$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc0450cb-202e-3d94-9d0a-38cd56e86872.roa File: fc0450cb-202e-3d94-9d0a-38cd56e86872.roa (raw, json) Hash identifier: GWeF4Wwepd24DIXinN4NmLS2nnJckuJsA0P8vfqFq8A= Subject key identifier: DD:D2:22:75:3D:D0:25:96:63:26:8D:82:89:C4:D2:CA:88:D5:C6:69 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584FB93BBDCAC1C434293615C9F8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc0450cb-202e-3d94-9d0a-38cd56e86872.roa Signing time: Wed 04 Nov 2026 02:00:13 +0000 ROA not before: Wed 04 Nov 2026 02:00:13 +0000 ROA not after: Tue 02 Feb 2027 02:00:13 +0000 asID: 397199 IP address blocks: 216.87.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b9:3b:bd:ca:c1:c4:34:29:36:15:c9:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 4 02:00:13 2026 GMT Not After : Feb 2 02:00:13 2027 GMT Subject: CN=a0b7ddcc-1806-4648-b1e3-c4b104c6aed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fd:de:d8:79:00:b9:df:22:b2:03:4b:e2:4f: d5:ec:ff:09:4e:73:75:7c:c3:ae:2a:d6:db:24:b3: ae:b8:ac:f9:0a:7f:ba:37:f2:93:d7:e3:4d:da:5b: 6f:55:67:7b:4d:12:2c:13:a7:e6:48:bc:54:b3:fa: 4a:9c:6e:02:cc:b6:0c:b7:f5:7e:ca:1e:d6:ac:da: 15:37:c4:25:ba:9f:1b:e2:0a:37:dc:ef:82:f0:0b: ea:dc:33:c7:83:15:66:a1:5e:dd:e3:83:ba:87:7b: f7:7b:51:6a:f8:d7:2d:f5:fb:98:30:00:24:81:b0: fb:c8:08:6f:26:2e:94:4e:72:05:9a:a5:39:77:82: 82:27:79:04:8a:24:f5:e4:54:7b:43:76:14:c5:cb: dd:1f:01:37:c3:4b:e4:89:74:bd:d0:3b:da:85:da: 26:f6:f9:cb:5c:85:e1:f4:c9:4b:57:7a:2b:2d:22: 81:6e:a8:9b:4a:f4:50:db:71:fb:8b:66:20:48:03: 49:c2:d8:f8:7c:58:3f:97:02:95:1f:42:86:61:bd: 58:76:6f:d6:30:b6:e8:d4:36:47:e0:65:e0:fe:82: 29:dd:ae:04:c7:8c:b1:47:db:fc:1d:d2:10:aa:da: 25:57:ae:ee:53:0b:e5:c6:f7:f3:ff:f8:55:dc:6a: 40:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D2:22:75:3D:D0:25:96:63:26:8D:82:89:C4:D2:CA:88:D5:C6:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc0450cb-202e-3d94-9d0a-38cd56e86872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:34:45:b3:3d:cf:08:70:6c:81:27:57:17:02:b7:47:75:91: df:cc:ed:13:b7:08:d8:76:15:fb:da:4e:08:a9:7e:93:41:b0: 70:f9:67:24:ae:85:bb:85:1d:22:ba:65:8b:ef:33:68:ae:1f: d5:a3:40:62:9b:a7:40:bb:d6:9a:2f:41:bd:e8:1f:3e:f0:b1: 27:d3:25:ca:84:53:c7:8c:42:8b:35:29:cc:1f:f7:a7:6a:de: 11:c2:75:fd:7c:5e:8f:21:c7:c9:c1:43:e1:e9:51:59:4f:3a: f8:e1:74:3b:83:93:da:53:34:aa:27:4c:84:08:9b:4e:95:4f: 4f:57:be:ec:e1:04:c8:d5:d7:97:76:f4:21:e7:98:c3:cc:ab: 3a:39:71:9d:21:79:e1:32:54:0e:6b:a0:55:48:b1:1a:c0:42: 03:7d:9f:fa:2c:21:ab:0b:ae:8c:8f:4a:2b:91:12:0f:f3:97: a9:ef:e2:1a:a9:a5:f8:56:11:cb:5b:a2:24:06:81:53:ee:b2: da:6b:07:5d:5f:ee:5d:71:6a:da:ba:81:2c:cc:e4:c8:8a:a3: bd:28:38:5d:fc:7d:0d:39:39:07:d3:a3:f7:46:97:7d:c4:f5: 31:68:c3:32:92:fc:3d:26:64:3d:7b:90:d8:af:fd:21:d4:bc: 27:67:b1:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+5O73KwcQ0KTYVyfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTEwNDAyMDAxM1oXDTI3MDIwMjAyMDAxM1owLzEtMCsGA1UEAxMk YTBiN2RkY2MtMTgwNi00NjQ4LWIxZTMtYzRiMTA0YzZhZWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf3e2HkAud8isgNL4k/V7P8JTnN1fMOuKtbb JLOuuKz5Cn+6N/KT1+NN2ltvVWd7TRIsE6fmSLxUs/pKnG4CzLYMt/V+yh7WrNoV N8Qlup8b4go33O+C8Avq3DPHgxVmoV7d44O6h3v3e1Fq+Nct9fuYMAAkgbD7yAhv Ji6UTnIFmqU5d4KCJ3kEiiT15FR7Q3YUxcvdHwE3w0vkiXS90Dvahdom9vnLXIXh 9MlLV3orLSKBbqibSvRQ23H7i2YgSANJwtj4fFg/lwKVH0KGYb1Ydm/WMLbo1DZH 4GXg/oIp3a4Ex4yxR9v8HdIQqtolV67uUwvlxvfz//hV3GpAmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3SInU90CWWYyaNgonE0sqI1cZpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmMwNDUwY2ItMjAyZS0z ZDk0LTlkMGEtMzhjZDU2ZTg2ODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHE0RbM9zwhwbIEnVxcCt0d1kd/M7RO3CNh2FfvaTgipfpNBsHD5ZySu hbuFHSK6ZYvvM2iuH9WjQGKbp0C71povQb3oHz7wsSfTJcqEU8eMQos1Kcwf96dq 3hHCdf18Xo8hx8nBQ+HpUVlPOvjhdDuDk9pTNKonTIQIm06VT09XvuzhBMjV15d2 9CHnmMPMqzo5cZ0heeEyVA5roFVIsRrAQgN9n/osIasLroyPSiuREg/zl6nv4hqp pfhWEctboiQGgVPustprB11f7l1xatq6gSzM5MiKo70oOF38fQ05OQfTo/dGl33E 9TFowzKS/D0mZD17kNiv/SHUvCdnsZY= -----END CERTIFICATE-----Generated at Sun Nov 15 21:16:38 2026 by rpki-client