$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/50dd1f7d-5348-36cb-9880-e7bd4a18d0e3.roa File: 50dd1f7d-5348-36cb-9880-e7bd4a18d0e3.roa (raw, json) Hash identifier: FDSeuv8Vtp4kJDzDnLh0zPn8Lk3TFs4nSGsPtKLbrYQ= Subject key identifier: F0:1F:EC:A8:18:4F:E9:A2:3B:E9:FC:D8:65:5E:9F:63:4C:D0:68:0D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584FA59327EF95554F1C754630D0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/50dd1f7d-5348-36cb-9880-e7bd4a18d0e3.roa Signing time: Wed 28 Oct 2026 01:00:13 +0000 ROA not before: Wed 28 Oct 2026 01:00:13 +0000 ROA not after: Tue 26 Jan 2027 02:00:13 +0000 asID: 30060 IP address blocks: 216.87.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a5:93:27:ef:95:55:4f:1c:75:46:30:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 28 01:00:13 2026 GMT Not After : Jan 26 02:00:13 2027 GMT Subject: CN=8a64b491-0abb-48ac-89ce-c3ddd882d14e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:72:e7:4d:ef:2c:0b:8f:71:78:e8:9b:9d:7c: 9d:82:2d:21:b4:d2:8d:ab:78:20:94:53:2d:4d:fd: 8c:3c:3a:de:90:28:b0:3b:85:13:77:e7:9f:a9:ad: 81:67:0d:92:10:51:cd:ec:d4:69:78:ae:13:f5:77: f8:8a:53:cc:74:cc:31:6f:3b:59:ca:73:f8:9b:d9: 64:4b:94:74:fe:6e:8e:c6:61:79:70:34:06:8b:18: 14:da:ab:4a:1e:ce:2c:6a:4c:4a:f2:af:8f:8c:1d: 68:ef:ef:75:d1:51:5d:4a:16:82:6e:67:86:68:5c: 52:8d:c3:44:0c:34:02:4d:bf:e0:c3:1b:31:97:f8: 7c:3f:d5:bb:81:87:1b:5e:79:56:c6:e0:af:6d:86: 82:a2:7b:2d:ce:f0:97:cb:17:76:0d:d9:b5:6d:cb: cb:16:d5:9e:d6:c4:d3:ca:4c:8d:3b:ce:47:b7:7d: 6c:cc:83:b8:8f:f9:7e:65:43:23:91:bc:f1:e0:50: 02:f8:d4:a8:1b:84:20:e9:4d:e2:1f:d3:4d:cc:f3: 73:13:48:4f:29:28:95:ce:7b:38:76:34:e7:c1:fe: 53:74:b2:b3:43:73:41:42:db:f3:3d:4d:fc:fc:71: 9f:ec:e8:cb:0c:8a:5d:39:89:8c:df:23:ef:08:3a: 93:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1F:EC:A8:18:4F:E9:A2:3B:E9:FC:D8:65:5E:9F:63:4C:D0:68:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/50dd1f7d-5348-36cb-9880-e7bd4a18d0e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:36:a4:ed:50:86:00:6a:82:db:66:65:94:44:87:4a:7b:8b: b0:be:41:72:fb:4a:82:96:49:75:7b:73:15:88:58:50:76:db: df:87:c3:ea:11:16:42:22:ad:3e:9e:95:50:d9:76:4e:23:ec: 4a:2a:6b:19:44:05:7a:3c:48:02:db:8e:6c:75:d7:aa:e2:e0: c2:d9:75:88:48:a8:79:5e:65:b8:c9:40:de:ae:6a:68:9f:3b: 25:9b:5a:03:43:ab:4a:30:f6:dc:7b:75:ff:6a:0f:95:08:d1: ba:48:23:56:bc:e3:25:1a:39:02:7c:f4:a4:0d:5e:23:3d:28: 54:f5:4e:02:19:cd:62:8a:37:49:20:1f:48:58:de:f6:c2:56: dd:83:21:fd:eb:76:41:54:32:8f:39:86:6b:83:b7:0f:68:65: 01:61:65:00:f8:53:23:77:e7:45:20:e2:94:37:48:87:ec:ba: 2d:ca:c8:2f:dc:c8:03:bd:2c:ed:24:4b:53:0c:2a:d4:16:bb: ca:6c:ba:8a:a9:5e:30:26:d6:97:10:77:6a:13:b2:11:53:13: 54:b7:b5:2e:b7:51:79:de:f7:a5:70:78:de:44:e7:cc:f6:a1: 77:36:34:b8:34:16:4a:dd:13:7f:c9:ad:5e:b2:5a:35:b5:8e: 9c:6e:38:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+lkyfvlVVPHHVGMNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAyODAxMDAxM1oXDTI3MDEyNjAyMDAxM1owLzEtMCsGA1UEAxMk OGE2NGI0OTEtMGFiYi00OGFjLTg5Y2UtYzNkZGQ4ODJkMTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHLnTe8sC49xeOibnXydgi0htNKNq3gglFMt Tf2MPDrekCiwO4UTd+efqa2BZw2SEFHN7NRpeK4T9Xf4ilPMdMwxbztZynP4m9lk S5R0/m6OxmF5cDQGixgU2qtKHs4sakxK8q+PjB1o7+910VFdShaCbmeGaFxSjcNE DDQCTb/gwxsxl/h8P9W7gYcbXnlWxuCvbYaConstzvCXyxd2Ddm1bcvLFtWe1sTT ykyNO85Ht31szIO4j/l+ZUMjkbzx4FAC+NSoG4Qg6U3iH9NNzPNzE0hPKSiVzns4 djTnwf5TdLKzQ3NBQtvzPU38/HGf7OjLDIpdOYmM3yPvCDqTywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAf7KgYT+miO+n82GVen2NM0GgNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTBkZDFmN2QtNTM0OC0z NmNiLTk4ODAtZTdiZDRhMThkMGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FedMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACY2pO1QhgBqgttmZZREh0p7i7C+QXL7SoKWSXV7cxWIWFB229+Hw+oR FkIirT6elVDZdk4j7EoqaxlEBXo8SALbjmx116ri4MLZdYhIqHleZbjJQN6uamif OyWbWgNDq0ow9tx7df9qD5UI0bpII1a84yUaOQJ89KQNXiM9KFT1TgIZzWKKN0kg H0hY3vbCVt2DIf3rdkFUMo85hmuDtw9oZQFhZQD4UyN350Ug4pQ3SIfsui3KyC/c yAO9LO0kS1MMKtQWu8psuoqpXjAm1pcQd2oTshFTE1S3tS63UXne96VweN5E58z2 oXc2NLg0FkrdE3/JrV6yWjW1jpxuOBU= -----END CERTIFICATE-----Generated at Sun Nov 15 18:10:15 2026 by rpki-client