$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5c3ec42-749e-3711-851c-b424c1c4490e.roa File: a5c3ec42-749e-3711-851c-b424c1c4490e.roa (raw, json) Hash identifier: C6LcoOtnuhpTnKH5xcflQDBbM7jjzdiO/vt2yZX21W4= Subject key identifier: 6A:72:E7:AC:82:D8:4C:9B:C6:2B:5E:96:8F:25:10:3B:B3:9A:67:E9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F17324035A3247CF49806800C Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5c3ec42-749e-3711-851c-b424c1c4490e.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 396612 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:40:35:a3:24:7c:f4:98:06:80:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=2e780e6c-ca4c-4407-b12d-aa391c9f67d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:61:3f:e9:28:1e:06:b6:23:79:ca:80:4b:88: 22:96:5c:ec:1e:e2:e0:de:24:79:be:93:de:cd:12: 78:d9:df:dd:ae:08:e0:9d:53:1c:45:07:03:1c:1b: e2:70:8c:4a:08:cf:e5:a0:17:4b:6b:e8:c6:b2:93: 78:d4:43:ec:81:7a:59:a7:5e:a4:87:85:e4:09:7a: 3d:55:f7:5d:e6:59:aa:79:ab:cf:52:6a:f8:ff:c1: 8f:ab:80:f8:59:26:70:4a:ba:7d:3c:16:48:c7:57: ac:34:e7:a9:38:a5:30:be:07:d6:d3:e5:d0:5e:12: e2:b7:15:de:12:68:ab:27:bf:88:61:4f:f4:27:e9: 85:aa:05:0d:50:1f:5f:19:07:0e:76:37:46:4c:91: 14:7b:65:8f:a7:47:8b:86:ae:10:42:d8:9e:12:66: 07:52:46:1c:4e:53:96:f4:61:51:fb:b1:0d:90:98: 59:20:81:fb:4f:9a:c6:31:2f:0e:27:d3:43:72:4e: 68:8b:54:77:47:4e:96:9e:0e:05:cc:f4:97:46:39: dc:aa:ed:f8:6f:34:1e:c9:67:ef:e2:44:78:b6:76: 22:b9:72:be:28:1a:2a:90:b2:1a:6c:31:f9:5b:d8: fe:24:0c:56:48:cc:7e:c2:5e:dd:ba:8f:19:7a:95: 3e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:72:E7:AC:82:D8:4C:9B:C6:2B:5E:96:8F:25:10:3B:B3:9A:67:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5c3ec42-749e-3711-851c-b424c1c4490e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:af:ee:32:29:2d:7d:5d:60:68:f6:b1:6a:a6:b3:56:c7:a8: b4:a9:18:5f:a2:e6:8f:1f:9e:84:02:18:4a:77:96:4d:7a:0a: b1:13:c9:a7:20:d8:ec:13:4e:c1:ee:97:aa:28:36:2e:c2:e8: 2b:71:e9:ad:91:9b:84:79:63:69:01:24:d7:5d:30:78:15:aa: 69:dd:36:4e:cf:1e:bb:21:d2:e1:3c:5f:e1:c9:d8:16:10:df: d7:fc:58:34:1a:f9:05:85:98:56:ba:06:75:27:2f:27:b0:69: 88:95:5c:b6:17:1f:c3:37:7c:ea:13:44:84:39:84:e3:90:2d: be:40:d0:7e:ba:c1:d4:4b:3f:8a:cc:58:56:40:ae:8c:86:2c: 71:ac:88:35:99:26:06:f7:1b:eb:72:bc:d4:ea:b4:2e:60:a1: fc:b9:3f:e1:6a:7d:fd:06:10:c7:f9:7c:18:2f:d0:4f:01:0e: ce:f7:ec:a7:75:74:65:52:02:66:f6:ef:f7:d4:a4:ca:bb:a2: cd:ec:e2:e2:7c:17:1d:84:6e:ca:2a:f8:f6:3b:c3:06:c8:ac: 56:a9:c5:61:e1:f8:fc:64:3d:22:fc:9f:61:92:0c:88:ac:9d: 40:da:d4:f7:35:5f:5c:66:f9:11:c0:01:e6:92:c5:7c:84:67: 74:f6:43:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkA1oyR89JgGgAwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk MmU3ODBlNmMtY2E0Yy00NDA3LWIxMmQtYWEzOTFjOWY2N2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGE/6SgeBrYjecqAS4gillzsHuLg3iR5vpPe zRJ42d/drgjgnVMcRQcDHBvicIxKCM/loBdLa+jGspN41EPsgXpZp16kh4XkCXo9 Vfdd5lmqeavPUmr4/8GPq4D4WSZwSrp9PBZIx1esNOepOKUwvgfW0+XQXhLitxXe EmirJ7+IYU/0J+mFqgUNUB9fGQcOdjdGTJEUe2WPp0eLhq4QQtieEmYHUkYcTlOW 9GFR+7ENkJhZIIH7T5rGMS8OJ9NDck5oi1R3R06Wng4FzPSXRjncqu34bzQeyWfv 4kR4tnYiuXK+KBoqkLIabDH5W9j+JAxWSMx+wl7duo8ZepU+OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpy56yC2Eybxitelo8lEDuzmmfpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTVjM2VjNDItNzQ5ZS0z NzExLTg1MWMtYjQyNGMxYzQ0OTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWv7jIpLX1dYGj2sWqms1bHqLSpGF+i5o8fnoQCGEp3lk16CrETyacg 2OwTTsHul6ooNi7C6Ctx6a2Rm4R5Y2kBJNddMHgVqmndNk7PHrsh0uE8X+HJ2BYQ 39f8WDQa+QWFmFa6BnUnLyewaYiVXLYXH8M3fOoTRIQ5hOOQLb5A0H66wdRLP4rM WFZAroyGLHGsiDWZJgb3G+tyvNTqtC5gofy5P+Fqff0GEMf5fBgv0E8BDs737Kd1 dGVSAmb27/fUpMq7os3s4uJ8Fx2Ebsoq+PY7wwbIrFapxWHh+PxkPSL8n2GSDIis nUDa1Pc1X1xm+RHAAeaSxXyEZ3T2Q+E= -----END CERTIFICATE-----Generated at Thu Sep 24 02:53:53 2026 by rpki-client