$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb6a1037-05a7-34df-aed8-5be3322fa089.roa File: fb6a1037-05a7-34df-aed8-5be3322fa089.roa (raw, json) Hash identifier: qz5hojiZcI9J2Rcdd+WwcV3wEit2Lti1xOaxSDfc5D8= Subject key identifier: 40:0C:0F:5E:AB:87:A1:3D:96:65:A8:93:19:CF:FC:05:E7:44:C7:EE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D94AE83785A8F2FBF91CDD418 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb6a1037-05a7-34df-aed8-5be3322fa089.roa Signing time: Tue 21 Apr 2026 14:12:50 +0000 ROA not before: Tue 21 Apr 2026 14:12:50 +0000 ROA not after: Mon 20 Jul 2026 14:12:50 +0000 asID: 396571 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:ae:83:78:5a:8f:2f:bf:91:cd:d4:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 21 14:12:50 2026 GMT Not After : Jul 20 14:12:50 2026 GMT Subject: CN=bcc0b02a-428a-4a6c-948e-28d2a18619da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2b:96:72:f5:cc:3c:bd:e1:43:cc:d0:b1:df: 6a:f4:e3:84:4a:fc:b7:de:bc:4e:9e:d6:2c:00:11: fa:a1:d9:7a:34:ce:c3:2c:56:e8:94:3b:0b:dc:d3: 63:1c:1f:69:a0:49:79:67:55:ab:ba:42:90:ae:56: c0:fd:db:a2:cb:18:7d:81:72:49:b1:72:b1:d3:9e: 12:18:d9:f9:db:7d:4a:66:e9:a0:d2:7f:a7:92:7e: f5:55:6f:04:e7:91:69:05:b3:f7:cc:98:d9:1a:3e: 7d:86:90:3e:37:e3:9a:51:50:38:b3:5a:2e:1b:5e: da:72:44:c9:56:59:fb:34:05:ec:48:d7:88:99:ef: 94:84:c2:05:1a:88:91:2f:4a:c5:49:a5:f6:c4:e6: 3f:be:6d:e3:11:48:14:4f:ab:d1:2b:a0:6b:91:10: 2a:90:fc:81:f4:23:ed:8b:b4:85:b7:ac:e6:e1:74: 8b:43:74:07:92:3b:7e:5c:ee:99:46:81:f8:bf:f9: 54:ad:9f:c6:5e:39:c8:d4:d0:1a:5f:a8:1f:09:28: bd:c0:35:3f:3b:49:0a:64:bd:ae:e9:88:9b:f6:c5: bf:80:18:56:75:b9:b4:01:dc:f7:76:2a:da:66:80: 2f:48:02:da:12:dd:df:b9:c9:b5:41:8c:c3:d3:dc: b3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0C:0F:5E:AB:87:A1:3D:96:65:A8:93:19:CF:FC:05:E7:44:C7:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb6a1037-05a7-34df-aed8-5be3322fa089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:6f:da:94:9e:a3:4c:ea:96:a9:32:cd:1b:b2:1d:87:c6:4e: ad:44:b5:24:cf:4f:9d:c7:75:8c:78:be:1b:62:23:98:fe:c1: cd:62:7e:03:ac:74:50:df:51:6e:01:f0:ac:86:39:58:1f:c5: 63:ef:5b:f6:f9:ee:53:5a:c1:99:f9:6c:36:70:2c:bd:81:33: 9a:43:43:f4:ae:e9:ee:44:79:27:9f:f2:80:d0:dd:6a:cd:28: e5:53:af:99:a4:f6:1c:f8:8b:81:9f:09:a5:22:da:aa:ca:00: 8b:9c:92:07:d9:88:b4:9a:ee:8d:dc:09:a1:43:c8:c2:05:d2: 68:c0:65:10:81:9f:cb:a6:24:08:49:a2:5d:11:54:6f:41:c5: dd:ce:99:58:ca:f5:9c:68:5f:69:e5:a6:19:28:87:a7:d6:ff: 0b:6c:ea:2b:6e:c8:33:d6:4a:25:27:2e:7a:55:13:3a:14:9d: 67:1c:34:19:db:28:ba:d4:31:49:2d:d3:02:19:12:45:e8:0c: c6:2a:30:2f:d6:f4:e2:2a:99:99:7a:5f:ec:6e:ae:9e:b7:e8: 94:d3:2b:ab:69:b2:d7:cd:57:4c:b5:a7:64:3e:77:1e:d0:4d: 9f:6c:c0:0e:f4:65:c4:04:75:a3:40:41:eb:a7:cc:fb:4c:a5: 39:ec:32:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2UroN4Wo8vv5HN1BgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMTE0MTI1MFoXDTI2MDcyMDE0MTI1MFowLzEtMCsGA1UEAxMk YmNjMGIwMmEtNDI4YS00YTZjLTk0OGUtMjhkMmExODYxOWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCuWcvXMPL3hQ8zQsd9q9OOESvy33rxOntYs ABH6odl6NM7DLFbolDsL3NNjHB9poEl5Z1WrukKQrlbA/duiyxh9gXJJsXKx054S GNn5231KZumg0n+nkn71VW8E55FpBbP3zJjZGj59hpA+N+OaUVA4s1ouG17ackTJ Vln7NAXsSNeIme+UhMIFGoiRL0rFSaX2xOY/vm3jEUgUT6vRK6BrkRAqkPyB9CPt i7SFt6zm4XSLQ3QHkjt+XO6ZRoH4v/lUrZ/GXjnI1NAaX6gfCSi9wDU/O0kKZL2u 6Yib9sW/gBhWdbm0Adz3diraZoAvSALaEt3fucm1QYzD09yzqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAMD16rh6E9lmWokxnP/AXnRMfuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmI2YTEwMzctMDVhNy0z NGRmLWFlZDgtNWJlMzMyMmZhMDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZv2pSeo0zqlqkyzRuyHYfGTq1EtSTPT53HdYx4vhtiI5j+wc1ifgOs dFDfUW4B8KyGOVgfxWPvW/b57lNawZn5bDZwLL2BM5pDQ/Su6e5EeSef8oDQ3WrN KOVTr5mk9hz4i4GfCaUi2qrKAIuckgfZiLSa7o3cCaFDyMIF0mjAZRCBn8umJAhJ ol0RVG9Bxd3OmVjK9ZxoX2nlphkoh6fW/wts6ituyDPWSiUnLnpVEzoUnWccNBnb KLrUMUkt0wIZEkXoDMYqMC/W9OIqmZl6X+xurp636JTTK6tpstfNV0y1p2Q+dx7Q TZ9swA70ZcQEdaNAQeunzPtMpTnsMmY= -----END CERTIFICATE-----Generated at Wed May 13 02:59:39 2026 by rpki-client