$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d986f2a-5331-38eb-9142-1ff88d6fa813.roa File: 9d986f2a-5331-38eb-9142-1ff88d6fa813.roa (raw, json) Hash identifier: nQCyG/UvqbLJ+ANwwHXSoFrk8pbAoyB7s2d7js+f4iA= Subject key identifier: 78:9C:1C:11:4D:00:7A:0B:3A:3E:4A:30:56:17:D5:08:EB:C8:5B:23 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D94AE85BA474AC321F9FC9E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d986f2a-5331-38eb-9142-1ff88d6fa813.roa Signing time: Tue 21 Apr 2026 14:12:51 +0000 ROA not before: Tue 21 Apr 2026 14:12:51 +0000 ROA not after: Mon 20 Jul 2026 14:12:51 +0000 asID: 397211 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:ae:85:ba:47:4a:c3:21:f9:fc:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 21 14:12:51 2026 GMT Not After : Jul 20 14:12:51 2026 GMT Subject: CN=6a85180f-6686-4a0f-bebb-6f2400cc7197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:48:79:91:64:9f:56:78:21:c0:10:99:fc:5b: 7b:21:6b:cc:5f:17:06:43:de:47:1f:4f:f6:10:05: b3:03:37:c8:d7:b3:c6:31:3d:1c:05:95:53:2b:33: eb:93:9d:b6:01:2c:94:b0:79:11:72:91:29:02:15: 49:48:c2:34:eb:cd:24:9b:f1:42:6b:a4:1d:8c:c7: f8:a0:92:7e:9e:90:50:45:e6:bf:ac:d6:91:49:10: 6e:66:52:4b:76:db:d8:29:3e:4f:48:3a:35:24:d7: f9:ac:3c:07:9c:92:de:8b:6e:bf:a2:8b:16:ac:69: b7:62:22:63:75:ac:a9:25:c2:74:f2:2d:15:5f:1d: 9b:2f:6a:da:fb:84:04:bc:d7:47:11:33:f8:49:2b: 92:a7:f2:30:ac:02:36:fb:6e:21:f8:06:66:02:b8: da:86:20:20:fb:16:ad:ae:a8:35:9b:0c:c8:2f:7c: 17:57:4d:34:fe:59:8b:6f:08:d5:b4:3a:21:cf:f9: 0a:85:8e:3a:8e:60:1a:35:6f:d7:2d:80:1c:d3:87: 7d:ce:7c:cc:c7:6a:37:5c:e5:7e:ea:37:18:3a:6e: 03:24:c0:1f:e7:3c:2e:58:00:6b:87:d5:b6:bb:8a: 6f:f4:f2:76:82:2a:67:1c:d0:ee:9b:fc:41:94:77: 5c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:9C:1C:11:4D:00:7A:0B:3A:3E:4A:30:56:17:D5:08:EB:C8:5B:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d986f2a-5331-38eb-9142-1ff88d6fa813.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:d9:a6:eb:6d:23:f1:8b:38:54:6c:8b:f5:03:6e:03:2f:91: b6:20:55:2d:26:42:1a:c6:14:24:5f:a2:10:c0:2c:35:d0:bf: 99:60:c1:89:b5:74:b7:d8:68:d6:f5:37:77:65:0e:3c:f1:ea: 96:e0:eb:08:ad:05:08:de:96:fa:20:5c:53:2c:dd:70:e8:22: b6:56:0a:e8:90:15:cd:b8:f0:ca:e5:e4:dc:be:47:f2:6c:44: 5d:21:20:c3:94:84:43:07:db:7f:a4:56:eb:d7:52:64:9b:99: bf:02:e4:43:64:7e:cc:e1:4e:04:77:60:d1:79:75:5d:ee:30: 5e:d6:4d:46:ba:07:4a:e9:2e:e3:72:76:4e:7c:0f:df:92:da: e1:95:25:94:94:98:38:df:1f:b6:72:01:8a:cc:3c:d6:2f:8c: 52:6f:e2:c8:74:12:a5:b5:67:52:70:f6:dc:20:81:51:81:d2: bc:e2:40:78:1b:b8:42:eb:43:f6:0d:2e:5a:37:82:22:0a:1a: d6:63:7a:65:50:9c:e8:e4:d9:d6:1f:6f:23:ec:1e:07:9c:c4: 6b:2e:d0:14:67:4d:f7:12:93:fc:ea:a2:7d:fb:ed:05:68:e4: e5:60:f5:8b:58:a5:78:d5:d0:7c:1a:5e:d6:f3:4f:40:8d:5a: f4:13:6f:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2UroW6R0rDIfn8ngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMTE0MTI1MVoXDTI2MDcyMDE0MTI1MVowLzEtMCsGA1UEAxMk NmE4NTE4MGYtNjY4Ni00YTBmLWJlYmItNmYyNDAwY2M3MTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUh5kWSfVnghwBCZ/Ft7IWvMXxcGQ95HH0/2 EAWzAzfI17PGMT0cBZVTKzPrk522ASyUsHkRcpEpAhVJSMI0680km/FCa6QdjMf4 oJJ+npBQRea/rNaRSRBuZlJLdtvYKT5PSDo1JNf5rDwHnJLei26/oosWrGm3YiJj daypJcJ08i0VXx2bL2ra+4QEvNdHETP4SSuSp/IwrAI2+24h+AZmArjahiAg+xat rqg1mwzIL3wXV000/lmLbwjVtDohz/kKhY46jmAaNW/XLYAc04d9znzMx2o3XOV+ 6jcYOm4DJMAf5zwuWABrh9W2u4pv9PJ2gipnHNDum/xBlHdcQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHicHBFNAHoLOj5KMFYX1QjryFsjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWQ5ODZmMmEtNTMzMS0z OGViLTkxNDItMWZmODhkNmZhODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjZputtI/GLOFRsi/UDbgMvkbYgVS0mQhrGFCRfohDALDXQv5lgwYm1 dLfYaNb1N3dlDjzx6pbg6witBQjelvogXFMs3XDoIrZWCuiQFc248Mrl5Ny+R/Js RF0hIMOUhEMH23+kVuvXUmSbmb8C5ENkfszhTgR3YNF5dV3uMF7WTUa6B0rpLuNy dk58D9+S2uGVJZSUmDjfH7ZyAYrMPNYvjFJv4sh0EqW1Z1Jw9twggVGB0rziQHgb uELrQ/YNLlo3giIKGtZjemVQnOjk2dYfbyPsHgecxGsu0BRnTfcSk/zqon377QVo 5OVg9YtYpXjV0HwaXtbzT0CNWvQTbzY= -----END CERTIFICATE-----Generated at Wed May 13 02:26:54 2026 by rpki-client