$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d333043c-1ce5-3d53-9bec-7c7bf35e970d.roa File: d333043c-1ce5-3d53-9bec-7c7bf35e970d.roa (raw, json) Hash identifier: 9U0OdkYX5VR6fvcrBwHDBl9mxydY6YfollXLFC7uOEw= Subject key identifier: 9E:23:23:73:65:0E:A6:2D:84:37:E2:27:DD:BC:2C:99:DD:00:B3:86 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584FB93BC00036DC51D8552E0E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d333043c-1ce5-3d53-9bec-7c7bf35e970d.roa Signing time: Wed 04 Nov 2026 02:00:13 +0000 ROA not before: Wed 04 Nov 2026 02:00:13 +0000 ROA not after: Tue 02 Feb 2027 02:00:13 +0000 asID: 36619 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b9:3b:c0:00:36:dc:51:d8:55:2e:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 4 02:00:13 2026 GMT Not After : Feb 2 02:00:13 2027 GMT Subject: CN=95e8d9de-08d9-4f3f-8e4b-86a1b51e58b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1e:e4:48:e5:eb:ab:2b:8a:c9:2b:48:6e:0d: f5:02:ff:52:f6:32:85:af:c1:48:59:00:23:0f:c5: 22:55:2b:af:29:85:3e:9b:2a:2d:51:d4:da:f6:5d: b4:5d:d3:53:92:06:95:10:89:29:30:1f:6c:24:9f: fe:1f:df:d7:df:1e:79:26:74:ac:88:01:73:64:b4: 8e:18:db:40:2c:49:f1:71:3f:45:08:77:35:39:e3: 6b:c2:89:0c:8b:6e:50:85:52:66:67:12:d1:39:d7: 2b:05:fe:bc:04:90:60:c0:0b:23:5a:8f:b7:77:0f: 3f:f7:de:59:a2:e1:0f:ec:51:c7:b0:9c:0a:c6:f0: 72:2f:bf:39:01:a3:66:f5:1a:b4:1f:a9:01:a7:78: 5f:12:83:4d:90:3c:e8:91:0e:4b:e5:70:eb:1d:8f: 7c:10:05:90:d9:8a:e4:65:ef:a2:b8:d9:a9:59:0b: 22:3e:fe:36:23:a5:e9:25:08:67:1a:90:9b:47:73: 58:ea:0e:d4:cc:89:6b:db:95:c1:7b:42:06:87:8c: 16:a2:73:37:74:b5:a3:b1:47:c9:59:5a:fa:f2:4f: 60:10:7e:f2:60:67:80:d8:ec:f3:0a:d8:e8:22:ab: 2c:1f:b8:cd:b3:3e:fe:6d:11:32:76:44:b2:db:9a: 36:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:23:23:73:65:0E:A6:2D:84:37:E2:27:DD:BC:2C:99:DD:00:B3:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d333043c-1ce5-3d53-9bec-7c7bf35e970d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:56:ed:03:52:e2:1b:3f:25:46:a7:22:32:f7:46:71:19:f2: 10:e5:e3:36:48:bb:04:3a:93:a1:5c:f5:dc:5d:65:5a:eb:c5: 2e:64:2c:45:ad:a6:1d:a2:6f:e7:ca:ed:c5:2b:b4:91:9b:5d: 00:91:08:be:e3:bb:7d:77:4c:5a:91:a2:98:e6:c1:a9:c1:9c: c2:54:83:da:54:49:53:1e:18:11:e8:59:f4:fb:11:7d:c2:fd: 97:0f:50:a3:7c:49:b9:8a:36:49:87:6b:1f:d7:fb:64:7c:0c: 41:53:21:ee:b5:b8:2f:67:f3:b6:82:60:f3:17:d4:69:38:4e: a7:e3:03:55:14:af:4c:f4:5f:9d:37:36:42:fa:83:d1:a9:76: 5e:0d:81:f4:b8:4c:97:c9:15:a7:e9:79:28:ef:e8:ac:7e:57: 77:59:3f:e2:d8:a6:dc:8a:59:f1:9b:f1:92:91:e9:2b:ba:75: 5d:a6:2c:6b:f6:ef:53:54:b8:1a:4c:bb:39:2b:9f:59:72:c5: 72:03:36:19:0c:2f:0d:14:ec:62:09:3e:7c:78:c6:63:a5:9b: 08:83:f5:b1:70:aa:7f:32:b0:cb:2d:34:e6:e3:6b:ee:e0:53: 50:c7:dd:48:71:0b:99:9a:d0:dc:69:ad:f6:58:f5:82:d5:23: 7a:7b:9a:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+5O8AANtxR2FUuDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTEwNDAyMDAxM1oXDTI3MDIwMjAyMDAxM1owLzEtMCsGA1UEAxMk OTVlOGQ5ZGUtMDhkOS00ZjNmLThlNGItODZhMWI1MWU1OGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0x7kSOXrqyuKyStIbg31Av9S9jKFr8FIWQAj D8UiVSuvKYU+myotUdTa9l20XdNTkgaVEIkpMB9sJJ/+H9/X3x55JnSsiAFzZLSO GNtALEnxcT9FCHc1OeNrwokMi25QhVJmZxLROdcrBf68BJBgwAsjWo+3dw8/995Z ouEP7FHHsJwKxvByL785AaNm9Rq0H6kBp3hfEoNNkDzokQ5L5XDrHY98EAWQ2Yrk Ze+iuNmpWQsiPv42I6XpJQhnGpCbR3NY6g7UzIlr25XBe0IGh4wWonM3dLWjsUfJ WVr68k9gEH7yYGeA2OzzCtjoIqssH7jNsz7+bREydkSy25o2RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4jI3NlDqYthDfiJ928LJndALOGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDMzMzA0M2MtMWNlNS0z ZDUzLTliZWMtN2M3YmYzNWU5NzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9W7QNS4hs/JUanIjL3RnEZ8hDl4zZIuwQ6k6Fc9dxdZVrrxS5kLEWt ph2ib+fK7cUrtJGbXQCRCL7ju313TFqRopjmwanBnMJUg9pUSVMeGBHoWfT7EX3C /ZcPUKN8SbmKNkmHax/X+2R8DEFTIe61uC9n87aCYPMX1Gk4TqfjA1UUr0z0X503 NkL6g9Gpdl4NgfS4TJfJFafpeSjv6Kx+V3dZP+LYptyKWfGb8ZKR6Su6dV2mLGv2 71NUuBpMuzkrn1lyxXIDNhkMLw0U7GIJPnx4xmOlmwiD9bFwqn8ysMstNObja+7g U1DH3UhxC5ma0NxprfZY9YLVI3p7mkc= -----END CERTIFICATE-----Generated at Sun Nov 15 20:51:18 2026 by rpki-client