$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6c01e61-c725-3845-a839-f9eb1420ec10.roa File: a6c01e61-c725-3845-a839-f9eb1420ec10.roa (raw, json) Hash identifier: j+xBRe1qIrvC5ubcEevOUq+xE4F6mrK5DeBkXc5XYBo= Subject key identifier: 80:14:33:9A:00:1A:A2:E1:38:6D:F4:67:62:E5:E0:6C:D4:90:5F:88 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D94AE875CC864A576B281F700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6c01e61-c725-3845-a839-f9eb1420ec10.roa Signing time: Tue 21 Apr 2026 14:12:52 +0000 ROA not before: Tue 21 Apr 2026 14:12:52 +0000 ROA not after: Mon 20 Jul 2026 14:12:52 +0000 asID: 21313 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:ae:87:5c:c8:64:a5:76:b2:81:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 21 14:12:52 2026 GMT Not After : Jul 20 14:12:52 2026 GMT Subject: CN=1333a971-b9b7-48aa-a1e7-b5ebec1d50e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:23:2b:20:ed:28:33:de:8a:1a:5b:c4:0c:5b: 49:6f:df:ef:63:55:b1:ce:79:bc:45:e2:c4:31:36: 3c:54:4d:05:a6:49:93:33:d4:fe:51:12:0c:23:f6: a9:54:1f:68:03:1c:7a:a5:75:80:5b:d2:dd:fc:ff: 3a:cc:74:a1:0f:36:d5:f7:6f:b6:d1:53:28:14:99: 31:1b:67:85:8b:e2:9e:63:43:b1:fa:5e:a4:41:7e: de:25:7c:c8:f9:b5:d8:76:4e:82:8f:4b:96:00:ee: c0:46:50:72:36:52:1a:b0:ba:59:2b:79:b4:83:21: 7e:b6:3d:62:57:ff:6e:b9:b5:74:e8:d4:96:97:ec: d5:fa:1d:cd:63:ee:61:80:7b:ff:57:81:8c:ee:f2: eb:90:73:18:ed:56:ee:f7:fa:71:e5:a0:84:3e:95: 16:fa:17:5c:8a:d0:55:28:9c:81:40:0f:3f:c6:41: af:8e:52:c0:9f:3c:a1:51:64:0d:56:06:e0:8a:77: 49:7e:fc:42:19:16:db:35:53:cf:1a:e8:db:bb:be: 52:5a:7a:98:e2:25:d3:bd:18:7b:50:bf:5c:44:aa: 00:2a:ec:99:cc:d6:cd:c7:2f:f8:fc:0a:8a:d8:a6: 54:8a:4c:5f:88:db:22:27:62:63:7b:25:62:50:a4: dd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:14:33:9A:00:1A:A2:E1:38:6D:F4:67:62:E5:E0:6C:D4:90:5F:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6c01e61-c725-3845-a839-f9eb1420ec10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:98:3f:41:df:2d:de:fa:0c:49:c3:c4:b7:95:af:5c:eb:c3: 23:f8:34:5c:08:8d:74:3b:33:9a:b6:97:f3:11:10:a9:a8:a0: 46:b9:ac:35:45:dd:5a:4e:33:b3:50:f5:d6:cc:f3:53:54:8e: 55:e8:66:a8:fd:fb:cd:33:61:bf:e4:04:4b:5d:70:67:65:1b: f0:c7:43:c2:10:ad:49:1f:42:bf:0f:5a:9c:5f:3c:81:7f:4a: 6e:91:ec:9c:3b:bf:71:d8:93:3d:bd:e9:d0:6e:5a:9d:28:9d: bb:d1:3a:c2:9e:02:2d:d5:4a:6b:95:8f:68:fc:fc:4c:42:a0: e9:0d:0d:b4:ae:97:bc:e2:5b:f4:f8:a2:5f:25:16:12:31:fb: 43:26:07:29:d2:d7:a9:c3:f8:ef:f5:b4:f5:59:eb:a1:09:e7: 41:03:6f:82:91:01:e6:58:b7:ef:0d:c7:7f:86:89:84:4a:82: 8f:fb:25:74:5b:5c:38:de:f4:63:90:7d:75:dd:93:ee:41:8e: ca:4b:5d:6a:be:e2:cd:32:48:81:7e:f3:55:3d:60:7b:25:45: 81:94:e7:38:7f:82:47:00:da:04:c9:bb:58:ae:c3:f4:4f:36: 51:76:18:29:c6:18:66:e9:34:ab:96:07:95:29:83:ba:19:ab: 5a:27:d0:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2UrodcyGSldrKB9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMTE0MTI1MloXDTI2MDcyMDE0MTI1MlowLzEtMCsGA1UEAxMk MTMzM2E5NzEtYjliNy00OGFhLWExZTctYjVlYmVjMWQ1MGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iMrIO0oM96KGlvEDFtJb9/vY1Wxznm8ReLE MTY8VE0FpkmTM9T+URIMI/apVB9oAxx6pXWAW9Ld/P86zHShDzbV92+20VMoFJkx G2eFi+KeY0Ox+l6kQX7eJXzI+bXYdk6Cj0uWAO7ARlByNlIasLpZK3m0gyF+tj1i V/9uubV06NSWl+zV+h3NY+5hgHv/V4GM7vLrkHMY7Vbu9/px5aCEPpUW+hdcitBV KJyBQA8/xkGvjlLAnzyhUWQNVgbgindJfvxCGRbbNVPPGujbu75SWnqY4iXTvRh7 UL9cRKoAKuyZzNbNxy/4/AqK2KZUikxfiNsiJ2JjeyViUKTd7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAUM5oAGqLhOG30Z2Ll4GzUkF+IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTZjMDFlNjEtYzcyNS0z ODQ1LWE4MzktZjllYjE0MjBlYzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKYP0HfLd76DEnDxLeVr1zrwyP4NFwIjXQ7M5q2l/MREKmooEa5rDVF 3VpOM7NQ9dbM81NUjlXoZqj9+80zYb/kBEtdcGdlG/DHQ8IQrUkfQr8PWpxfPIF/ Sm6R7Jw7v3HYkz296dBuWp0onbvROsKeAi3VSmuVj2j8/ExCoOkNDbSul7ziW/T4 ol8lFhIx+0MmBynS16nD+O/1tPVZ66EJ50EDb4KRAeZYt+8Nx3+GiYRKgo/7JXRb XDje9GOQfXXdk+5BjspLXWq+4s0ySIF+81U9YHslRYGU5zh/gkcA2gTJu1iuw/RP NlF2GCnGGGbpNKuWB5Upg7oZq1on0NE= -----END CERTIFICATE-----Generated at Wed May 13 10:10:32 2026 by rpki-client