$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f50020d-3748-3042-8c37-1edde859a49e.roa File: 6f50020d-3748-3042-8c37-1edde859a49e.roa (raw, json) Hash identifier: PUeezgE8cK68zNXORS1y2ZZqofOn6r2ZMULizoZ8B/A= Subject key identifier: 87:29:CB:40:1D:24:60:2F:5B:65:C6:3B:5B:80:8B:54:00:6A:E7:5F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F63F828BEB56E17D66194EB80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f50020d-3748-3042-8c37-1edde859a49e.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 396604 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:28:be:b5:6e:17:d6:61:94:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=a1ca171a-243c-4413-aef0-b52e47a3df1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:00:28:84:ec:5d:e8:fa:92:c6:54:05:87:3e: e2:6c:8e:0d:b4:70:f0:c7:14:0c:e3:0a:bf:a7:15: 7a:1c:3e:87:c9:78:49:f9:d5:94:ec:f1:b0:6b:aa: d6:36:8b:99:24:3f:e0:ef:b0:0e:6d:40:ae:66:5a: 44:e6:92:48:af:a4:90:63:d6:9b:ce:ad:54:b3:3d: 23:da:05:5f:ab:62:cb:a9:78:c5:2f:92:25:03:4f: c9:c7:82:6c:73:cd:49:69:1e:6c:33:9b:ff:4a:d8: 5c:f4:22:9e:2b:0d:2c:4b:51:48:ff:19:92:c8:a4: a6:ec:55:73:99:94:12:15:6c:3b:6f:03:b7:58:10: 6e:91:45:96:fb:bc:0a:bb:8c:b5:f7:88:d2:8e:06: 7e:1f:12:55:fe:9c:7a:81:6a:6c:1f:b6:58:a9:ff: c2:77:15:80:8c:6f:92:10:4e:c8:6d:66:85:8f:5e: 47:19:cb:56:c4:dc:e6:df:17:82:ba:f0:5e:27:dc: 86:a8:a9:ee:cc:1c:41:dc:65:25:62:d6:6f:12:18: 84:82:98:6e:cc:c0:15:88:74:0b:b2:d2:0a:cc:ef: 45:00:7b:67:53:04:6c:8a:ff:f5:47:4a:d7:2e:ef: 6a:0c:fe:cf:eb:dd:c8:37:ae:c7:c2:05:f1:07:da: 5e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:29:CB:40:1D:24:60:2F:5B:65:C6:3B:5B:80:8B:54:00:6A:E7:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f50020d-3748-3042-8c37-1edde859a49e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:54:0f:6d:de:64:b0:c6:38:e2:74:51:ed:71:ea:e9:29:a5: 43:90:0b:da:48:78:a1:ea:97:2a:9e:c5:df:bf:ec:dc:c2:f2: f4:1c:80:35:65:46:76:b6:da:19:8c:e7:2a:c8:dd:0c:5c:79: f1:35:3a:82:20:fc:81:d8:aa:e7:93:f6:19:97:c8:be:dc:91: cd:25:56:0b:96:a4:4f:b7:10:89:a3:21:7c:38:ac:7e:95:9d: 4c:d1:c8:57:9b:f0:96:84:75:36:c9:5f:09:d3:e5:17:d8:0e: 09:8c:b6:c4:57:6a:5d:21:4c:ef:df:f9:33:7f:12:67:21:3a: 59:0c:a4:f4:70:76:71:b2:65:5d:1a:ff:97:2e:40:ae:b0:73: f8:3c:35:1c:64:aa:37:95:b6:f6:e5:12:72:9a:ea:9d:d4:39: 9d:78:79:a1:f4:7a:87:21:d9:61:ad:7d:78:04:8b:5d:4c:52: 7f:a9:d8:c9:28:76:c2:db:90:dc:82:e1:ab:e3:8e:53:0f:d3: 9a:c6:71:04:da:aa:f9:f5:0e:75:d2:78:85:61:68:4d:35:e8: 3a:ca:43:87:44:9a:7c:d9:64:f3:70:75:da:96:28:35:a9:6f: c7:97:15:67:7a:4e:74:7f:e0:bc:d1:88:6d:a4:ee:b8:b7:de: eb:b8:c4:f3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9j+Ci+tW4X1mGU64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk YTFjYTE3MWEtMjQzYy00NDEzLWFlZjAtYjUyZTQ3YTNkZjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAAohOxd6PqSxlQFhz7ibI4NtHDwxxQM4wq/ pxV6HD6HyXhJ+dWU7PGwa6rWNouZJD/g77AObUCuZlpE5pJIr6SQY9abzq1Usz0j 2gVfq2LLqXjFL5IlA0/Jx4Jsc81JaR5sM5v/Sthc9CKeKw0sS1FI/xmSyKSm7FVz mZQSFWw7bwO3WBBukUWW+7wKu4y194jSjgZ+HxJV/px6gWpsH7ZYqf/CdxWAjG+S EE7IbWaFj15HGctWxNzm3xeCuvBeJ9yGqKnuzBxB3GUlYtZvEhiEgphuzMAViHQL stIKzO9FAHtnUwRsiv/1R0rXLu9qDP7P693IN67HwgXxB9peHQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIcpy0AdJGAvW2XGO1uAi1QAaudfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmY1MDAyMGQtMzc0OC0z MDQyLThjMzctMWVkZGU4NTlhNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAMVA9t3mSwxjjidFHtcerpKaVDkAvaSHih6pcqnsXfv+zcwvL0HIA1 ZUZ2ttoZjOcqyN0MXHnxNTqCIPyB2Krnk/YZl8i+3JHNJVYLlqRPtxCJoyF8OKx+ lZ1M0chXm/CWhHU2yV8J0+UX2A4JjLbEV2pdIUzv3/kzfxJnITpZDKT0cHZxsmVd Gv+XLkCusHP4PDUcZKo3lbb25RJymuqd1DmdeHmh9HqHIdlhrX14BItdTFJ/qdjJ KHbC25DcguGr445TD9OaxnEE2qr59Q510niFYWhNNeg6ykOHRJp82WTzcHXalig1 qW/HlxVnek50f+C80YhtpO64t97ruMTz -----END CERTIFICATE-----Generated at Tue Oct 6 18:08:08 2026 by rpki-client