$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b65e7a1e-56fe-36cd-b550-59ba82de85a1.roa File: b65e7a1e-56fe-36cd-b550-59ba82de85a1.roa (raw, json) Hash identifier: GTaG/51Zr8MiASDWNv5/baAdpCCPAo4jmtafAKeJqE0= Subject key identifier: 7B:45:16:98:4F:C2:30:05:58:F3:37:60:BA:80:A5:54:6B:EA:1F:F7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D94AE83B14F398DE81CC64D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b65e7a1e-56fe-36cd-b550-59ba82de85a1.roa Signing time: Tue 21 Apr 2026 14:12:50 +0000 ROA not before: Tue 21 Apr 2026 14:12:50 +0000 ROA not after: Mon 20 Jul 2026 14:12:50 +0000 asID: 36629 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:ae:83:b1:4f:39:8d:e8:1c:c6:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 21 14:12:50 2026 GMT Not After : Jul 20 14:12:50 2026 GMT Subject: CN=238a9fa7-1a8e-4e2e-9b41-8e674079078c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4e:d2:d0:29:85:64:b8:fe:7d:5d:08:9a:69: bd:aa:b2:99:95:0f:7c:33:30:e8:48:3d:e1:24:57: 71:b2:88:08:cb:99:45:11:2b:9e:7e:3e:6d:ae:31: b3:c0:50:19:ce:40:ad:f6:98:5b:a6:51:75:72:5b: 4d:e2:55:11:9c:50:c3:85:af:d1:3c:72:27:bb:6c: 6c:27:7e:33:0b:78:9a:90:a7:8d:72:24:9f:80:60: 37:11:38:d7:03:40:60:b4:fc:b7:4a:28:f5:97:ad: 5f:ac:33:bf:ec:ae:32:dd:be:71:c1:d1:b2:87:0b: 4d:15:2f:c1:7d:a8:b0:38:58:7c:d5:8e:db:db:5b: ea:63:2a:2c:a3:8b:54:14:6b:ba:4f:fc:2b:64:07: 29:87:4c:37:04:46:f1:51:f0:4e:16:5a:cf:d0:17: a4:73:74:ca:32:38:a5:3a:04:e8:e6:7c:23:28:9d: ff:22:d1:fa:b3:89:8b:ef:b1:9c:e1:84:13:21:82: 79:af:67:fa:82:2a:6d:92:36:27:9e:15:f4:7a:a8: f1:cf:84:96:e0:84:8f:f2:0f:33:76:16:db:54:ab: 52:ca:32:03:71:cb:3b:60:15:ab:78:c4:62:bb:b6: 95:a9:48:bd:e3:3b:b8:08:51:42:da:fb:67:8b:bc: 9f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:45:16:98:4F:C2:30:05:58:F3:37:60:BA:80:A5:54:6B:EA:1F:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b65e7a1e-56fe-36cd-b550-59ba82de85a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:46:c6:b5:13:61:c1:e2:08:65:fd:93:83:a1:32:9d:15:08: 5f:1c:20:b2:ef:7b:58:5f:fe:14:0b:e7:ef:eb:b6:86:6d:60: aa:53:f4:1c:05:f5:06:df:b0:08:41:da:c9:9e:d6:44:e7:81: f5:ee:8f:7b:fa:d1:65:98:75:88:df:03:bb:10:b7:70:f2:b7: f5:57:51:b0:9c:cb:f0:be:59:fa:f1:f1:91:de:25:dc:96:bf: dd:5c:41:4a:5a:1b:b3:ac:62:cd:be:2e:6f:17:0f:e2:d5:75: f1:db:2d:21:73:e0:43:88:99:21:4c:d6:46:17:85:19:fa:e2: 13:c3:87:01:dd:86:e6:da:0c:51:46:41:01:fd:14:bf:bf:66: 8a:52:7f:57:b5:f6:85:f9:59:22:f8:ce:4a:61:48:91:f4:2b: d9:db:47:7d:eb:20:c8:d7:e5:f0:dc:3d:98:58:32:c0:c4:ee: da:0f:a8:95:7c:58:23:5c:7a:98:66:49:29:a1:97:c5:69:d5: 79:06:6d:86:56:01:33:e1:b9:89:4e:8b:4a:13:02:ef:dc:6e: 66:38:48:0f:f8:c0:c7:a5:8a:8e:4c:a9:0b:91:10:f9:1b:45: 23:da:35:db:36:1d:c7:29:94:fe:ec:10:01:1a:7f:48:e4:aa: 31:d7:01:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2UroOxTzmN6BzGTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMTE0MTI1MFoXDTI2MDcyMDE0MTI1MFowLzEtMCsGA1UEAxMk MjM4YTlmYTctMWE4ZS00ZTJlLTliNDEtOGU2NzQwNzkwNzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn07S0CmFZLj+fV0Immm9qrKZlQ98MzDoSD3h JFdxsogIy5lFESuefj5trjGzwFAZzkCt9phbplF1cltN4lURnFDDha/RPHInu2xs J34zC3iakKeNciSfgGA3ETjXA0BgtPy3Sij1l61frDO/7K4y3b5xwdGyhwtNFS/B faiwOFh81Y7b21vqYyoso4tUFGu6T/wrZAcph0w3BEbxUfBOFlrP0Bekc3TKMjil OgTo5nwjKJ3/ItH6s4mL77Gc4YQTIYJ5r2f6giptkjYnnhX0eqjxz4SW4ISP8g8z dhbbVKtSyjIDccs7YBWreMRiu7aVqUi94zu4CFFC2vtni7yfTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtFFphPwjAFWPM3YLqApVRr6h/3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjY1ZTdhMWUtNTZmZS0z NmNkLWI1NTAtNTliYTgyZGU4NWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdGxrUTYcHiCGX9k4OhMp0VCF8cILLve1hf/hQL5+/rtoZtYKpT9BwF 9QbfsAhB2sme1kTngfXuj3v60WWYdYjfA7sQt3Dyt/VXUbCcy/C+Wfrx8ZHeJdyW v91cQUpaG7OsYs2+Lm8XD+LVdfHbLSFz4EOImSFM1kYXhRn64hPDhwHdhubaDFFG QQH9FL+/ZopSf1e19oX5WSL4zkphSJH0K9nbR33rIMjX5fDcPZhYMsDE7toPqJV8 WCNcephmSSmhl8Vp1XkGbYZWATPhuYlOi0oTAu/cbmY4SA/4wMelio5MqQuREPkb RSPaNds2HccplP7sEAEaf0jkqjHXAfI= -----END CERTIFICATE-----Generated at Wed May 13 04:00:02 2026 by rpki-client