$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40eb7a1e-8063-3ad6-ac73-450b4aa42a71.roa File: 40eb7a1e-8063-3ad6-ac73-450b4aa42a71.roa (raw, json) Hash identifier: XozGt+A/Y8He2GlTPN9kaoUR0G6RAmOY+Ungs6wcNFU= Subject key identifier: BF:94:36:10:C0:81:B1:C2:DF:E4:04:6A:97:DB:9D:ED:0E:53:D2:F7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F63F82A82426AE37C0855D500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40eb7a1e-8063-3ad6-ac73-450b4aa42a71.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 20431 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:2a:82:42:6a:e3:7c:08:55:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=10222279-61a9-4f44-8a6a-a8566c050e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:01:aa:08:ef:21:e4:f2:07:ec:e4:f2:61:67: 8a:2f:9f:68:41:79:ef:c2:d3:9e:b0:97:79:88:ee: 49:9a:be:0e:25:45:46:5f:0e:43:a3:71:d1:4b:55: 41:6e:6d:ad:c7:62:44:86:6c:84:21:8f:4e:48:61: e2:03:09:f4:5f:b1:55:e6:9c:3a:ba:a6:8c:3b:65: e1:f4:f8:60:28:5a:32:66:16:1a:fd:9b:7b:9b:fc: 07:c3:a1:83:a6:33:a2:b6:0c:10:57:9e:1f:26:10: 0e:5c:fb:1c:25:44:49:73:ce:d2:c4:94:71:ef:3a: d7:66:c2:c1:de:4c:5f:cf:ee:eb:a5:e5:35:40:99: cf:9f:60:d5:92:99:57:d9:7e:2d:26:31:d9:dc:f7: 30:aa:6e:8a:a3:82:71:d4:9d:03:a9:78:83:6a:d4: de:20:be:5a:55:88:75:33:a5:d0:1d:a0:95:fd:39: 6f:36:9b:99:d7:a1:20:36:e7:04:76:ee:44:cc:47: 0a:5a:e0:c2:c2:c7:05:0d:68:a3:06:e2:3d:bb:e0: 56:e1:d7:1a:90:32:ae:70:6b:82:67:18:b7:3a:90: e8:d6:14:b0:a1:f0:e4:66:ee:41:66:36:dc:a5:82: 25:16:7c:34:2a:48:a5:b8:db:8b:52:09:55:3e:6a: c4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:94:36:10:C0:81:B1:C2:DF:E4:04:6A:97:DB:9D:ED:0E:53:D2:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40eb7a1e-8063-3ad6-ac73-450b4aa42a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:30:a1:b0:0e:c0:3a:8e:2e:fe:45:33:08:6a:95:6c:c4:b8: de:46:bf:d8:a7:df:b5:d9:bf:c1:a7:19:63:dd:01:35:53:80: 8e:df:5d:65:ce:8d:8f:31:0e:c5:ac:3d:e1:dd:c3:e6:2a:57: cf:e5:b7:0d:22:fc:2a:16:2b:7e:b6:2d:dd:ad:36:45:f4:dc: 5a:26:35:db:80:16:36:b0:9e:d7:f9:02:f1:62:43:ba:cb:d2: 24:19:94:86:37:6a:f4:dc:42:e5:d8:b7:a1:74:a7:88:ce:cb: 88:ac:0d:21:10:82:db:3f:65:28:2b:4c:db:8a:67:49:2c:47: 09:2b:5e:6b:12:32:ee:b7:0c:79:5d:43:b6:c8:14:b9:bf:db: cf:63:e5:30:70:47:3c:74:4b:fe:a4:c9:6e:bc:e5:5d:a5:56: 2c:70:01:72:68:f6:62:60:13:15:32:46:8f:8d:e6:a4:f6:82: a9:30:48:b4:3a:d5:82:e1:21:8d:64:7c:ed:23:0c:97:2f:ae: 96:e2:49:e9:39:20:b6:9c:99:7e:d9:39:89:56:9d:fd:b5:c0: 64:e1:e6:58:c5:d1:27:fe:8f:52:27:4d:fd:03:3d:86:71:dd: 78:fa:6f:9c:a0:99:2f:c3:e8:be:d2:0f:31:35:b5:1e:68:6c: e9:a2:f5:1b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9j+CqCQmrjfAhV1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk MTAyMjIyNzktNjFhOS00ZjQ0LThhNmEtYTg1NjZjMDUwZTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwGqCO8h5PIH7OTyYWeKL59oQXnvwtOesJd5 iO5Jmr4OJUVGXw5Do3HRS1VBbm2tx2JEhmyEIY9OSGHiAwn0X7FV5pw6uqaMO2Xh 9PhgKFoyZhYa/Zt7m/wHw6GDpjOitgwQV54fJhAOXPscJURJc87SxJRx7zrXZsLB 3kxfz+7rpeU1QJnPn2DVkplX2X4tJjHZ3Pcwqm6Ko4Jx1J0DqXiDatTeIL5aVYh1 M6XQHaCV/TlvNpuZ16EgNucEdu5EzEcKWuDCwscFDWijBuI9u+BW4dcakDKucGuC Zxi3OpDo1hSwofDkZu5BZjbcpYIlFnw0KkiluNuLUglVPmrEUwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL+UNhDAgbHC3+QEapfbne0OU9L3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDBlYjdhMWUtODA2My0z YWQ2LWFjNzMtNDUwYjRhYTQyYTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBQMKGwDsA6ji7+RTMIapVsxLjeRr/Yp9+12b/Bpxlj3QE1U4CO311l zo2PMQ7FrD3h3cPmKlfP5bcNIvwqFit+ti3drTZF9NxaJjXbgBY2sJ7X+QLxYkO6 y9IkGZSGN2r03ELl2LehdKeIzsuIrA0hEILbP2UoK0zbimdJLEcJK15rEjLutwx5 XUO2yBS5v9vPY+UwcEc8dEv+pMluvOVdpVYscAFyaPZiYBMVMkaPjeak9oKpMEi0 OtWC4SGNZHztIwyXL66W4knpOSC2nJl+2TmJVp39tcBk4eZYxdEn/o9SJ039Az2G cd14+m+coJkvw+i+0g8xNbUeaGzpovUb -----END CERTIFICATE-----Generated at Tue Oct 6 18:12:44 2026 by rpki-client