$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/701a19cd-abe2-3be4-baec-121f2ffc6986.roa File: 701a19cd-abe2-3be4-baec-121f2ffc6986.roa (raw, json) Hash identifier: 6+7olYHbT/TEv76pvEAc8I8oxWbHJrNVevGNIU5Na3A= Subject key identifier: 0A:9A:76:08:A7:DE:C2:ED:A2:2C:FC:C2:98:4D:AE:23:09:12:A7:86 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584FB93BBBEECE6D2ACB7B627E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/701a19cd-abe2-3be4-baec-121f2ffc6986.roa Signing time: Wed 04 Nov 2026 02:00:13 +0000 ROA not before: Wed 04 Nov 2026 02:00:13 +0000 ROA not after: Tue 02 Feb 2027 02:00:13 +0000 asID: 396567 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b9:3b:bb:ee:ce:6d:2a:cb:7b:62:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 4 02:00:13 2026 GMT Not After : Feb 2 02:00:13 2027 GMT Subject: CN=a6633130-5f71-410e-8fe6-185bde1cbaf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:aa:8b:ca:0a:e2:55:b6:32:f8:e9:e5:b7:7e: ed:ea:42:a2:f6:84:10:45:6c:ab:3d:e8:3b:dd:c7: 7f:23:84:ba:53:03:d9:32:2e:92:df:0c:66:26:15: 5a:ec:61:1c:7b:57:a3:ec:16:58:0c:db:09:2a:ba: 5e:d4:51:8b:d3:c2:3a:50:c2:06:07:5c:0f:13:db: 1e:05:ff:99:de:fd:92:1c:cb:93:e0:05:c6:79:84: 0b:14:16:17:86:e7:c7:9e:46:fc:f9:ff:a6:6e:87: b1:68:0a:9c:d1:a5:92:b2:75:03:e4:58:8c:44:30: 93:95:5a:30:ab:16:0e:5e:4d:3c:34:17:32:70:c6: df:6a:bb:d2:15:ff:c5:2c:1e:d7:ce:f6:3a:ec:a2: 0b:3d:32:6a:97:d9:50:24:e6:29:af:da:53:a7:4a: ad:2f:50:c7:8d:d5:cc:61:d3:a4:17:ee:12:b2:01: a5:b5:a3:1e:c1:2b:52:27:11:2b:92:d1:13:fa:f5: 78:eb:eb:b5:df:93:4c:ae:79:d7:05:a2:d7:e9:1f: 57:2e:d7:22:47:16:06:88:5b:2a:87:19:7e:78:ef: c5:e3:f2:28:74:ef:ab:86:e0:e8:9c:0c:06:4d:e2: cf:08:d1:2d:3e:e0:96:33:0a:a0:65:fb:99:fb:42: e7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9A:76:08:A7:DE:C2:ED:A2:2C:FC:C2:98:4D:AE:23:09:12:A7:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/701a19cd-abe2-3be4-baec-121f2ffc6986.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:a2:91:65:8e:72:1e:a0:73:75:c6:9d:a6:61:65:3b:b6:a8: a1:d5:d3:fa:b6:5a:56:71:df:a4:a9:55:f6:88:a8:0a:4b:aa: 81:3b:f9:b4:eb:ba:8d:df:cd:b3:33:af:cd:96:fb:c0:10:ac: fb:77:5f:43:ac:da:e5:bf:23:83:4a:10:3a:cc:0c:ce:9f:e1: 12:4c:20:c2:de:dd:3e:4e:99:9a:96:a7:43:36:33:a1:5b:10: 0f:c8:8f:90:77:ad:3a:bb:62:5d:72:41:e5:1d:a2:e1:f5:bd: b9:9f:bf:78:b0:02:dc:e0:fb:c9:9c:e3:86:6d:b5:a4:37:5b: 8e:17:e4:42:66:76:84:03:95:d7:12:2a:fa:1e:d6:df:7e:b0: 8c:e7:a7:61:35:20:d7:b1:d2:a1:c8:38:b3:64:b7:d5:d5:f3: 81:46:36:55:79:51:5d:be:46:ff:07:ea:58:d8:bf:5c:b1:5c: 6b:cb:f2:b5:06:02:94:f2:0d:e3:eb:44:a8:b7:fa:5b:9e:31: c1:f7:9c:b4:fd:d7:8b:cb:f0:5f:7a:af:07:14:ad:e9:85:b9: 3d:b1:09:f0:26:1c:2c:4d:41:ca:29:e8:5f:31:53:cf:3f:c6: 40:53:81:6c:6b:70:24:8e:fc:ae:7f:5f:7a:04:84:8a:e5:0b: 0e:db:69:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+5O7vuzm0qy3tifoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTEwNDAyMDAxM1oXDTI3MDIwMjAyMDAxM1owLzEtMCsGA1UEAxMk YTY2MzMxMzAtNWY3MS00MTBlLThmZTYtMTg1YmRlMWNiYWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraqLygriVbYy+Onlt37t6kKi9oQQRWyrPeg7 3cd/I4S6UwPZMi6S3wxmJhVa7GEce1ej7BZYDNsJKrpe1FGL08I6UMIGB1wPE9se Bf+Z3v2SHMuT4AXGeYQLFBYXhufHnkb8+f+mboexaAqc0aWSsnUD5FiMRDCTlVow qxYOXk08NBcycMbfarvSFf/FLB7XzvY67KILPTJql9lQJOYpr9pTp0qtL1DHjdXM YdOkF+4SsgGltaMewStSJxErktET+vV46+u135NMrnnXBaLX6R9XLtciRxYGiFsq hxl+eO/F4/IodO+rhuDonAwGTeLPCNEtPuCWMwqgZfuZ+0Ln7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqadgin3sLtoiz8wphNriMJEqeGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzAxYTE5Y2QtYWJlMi0z YmU0LWJhZWMtMTIxZjJmZmM2OTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiikWWOch6gc3XGnaZhZTu2qKHV0/q2WlZx36SpVfaIqApLqoE7+bTr uo3fzbMzr82W+8AQrPt3X0Os2uW/I4NKEDrMDM6f4RJMIMLe3T5OmZqWp0M2M6Fb EA/Ij5B3rTq7Yl1yQeUdouH1vbmfv3iwAtzg+8mc44ZttaQ3W44X5EJmdoQDldcS Kvoe1t9+sIznp2E1INex0qHIOLNkt9XV84FGNlV5UV2+Rv8H6ljYv1yxXGvL8rUG ApTyDePrRKi3+lueMcH3nLT914vL8F96rwcUremFuT2xCfAmHCxNQcop6F8xU88/ xkBTgWxrcCSO/K5/X3oEhIrlCw7baf0= -----END CERTIFICATE-----Generated at Sun Nov 15 17:50:29 2026 by rpki-client