$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b430eff3-6025-328e-9b47-740d984a83a1.roa File: b430eff3-6025-328e-9b47-740d984a83a1.roa (raw, json) Hash identifier: DkZYnvQopushs5ZK7uPxOLrqP5f3M4s1wxii0pD8xzk= Subject key identifier: 0C:68:DF:6B:A9:87:94:94:4C:B5:57:42:E4:A0:7B:F0:F3:C2:67:97 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D94AE87FF662408AD3D271480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b430eff3-6025-328e-9b47-740d984a83a1.roa Signing time: Tue 21 Apr 2026 14:12:52 +0000 ROA not before: Tue 21 Apr 2026 14:12:52 +0000 ROA not after: Mon 20 Jul 2026 14:12:52 +0000 asID: 36620 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:ae:87:ff:66:24:08:ad:3d:27:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 21 14:12:52 2026 GMT Not After : Jul 20 14:12:52 2026 GMT Subject: CN=c6b40c4f-2e54-4092-9335-535174b79d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ac:c2:10:d4:32:41:9e:22:d5:68:73:ea:3f: 97:49:a3:72:96:0c:70:d0:33:f9:b5:cd:08:c8:2e: 68:23:e8:c7:59:8f:d9:a2:f2:1c:a1:b6:4f:9e:84: b1:a5:80:4f:6f:78:fc:db:84:2b:68:39:2d:ff:26: f8:5c:50:b9:57:8f:f5:77:8e:d8:68:19:72:27:60: 25:51:cb:f8:34:1e:97:0d:97:25:39:93:6f:af:9a: af:cb:4e:09:52:b9:94:0d:d4:0f:27:11:00:2e:f6: e7:1f:1b:39:a8:2b:e8:0b:d3:6c:a5:77:fc:a0:4d: d1:49:04:5c:4f:f5:99:ec:cc:89:bd:21:7e:11:83: e2:7d:ed:1f:e7:38:05:aa:8b:16:3b:17:a1:39:db: 88:5f:db:a0:05:06:75:17:6e:f1:ca:d2:0c:a9:4b: 3d:5d:1e:9a:03:c9:da:2b:e4:7d:34:13:e6:89:9d: 52:98:51:54:f4:bf:9c:f2:ff:0a:25:fd:3e:ce:6a: 77:a3:ca:f6:b4:8a:4b:6b:0d:be:be:9e:bb:9f:84: da:a2:27:15:d7:ff:ea:de:18:7a:4c:60:b3:4f:1a: 0d:f2:59:ef:df:d0:84:c4:92:e2:a4:2c:c4:fe:83: da:41:43:dd:ac:7d:f7:d3:b7:cd:f4:b0:e0:20:cb: c0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:68:DF:6B:A9:87:94:94:4C:B5:57:42:E4:A0:7B:F0:F3:C2:67:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b430eff3-6025-328e-9b47-740d984a83a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:84:00:a6:e2:61:43:63:64:99:e4:27:20:35:44:9a:f3:b0: 58:d0:6f:7b:b4:30:20:c2:ad:d5:fd:ed:14:a6:92:10:8f:69: 2f:d1:5b:0c:0f:97:41:09:01:ce:b7:b0:98:20:54:49:7b:6c: 20:1b:2b:88:cf:d3:78:fd:b2:05:71:ba:af:19:57:d0:42:c8: a7:08:7a:4a:63:fa:6b:ec:e6:bb:1f:70:db:53:45:b9:40:08: 95:ed:0f:bb:8d:51:eb:1d:99:00:e0:09:e8:f8:b0:19:7d:57: ba:5d:d0:0b:a2:79:ba:f5:fe:e5:00:46:4b:ce:d0:3c:38:0e: 1d:39:1b:c1:89:2b:8f:38:da:55:f8:96:76:e2:d3:fe:7a:a7: 8f:b0:27:d7:70:2d:21:ea:03:57:48:86:16:a1:1e:39:fd:ce: f7:a5:4e:bc:25:cf:1a:a7:05:3b:ea:6c:aa:e1:e6:47:93:93: c7:b3:f4:90:cb:ee:81:b5:3f:e3:e6:59:93:89:ad:ea:78:de: bc:6e:e9:e7:14:81:8b:9c:87:ea:57:1d:69:d0:b6:ff:dc:3b: 8b:5c:fe:00:b9:42:61:d3:f8:5f:5f:20:51:23:62:80:54:04: 50:35:63:3c:e5:4b:0a:2a:38:00:22:63:f4:3d:3a:d6:57:ad: 45:4a:60:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Urof/ZiQIrT0nFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMTE0MTI1MloXDTI2MDcyMDE0MTI1MlowLzEtMCsGA1UEAxMk YzZiNDBjNGYtMmU1NC00MDkyLTkzMzUtNTM1MTc0Yjc5ZDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqzCENQyQZ4i1Whz6j+XSaNylgxw0DP5tc0I yC5oI+jHWY/ZovIcobZPnoSxpYBPb3j824QraDkt/yb4XFC5V4/1d47YaBlyJ2Al Ucv4NB6XDZclOZNvr5qvy04JUrmUDdQPJxEALvbnHxs5qCvoC9NspXf8oE3RSQRc T/WZ7MyJvSF+EYPife0f5zgFqosWOxehOduIX9ugBQZ1F27xytIMqUs9XR6aA8na K+R9NBPmiZ1SmFFU9L+c8v8KJf0+zmp3o8r2tIpLaw2+vp67n4TaoicV1//q3hh6 TGCzTxoN8lnv39CExJLipCzE/oPaQUPdrH3307fN9LDgIMvAQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxo32uph5SUTLVXQuSge/DzwmeXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjQzMGVmZjMtNjAyNS0z MjhlLTliNDctNzQwZDk4NGE4M2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaEAKbiYUNjZJnkJyA1RJrzsFjQb3u0MCDCrdX97RSmkhCPaS/RWwwP l0EJAc63sJggVEl7bCAbK4jP03j9sgVxuq8ZV9BCyKcIekpj+mvs5rsfcNtTRblA CJXtD7uNUesdmQDgCej4sBl9V7pd0Auiebr1/uUARkvO0Dw4Dh05G8GJK4842lX4 lnbi0/56p4+wJ9dwLSHqA1dIhhahHjn9zvelTrwlzxqnBTvqbKrh5keTk8ez9JDL 7oG1P+PmWZOJrep43rxu6ecUgYuch+pXHWnQtv/cO4tc/gC5QmHT+F9fIFEjYoBU BFA1YzzlSwoqOAAiY/Q9OtZXrUVKYD8= -----END CERTIFICATE-----Generated at Wed May 13 06:19:05 2026 by rpki-client