$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b430eff3-6025-328e-9b47-740d984a83a1.roa File: b430eff3-6025-328e-9b47-740d984a83a1.roa (raw, json) Hash identifier: o/Oz6YqgwuFOmvqM6djHOMemZ03jltlruOUV/kWVW9w= Subject key identifier: E6:DB:80:69:94:8E:D2:B0:D8:42:1D:C5:69:11:75:99:BB:A0:6B:85 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E74CF78F5415E7495250FE000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b430eff3-6025-328e-9b47-740d984a83a1.roa Signing time: Fri 10 Jul 2026 21:00:12 +0000 ROA not before: Fri 10 Jul 2026 21:00:12 +0000 ROA not after: Thu 08 Oct 2026 21:00:12 +0000 asID: 36620 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:74:cf:78:f5:41:5e:74:95:25:0f:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 21:00:12 2026 GMT Not After : Oct 8 21:00:12 2026 GMT Subject: CN=bfae68e7-1d29-47f2-bc34-bbfbbc6fe496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9e:56:4b:43:4d:65:f9:0f:a6:ef:38:2c:72: 5e:51:c2:db:6f:f4:a4:8d:ce:26:2c:84:fb:20:49: e9:02:6e:a4:4c:38:e9:4b:64:dd:50:2d:a4:92:25: ec:35:fd:19:a7:0e:59:6a:ee:9a:95:93:19:83:a8: 16:6a:75:e0:70:36:31:1d:fc:d4:06:09:7e:0c:4e: aa:f8:fd:7d:e9:87:64:75:a7:7e:cc:55:14:a4:e0: 03:55:66:34:53:25:37:12:b4:37:1a:7c:da:1d:23: 49:35:9f:b4:25:71:39:0a:22:61:a1:8a:bf:e3:f4: 31:b8:09:00:93:8e:af:43:ab:17:1f:89:03:a3:df: 84:28:91:80:d2:ac:3c:23:9b:eb:41:0e:6c:87:15: 9a:33:cb:1f:6a:f9:45:fc:ad:2a:77:19:14:e8:0d: a0:e9:14:ee:b6:1f:ae:b1:7b:b7:29:f6:d4:70:ba: cd:e2:2a:ee:4e:9b:d2:00:cc:39:d6:4c:17:c9:77: 3c:4b:1d:e2:b1:a1:5b:d6:e9:24:cf:e4:fd:1a:cb: 29:9a:5f:10:28:e9:69:53:a4:04:1d:18:de:5e:fe: cc:0a:8a:b4:67:49:c5:57:65:70:d7:b9:07:f4:1f: a3:bf:85:4c:06:c7:f3:f3:66:f6:e6:c6:85:a8:05: 92:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DB:80:69:94:8E:D2:B0:D8:42:1D:C5:69:11:75:99:BB:A0:6B:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b430eff3-6025-328e-9b47-740d984a83a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:15:31:24:9c:3b:0a:1a:56:c8:36:51:21:fc:d2:16:f3:0e: 28:03:ad:49:e2:93:c6:38:38:6d:a7:09:13:1f:b1:75:58:2e: d6:24:eb:5a:02:5e:00:e7:e4:cb:ef:4e:9b:b5:26:69:84:66: 34:57:9d:b4:7c:6a:44:57:ce:ec:b3:c4:47:39:6d:8b:8a:bf: 2e:5d:61:22:de:b3:1a:c0:28:9d:19:91:d9:d2:9b:e9:f3:01: 3a:73:0c:5b:32:f4:e3:96:c8:14:57:39:18:d1:91:1d:ed:87: d6:ed:5e:be:ef:91:d9:42:62:c0:9b:99:69:8d:02:2d:e6:cb: 20:af:ad:9e:0b:bb:7d:9c:77:b1:8b:48:e3:96:df:08:98:87: 3d:b6:fa:d3:52:e7:52:ec:34:64:9a:8b:aa:db:11:5a:fb:27: 41:8c:17:b3:dd:a6:4a:2a:00:87:32:05:b8:92:e9:cc:5e:01: b0:46:c8:ea:8d:b4:1c:ed:4a:3d:3e:ff:34:f4:f2:81:35:f0: 69:c3:10:42:69:f8:51:cc:e2:a8:5e:f8:fc:dc:b1:6d:26:fe: c9:a6:4c:d3:4b:90:d0:8f:61:00:62:68:c0:d3:40:9c:d3:1b: 87:7b:b7:6f:03:bc:0e:42:af:3f:a9:af:4f:dd:df:f9:b7:0b: 38:f8:c5:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE50z3j1QV50lSUP4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcxMDIxMDAxMloXDTI2MTAwODIxMDAxMlowLzEtMCsGA1UEAxMk YmZhZTY4ZTctMWQyOS00N2YyLWJjMzQtYmJmYmJjNmZlNDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ5WS0NNZfkPpu84LHJeUcLbb/Skjc4mLIT7 IEnpAm6kTDjpS2TdUC2kkiXsNf0Zpw5Zau6alZMZg6gWanXgcDYxHfzUBgl+DE6q +P196Ydkdad+zFUUpOADVWY0UyU3ErQ3GnzaHSNJNZ+0JXE5CiJhoYq/4/QxuAkA k46vQ6sXH4kDo9+EKJGA0qw8I5vrQQ5shxWaM8sfavlF/K0qdxkU6A2g6RTuth+u sXu3KfbUcLrN4iruTpvSAMw51kwXyXc8Sx3isaFb1ukkz+T9Gsspml8QKOlpU6QE HRjeXv7MCoq0Z0nFV2Vw17kH9B+jv4VMBsfz82b25saFqAWS4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObbgGmUjtKw2EIdxWkRdZm7oGuFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjQzMGVmZjMtNjAyNS0z MjhlLTliNDctNzQwZDk4NGE4M2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMVMSScOwoaVsg2USH80hbzDigDrUnik8Y4OG2nCRMfsXVYLtYk61oC XgDn5MvvTpu1JmmEZjRXnbR8akRXzuyzxEc5bYuKvy5dYSLesxrAKJ0ZkdnSm+nz ATpzDFsy9OOWyBRXORjRkR3th9btXr7vkdlCYsCbmWmNAi3myyCvrZ4Lu32cd7GL SOOW3wiYhz22+tNS51LsNGSai6rbEVr7J0GMF7PdpkoqAIcyBbiS6cxeAbBGyOqN tBztSj0+/zT08oE18GnDEEJp+FHM4qhe+PzcsW0m/smmTNNLkNCPYQBiaMDTQJzT G4d7t28DvA5Crz+pr0/d3/m3Czj4xWQ= -----END CERTIFICATE-----Generated at Fri Jul 24 03:24:36 2026 by rpki-client