$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95d47af1-a8f2-314d-a811-9e23e7952635.roa File: 95d47af1-a8f2-314d-a811-9e23e7952635.roa (raw, json) Hash identifier: IZ/zSpsLT77Yrd9vISk1fJoa7fqHmeL/dWNenFJe/00= Subject key identifier: AE:1E:6F:A1:6B:AD:AE:52:25:C8:81:DA:62:AD:BA:2B:61:41:08:FD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F63F82B43CBD310D39E0FF160 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95d47af1-a8f2-314d-a811-9e23e7952635.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 396596 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:2b:43:cb:d3:10:d3:9e:0f:f1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=e0dcf772-1897-42e4-a87f-943c1138256d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:94:da:47:b0:a1:43:9f:9c:08:b9:fa:93:20: ad:20:eb:80:33:06:da:16:c8:59:37:73:24:0c:11: de:ce:31:a2:6a:f1:5a:54:e0:cd:c5:de:12:10:ec: 03:78:c0:86:29:9c:42:23:77:05:c5:d2:7d:c5:82: 5b:54:0b:9e:c4:73:eb:f0:c5:65:8d:76:85:36:34: e3:54:79:5d:50:5f:0d:dd:73:42:5f:fa:a6:c3:92: 6b:25:36:12:cf:08:f9:5f:b7:03:f4:e0:1f:ab:d5: 5d:11:64:38:c0:a6:e4:2a:e1:b7:f7:6c:be:b8:1c: 5a:72:c9:54:b9:2d:56:cb:20:2f:99:9e:71:01:17: dc:2c:d8:06:db:7a:fb:ea:4f:32:33:47:fe:7e:0b: c3:2b:7e:7c:9a:e9:12:29:cc:9b:ac:c7:22:15:d4: d3:76:ab:bd:f5:b4:1f:33:8c:ef:ed:5a:41:2e:c3: 5d:07:b6:2f:59:da:41:cf:4c:85:d5:82:79:72:af: eb:13:54:0a:e5:b1:d5:ca:3b:1e:95:88:df:33:3f: 6b:86:36:63:24:31:84:5c:ad:32:2c:3e:55:51:1d: d1:64:05:2f:56:23:b0:e3:30:d5:ad:cf:9f:2f:4d: 63:cc:c4:71:3f:d0:57:00:3b:10:b0:85:29:c7:8d: 2c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1E:6F:A1:6B:AD:AE:52:25:C8:81:DA:62:AD:BA:2B:61:41:08:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95d47af1-a8f2-314d-a811-9e23e7952635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:77:31:2f:ce:4a:30:fe:d6:e3:e2:74:43:8e:a0:3d:64:ba: b4:e1:b9:b1:ff:83:43:d9:b3:1d:74:39:c7:b7:f5:ea:2d:4d: cd:b6:86:ac:c0:26:6c:86:5d:ff:ba:04:68:76:f9:9b:14:fb: ec:7f:be:7f:cf:90:6d:6e:a5:1f:77:6b:f4:f6:73:74:e7:f5: db:53:93:39:a3:6f:db:96:17:f3:f0:ed:6a:05:f5:f5:81:ff: f2:bc:9f:9b:51:1b:ad:3c:4f:0f:be:ab:38:29:46:e8:08:3a: a7:ff:a3:b2:c6:e4:f0:58:2c:eb:86:95:cd:28:15:71:c4:35: 35:68:e2:f5:32:0a:83:bf:80:19:21:87:7a:22:9c:1c:6c:cd: 44:df:9b:42:09:8c:c1:bc:d9:cb:cd:b9:9b:b1:62:36:3a:97: 39:cf:2a:45:22:85:0c:c3:cf:75:05:3c:87:0f:a7:e3:99:d5: be:10:0f:74:27:5d:1d:60:9e:a4:2b:87:da:8c:34:14:14:f2: e8:e6:23:c0:8c:44:e1:f3:73:8b:5a:29:ba:c7:5f:48:5f:ec: 89:86:b6:85:23:93:ea:e3:a0:c4:6f:7d:7d:38:72:29:aa:42: 73:d5:1f:91:77:2f:ed:1c:69:b5:f4:9d:19:f7:4a:f3:9c:69: eb:f4:f0:60 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9j+CtDy9MQ054P8WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk ZTBkY2Y3NzItMTg5Ny00MmU0LWE4N2YtOTQzYzExMzgyNTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZTaR7ChQ5+cCLn6kyCtIOuAMwbaFshZN3Mk DBHezjGiavFaVODNxd4SEOwDeMCGKZxCI3cFxdJ9xYJbVAuexHPr8MVljXaFNjTj VHldUF8N3XNCX/qmw5JrJTYSzwj5X7cD9OAfq9VdEWQ4wKbkKuG392y+uBxacslU uS1WyyAvmZ5xARfcLNgG23r76k8yM0f+fgvDK358mukSKcybrMciFdTTdqu99bQf M4zv7VpBLsNdB7YvWdpBz0yF1YJ5cq/rE1QK5bHVyjselYjfMz9rhjZjJDGEXK0y LD5VUR3RZAUvViOw4zDVrc+fL01jzMRxP9BXADsQsIUpx40szwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK4eb6Frra5SJciB2mKtuithQQj9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTVkNDdhZjEtYThmMi0z MTRkLWE4MTEtOWUyM2U3OTUyNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQARdzEvzkow/tbj4nRDjqA9ZLq04bmx/4ND2bMddDnHt/XqLU3Ntoas wCZshl3/ugRodvmbFPvsf75/z5BtbqUfd2v09nN05/XbU5M5o2/blhfz8O1qBfX1 gf/yvJ+bURutPE8Pvqs4KUboCDqn/6OyxuTwWCzrhpXNKBVxxDU1aOL1MgqDv4AZ IYd6IpwcbM1E35tCCYzBvNnLzbmbsWI2Opc5zypFIoUMw891BTyHD6fjmdW+EA90 J10dYJ6kK4fajDQUFPLo5iPAjETh83OLWim6x19IX+yJhraFI5Pq46DEb319OHIp qkJz1R+Rdy/tHGm19J0Z90rznGnr9PBg -----END CERTIFICATE-----Generated at Wed Oct 7 02:22:51 2026 by rpki-client