$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/25263d43-e7be-3f96-8118-9c588cf79d04.roa File: 25263d43-e7be-3f96-8118-9c588cf79d04.roa (raw, json) Hash identifier: An1Xmqu2pKN5dxGMk437l6VGbEGNosV2CLddcpvGpuk= Subject key identifier: E3:12:28:06:54:BF:14:C9:A9:C2:82:4B:0D:7E:6B:58:88:DB:12:2D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F63F827951EA2A8806C23F880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/25263d43-e7be-3f96-8118-9c588cf79d04.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 396609 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:27:95:1e:a2:a8:80:6c:23:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=ff8f7ece-a7f2-4b08-979d-d4206bbc9643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:79:83:da:85:e8:42:87:b1:a9:31:cf:2d:69: 38:10:33:9e:6f:91:84:11:17:b0:d4:bc:3a:11:40: 7e:c0:a8:b3:24:d0:e6:3a:7d:e8:9e:1e:0f:a5:7e: fb:f5:1e:06:da:af:46:da:3a:1e:05:b9:1a:bd:05: bb:e5:13:78:7c:4a:9f:52:3f:71:ba:b7:49:79:99: b6:b1:da:5d:ed:5f:02:84:90:04:40:81:0e:4b:c3: b2:2e:d1:2a:63:d8:7f:aa:0f:2e:47:62:96:ab:ee: 1a:74:5c:b7:35:88:0c:ee:e4:4e:3a:d4:1a:70:a2: b9:ea:e1:15:5b:1c:65:10:61:ef:d5:17:ae:5a:c9: a3:9c:96:72:e6:cf:1c:20:d0:b9:29:93:bf:07:c5: 8c:3e:f6:00:46:2d:7b:7d:d7:2d:ea:ce:9a:ea:51: a4:5f:27:60:e5:1c:ae:79:e9:42:7e:e6:6f:e5:8e: 5f:83:5f:35:66:92:a3:4c:ca:f6:0e:a7:a3:c2:28: 52:eb:c9:bf:a6:6f:14:42:9d:22:69:9c:b5:40:c9: 9e:62:9b:65:cd:14:42:4d:b8:8b:9e:35:41:1d:07: 1f:23:b8:4a:ca:c3:12:71:02:b9:c7:3b:6a:e0:0f: ee:2e:9c:1e:a7:7d:c6:fb:c6:f0:da:e1:c9:b9:c9: 9f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:12:28:06:54:BF:14:C9:A9:C2:82:4B:0D:7E:6B:58:88:DB:12:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/25263d43-e7be-3f96-8118-9c588cf79d04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:00:4e:70:cd:14:a1:78:dc:02:a9:bc:2f:43:09:8e:26:40: 46:6c:87:d5:39:35:6d:8a:a5:98:33:54:4f:04:1f:db:63:2f: a1:50:66:bd:3a:d0:b6:e6:86:84:d2:3e:11:0c:93:d9:56:12: 11:f5:01:74:f6:ac:63:f9:12:1e:04:0e:9d:6e:42:06:fd:96: 86:20:a9:0a:31:fd:0a:bf:f4:dd:23:e2:49:76:55:d1:e6:41: 2e:19:81:35:55:40:52:2e:76:e5:b1:0d:33:35:2b:08:07:fd: 24:99:4f:f3:21:19:7e:6a:0c:22:22:30:73:b5:c9:4d:b9:38: 18:61:bc:8b:db:a5:54:07:b3:a9:52:d4:d5:3b:2a:52:cb:4c: e1:2d:40:69:b6:4c:28:5e:ca:2a:c0:a3:58:f0:4b:be:9a:f0: 3c:95:2f:1f:19:94:4d:a4:ff:3c:6e:a2:89:22:94:33:0e:19: 3b:35:ec:aa:bf:d1:d3:5e:55:5a:2c:45:38:be:22:1b:a9:db: 56:37:a0:49:18:6e:a8:c9:6a:79:fc:f7:da:78:11:c8:79:78: 43:cd:27:5f:a0:8b:88:11:db:67:66:80:61:bc:e3:54:f2:f5: 08:a3:9e:ef:6c:cc:83:7d:9e:23:78:cc:19:3f:a1:c6:33:a0: e4:20:b7:b9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9j+CeVHqKogGwj+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk ZmY4ZjdlY2UtYTdmMi00YjA4LTk3OWQtZDQyMDZiYmM5NjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHmD2oXoQoexqTHPLWk4EDOeb5GEERew1Lw6 EUB+wKizJNDmOn3onh4PpX779R4G2q9G2joeBbkavQW75RN4fEqfUj9xurdJeZm2 sdpd7V8ChJAEQIEOS8OyLtEqY9h/qg8uR2KWq+4adFy3NYgM7uROOtQacKK56uEV WxxlEGHv1ReuWsmjnJZy5s8cINC5KZO/B8WMPvYARi17fdct6s6a6lGkXydg5Ryu eelCfuZv5Y5fg181ZpKjTMr2DqejwihS68m/pm8UQp0iaZy1QMmeYptlzRRCTbiL njVBHQcfI7hKysMScQK5xztq4A/uLpwep33G+8bw2uHJucmfNQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOMSKAZUvxTJqcKCSw1+a1iI2xItMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjUyNjNkNDMtZTdiZS0z Zjk2LTgxMTgtOWM1ODhjZjc5ZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAYAE5wzRSheNwCqbwvQwmOJkBGbIfVOTVtiqWYM1RPBB/bYy+hUGa9 OtC25oaE0j4RDJPZVhIR9QF09qxj+RIeBA6dbkIG/ZaGIKkKMf0Kv/TdI+JJdlXR 5kEuGYE1VUBSLnblsQ0zNSsIB/0kmU/zIRl+agwiIjBztclNuTgYYbyL26VUB7Op UtTVOypSy0zhLUBptkwoXsoqwKNY8Eu+mvA8lS8fGZRNpP88bqKJIpQzDhk7Neyq v9HTXlVaLEU4viIbqdtWN6BJGG6oyWp5/PfaeBHIeXhDzSdfoIuIEdtnZoBhvONU 8vUIo57vbMyDfZ4jeMwZP6HGM6DkILe5 -----END CERTIFICATE-----Generated at Tue Oct 6 19:54:46 2026 by rpki-client