$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/820d6142-5b12-32ae-b8eb-fdd1345d8c9d.roa File: 820d6142-5b12-32ae-b8eb-fdd1345d8c9d.roa (raw, json) Hash identifier: cr2PucyDnAnbkNxEI5Ngp/b9XrzkOvXVmWeIj3mmv5Y= Subject key identifier: 3A:FF:E6:D5:4F:51:C5:BF:45:F4:55:49:21:BF:D0:60:E1:11:A0:43 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E74CF7765C2932019D2DE8380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/820d6142-5b12-32ae-b8eb-fdd1345d8c9d.roa Signing time: Fri 10 Jul 2026 21:00:12 +0000 ROA not before: Fri 10 Jul 2026 21:00:12 +0000 ROA not after: Thu 08 Oct 2026 21:00:12 +0000 asID: 36626 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:74:cf:77:65:c2:93:20:19:d2:de:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 21:00:12 2026 GMT Not After : Oct 8 21:00:12 2026 GMT Subject: CN=023e876e-1bcb-42b4-8035-e944da591445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:66:9b:6c:58:32:81:1a:b3:36:ca:c7:4d:be: 8f:14:47:6d:60:27:2e:88:8a:5a:bc:3d:34:02:af: 8f:c4:dd:ec:7b:7f:28:c6:be:84:3b:8a:61:eb:8a: de:d6:e9:63:32:54:f7:f3:6b:17:25:c2:6d:c5:57: ac:d7:72:bc:e4:fb:b4:ae:77:35:70:0d:fd:c1:37: 17:cc:51:39:ed:aa:7a:a4:d1:2b:f6:a3:bc:81:ac: 6f:0d:0d:c1:48:61:c5:a9:0d:b8:65:85:04:69:fe: 0e:31:96:07:00:fd:6c:92:6c:f6:b1:97:a1:51:e3: e8:50:b0:72:6e:48:7d:52:21:d3:77:98:44:fc:0c: 45:3f:a9:50:67:a5:76:40:29:90:20:d7:93:a2:6a: 67:46:f0:ba:5f:0b:e6:93:ba:c1:e9:4e:47:ef:1b: 06:54:44:6e:28:25:29:30:ee:58:4f:b5:03:df:ff: 0c:76:48:fa:7d:5f:d3:19:2c:00:0a:f9:12:33:28: 1d:51:6b:e6:72:fa:d2:31:2e:fa:78:2c:bb:c3:97: 77:71:35:33:c7:5c:b4:2c:ee:53:b9:4b:26:bc:fd: 69:df:67:4e:1e:f5:61:3b:eb:1a:7b:83:7e:e5:7a: 90:79:7a:1b:d8:64:ce:44:ca:8c:55:10:48:0a:c0: 0a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FF:E6:D5:4F:51:C5:BF:45:F4:55:49:21:BF:D0:60:E1:11:A0:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/820d6142-5b12-32ae-b8eb-fdd1345d8c9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:af:61:aa:84:52:7a:cd:ad:e7:bb:cb:e7:53:0c:ee:91:69: b6:3f:0f:c7:c6:65:92:2a:10:99:cc:ad:56:bb:22:53:ef:20: be:aa:1a:5c:68:48:18:5d:ef:4f:b6:04:6c:d8:eb:70:9d:ce: 03:79:df:07:7b:ac:1d:82:8c:38:85:fe:88:d1:2a:72:44:e4: 56:6a:20:6a:37:aa:cc:c3:ac:fb:23:07:3e:1b:7b:19:d9:6d: 19:bb:09:38:98:e5:be:18:77:bc:53:4a:7c:df:86:29:f1:27: 89:5a:1d:c6:dd:ac:49:16:15:b5:4c:77:38:69:1e:57:7a:f5: 0c:85:0f:36:26:26:00:38:0b:f5:75:a4:83:88:d4:3a:61:d4: 59:23:53:d0:03:cb:59:0d:83:3a:73:a1:9d:3a:40:bc:61:68: c4:fe:6e:90:ec:14:aa:9f:09:0c:97:0b:f9:b0:bb:17:07:be: 16:8f:1b:a5:a4:94:71:0f:9d:89:2c:70:2d:69:a4:47:92:e8: cd:d8:12:d0:b7:9f:ad:58:96:a1:f4:84:dc:c3:e8:9b:1a:c5: b0:19:4f:aa:34:28:c6:b6:57:7a:e9:c8:d9:59:ff:1a:f7:39: 03:22:34:f2:01:9a:d4:ed:8d:72:e8:47:3a:e6:4f:0e:69:2d: 22:9a:e3:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE50z3dlwpMgGdLeg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcxMDIxMDAxMloXDTI2MTAwODIxMDAxMlowLzEtMCsGA1UEAxMk MDIzZTg3NmUtMWJjYi00MmI0LTgwMzUtZTk0NGRhNTkxNDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGabbFgygRqzNsrHTb6PFEdtYCcuiIpavD00 Aq+PxN3se38oxr6EO4ph64re1uljMlT382sXJcJtxVes13K85Pu0rnc1cA39wTcX zFE57ap6pNEr9qO8gaxvDQ3BSGHFqQ24ZYUEaf4OMZYHAP1skmz2sZehUePoULBy bkh9UiHTd5hE/AxFP6lQZ6V2QCmQINeTompnRvC6Xwvmk7rB6U5H7xsGVERuKCUp MO5YT7UD3/8Mdkj6fV/TGSwACvkSMygdUWvmcvrSMS76eCy7w5d3cTUzx1y0LO5T uUsmvP1p32dOHvVhO+sae4N+5XqQeXob2GTORMqMVRBICsAKIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDr/5tVPUcW/RfRVSSG/0GDhEaBDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODIwZDYxNDItNWIxMi0z MmFlLWI4ZWItZmRkMTM0NWQ4YzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqvYaqEUnrNree7y+dTDO6RabY/D8fGZZIqEJnMrVa7IlPvIL6qGlxo SBhd70+2BGzY63CdzgN53wd7rB2CjDiF/ojRKnJE5FZqIGo3qszDrPsjBz4bexnZ bRm7CTiY5b4Yd7xTSnzfhinxJ4laHcbdrEkWFbVMdzhpHld69QyFDzYmJgA4C/V1 pIOI1Dph1FkjU9ADy1kNgzpzoZ06QLxhaMT+bpDsFKqfCQyXC/mwuxcHvhaPG6Wk lHEPnYkscC1ppEeS6M3YEtC3n61YlqH0hNzD6JsaxbAZT6o0KMa2V3rpyNlZ/xr3 OQMiNPIBmtTtjXLoRzrmTw5pLSKa4+8= -----END CERTIFICATE-----Generated at Fri Jul 24 09:08:04 2026 by rpki-client