$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf69371e-8153-3304-8aaf-8c2a1aac5f18.roa File: cf69371e-8153-3304-8aaf-8c2a1aac5f18.roa (raw, json) Hash identifier: g1ZESENuXv7YMMsjbvFx6AftaF5CFxuou5poitBJnhk= Subject key identifier: 80:43:94:B7:D6:80:EB:77:3F:0E:54:78:8B:A6:7E:C5:AF:CA:2F:B6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D94AE862511228E03716A0380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf69371e-8153-3304-8aaf-8c2a1aac5f18.roa Signing time: Tue 21 Apr 2026 14:12:51 +0000 ROA not before: Tue 21 Apr 2026 14:12:51 +0000 ROA not after: Mon 20 Jul 2026 14:12:51 +0000 asID: 396575 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:ae:86:25:11:22:8e:03:71:6a:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 21 14:12:51 2026 GMT Not After : Jul 20 14:12:51 2026 GMT Subject: CN=c32b4b49-cf3d-4fcf-aec4-4cc197e24d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:95:b4:c5:73:5d:89:f6:d5:22:e4:dd:ad:ab: 51:9a:2e:21:68:08:b3:81:a9:57:98:26:99:55:49: 56:de:eb:2e:b8:b8:c5:6c:7d:59:cb:63:ca:01:f9: 08:34:c5:85:76:5a:7c:72:50:09:8e:d3:9f:08:72: 6d:54:02:85:5b:b1:a6:de:d5:be:61:f7:a7:96:d1: 1c:97:76:d3:02:22:56:c0:46:df:36:5f:4e:84:ae: 94:b1:53:42:cf:eb:aa:2e:fc:60:1f:cd:ab:4e:74: d6:7b:88:b1:8b:32:bc:f7:a5:15:f7:fa:be:06:c8: da:a2:1a:12:d0:e4:d4:01:12:48:36:c4:39:41:e0: f7:a5:4e:43:8c:4d:e2:87:0e:2a:09:2c:28:60:09: df:bb:88:4e:31:84:ce:93:83:93:d9:2a:c7:77:6c: 42:a2:21:47:d2:cc:b1:11:a1:c5:40:04:83:4d:f7: b9:56:63:e0:25:3e:77:d3:60:90:4d:81:a1:21:07: f0:bc:9c:97:d2:5f:2a:e7:09:61:10:09:62:8d:a9: 48:76:db:d9:58:c7:56:a8:f5:00:0b:28:62:04:09: a9:49:8a:70:1a:09:40:d4:6e:f5:5f:3a:3d:cf:be: b9:b9:9d:52:71:25:93:20:84:af:f7:86:34:c7:28: a0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:43:94:B7:D6:80:EB:77:3F:0E:54:78:8B:A6:7E:C5:AF:CA:2F:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf69371e-8153-3304-8aaf-8c2a1aac5f18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:e9:aa:eb:d8:ac:86:06:2d:4c:f0:d3:13:5c:84:99:bd:5e: 68:45:2c:14:39:59:48:9d:8d:76:1c:f2:82:2c:dc:52:01:f8: 7e:21:f5:f7:dc:43:ce:64:bd:24:05:2c:98:9b:7a:e0:62:84: 9d:8c:08:76:7f:90:38:13:0c:15:8b:bd:8c:82:45:4c:14:e3: a3:b1:de:90:38:ed:0b:02:80:c0:33:b2:54:8b:98:ea:7c:35: c3:aa:a3:bc:a3:fe:c2:53:82:a0:e5:eb:36:8d:bb:9d:3a:b4: ff:ed:f6:f6:91:63:e4:e4:20:55:cb:62:e2:94:8d:90:88:02: 09:20:2b:a8:f4:b8:8d:00:06:29:93:e3:12:08:64:9b:89:37: 0f:f8:f1:0b:40:dd:b2:c2:ee:5c:d2:9e:89:31:d2:70:c4:5e: 7c:8a:f9:c5:f6:2d:53:3c:c4:93:36:99:35:76:e6:f6:71:de: 6a:ea:1a:88:8d:dc:2b:5c:fa:25:ca:48:1a:bd:7c:d6:12:ad: c3:76:b5:ce:d8:95:0b:95:7c:94:a7:e5:3a:ca:78:82:1f:c7: d3:39:22:03:50:53:d8:aa:ab:64:57:9f:7e:cb:c0:27:92:99: 26:ea:4d:d2:88:38:08:fe:94:cc:be:54:4b:b5:a9:6b:b0:89: 26:73:b9:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2UroYlESKOA3FqA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMTE0MTI1MVoXDTI2MDcyMDE0MTI1MVowLzEtMCsGA1UEAxMk YzMyYjRiNDktY2YzZC00ZmNmLWFlYzQtNGNjMTk3ZTI0ZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpW0xXNdifbVIuTdratRmi4haAizgalXmCaZ VUlW3usuuLjFbH1Zy2PKAfkINMWFdlp8clAJjtOfCHJtVAKFW7Gm3tW+YfenltEc l3bTAiJWwEbfNl9OhK6UsVNCz+uqLvxgH82rTnTWe4ixizK896UV9/q+BsjaohoS 0OTUARJINsQ5QeD3pU5DjE3ihw4qCSwoYAnfu4hOMYTOk4OT2SrHd2xCoiFH0syx EaHFQASDTfe5VmPgJT5302CQTYGhIQfwvJyX0l8q5wlhEAlijalIdtvZWMdWqPUA CyhiBAmpSYpwGglA1G71Xzo9z765uZ1ScSWTIISv94Y0xyigtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBDlLfWgOt3Pw5UeIumfsWvyi+2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Y2OTM3MWUtODE1My0z MzA0LThhYWYtOGMyYTFhYWM1ZjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLpquvYrIYGLUzw0xNchJm9XmhFLBQ5WUidjXYc8oIs3FIB+H4h9ffc Q85kvSQFLJibeuBihJ2MCHZ/kDgTDBWLvYyCRUwU46Ox3pA47QsCgMAzslSLmOp8 NcOqo7yj/sJTgqDl6zaNu506tP/t9vaRY+TkIFXLYuKUjZCIAgkgK6j0uI0ABimT 4xIIZJuJNw/48QtA3bLC7lzSnokx0nDEXnyK+cX2LVM8xJM2mTV25vZx3mrqGoiN 3Ctc+iXKSBq9fNYSrcN2tc7YlQuVfJSn5TrKeIIfx9M5IgNQU9iqq2RXn37LwCeS mSbqTdKIOAj+lMy+VEu1qWuwiSZzuVM= -----END CERTIFICATE-----Generated at Wed May 13 04:16:57 2026 by rpki-client