$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a1fa71e3-92df-3acc-bec8-6b2f782dd7b2.roa File: a1fa71e3-92df-3acc-bec8-6b2f782dd7b2.roa (raw, json) Hash identifier: tUAj/sbmfUuiEl9VPCjtGtmW67a3vwvHdACDoUu62vk= Subject key identifier: 5D:57:78:2D:F9:A8:0B:65:BB:B2:68:C4:1D:55:BB:D2:36:2D:BE:57 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584FB93BBADC86175F52C85DD600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a1fa71e3-92df-3acc-bec8-6b2f782dd7b2.roa Signing time: Wed 04 Nov 2026 02:00:13 +0000 ROA not before: Wed 04 Nov 2026 02:00:13 +0000 ROA not after: Tue 02 Feb 2027 02:00:13 +0000 asID: 396592 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b9:3b:ba:dc:86:17:5f:52:c8:5d:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 4 02:00:13 2026 GMT Not After : Feb 2 02:00:13 2027 GMT Subject: CN=cda3de78-3680-460e-84ab-fd1dc5f3d625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:cb:6e:50:9e:b6:94:40:b2:a5:97:1d:52:fe: 8e:c5:04:24:61:76:39:09:33:56:46:88:56:a8:fe: 6c:ec:0b:ba:2b:59:31:b9:6e:5f:17:76:4f:45:1e: 33:20:95:8a:80:cc:cb:60:28:53:fb:1c:9e:04:57: 2c:72:9e:18:ce:90:64:ba:ce:3e:cb:59:e0:8a:d3: 2a:69:d5:65:4d:7e:3b:cb:4a:82:1a:02:e2:da:3e: da:4e:04:8c:ba:f9:7c:de:1d:45:ec:c7:09:d1:9e: b4:1b:81:40:03:6f:ac:a1:65:a9:60:be:4e:f4:e5: e5:aa:f3:86:aa:1c:66:42:e9:d4:77:94:cf:b2:6a: 98:12:1e:86:bd:4e:55:de:ee:12:64:af:76:ce:06: d7:73:76:b3:ce:a0:c5:cf:ef:63:a8:e6:8c:fe:01: 00:84:8e:13:a7:29:9c:e5:d8:36:1c:82:c1:9c:de: 35:41:82:ad:a2:16:3f:e9:ad:6f:cf:e0:22:27:53: be:0f:5a:27:b4:86:c1:86:01:1e:f8:8d:75:a1:5e: e9:f8:14:79:cb:cb:c5:35:50:e5:50:cb:32:7e:f8: 72:2f:cb:3a:72:2e:62:90:be:09:1d:98:55:21:2a: 89:3c:1e:21:3a:a0:06:84:e3:b6:bb:fd:59:ff:11: fa:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:57:78:2D:F9:A8:0B:65:BB:B2:68:C4:1D:55:BB:D2:36:2D:BE:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a1fa71e3-92df-3acc-bec8-6b2f782dd7b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:9a:7d:12:b2:1c:9f:c1:eb:1e:7b:9e:f9:ec:ff:f3:10:d2: 79:28:70:89:23:b1:79:99:7e:7c:0c:39:21:59:92:a5:f0:52: e8:0d:27:1c:96:da:ca:19:1d:e0:78:61:37:67:57:95:8c:22: d8:85:c9:ae:31:fe:08:20:d8:f7:65:68:5f:3c:b9:57:a9:37: 19:e9:f6:b7:9e:47:df:cf:e3:74:e6:ea:3d:ab:9b:63:f3:be: cf:4d:71:43:ea:93:14:d8:26:99:9a:bb:64:92:fe:43:96:b5: 78:14:e2:95:40:8c:49:35:fa:09:f0:4a:db:bd:8e:54:77:41: 08:af:0f:16:cb:85:86:c5:48:8b:2d:a1:6a:c9:2f:1b:01:34: cc:ae:ce:1f:e5:b8:69:64:22:d9:7c:d5:0c:56:78:3d:10:16: be:5a:a7:4d:51:b9:f7:1f:c8:a1:71:67:31:d7:19:b1:ae:88: d7:2a:4b:a8:5c:3d:80:3d:90:89:e3:87:35:b3:0d:49:3a:8d: f3:f1:c1:2b:6f:b9:0a:77:9d:4a:cb:89:1b:7c:90:07:16:1f: 34:72:8b:74:8d:5a:95:1f:ac:28:33:bd:7c:2a:2a:bd:89:04: 88:e6:52:31:ec:73:87:95:7a:99:c7:f4:2d:9e:40:56:0c:81: f4:39:5e:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+5O7rchhdfUshd1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTEwNDAyMDAxM1oXDTI3MDIwMjAyMDAxM1owLzEtMCsGA1UEAxMk Y2RhM2RlNzgtMzY4MC00NjBlLTg0YWItZmQxZGM1ZjNkNjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8stuUJ62lECypZcdUv6OxQQkYXY5CTNWRohW qP5s7Au6K1kxuW5fF3ZPRR4zIJWKgMzLYChT+xyeBFcscp4YzpBkus4+y1ngitMq adVlTX47y0qCGgLi2j7aTgSMuvl83h1F7McJ0Z60G4FAA2+soWWpYL5O9OXlqvOG qhxmQunUd5TPsmqYEh6GvU5V3u4SZK92zgbXc3azzqDFz+9jqOaM/gEAhI4Tpymc 5dg2HILBnN41QYKtohY/6a1vz+AiJ1O+D1ontIbBhgEe+I11oV7p+BR5y8vFNVDl UMsyfvhyL8s6ci5ikL4JHZhVISqJPB4hOqAGhOO2u/1Z/xH6uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1XeC35qAtlu7JoxB1Vu9I2Lb5XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTFmYTcxZTMtOTJkZi0z YWNjLWJlYzgtNmIyZjc4MmRkN2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSafRKyHJ/B6x57nvns//MQ0nkocIkjsXmZfnwMOSFZkqXwUugNJxyW 2soZHeB4YTdnV5WMItiFya4x/ggg2PdlaF88uVepNxnp9reeR9/P43Tm6j2rm2Pz vs9NcUPqkxTYJpmau2SS/kOWtXgU4pVAjEk1+gnwStu9jlR3QQivDxbLhYbFSIst oWrJLxsBNMyuzh/luGlkItl81QxWeD0QFr5ap01RufcfyKFxZzHXGbGuiNcqS6hc PYA9kInjhzWzDUk6jfPxwStvuQp3nUrLiRt8kAcWHzRyi3SNWpUfrCgzvXwqKr2J BIjmUjHsc4eVepnH9C2eQFYMgfQ5XhY= -----END CERTIFICATE-----Generated at Sun Nov 15 19:24:41 2026 by rpki-client