$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3af75ab3-84a4-3e81-96c9-79648513a39c.roa File: 3af75ab3-84a4-3e81-96c9-79648513a39c.roa (raw, json) Hash identifier: izRFWU4VNK9fTA3yGg0RWZjlQ/FG9i2VMqybShWjrig= Subject key identifier: 8C:BA:32:68:5D:A9:36:EB:9B:39:A5:64:02:1E:6E:3F:25:EB:36:B3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F63F82756C7B61828809CCF00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3af75ab3-84a4-3e81-96c9-79648513a39c.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 396584 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:27:56:c7:b6:18:28:80:9c:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=e3d9b68d-6539-4a22-b65c-1f9dcdb31d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0e:52:ee:98:52:ad:01:24:5c:4d:02:b0:66: 86:e5:19:32:03:a4:a8:15:2c:92:99:33:87:d0:02: b2:77:0e:02:f9:0f:c8:82:54:d9:f5:eb:76:7d:05: 3f:f0:6e:45:40:78:20:65:2c:b4:66:4c:49:a8:6b: 88:f5:dc:af:54:41:91:94:66:10:4e:08:f1:f2:16: e0:0c:3e:03:46:b3:7c:6d:a5:7a:22:e5:0d:fc:ec: 59:f3:c4:d6:ac:20:bb:b9:b5:e5:80:11:a2:24:f8: b7:04:33:8e:4a:51:87:65:94:20:ae:a0:ba:fb:9a: 06:fb:c6:f6:55:e7:97:3a:88:88:01:6e:ef:56:f8: 48:ee:d7:3d:88:c2:6b:bf:3a:bb:3b:42:aa:91:aa: 69:05:a6:b0:72:b0:48:7b:83:db:25:03:cc:bd:c9: cb:6b:a5:ef:7b:89:f9:0a:9a:e4:77:8d:e2:4e:cd: bd:cd:ab:c0:6f:d6:a1:10:3f:0a:e2:21:aa:d6:e3: 18:55:a8:21:51:c9:ad:10:f8:53:1f:2f:79:21:c0: 9d:96:2a:b6:d3:17:cf:ba:de:fa:ad:7b:5b:32:f8: 89:fb:fe:67:41:91:d5:9a:c7:3a:fa:a1:e6:06:09: cc:80:94:22:52:88:d6:00:1b:a3:5d:02:b0:ee:82: e8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BA:32:68:5D:A9:36:EB:9B:39:A5:64:02:1E:6E:3F:25:EB:36:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3af75ab3-84a4-3e81-96c9-79648513a39c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:df:4c:47:c2:a5:2b:f9:4e:42:0c:2a:69:2e:8e:ad:6e:46: 1e:a6:2c:12:9d:be:87:1a:1f:ef:21:7c:4d:aa:1a:db:a4:ac: 5c:04:1d:70:65:d3:41:ac:04:be:c0:86:ab:08:f6:e2:4a:9c: 2d:18:b2:0d:2d:fc:58:78:36:d4:54:4f:3e:fe:cf:d0:31:e6: 80:24:1f:35:d1:ad:9e:47:8a:22:f5:6e:0a:45:59:a1:4f:b9: a8:3c:26:36:ea:2a:4e:f9:f1:43:12:8e:37:0e:b0:fa:0e:6b: d7:43:95:dc:0a:fe:a0:0e:bd:58:46:25:c3:9b:e2:49:ad:43: 28:1b:02:ba:e1:fb:68:7f:bc:c2:a7:02:5c:08:3a:9b:ce:64: 4c:54:63:1a:84:4c:54:86:cf:d9:2f:b3:5e:1b:eb:32:e7:a4: ef:8f:b9:a8:7c:75:18:3d:86:fc:36:24:07:d5:73:f2:b3:63: 5a:b5:2d:62:c8:92:3f:a9:28:63:6f:c0:5e:15:5a:e5:72:8f: 54:16:00:bc:d6:f3:51:79:23:3d:36:ec:34:eb:68:3a:85:09: 66:93:e4:b4:80:42:77:b1:0e:63:03:a8:f7:48:ce:ec:5d:0f: 70:a7:11:49:95:33:f8:a2:5a:85:5f:68:6d:34:29:e9:49:53: 0f:8a:ce:f4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9j+CdWx7YYKICczwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk ZTNkOWI2OGQtNjUzOS00YTIyLWI2NWMtMWY5ZGNkYjMxZDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA5S7phSrQEkXE0CsGaG5RkyA6SoFSySmTOH 0AKydw4C+Q/IglTZ9et2fQU/8G5FQHggZSy0ZkxJqGuI9dyvVEGRlGYQTgjx8hbg DD4DRrN8baV6IuUN/OxZ88TWrCC7ubXlgBGiJPi3BDOOSlGHZZQgrqC6+5oG+8b2 VeeXOoiIAW7vVvhI7tc9iMJrvzq7O0KqkappBaawcrBIe4PbJQPMvcnLa6Xve4n5 Cprkd43iTs29zavAb9ahED8K4iGq1uMYVaghUcmtEPhTHy95IcCdliq20xfPut76 rXtbMviJ+/5nQZHVmsc6+qHmBgnMgJQiUojWABujXQKw7oLoKQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIy6MmhdqTbrmzmlZAIebj8l6zazMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2FmNzVhYjMtODRhNC0z ZTgxLTk2YzktNzk2NDg1MTNhMzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBi30xHwqUr+U5CDCppLo6tbkYepiwSnb6HGh/vIXxNqhrbpKxcBB1w ZdNBrAS+wIarCPbiSpwtGLINLfxYeDbUVE8+/s/QMeaAJB810a2eR4oi9W4KRVmh T7moPCY26ipO+fFDEo43DrD6DmvXQ5XcCv6gDr1YRiXDm+JJrUMoGwK64ftof7zC pwJcCDqbzmRMVGMahExUhs/ZL7NeG+sy56Tvj7mofHUYPYb8NiQH1XPys2NatS1i yJI/qShjb8BeFVrlco9UFgC81vNReSM9Nuw062g6hQlmk+S0gEJ3sQ5jA6j3SM7s XQ9wpxFJlTP4olqFX2htNCnpSVMPis70 -----END CERTIFICATE-----Generated at Tue Oct 6 23:09:23 2026 by rpki-client