$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9f54f08b-9d21-337f-9316-81fed31762b1.roa File: 9f54f08b-9d21-337f-9316-81fed31762b1.roa (raw, json) Hash identifier: P4b/pnEC1JtfRKCfLyqCaEw4ppcm5lQBNF3pLsfHzNU= Subject key identifier: 63:1E:A5:2A:E4:52:4F:70:87:D3:CF:DF:89:C1:48:DC:98:8A:00:4D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D94AE849A6662DCA94BAC0100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9f54f08b-9d21-337f-9316-81fed31762b1.roa Signing time: Tue 21 Apr 2026 14:12:51 +0000 ROA not before: Tue 21 Apr 2026 14:12:51 +0000 ROA not after: Mon 20 Jul 2026 14:12:51 +0000 asID: 36624 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:ae:84:9a:66:62:dc:a9:4b:ac:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 21 14:12:51 2026 GMT Not After : Jul 20 14:12:51 2026 GMT Subject: CN=3e6d3995-15b5-40e1-a12c-f18ef6d6ca7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:19:ab:d1:55:97:60:13:ef:f0:df:b7:1d:24: f6:9e:c3:d5:f4:95:41:bb:da:cd:b1:1b:e3:7b:b9: dc:f8:2e:01:c3:ef:7d:49:d2:de:d8:96:13:34:f4: 34:53:3f:c6:bb:c3:df:b1:a8:68:14:f5:1c:2e:60: 24:b4:a1:79:4f:06:be:54:90:b0:e5:bc:98:2e:54: c3:44:fe:53:cb:35:f8:4b:ed:95:6b:09:3d:77:93: e5:97:81:31:9d:7e:8d:65:68:88:a0:46:b0:bc:23: d2:75:13:a0:6a:57:e1:7d:70:03:68:4c:bc:5a:1a: 0a:ff:08:54:21:51:97:f8:89:3f:68:a5:0d:96:76: 82:6d:f1:e2:be:47:c7:22:ee:e8:46:c8:79:90:15: 28:d8:c7:4d:43:be:9b:a2:f1:f9:65:bd:95:45:17: e7:f1:a6:04:d4:eb:c9:73:e1:0d:04:a4:33:cb:0b: 52:93:6f:5c:2b:eb:2e:4b:b0:07:18:ba:10:f1:6f: f8:85:79:a6:19:26:5e:39:12:49:b8:77:ae:93:32: e8:ae:d8:f1:8b:4c:bd:75:72:17:9d:a6:53:a3:b2: 93:d7:c4:1c:b3:a5:cf:aa:61:48:c2:c3:d8:ab:76: 31:0b:3d:4f:9e:ab:e3:cc:4d:8c:d4:10:9c:49:fb: c0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:1E:A5:2A:E4:52:4F:70:87:D3:CF:DF:89:C1:48:DC:98:8A:00:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9f54f08b-9d21-337f-9316-81fed31762b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:1c:a8:1d:de:76:e5:56:a7:05:60:cd:85:7f:b1:ba:7b:7b: 1f:12:d3:b9:52:8a:d5:cb:6d:fa:02:28:7a:e2:83:d1:8d:b3: 93:c2:eb:84:e3:f4:4b:37:bc:fd:39:98:09:85:4c:cc:f8:d8: 4f:05:2c:97:86:bb:7a:b6:0f:ab:0c:22:e0:3b:d9:ce:2b:c6: 5d:69:8e:42:b1:ba:de:dc:9a:db:4a:51:ca:1e:e3:be:c1:0d: f1:93:d5:45:36:46:46:54:b6:87:64:04:5e:a2:fe:1c:40:40: a1:7e:60:4d:9c:e0:25:ea:c1:86:3c:1c:27:19:14:fe:23:97: 94:f4:e7:5a:68:67:bc:89:cf:32:fb:86:97:b9:a4:99:9b:73: 86:bb:40:52:0a:14:d8:08:47:61:b5:4b:62:2e:1e:2c:a3:19: d0:5b:99:7a:8f:ba:56:51:e2:cb:90:ea:c6:71:55:b4:cf:45: 87:02:77:f1:b7:7b:65:d0:0b:d0:90:88:6d:14:9b:6d:40:5d: e3:4d:c2:2f:fa:e8:5d:07:9d:eb:6d:90:7e:18:81:8e:b2:c3: bb:e3:d3:8d:95:49:9f:db:f2:4b:ce:29:ce:69:2c:c1:fe:a4: 92:ea:9f:fa:b3:3b:24:b2:2d:9b:75:70:71:8f:6c:43:7a:8a: 8e:cf:19:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2UroSaZmLcqUusAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMTE0MTI1MVoXDTI2MDcyMDE0MTI1MVowLzEtMCsGA1UEAxMk M2U2ZDM5OTUtMTViNS00MGUxLWExMmMtZjE4ZWY2ZDZjYTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhmr0VWXYBPv8N+3HST2nsPV9JVBu9rNsRvj e7nc+C4Bw+99SdLe2JYTNPQ0Uz/Gu8PfsahoFPUcLmAktKF5Twa+VJCw5byYLlTD RP5TyzX4S+2Vawk9d5Pll4ExnX6NZWiIoEawvCPSdROgalfhfXADaEy8WhoK/whU IVGX+Ik/aKUNlnaCbfHivkfHIu7oRsh5kBUo2MdNQ76bovH5Zb2VRRfn8aYE1OvJ c+ENBKQzywtSk29cK+suS7AHGLoQ8W/4hXmmGSZeORJJuHeukzLortjxi0y9dXIX naZTo7KT18Qcs6XPqmFIwsPYq3YxCz1PnqvjzE2M1BCcSfvAKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMepSrkUk9wh9PP34nBSNyYigBNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWY1NGYwOGItOWQyMS0z MzdmLTkzMTYtODFmZWQzMTc2MmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgcqB3eduVWpwVgzYV/sbp7ex8S07lSitXLbfoCKHrig9GNs5PC64Tj 9Es3vP05mAmFTMz42E8FLJeGu3q2D6sMIuA72c4rxl1pjkKxut7cmttKUcoe477B DfGT1UU2RkZUtodkBF6i/hxAQKF+YE2c4CXqwYY8HCcZFP4jl5T051poZ7yJzzL7 hpe5pJmbc4a7QFIKFNgIR2G1S2IuHiyjGdBbmXqPulZR4suQ6sZxVbTPRYcCd/G3 e2XQC9CQiG0Um21AXeNNwi/66F0HnettkH4YgY6yw7vj042VSZ/b8kvOKc5pLMH+ pJLqn/qzOySyLZt1cHGPbEN6io7PGdM= -----END CERTIFICATE-----Generated at Wed May 13 07:14:49 2026 by rpki-client