9c:9a:f9:e4:b0:01:6b:39:70:96:3b:a2: c1:42:6f:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkkwKJuYoWmV+GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk NTkxNjE0ZGQtNDg1ZC00YTNhLTlmODYtODc1NzA5MGIxOTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktr1rbC7jmBDtIX3B23bzKlI9gmyvTvoOm8N p6nOHkdaFepnZCUB3JWO5AOKKGyNBFEzRQb6asFlPpMW/hGSRdfkxwpIdOYLCAT/ BGFPPFETKVRqp6VonWKj4LJO7MXxxLZpWtb5BBwCm7U5uVRYxF5T+7mfbOA/wmT4 HYYvAIzQC3iYVqX8FKSZcTHBLZUbo+PNlB9YVERZV4qM2E4qH879eV3/BqcSDGid noEaCsOjuuOUMwSBUbQPWkmyUYX7Z6MAKrNi6VmQUTZ3edFDlqrCgAGoeOOFO30y uOKuzlAgPAQqEguoW3MD8/NIT3vRUNH/hsIbBSBxOWRHaKV4PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPiSaIuKgbqD9xQccbEYXTUchrVcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDk4NDI0ODgtYjhmMi0z MTk3LWI4NGYtMmNjZmMzZjY0MmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIM+B/7ZJBHkykWlD+c59rbix15TPFL4BU/8ac1qsJjCIyMKiA0fEBwD /DsXbXyR5+ufVb7fKT9NelepqPWq6pOOpXQooVNkiIR3+N8bagzoc2tnbxiKc9Rd azRWScxA43TtVy4qqIdml3m2edMRoSCK8Ck2spZ1EzwhmiG6wdEzO77bkHmPFYP5 rjui2EOfmCqAz8KQUg5FHakCC+l42y8XBHvLDITZK7kp9Pp41A3rBPDyT6q121LD qvxs7ohTwMyHMS0iTkS9L8IgoEW+ip/uKBDwurgPwGfHklh/7w4pPPzJQqeHy4ld 2y1uwewQ9Zya+eSwAWs5cJY7osFCb4E= -----END CERTIFICATE-----Generated at Thu Sep 24 09:09:44 2026 by rpki-client