$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caf090ec-a1b2-31ee-8699-62c9bbebe17e.roa File: caf090ec-a1b2-31ee-8699-62c9bbebe17e.roa (raw, json) Hash identifier: 8TjEJkVgoSiEATjsAbG29L6Z+lQ2DzTVxat1G7tMDZU= Subject key identifier: D9:D9:21:D6:0B:9B:AF:C4:64:B7:5D:1B:E2:5E:AD:14:CB:D2:50:92 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E74CF7986098D5A2FE3A27400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caf090ec-a1b2-31ee-8699-62c9bbebe17e.roa Signing time: Fri 10 Jul 2026 21:00:12 +0000 ROA not before: Fri 10 Jul 2026 21:00:12 +0000 ROA not after: Thu 08 Oct 2026 21:00:12 +0000 asID: 22547 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:74:cf:79:86:09:8d:5a:2f:e3:a2:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 21:00:12 2026 GMT Not After : Oct 8 21:00:12 2026 GMT Subject: CN=383d008c-ba65-4842-9943-54eca638c319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:23:e2:96:30:bc:e5:b2:e7:86:c7:43:b3:b9: 24:9b:0f:b3:37:be:1a:8f:29:25:a2:2f:3f:2c:3d: 9d:74:a1:e1:e8:21:d6:30:fb:2b:e1:1b:ee:ec:be: 42:bb:a4:f6:de:7c:31:80:7e:24:92:e1:48:bd:13: d0:b3:20:79:99:85:c1:eb:1b:b7:fe:f2:a8:18:a0: 65:a8:ef:f1:7b:62:e5:07:58:25:50:05:46:83:c5: 2b:6c:09:5e:3f:54:0e:cd:8c:9e:33:f8:fe:04:0e: 4a:5d:2d:20:32:cc:14:09:71:ab:c5:17:b5:f6:7c: c9:e5:bb:04:c1:4a:48:ec:51:09:1b:fe:f0:78:75: 0c:07:42:8b:04:dc:5c:89:95:1a:9a:05:a4:64:58: 25:eb:c1:8e:19:90:11:d7:91:ff:2d:d9:77:f2:70: ae:28:eb:0c:8f:db:35:2d:21:1b:89:ea:90:f8:5a: 22:04:c7:30:50:d6:25:31:9a:87:40:57:e4:74:12: 21:b2:83:8d:3d:34:49:4d:b5:dc:4b:79:dd:a3:e3: 03:8a:40:5a:ad:db:20:77:54:52:b0:91:4c:3b:2b: 7f:b8:ca:01:6d:10:c4:65:20:6c:5e:0d:4c:41:3a: 63:9d:6b:f1:be:df:ca:34:98:8d:d8:11:64:a8:17: e8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D9:21:D6:0B:9B:AF:C4:64:B7:5D:1B:E2:5E:AD:14:CB:D2:50:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caf090ec-a1b2-31ee-8699-62c9bbebe17e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:89:ff:13:a2:ef:d8:ac:57:0b:94:ba:60:c3:0b:66:a2:f3: 29:46:c6:dd:79:97:4a:1c:9a:67:4d:f2:85:cf:2d:24:62:42: 41:74:0e:ed:91:72:86:61:03:28:cc:23:d6:cb:6b:6a:4c:d2: 6f:61:93:db:c3:05:70:92:08:ff:ca:db:e3:46:4f:0d:30:f0: 55:36:4e:8a:ba:9c:4d:e6:69:fd:44:2b:f2:ad:36:bf:56:ec: 39:7e:31:88:b1:8a:0a:2c:05:0f:99:39:ec:1c:74:68:da:f5: a8:ab:07:98:1d:b4:28:70:2d:ce:52:a4:ac:86:39:79:6b:6e: 9e:31:ce:6e:ca:c1:e0:fb:63:8d:ea:27:0e:3c:e7:49:92:d3: 82:04:2b:66:fa:1d:09:22:5a:6c:d5:13:45:10:85:84:df:e4: 57:c0:0c:41:2e:9e:ca:02:51:b0:62:e8:e3:bb:92:f9:0f:90: df:a1:57:9e:74:10:6c:0e:16:6a:f4:e3:c5:f0:4e:f9:6a:d8: 18:8b:b0:c0:49:67:4d:14:92:af:89:42:13:93:25:6a:1f:76: 8b:04:ba:a6:8a:12:54:52:29:09:ce:ed:e4:4e:4f:90:3a:a3: af:13:83:df:02:82:a0:fb:e8:28:cf:c8:a3:9f:6b:37:a4:35: ca:c2:b2:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE50z3mGCY1aL+OidAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcxMDIxMDAxMloXDTI2MTAwODIxMDAxMlowLzEtMCsGA1UEAxMk MzgzZDAwOGMtYmE2NS00ODQyLTk5NDMtNTRlY2E2MzhjMzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyPiljC85bLnhsdDs7kkmw+zN74ajykloi8/ LD2ddKHh6CHWMPsr4Rvu7L5Cu6T23nwxgH4kkuFIvRPQsyB5mYXB6xu3/vKoGKBl qO/xe2LlB1glUAVGg8UrbAleP1QOzYyeM/j+BA5KXS0gMswUCXGrxRe19nzJ5bsE wUpI7FEJG/7weHUMB0KLBNxciZUamgWkZFgl68GOGZAR15H/Ldl38nCuKOsMj9s1 LSEbieqQ+FoiBMcwUNYlMZqHQFfkdBIhsoONPTRJTbXcS3ndo+MDikBardsgd1RS sJFMOyt/uMoBbRDEZSBsXg1MQTpjnWvxvt/KNJiN2BFkqBfocwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnZIdYLm6/EZLddG+JerRTL0lCSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2FmMDkwZWMtYTFiMi0z MWVlLTg2OTktNjJjOWJiZWJlMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmJ/xOi79isVwuUumDDC2ai8ylGxt15l0ocmmdN8oXPLSRiQkF0Du2R coZhAyjMI9bLa2pM0m9hk9vDBXCSCP/K2+NGTw0w8FU2Toq6nE3maf1EK/KtNr9W 7Dl+MYixigosBQ+ZOewcdGja9airB5gdtChwLc5SpKyGOXlrbp4xzm7KweD7Y43q Jw4850mS04IEK2b6HQkiWmzVE0UQhYTf5FfADEEunsoCUbBi6OO7kvkPkN+hV550 EGwOFmr048XwTvlq2BiLsMBJZ00Ukq+JQhOTJWofdosEuqaKElRSKQnO7eROT5A6 o68Tg98CgqD76CjPyKOfazekNcrCsnc= -----END CERTIFICATE-----Generated at Fri Jul 24 03:08:07 2026 by rpki-client