$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d333043c-1ce5-3d53-9bec-7c7bf35e970d.roa File: d333043c-1ce5-3d53-9bec-7c7bf35e970d.roa (raw, json) Hash identifier: WNyGeKbYeaC7f3RYty85XPKGE1XTum7h4p7AGaLguYA= Subject key identifier: 5E:C2:1F:DE:DA:A8:10:49:4D:2A:1A:4F:CA:3A:7F:07:E1:AF:EB:1A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D94AE83D855CF202637843C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d333043c-1ce5-3d53-9bec-7c7bf35e970d.roa Signing time: Tue 21 Apr 2026 14:12:50 +0000 ROA not before: Tue 21 Apr 2026 14:12:50 +0000 ROA not after: Mon 20 Jul 2026 14:12:50 +0000 asID: 36619 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:ae:83:d8:55:cf:20:26:37:84:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 21 14:12:50 2026 GMT Not After : Jul 20 14:12:50 2026 GMT Subject: CN=2fba86fe-8167-4a8c-85fd-3a55a28ec46a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:83:56:cb:65:14:76:e1:c9:e1:3e:1f:bc:7f: 22:b2:03:26:66:e9:96:b6:45:ee:ec:bc:79:ea:36: b4:78:e2:43:02:6c:f8:f3:2b:fa:75:a0:8a:e8:91: de:43:17:49:6b:a9:3b:de:42:c1:5e:9e:24:e1:fe: fd:a1:03:e7:34:3d:c5:9d:11:ed:a7:be:0e:0c:64: d3:a7:bd:84:cf:fb:01:52:5b:8e:af:f1:28:59:a6: f9:25:56:67:07:d5:87:33:50:0a:50:b8:8c:d1:d1: ea:f3:46:e4:2c:b6:3d:c0:3f:44:f7:7a:ad:d6:f2: 8d:42:54:b7:94:42:95:13:c0:d0:20:67:89:a2:24: 51:cd:96:45:df:90:3b:08:70:d5:ad:29:b8:98:cf: 2c:bd:c8:10:c8:a6:d2:54:7e:c2:31:97:77:03:58: 41:c8:4d:a1:3b:9f:24:a4:69:5b:a5:b8:82:b7:ce: 53:93:40:3a:4c:d5:fb:a8:87:4f:52:fa:2c:50:07: 58:66:0d:5c:fa:6b:62:e4:41:4d:38:ad:9a:71:91: 67:9d:4f:bd:ea:13:83:a7:07:6d:14:77:ee:68:b7: 8b:fc:e7:07:c5:0e:1d:49:3e:79:11:a9:c7:bb:0e: 8e:86:31:c5:04:53:c8:dd:48:a1:c5:c2:d7:67:57: d9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C2:1F:DE:DA:A8:10:49:4D:2A:1A:4F:CA:3A:7F:07:E1:AF:EB:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d333043c-1ce5-3d53-9bec-7c7bf35e970d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:11:c2:5a:96:4e:77:14:4f:83:e5:62:12:5a:f3:96:dd:4f: 63:61:5e:dd:b7:c4:b4:23:a6:13:f5:f0:e1:03:59:6b:90:47: 61:18:76:7b:99:93:25:97:c7:6c:89:f5:63:cc:53:39:f7:25: 44:d2:0e:4a:04:36:7f:16:fb:d1:d2:56:b6:f7:5e:92:a4:aa: 09:d2:1b:68:e8:1c:03:82:82:c1:50:98:52:80:64:72:ef:4c: 31:1c:ae:97:62:9a:03:44:cc:41:98:c3:31:14:bf:70:80:c0: 21:eb:1c:27:dd:6d:28:68:12:94:f5:dd:f5:a0:5b:4e:58:31: 2c:73:89:6a:e6:36:c4:fd:9f:97:75:2a:d1:8f:de:34:ba:eb: e5:23:77:aa:26:f4:cc:42:41:41:96:a3:f7:c4:2a:1e:7f:8a: 09:94:94:b6:04:a6:ea:a5:59:81:d4:bb:22:5e:06:7b:24:b3: f8:d1:56:3f:d4:c6:e1:2e:97:a6:ee:38:6c:2d:3e:ec:76:23: b4:de:07:e4:0a:4d:d2:b7:b7:c6:fb:24:e2:18:53:e6:cf:3f: 83:3c:b8:ec:38:29:93:c6:f6:0d:9c:18:75:fa:ca:ba:58:d2: 0e:25:07:c5:fc:f5:7d:c4:14:c6:ca:e3:cb:64:0b:29:83:92: 9f:77:20:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2UroPYVc8gJjeEPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMTE0MTI1MFoXDTI2MDcyMDE0MTI1MFowLzEtMCsGA1UEAxMk MmZiYTg2ZmUtODE2Ny00YThjLTg1ZmQtM2E1NWEyOGVjNDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4NWy2UUduHJ4T4fvH8isgMmZumWtkXu7Lx5 6ja0eOJDAmz48yv6daCK6JHeQxdJa6k73kLBXp4k4f79oQPnND3FnRHtp74ODGTT p72Ez/sBUluOr/EoWab5JVZnB9WHM1AKULiM0dHq80bkLLY9wD9E93qt1vKNQlS3 lEKVE8DQIGeJoiRRzZZF35A7CHDVrSm4mM8svcgQyKbSVH7CMZd3A1hByE2hO58k pGlbpbiCt85Tk0A6TNX7qIdPUvosUAdYZg1c+mti5EFNOK2acZFnnU+96hODpwdt FHfuaLeL/OcHxQ4dST55EanHuw6OhjHFBFPI3UihxcLXZ1fZYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7CH97aqBBJTSoaT8o6fwfhr+saMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDMzMzA0M2MtMWNlNS0z ZDUzLTliZWMtN2M3YmYzNWU5NzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYRwlqWTncUT4PlYhJa85bdT2NhXt23xLQjphP18OEDWWuQR2EYdnuZ kyWXx2yJ9WPMUzn3JUTSDkoENn8W+9HSVrb3XpKkqgnSG2joHAOCgsFQmFKAZHLv TDEcrpdimgNEzEGYwzEUv3CAwCHrHCfdbShoEpT13fWgW05YMSxziWrmNsT9n5d1 KtGP3jS66+Ujd6om9MxCQUGWo/fEKh5/igmUlLYEpuqlWYHUuyJeBnsks/jRVj/U xuEul6buOGwtPux2I7TeB+QKTdK3t8b7JOIYU+bPP4M8uOw4KZPG9g2cGHX6yrpY 0g4lB8X89X3EFMbK48tkCymDkp93IA0= -----END CERTIFICATE-----Generated at Wed May 13 02:49:32 2026 by rpki-client