$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa4d7631-2d58-3531-baae-1fe7808f5ced.roa File: fa4d7631-2d58-3531-baae-1fe7808f5ced.roa (raw, json) Hash identifier: b/sntMACpo1+amKQHssOjolE+QoJNjHPL77Hqbw+bdo= Subject key identifier: 19:5C:0B:55:61:AF:64:F9:DB:F6:94:A4:13:9B:13:49:F7:7D:2A:D0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E74CF750F4B6B6B1D8847FB80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa4d7631-2d58-3531-baae-1fe7808f5ced.roa Signing time: Fri 10 Jul 2026 21:00:12 +0000 ROA not before: Fri 10 Jul 2026 21:00:12 +0000 ROA not after: Thu 08 Oct 2026 21:00:12 +0000 asID: 396591 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:74:cf:75:0f:4b:6b:6b:1d:88:47:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 21:00:12 2026 GMT Not After : Oct 8 21:00:12 2026 GMT Subject: CN=21a9aaa1-0def-49c7-8bf6-a58047708a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bd:e0:58:e8:eb:57:28:d8:8a:53:51:c3:7f: ef:a9:5b:cc:51:7f:3f:c6:44:32:37:8b:c9:c0:77: fc:5e:e7:d0:7a:06:32:e7:4d:f4:83:c7:3f:b6:d4: fa:0f:7a:ad:b7:1b:2b:b4:32:f8:f0:b8:b3:64:8a: d7:3d:1f:3d:65:c4:a9:3f:b9:89:3b:e8:65:01:4e: 75:91:3c:4f:61:e8:1a:14:89:b5:31:01:dd:7c:22: 9e:c4:e8:08:d0:54:ae:23:dd:ba:df:7c:70:76:11: 5a:3a:95:da:bf:5c:55:01:85:8d:ba:3b:75:0f:6e: 50:4f:94:05:b6:29:67:11:d7:e4:f5:92:88:85:34: d1:c3:23:de:f7:3d:38:6d:a5:9f:b9:0f:f1:c1:9f: 46:4e:a1:d9:0b:8e:56:af:b0:ae:4d:e7:0e:cb:6e: 7b:dd:b0:39:ec:09:56:39:97:cb:db:1a:1d:07:70: 08:35:71:6a:46:ed:f0:24:9a:67:d7:12:7b:d4:39: e5:a6:fc:66:a5:a8:0f:88:27:c4:89:64:f7:18:79: 03:2a:58:97:44:61:37:6d:7a:12:c7:a5:7e:8e:17: 76:3a:69:3e:80:d1:10:a1:46:b8:18:08:d6:6f:d7: 78:00:6d:59:83:46:95:8d:69:58:a7:37:e8:b3:9e: a2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:5C:0B:55:61:AF:64:F9:DB:F6:94:A4:13:9B:13:49:F7:7D:2A:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa4d7631-2d58-3531-baae-1fe7808f5ced.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e0:ff:5c:ff:6f:60:c2:1e:4f:b4:6b:47:da:51:2a:e6:63: d0:53:73:09:e5:53:f5:01:20:48:be:a9:a9:5d:54:74:52:ba: f1:e4:cd:f0:75:4b:c3:e5:93:42:a7:2c:1b:5a:b9:81:48:51: 91:30:e0:4a:10:aa:35:bb:0d:c0:52:6c:23:9a:6d:44:4c:b3: 30:db:0f:13:e5:f3:4f:e1:d5:1a:72:6d:55:7a:21:ff:0c:56: 40:e0:08:f1:a7:11:f6:f9:a1:c4:89:1f:76:6a:6f:ee:f7:e3: f3:d2:f0:1a:8f:a5:c3:cc:27:89:7a:d1:20:ad:85:0a:e3:f5: 4e:7d:9c:e2:a3:26:92:30:0d:74:a7:ce:2d:02:52:61:09:0f: 20:79:dd:60:0f:86:63:5a:b9:08:15:cc:04:04:aa:2d:be:cb: 97:8f:c2:70:9c:1f:3f:d9:58:67:7e:78:4a:06:5c:69:c1:f8: 7f:0e:94:4f:70:86:9e:3c:83:78:87:e2:d8:14:ba:8c:30:e9: 6a:06:11:73:ae:91:09:74:82:a1:62:10:cd:ee:ff:07:42:bd: d7:cb:88:9c:70:ac:8f:f6:7e:f9:f9:b0:31:bb:36:1f:92:13: 56:1e:e5:4a:3a:c0:12:d0:1d:ba:32:2d:61:b0:75:0e:23:87: 62:bb:28:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE50z3UPS2trHYhH+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcxMDIxMDAxMloXDTI2MTAwODIxMDAxMlowLzEtMCsGA1UEAxMk MjFhOWFhYTEtMGRlZi00OWM3LThiZjYtYTU4MDQ3NzA4YTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb3gWOjrVyjYilNRw3/vqVvMUX8/xkQyN4vJ wHf8XufQegYy5030g8c/ttT6D3qttxsrtDL48LizZIrXPR89ZcSpP7mJO+hlAU51 kTxPYegaFIm1MQHdfCKexOgI0FSuI92633xwdhFaOpXav1xVAYWNujt1D25QT5QF tilnEdfk9ZKIhTTRwyPe9z04baWfuQ/xwZ9GTqHZC45Wr7CuTecOy2573bA57AlW OZfL2xodB3AINXFqRu3wJJpn1xJ71DnlpvxmpagPiCfEiWT3GHkDKliXRGE3bXoS x6V+jhd2Omk+gNEQoUa4GAjWb9d4AG1Zg0aVjWlYpzfos56i1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlcC1Vhr2T52/aUpBObE0n3fSrQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmE0ZDc2MzEtMmQ1OC0z NTMxLWJhYWUtMWZlNzgwOGY1Y2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTg/1z/b2DCHk+0a0faUSrmY9BTcwnlU/UBIEi+qaldVHRSuvHkzfB1 S8Plk0KnLBtauYFIUZEw4EoQqjW7DcBSbCOabURMszDbDxPl80/h1RpybVV6If8M VkDgCPGnEfb5ocSJH3Zqb+734/PS8BqPpcPMJ4l60SCthQrj9U59nOKjJpIwDXSn zi0CUmEJDyB53WAPhmNauQgVzAQEqi2+y5ePwnCcHz/ZWGd+eEoGXGnB+H8OlE9w hp48g3iH4tgUuoww6WoGEXOukQl0gqFiEM3u/wdCvdfLiJxwrI/2fvn5sDG7Nh+S E1Ye5Uo6wBLQHboyLWGwdQ4jh2K7KPI= -----END CERTIFICATE-----Generated at Fri Jul 24 13:08:18 2026 by rpki-client