$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/647cf0cf-742d-39ca-8ee4-d7c099db9991.roa File: 647cf0cf-742d-39ca-8ee4-d7c099db9991.roa (raw, json) Hash identifier: UE7G+7/lyA7zhHmiT1bF3Tn4xkQ1auIyscBU66J2BtM= Subject key identifier: A7:82:81:80:F0:6C:8F:97:5F:02:25:65:DA:C8:5D:62:74:06:2D:D2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EC20C76BD1A8CBEFBABCF1180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/647cf0cf-742d-39ca-8ee4-d7c099db9991.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 396561 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:76:bd:1a:8c:be:fb:ab:cf:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=cdd5b87d-96f2-451b-ae7e-432dcf30645a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3d:e3:a9:39:6a:39:74:4e:cb:99:66:7a:4e: bc:28:19:fb:65:78:94:91:69:4a:98:b4:af:dc:a1: 0b:0c:66:6d:09:43:46:4b:ee:d1:74:76:6c:27:fb: 01:d0:85:70:3c:67:b3:7d:10:dc:15:a3:2a:ad:5e: 78:fa:d2:08:24:56:cf:b8:21:8b:9d:e4:5e:d5:ab: fd:81:15:86:86:e6:8c:b9:ec:02:6c:b0:70:20:36: b3:6a:a5:1f:10:89:15:ba:5f:a7:f0:62:b2:e7:27: 73:67:4e:08:18:5a:ad:71:91:51:56:c7:eb:82:f5: 57:f5:9f:49:80:6d:0b:02:dc:93:86:1c:64:9e:d8: 75:06:f2:a0:07:74:e9:e0:6f:56:d0:38:0c:1c:49: 7d:7a:e6:ea:48:48:ac:61:7e:b5:65:ce:b6:76:e0: e6:50:46:a0:0b:5f:4e:cc:20:6a:c7:9c:c6:8d:ba: 40:22:bc:f8:77:09:36:50:b6:26:8c:18:a8:e2:5f: 7e:6f:18:4c:94:1a:46:4e:16:b7:28:77:0f:34:b6: 12:4a:2e:45:6f:5f:a6:76:d7:74:d8:b9:3f:bb:1b: f2:64:95:ed:bb:81:a6:8d:99:07:a6:b4:6e:97:37: 1f:46:cb:81:66:6c:04:60:8c:c3:54:e4:26:fe:04: c2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:82:81:80:F0:6C:8F:97:5F:02:25:65:DA:C8:5D:62:74:06:2D:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/647cf0cf-742d-39ca-8ee4-d7c099db9991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:9c:41:ed:6f:25:27:58:4d:cf:4d:ca:84:1d:da:9e:64:c5: 73:a6:47:83:32:e6:53:08:85:c1:5b:5f:ec:08:61:37:98:0e: 3f:a7:31:31:c3:bf:ca:49:00:d2:6b:91:a8:29:d5:79:be:0e: 65:b8:21:a4:12:af:c7:c8:bc:89:a3:cb:5c:b4:02:ad:68:79: 84:a2:f0:d8:14:5f:c0:2d:12:5c:0b:91:66:fc:b8:7c:72:5a: 56:ac:2e:82:5e:6b:51:fa:b0:bf:76:72:5c:21:78:c8:ee:fb: 4b:31:bf:98:98:ab:bd:a3:d0:92:3d:8c:ce:fa:97:f6:fe:34: 46:18:d1:dd:c2:e8:1a:b6:26:7b:28:d0:a6:21:db:f0:d0:fb: 82:e5:f1:b9:f7:11:a0:93:3e:21:13:a5:39:72:7c:36:3f:81: 2c:82:7f:3d:67:46:9a:c5:be:a9:09:8f:b4:4e:ac:99:bf:27: 78:8c:9d:74:56:c8:ba:61:3b:c7:35:bc:6f:15:1a:8a:b0:c0: 45:b5:08:14:fa:e8:5e:06:56:0a:ed:e2:a3:0b:4e:ac:95:1c: d1:99:16:8c:6f:c4:86:ed:52:3f:ce:4f:7a:a1:10:aa:15:2b: 0a:c6:46:e0:a4:b1:f5:6a:34:ef:41:c4:a6:29:ac:01:fb:20: 71:7c:31:b7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7CDHa9Goy++6vPEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk Y2RkNWI4N2QtOTZmMi00NTFiLWFlN2UtNDMyZGNmMzA2NDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT3jqTlqOXROy5lmek68KBn7ZXiUkWlKmLSv 3KELDGZtCUNGS+7RdHZsJ/sB0IVwPGezfRDcFaMqrV54+tIIJFbPuCGLneRe1av9 gRWGhuaMuewCbLBwIDazaqUfEIkVul+n8GKy5ydzZ04IGFqtcZFRVsfrgvVX9Z9J gG0LAtyThhxknth1BvKgB3Tp4G9W0DgMHEl9eubqSEisYX61Zc62duDmUEagC19O zCBqx5zGjbpAIrz4dwk2ULYmjBio4l9+bxhMlBpGTha3KHcPNLYSSi5Fb1+mdtd0 2Lk/uxvyZJXtu4GmjZkHprRulzcfRsuBZmwEYIzDVOQm/gTCswIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKeCgYDwbI+XXwIlZdrIXWJ0Bi3SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjQ3Y2YwY2YtNzQyZC0z OWNhLThlZTQtZDdjMDk5ZGI5OTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB9nEHtbyUnWE3PTcqEHdqeZMVzpkeDMuZTCIXBW1/sCGE3mA4/pzEx w7/KSQDSa5GoKdV5vg5luCGkEq/HyLyJo8tctAKtaHmEovDYFF/ALRJcC5Fm/Lh8 clpWrC6CXmtR+rC/dnJcIXjI7vtLMb+YmKu9o9CSPYzO+pf2/jRGGNHdwugatiZ7 KNCmIdvw0PuC5fG59xGgkz4hE6U5cnw2P4Esgn89Z0aaxb6pCY+0TqyZvyd4jJ10 Vsi6YTvHNbxvFRqKsMBFtQgU+uheBlYK7eKjC06slRzRmRaMb8SG7VI/zk96oRCq FSsKxkbgpLH1ajTvQcSmKawB+yBxfDG3 -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:02 2026 by rpki-client