$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/820d6142-5b12-32ae-b8eb-fdd1345d8c9d.roa File: 820d6142-5b12-32ae-b8eb-fdd1345d8c9d.roa (raw, json) Hash identifier: RwgSjikYmwkDHG4dLyMFcfCbhuHeOYXAezRUC8xMIVk= Subject key identifier: 8E:6A:6E:FD:81:52:89:17:39:0E:5B:CB:65:00:75:D9:DC:8A:3E:02 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F17323F1AB4BD1F579FD77B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/820d6142-5b12-32ae-b8eb-fdd1345d8c9d.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 36626 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:3f:1a:b4:bd:1f:57:9f:d7:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=667ee8d9-c428-40a9-abb5-78a640589ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:50:d9:a3:fd:02:2c:24:a3:38:8d:01:60:db: 75:0b:db:17:33:29:f2:48:fd:2a:75:47:d8:f9:b6: 75:1e:aa:b7:79:b3:47:0f:78:dc:d0:2c:15:4e:38: 0e:71:4f:7f:d3:78:70:13:f1:cd:28:88:81:3e:16: 58:8d:e7:0a:de:1e:ed:09:e6:5f:f6:8a:fb:ae:2b: 40:07:4a:00:f2:7d:c2:40:74:d8:b3:eb:09:a4:36: 96:dc:da:0f:12:cd:a1:a3:97:24:6c:61:ba:09:19: 65:e3:ab:54:0e:34:f7:15:05:b7:c9:47:14:c4:fb: b2:1b:bb:a0:65:3f:70:57:84:e4:eb:a8:bd:ff:72: 12:67:23:ee:c2:d4:12:31:da:a9:e6:3d:26:d5:74: da:88:a6:be:1d:bc:48:d9:23:57:98:9c:98:1b:f6: 6d:15:d0:e0:75:76:00:e8:2d:5b:94:28:fc:a5:b2: 59:ab:70:69:9b:91:47:db:b6:31:a9:dd:56:0f:39: 03:86:3b:89:d3:25:08:b8:77:91:1e:42:e8:12:32: c7:1f:1f:ab:2f:1f:e5:3d:b2:53:b8:b7:c8:37:ec: 7e:57:d2:c7:2e:8e:22:8e:a0:b7:42:9d:3f:25:fb: f5:73:ab:b3:f7:77:79:ed:4b:75:de:46:0a:d0:5e: 34:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6A:6E:FD:81:52:89:17:39:0E:5B:CB:65:00:75:D9:DC:8A:3E:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/820d6142-5b12-32ae-b8eb-fdd1345d8c9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:b1:f8:e5:24:31:99:e0:d8:b0:89:6b:fd:1c:cd:39:c2:d6: 3a:31:37:b7:20:4a:b8:24:78:d9:fd:60:73:61:90:a1:2d:72: a1:df:6a:7d:9d:84:79:02:91:9e:14:04:67:b7:73:72:8f:56: 8c:60:94:ce:8c:0e:e4:09:e8:7e:d0:ad:2c:0a:ff:80:49:03: 4e:f9:4e:1e:cc:d4:0f:d7:75:f6:b4:b2:d4:ae:05:a9:78:52: 3b:61:3c:4c:64:c5:a2:65:ab:4c:15:74:f2:63:ae:73:26:2b: 28:fa:9b:69:86:4e:37:74:6b:3a:dd:2a:ad:04:62:e4:30:9b: f6:d0:e9:3d:3a:3f:48:cb:74:50:66:76:d7:88:fb:41:c1:31: 83:7d:21:23:0d:ce:e1:1d:06:93:15:79:23:5b:92:f6:97:40: bb:78:8d:c1:71:0f:70:87:f5:4c:27:8a:0c:4e:39:92:86:c4: 45:c1:82:fb:93:9f:a9:f3:3d:95:c6:46:b6:3a:cd:ba:00:ab: a4:b9:8a:b9:42:5c:69:69:82:87:93:37:04:5c:de:b2:b3:67: ed:4c:29:39:58:24:47:9a:5c:e9:2a:80:86:a0:a3:b3:65:5f: e1:d4:64:8c:76:f5:d2:a1:76:0a:5e:d6:f9:59:0d:ed:41:94: c2:f2:61:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMj8atL0fV5/Xe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk NjY3ZWU4ZDktYzQyOC00MGE5LWFiYjUtNzhhNjQwNTg5YWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFDZo/0CLCSjOI0BYNt1C9sXMynySP0qdUfY +bZ1Hqq3ebNHD3jc0CwVTjgOcU9/03hwE/HNKIiBPhZYjecK3h7tCeZf9or7ritA B0oA8n3CQHTYs+sJpDaW3NoPEs2ho5ckbGG6CRll46tUDjT3FQW3yUcUxPuyG7ug ZT9wV4Tk66i9/3ISZyPuwtQSMdqp5j0m1XTaiKa+HbxI2SNXmJyYG/ZtFdDgdXYA 6C1blCj8pbJZq3Bpm5FH27Yxqd1WDzkDhjuJ0yUIuHeRHkLoEjLHHx+rLx/lPbJT uLfIN+x+V9LHLo4ijqC3Qp0/Jfv1c6uz93d57Ut13kYK0F40KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5qbv2BUokXOQ5by2UAddncij4CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODIwZDYxNDItNWIxMi0z MmFlLWI4ZWItZmRkMTM0NWQ4YzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6x+OUkMZng2LCJa/0czTnC1joxN7cgSrgkeNn9YHNhkKEtcqHfan2d hHkCkZ4UBGe3c3KPVoxglM6MDuQJ6H7QrSwK/4BJA075Th7M1A/Xdfa0stSuBal4 UjthPExkxaJlq0wVdPJjrnMmKyj6m2mGTjd0azrdKq0EYuQwm/bQ6T06P0jLdFBm dteI+0HBMYN9ISMNzuEdBpMVeSNbkvaXQLt4jcFxD3CH9UwnigxOOZKGxEXBgvuT n6nzPZXGRrY6zboAq6S5irlCXGlpgoeTNwRc3rKzZ+1MKTlYJEeaXOkqgIago7Nl X+HUZIx29dKhdgpe1vlZDe1BlMLyYYY= -----END CERTIFICATE-----Generated at Thu Sep 24 23:15:50 2026 by rpki-client