$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/18792aa5-f8a0-34fd-af64-001b6f6efda1.roa File: 18792aa5-f8a0-34fd-af64-001b6f6efda1.roa (raw, json) Hash identifier: 8tjZ4Gp5IrbjRygLGzpmuBnqzqAeehJ1Bu4blQad6sg= Subject key identifier: 14:89:34:58:BC:7C:7D:58:1E:F0:06:0B:CE:EB:55:96:AD:62:98:81 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F63F82A07366DAC4449273D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/18792aa5-f8a0-34fd-af64-001b6f6efda1.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 32651 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:2a:07:36:6d:ac:44:49:27:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=1cf7557d-fe9c-42f1-97cc-0aad278a2b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7c:46:88:d0:33:97:fd:e6:f3:23:66:12:f7: 42:07:08:29:30:00:f5:03:df:7f:e3:05:59:a3:b1: 00:92:65:eb:7a:50:31:c9:d3:86:51:e1:10:e4:36: 6f:6c:75:18:c9:a6:99:a1:27:ed:85:38:90:ad:67: 88:2d:eb:04:38:c9:d8:3f:4e:a0:35:1c:c1:f5:34: 0c:b6:58:eb:bc:c9:cc:ef:57:b3:3e:33:de:19:b4: 58:06:55:a5:6e:40:19:6e:b0:f0:af:59:c8:2b:94: 35:f9:b1:29:d6:4e:5c:16:5e:ab:2a:16:c5:66:85: 18:80:4c:8e:75:bb:d4:ed:24:46:96:cd:25:81:05: 8f:6b:fa:ee:23:71:25:ba:33:b9:61:8a:be:c0:b3: 25:cc:ed:ad:71:bc:63:f1:93:ba:fc:52:36:88:51: 5b:c1:8d:be:97:86:7e:ee:7c:bb:e4:e9:30:d6:69: 80:8a:7e:03:44:96:ff:15:99:4d:61:af:88:7c:65: 9a:51:08:a8:a3:5d:67:b2:2f:3c:b2:16:f1:73:07: f6:db:15:10:d3:c1:d4:97:03:4b:44:d7:c7:b2:7f: 86:65:ae:38:a9:ba:39:72:52:65:a2:2a:42:b5:88: 33:f9:f4:a5:74:68:00:a1:62:2c:4d:d6:89:4f:06: 4f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:89:34:58:BC:7C:7D:58:1E:F0:06:0B:CE:EB:55:96:AD:62:98:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/18792aa5-f8a0-34fd-af64-001b6f6efda1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:a6:19:38:fb:9f:82:cb:5e:7a:c3:e1:1d:88:c8:73:df:80: 73:26:6b:c5:28:d9:07:2f:29:f2:a2:22:4c:3d:37:2d:30:82: 68:a4:b3:b6:79:4b:7b:77:46:23:aa:cf:f0:52:aa:cd:34:a5: e4:01:7f:4d:f9:3d:56:e9:33:d8:9a:df:82:3d:77:6d:c7:03: c7:db:80:51:c3:0c:c6:8c:bc:fe:7f:c3:e9:d1:5f:10:33:ef: 52:66:44:dd:bb:ca:d0:a3:21:03:9a:5f:ab:73:9c:b0:a6:04: c6:0b:91:31:11:32:00:ad:1d:6b:f2:61:48:a1:68:db:52:3d: 0a:2b:0e:d2:d8:60:56:1d:93:e7:bc:43:0a:76:72:f7:88:fd: a7:ca:23:a8:51:74:e9:00:4f:41:03:df:6d:01:8f:bb:ac:b1: fe:3a:a3:7d:98:41:f9:1b:51:b6:c2:1d:ed:3f:3e:7b:4d:9b: aa:f6:2f:65:26:e9:80:7c:eb:19:2d:8a:55:b6:d2:2f:4c:ac: bb:27:59:95:1b:dd:db:ea:bd:63:fd:22:cc:df:4b:c3:9e:9e: 63:5a:ae:70:02:56:eb:2c:27:f8:c1:c0:62:f0:72:ad:84:92: f1:8f:2d:43:37:68:e6:19:d3:f6:1e:b7:a7:c3:30:f2:a4:8d: bf:36:c9:5b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9j+CoHNm2sREknPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk MWNmNzU1N2QtZmU5Yy00MmYxLTk3Y2MtMGFhZDI3OGEyYjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXxGiNAzl/3m8yNmEvdCBwgpMAD1A99/4wVZ o7EAkmXrelAxydOGUeEQ5DZvbHUYyaaZoSfthTiQrWeILesEOMnYP06gNRzB9TQM tljrvMnM71ezPjPeGbRYBlWlbkAZbrDwr1nIK5Q1+bEp1k5cFl6rKhbFZoUYgEyO dbvU7SRGls0lgQWPa/ruI3ElujO5YYq+wLMlzO2tcbxj8ZO6/FI2iFFbwY2+l4Z+ 7ny75Okw1mmAin4DRJb/FZlNYa+IfGWaUQioo11nsi88shbxcwf22xUQ08HUlwNL RNfHsn+GZa44qbo5clJloipCtYgz+fSldGgAoWIsTdaJTwZPswIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBSJNFi8fH1YHvAGC87rVZatYpiBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTg3OTJhYTUtZjhhMC0z NGZkLWFmNjQtMDAxYjZmNmVmZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAbphk4+5+Cy156w+EdiMhz34BzJmvFKNkHLynyoiJMPTctMIJopLO2 eUt7d0Yjqs/wUqrNNKXkAX9N+T1W6TPYmt+CPXdtxwPH24BRwwzGjLz+f8Pp0V8Q M+9SZkTdu8rQoyEDml+rc5ywpgTGC5ExETIArR1r8mFIoWjbUj0KKw7S2GBWHZPn vEMKdnL3iP2nyiOoUXTpAE9BA99tAY+7rLH+OqN9mEH5G1G2wh3tPz57TZuq9i9l JumAfOsZLYpVttIvTKy7J1mVG93b6r1j/SLM30vDnp5jWq5wAlbrLCf4wcBi8HKt hJLxjy1DN2jmGdP2HrenwzDypI2/Nslb -----END CERTIFICATE-----Generated at Tue Oct 6 18:37:58 2026 by rpki-client