$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5b6a82e-5654-3136-a881-1e95793ef0a6.roa File: a5b6a82e-5654-3136-a881-1e95793ef0a6.roa (raw, json) Hash identifier: eJop5CVpEFNctAIoMJJrTE9oq6bnrLyPN2TgscM6Kic= Subject key identifier: E4:2D:6A:86:A7:A1:40:86:99:C9:80:4E:A2:E6:6C:66:A8:2D:F1:F4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E581D8912288D1CAE4C5705E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5b6a82e-5654-3136-a881-1e95793ef0a6.roa Signing time: Tue 30 Jun 2026 14:19:09 +0000 ROA not before: Tue 30 Jun 2026 14:19:09 +0000 ROA not after: Mon 28 Sep 2026 14:19:09 +0000 asID: 30060 IP address blocks: 216.87.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:58:1d:89:12:28:8d:1c:ae:4c:57:05:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 30 14:19:09 2026 GMT Not After : Sep 28 14:19:09 2026 GMT Subject: CN=5718318f-38de-4f56-9b0c-82548a83c1d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:39:a0:18:e2:95:6a:e4:9f:1d:65:99:ef:10: 62:05:82:68:a5:e0:87:8b:92:6a:66:ac:7c:5e:e9: ae:f2:e5:66:97:f9:90:3a:13:22:a8:e4:0c:46:7a: ff:f6:c0:71:dc:be:e6:57:30:d8:63:cb:0d:3e:1f: 32:62:fc:1b:ba:50:22:3d:a0:42:5c:bb:28:f9:a5: b0:cc:24:f8:e4:22:80:4a:11:42:50:1f:01:85:04: be:21:c2:6f:16:5b:b1:31:ff:23:8c:1e:45:6b:58: 24:13:4a:eb:35:8c:d7:98:ae:5d:ea:9c:ea:25:c9: 68:27:72:0c:5f:41:04:09:fd:e5:b1:b6:4d:a0:b8: bc:a3:72:57:2f:7e:53:86:93:e5:79:c0:be:af:ac: 1a:a9:c5:c8:cc:d9:65:de:3c:fe:72:3f:c1:68:7c: 5b:64:62:4b:40:fd:c0:84:f5:ad:51:f4:f8:23:c7: 46:d2:ca:3e:2a:b1:41:6c:45:f6:a5:dd:32:68:82: ed:45:b1:b8:0b:fe:ff:61:d0:fd:e1:dd:b0:98:91: 54:32:16:1d:0c:27:58:36:c7:12:62:cf:3f:de:05: bb:ae:f7:af:09:3e:dd:1a:64:38:37:8f:4e:72:2f: 8f:af:5a:fe:bc:68:05:77:7f:91:a6:95:58:d5:8e: d7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2D:6A:86:A7:A1:40:86:99:C9:80:4E:A2:E6:6C:66:A8:2D:F1:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5b6a82e-5654-3136-a881-1e95793ef0a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:45:01:16:e3:45:ca:c6:86:bd:28:e3:a1:94:9c:e1:04:5d: 9e:81:a6:ee:28:a9:2f:88:79:f7:77:e0:c7:3c:e5:1a:5b:8f: 46:29:7c:df:c1:3a:e9:78:5a:2c:eb:01:39:67:2a:48:26:7e: 3b:ad:59:5e:0c:68:72:a0:21:b7:61:74:e6:1b:b5:4a:45:96: 93:a2:20:8c:0d:86:d4:0c:56:a9:c0:91:e6:ea:8e:aa:7b:a0: 88:0d:51:6a:b7:af:24:77:2d:c0:41:56:b8:30:0f:3c:78:82: 1d:c0:c9:74:8b:f4:0c:18:28:55:95:2f:8e:88:a5:60:f8:01: 4f:b3:02:8a:53:0b:b4:f6:dc:53:e1:55:e2:37:b7:7e:0e:fe: 14:49:aa:b0:3a:8e:ec:e9:cc:2c:0d:13:49:4f:4f:ec:59:28: 17:4e:44:a4:57:f0:70:7b:d0:5c:c8:44:7c:fd:ca:57:b5:5f: ef:8a:fe:80:c5:bd:01:d9:1f:43:3d:74:6e:13:54:a3:17:75: ae:a3:9e:e3:86:b1:3b:91:be:65:6d:8c:c2:9f:7e:69:41:f9: 26:6d:a8:5f:8d:55:31:4c:38:cd:95:51:e3:b7:b1:57:32:38: ad:2b:12:9e:f1:c8:22:b9:6e:fe:5e:f6:a7:52:61:61:d1:36: 6c:9b:59:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5YHYkSKI0crkxXBeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYzMDE0MTkwOVoXDTI2MDkyODE0MTkwOVowLzEtMCsGA1UEAxMk NTcxODMxOGYtMzhkZS00ZjU2LTliMGMtODI1NDhhODNjMWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTmgGOKVauSfHWWZ7xBiBYJopeCHi5JqZqx8 Xumu8uVml/mQOhMiqOQMRnr/9sBx3L7mVzDYY8sNPh8yYvwbulAiPaBCXLso+aWw zCT45CKAShFCUB8BhQS+IcJvFluxMf8jjB5Fa1gkE0rrNYzXmK5d6pzqJcloJ3IM X0EECf3lsbZNoLi8o3JXL35ThpPlecC+r6waqcXIzNll3jz+cj/BaHxbZGJLQP3A hPWtUfT4I8dG0so+KrFBbEX2pd0yaILtRbG4C/7/YdD94d2wmJFUMhYdDCdYNscS Ys8/3gW7rvevCT7dGmQ4N49Oci+Pr1r+vGgFd3+RppVY1Y7XlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQtaoanoUCGmcmATqLmbGaoLfH0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTViNmE4MmUtNTY1NC0z MTM2LWE4ODEtMWU5NTc5M2VmMGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRFARbjRcrGhr0o46GUnOEEXZ6Bpu4oqS+Iefd34Mc85Rpbj0YpfN/B Oul4WizrATlnKkgmfjutWV4MaHKgIbdhdOYbtUpFlpOiIIwNhtQMVqnAkebqjqp7 oIgNUWq3ryR3LcBBVrgwDzx4gh3AyXSL9AwYKFWVL46IpWD4AU+zAopTC7T23FPh VeI3t34O/hRJqrA6juzpzCwNE0lPT+xZKBdORKRX8HB70FzIRHz9yle1X++K/oDF vQHZH0M9dG4TVKMXda6jnuOGsTuRvmVtjMKffmlB+SZtqF+NVTFMOM2VUeO3sVcy OK0rEp7xyCK5bv5e9qdSYWHRNmybWTQ= -----END CERTIFICATE-----Generated at Fri Jul 24 04:07:07 2026 by rpki-client