$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/820d6142-5b12-32ae-b8eb-fdd1345d8c9d.roa File: 820d6142-5b12-32ae-b8eb-fdd1345d8c9d.roa (raw, json) Hash identifier: 2DidmP8+OwsGte1O0XT3Ssh+DfFGlEl9s1vP+6bzFLQ= Subject key identifier: 09:D2:77:4B:5C:B1:77:E9:AF:3B:1C:DE:5C:89:8A:9E:7C:11:8D:42 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D94AE86591613568028C4C680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/820d6142-5b12-32ae-b8eb-fdd1345d8c9d.roa Signing time: Tue 21 Apr 2026 14:12:51 +0000 ROA not before: Tue 21 Apr 2026 14:12:51 +0000 ROA not after: Mon 20 Jul 2026 14:12:51 +0000 asID: 36626 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:ae:86:59:16:13:56:80:28:c4:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 21 14:12:51 2026 GMT Not After : Jul 20 14:12:51 2026 GMT Subject: CN=650e8c4e-f9f2-45bd-88de-3af5144cef5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7f:0f:54:de:29:3d:8f:71:e2:a8:ad:d2:f0: 5b:7f:e8:60:48:9f:96:60:08:cf:44:67:6d:c4:c6: d7:e3:1a:dd:b9:b4:48:ac:26:0b:0b:4a:4f:21:14: 60:24:1b:46:0a:a5:aa:70:02:6d:b6:5e:62:c5:9a: 97:b7:b7:4a:e3:17:18:3a:61:2d:b5:3a:d3:27:d2: 51:60:d1:14:f2:79:f4:e5:bb:a4:ee:76:32:f9:a0: 5d:26:76:ec:d5:1d:64:c9:61:2b:18:0e:39:1f:fc: 04:12:66:14:79:3a:93:ac:33:e0:9a:25:5d:89:a1: fb:f3:ca:15:f6:02:dc:c6:4c:68:8d:f7:ea:cd:56: 9d:3b:69:75:53:14:aa:40:1a:16:f9:55:6a:73:fb: 24:80:cf:13:5f:f8:f8:4e:20:d8:3a:54:20:e0:a4: fe:fc:52:0c:d4:88:9c:29:d2:62:7b:b5:73:cc:63: f6:26:d3:73:65:2a:9d:c1:21:0c:1b:af:eb:4c:2f: ed:6e:ff:3b:e4:19:4c:26:06:f7:59:1d:ba:80:92: 6d:df:68:47:5a:40:b0:38:cc:e6:60:38:4d:28:9e: eb:72:3b:1b:5f:93:78:8b:74:5c:ae:c2:d5:30:d3: bf:c0:de:ec:1e:06:ea:f8:f3:02:8e:93:22:59:4c: 5a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D2:77:4B:5C:B1:77:E9:AF:3B:1C:DE:5C:89:8A:9E:7C:11:8D:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/820d6142-5b12-32ae-b8eb-fdd1345d8c9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:ef:4d:76:35:67:75:b5:48:22:23:df:23:6f:49:2d:ab:0d: cd:00:90:b8:69:28:53:12:0a:69:9e:21:08:03:e8:1d:32:9b: 24:28:6c:58:e5:e3:97:8c:7c:1f:70:3f:84:b9:ad:ae:80:c5: 81:f1:b7:2d:fa:5b:18:47:36:1f:d9:4f:c1:02:22:91:27:f4: 48:cf:62:35:bd:7c:27:fb:ae:54:be:c5:ee:27:b4:8d:01:e1: 32:77:11:a7:1e:8b:e9:52:3a:bf:72:7b:07:ea:d4:b8:9d:f3: 90:bc:9a:bf:51:7f:10:62:e2:8b:d3:ec:8e:a5:ab:38:3a:d0: 3c:04:c9:24:53:f7:fa:99:91:1a:b7:34:91:68:a4:29:c5:92: df:5c:0f:28:a5:ab:3f:ab:6a:b8:3b:91:a1:94:42:fa:04:5d: da:40:ee:2f:ec:c6:b8:94:3e:a3:95:c5:f0:6f:42:12:c3:c7: 1c:57:93:48:d7:71:0c:f5:60:1c:1c:74:31:d0:7a:56:76:d9: b5:1a:5d:3e:98:bb:61:eb:10:12:e4:84:85:82:38:c6:9d:b2: e9:fe:72:f6:0e:4e:a5:b0:08:10:ef:71:d5:51:16:22:27:39: a4:3e:07:ee:87:73:96:cf:24:57:5f:61:90:c9:04:bd:d5:1e: b5:2a:9f:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2UroZZFhNWgCjExoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMTE0MTI1MVoXDTI2MDcyMDE0MTI1MVowLzEtMCsGA1UEAxMk NjUwZThjNGUtZjlmMi00NWJkLTg4ZGUtM2FmNTE0NGNlZjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh38PVN4pPY9x4qit0vBbf+hgSJ+WYAjPRGdt xMbX4xrdubRIrCYLC0pPIRRgJBtGCqWqcAJttl5ixZqXt7dK4xcYOmEttTrTJ9JR YNEU8nn05buk7nYy+aBdJnbs1R1kyWErGA45H/wEEmYUeTqTrDPgmiVdiaH788oV 9gLcxkxojffqzVadO2l1UxSqQBoW+VVqc/skgM8TX/j4TiDYOlQg4KT+/FIM1Iic KdJie7VzzGP2JtNzZSqdwSEMG6/rTC/tbv875BlMJgb3WR26gJJt32hHWkCwOMzm YDhNKJ7rcjsbX5N4i3RcrsLVMNO/wN7sHgbq+PMCjpMiWUxacwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnSd0tcsXfprzsc3lyJip58EY1CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODIwZDYxNDItNWIxMi0z MmFlLWI4ZWItZmRkMTM0NWQ4YzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILvTXY1Z3W1SCIj3yNvSS2rDc0AkLhpKFMSCmmeIQgD6B0ymyQobFjl 45eMfB9wP4S5ra6AxYHxty36WxhHNh/ZT8ECIpEn9EjPYjW9fCf7rlS+xe4ntI0B 4TJ3Eacei+lSOr9yewfq1Lid85C8mr9RfxBi4ovT7I6lqzg60DwEySRT9/qZkRq3 NJFopCnFkt9cDyilqz+rarg7kaGUQvoEXdpA7i/sxriUPqOVxfBvQhLDxxxXk0jX cQz1YBwcdDHQelZ22bUaXT6Yu2HrEBLkhIWCOMadsun+cvYOTqWwCBDvcdVRFiIn OaQ+B+6Hc5bPJFdfYZDJBL3VHrUqnzQ= -----END CERTIFICATE-----Generated at Wed May 13 08:45:14 2026 by rpki-client