$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7afb7c13-e69f-31da-99cf-62a573b4bfcf.roa File: 7afb7c13-e69f-31da-99cf-62a573b4bfcf.roa (raw, json) Hash identifier: eMfrmw3B78BsNInSawWLoQEX5n8eXbnbQdmctHWMInk= Subject key identifier: 7B:31:53:8F:DE:63:E4:C1:CD:69:F4:A3:2D:2F:D0:3A:C1:A9:4A:1B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D94AE8951253B68F78692A480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7afb7c13-e69f-31da-99cf-62a573b4bfcf.roa Signing time: Tue 21 Apr 2026 14:12:53 +0000 ROA not before: Tue 21 Apr 2026 14:12:53 +0000 ROA not after: Mon 20 Jul 2026 14:12:53 +0000 asID: 36617 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:ae:89:51:25:3b:68:f7:86:92:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 21 14:12:53 2026 GMT Not After : Jul 20 14:12:53 2026 GMT Subject: CN=782a824c-fce7-42b0-837d-d059da1b8e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:11:27:b5:ea:3e:8b:f3:79:54:b0:fc:ca:84: be:4c:c6:3b:70:47:95:8a:19:27:9e:f5:93:41:65: f3:6b:e2:ab:6c:8b:95:6c:03:81:b6:52:c4:8d:57: 25:fb:34:17:60:01:e0:d3:31:23:10:8c:b0:23:b3: 69:cb:22:4e:8c:83:89:a3:30:98:32:07:b4:71:ce: f8:13:80:f6:9c:57:72:17:35:10:62:f8:e3:e7:93: 1d:17:b8:d2:e2:c7:da:4b:cb:1e:e8:f0:83:2d:74: 41:2b:eb:6b:44:38:4b:10:b3:43:d4:a2:8f:3e:01: 7c:37:ff:2e:73:08:21:2d:8d:71:98:4b:98:35:0f: ad:6d:90:45:f0:e2:a9:11:39:63:f7:0e:af:8f:0a: 22:84:21:4a:46:20:10:5d:f7:a1:cf:66:b0:70:b8: 4d:6e:9a:fd:2d:84:f7:c3:8a:60:86:35:bb:10:fd: c9:82:55:37:ce:2b:65:d9:19:d6:a9:56:29:db:29: 0f:04:72:7a:85:f3:49:f6:0d:cf:ff:e1:9d:ca:83: 84:cf:dd:55:03:d7:d0:04:b5:f3:17:7d:f7:b4:b3: ad:57:14:fd:7d:40:3f:f6:03:ca:ac:71:48:5d:db: f6:06:23:83:15:95:0c:7c:d6:74:25:72:17:e8:02: ef:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:31:53:8F:DE:63:E4:C1:CD:69:F4:A3:2D:2F:D0:3A:C1:A9:4A:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7afb7c13-e69f-31da-99cf-62a573b4bfcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:49:d1:d2:36:a6:10:c9:f0:5a:d6:5e:39:30:43:12:d4:4a: 66:f8:e3:1a:75:8f:06:27:85:1a:d0:1d:a6:23:75:c7:8d:f3: e9:1b:66:e1:d7:2e:ab:68:61:b9:6c:85:77:a5:ea:3d:4e:e4: 03:98:46:34:02:bf:d5:64:4b:4e:e9:9b:2c:a1:28:d9:b1:2e: 72:a1:f3:80:45:d0:73:bd:46:5a:64:50:b4:3c:b9:af:c9:ca: 15:0e:50:5e:e0:d6:1a:41:3b:d4:f8:88:fb:ab:8d:34:83:8c: 56:a0:8c:8e:9b:7e:54:8a:75:c5:cd:33:a7:58:6c:be:a5:2d: 96:0b:79:f8:e8:61:a1:5f:f3:cd:73:ea:1d:fc:8e:2a:d5:56: 32:7f:91:4b:c1:d7:ab:3f:4a:c8:cd:cc:26:82:f4:06:75:b1: 89:d5:50:6c:fd:21:44:ea:33:08:38:0b:0a:97:1a:1c:be:08: a3:f5:46:4f:d1:c4:75:a4:3e:9d:c1:72:40:e7:c2:98:74:ab: 2f:26:aa:f9:d5:06:16:f4:d3:9f:fd:57:77:68:f7:b8:8d:52: 1b:9b:0c:c4:35:f6:9c:65:01:76:56:5e:71:eb:12:b9:fa:21: 87:d4:5e:79:e8:13:e7:ac:35:1d:cc:2c:03:8a:bd:ef:10:ff: 7d:31:2f:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2UrolRJTto94aSpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMTE0MTI1M1oXDTI2MDcyMDE0MTI1M1owLzEtMCsGA1UEAxMk NzgyYTgyNGMtZmNlNy00MmIwLTgzN2QtZDA1OWRhMWI4ZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtREnteo+i/N5VLD8yoS+TMY7cEeVihknnvWT QWXza+KrbIuVbAOBtlLEjVcl+zQXYAHg0zEjEIywI7NpyyJOjIOJozCYMge0cc74 E4D2nFdyFzUQYvjj55MdF7jS4sfaS8se6PCDLXRBK+trRDhLELND1KKPPgF8N/8u cwghLY1xmEuYNQ+tbZBF8OKpETlj9w6vjwoihCFKRiAQXfehz2awcLhNbpr9LYT3 w4pghjW7EP3JglU3zitl2RnWqVYp2ykPBHJ6hfNJ9g3P/+GdyoOEz91VA9fQBLXz F333tLOtVxT9fUA/9gPKrHFIXdv2BiODFZUMfNZ0JXIX6ALv8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsxU4/eY+TBzWn0oy0v0DrBqUobMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2FmYjdjMTMtZTY5Zi0z MWRhLTk5Y2YtNjJhNTczYjRiZmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJJ0dI2phDJ8FrWXjkwQxLUSmb44xp1jwYnhRrQHaYjdceN8+kbZuHX LqtoYblshXel6j1O5AOYRjQCv9VkS07pmyyhKNmxLnKh84BF0HO9RlpkULQ8ua/J yhUOUF7g1hpBO9T4iPurjTSDjFagjI6bflSKdcXNM6dYbL6lLZYLefjoYaFf881z 6h38jirVVjJ/kUvB16s/SsjNzCaC9AZ1sYnVUGz9IUTqMwg4CwqXGhy+CKP1Rk/R xHWkPp3BckDnwph0qy8mqvnVBhb005/9V3do97iNUhubDMQ19pxlAXZWXnHrErn6 IYfUXnnoE+esNR3MLAOKve8Q/30xLzg= -----END CERTIFICATE-----Generated at Wed May 13 02:25:42 2026 by rpki-client