$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbaa0446-f909-3304-888c-399fd80b7e85.roa File: bbaa0446-f909-3304-888c-399fd80b7e85.roa (raw, json) Hash identifier: IzIZ3c33h2xrDHwAk3yjpeYrTbxbx6yZD4a0VEyOYso= Subject key identifier: 9C:95:DB:0C:AF:56:51:E0:19:87:A7:A8:77:61:5D:52:37:1C:4B:B8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F63F827C443DF308B8D38CE00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbaa0446-f909-3304-888c-399fd80b7e85.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 396589 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:27:c4:43:df:30:8b:8d:38:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=07ec5e5c-23f8-4e21-8122-cb8df26b5dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ec:09:b6:5f:df:fd:ff:6b:fd:ca:08:53:28: 37:d5:93:06:31:64:f1:6f:a3:8d:94:14:1c:85:59: 36:21:e9:14:f1:2b:09:4e:eb:01:5a:1d:4d:04:ec: 42:82:79:50:40:b0:7a:cd:29:0e:51:96:bd:11:6d: d1:a5:6b:e5:4c:5b:c6:ba:61:a0:42:03:af:92:63: f0:57:38:ea:e2:6e:74:d2:fd:4a:42:73:cb:83:5c: 5f:67:fe:89:63:9a:b7:12:5b:e4:20:e9:85:a1:b4: cf:72:6c:c4:4e:07:3a:20:21:11:2a:47:a9:09:f4: ad:f2:18:e3:5d:d1:30:5b:71:f1:fb:60:6f:5b:65: 60:aa:a6:c8:d9:c1:3f:9c:c5:fc:7d:25:e9:9a:75: 57:8d:f9:5f:b2:c3:aa:76:55:aa:08:a1:dc:45:83: 69:fe:ff:3f:86:e7:f3:ec:8c:25:67:32:fb:dd:a8: 3e:c6:db:fa:f6:39:3a:a9:2f:79:8b:70:b6:98:68: 8d:d5:3a:5b:9c:a6:c5:fa:38:0e:53:c6:26:86:c5: 20:76:49:4f:e2:14:6c:50:bf:e9:2c:31:ca:3b:89: 5f:fd:c7:b8:70:b8:68:d5:fd:7a:98:c1:17:93:38: 1f:58:8e:8d:26:9b:45:96:5a:73:cc:e1:7e:84:a6: 2b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:95:DB:0C:AF:56:51:E0:19:87:A7:A8:77:61:5D:52:37:1C:4B:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbaa0446-f909-3304-888c-399fd80b7e85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:53:a2:67:3b:20:8b:47:b7:0b:64:59:70:30:8d:64:f1:cd: cd:50:bd:16:30:53:56:a0:a1:f1:64:40:40:ee:21:f9:02:08: 5f:ac:0c:33:05:21:13:58:8b:64:de:4d:0a:49:c5:5b:2e:51: a3:04:13:a4:79:fb:54:e8:68:63:44:9f:e7:b9:b0:f7:8e:df: f6:15:25:7f:a5:a1:07:55:0a:fc:03:0a:0f:1a:6f:da:24:ee: 2b:2d:86:f9:52:8c:87:0e:e3:a2:c3:ac:b9:e6:74:de:75:67: 4f:f1:3a:1c:dc:34:0a:00:af:a3:bf:59:11:e0:5a:d8:dd:ff: 79:51:70:5b:95:eb:24:0c:56:d1:1d:d5:a6:ad:61:61:e4:64: 74:d4:8e:d6:d0:9e:b2:28:98:0f:d6:f7:4d:8d:87:52:4e:78: c9:4b:cb:c8:45:87:00:b6:b3:29:00:a1:45:86:03:8a:7d:34: a7:40:93:91:63:cc:51:71:46:79:17:97:d1:77:37:93:b3:93: 1b:5f:3b:8d:ab:41:2b:bf:de:71:e7:80:72:74:89:95:db:fa: 3c:cd:3c:1f:08:39:8e:5c:a0:1c:c1:fa:46:cd:b4:2a:43:c0: 49:53:6f:1a:47:05:dc:1f:89:cd:09:0d:33:b1:d6:7c:c8:c8: 7b:b9:59:52 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9j+CfEQ98wi404zgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk MDdlYzVlNWMtMjNmOC00ZTIxLTgxMjItY2I4ZGYyNmI1ZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkewJtl/f/f9r/coIUyg31ZMGMWTxb6ONlBQc hVk2IekU8SsJTusBWh1NBOxCgnlQQLB6zSkOUZa9EW3RpWvlTFvGumGgQgOvkmPw Vzjq4m500v1KQnPLg1xfZ/6JY5q3ElvkIOmFobTPcmzETgc6ICERKkepCfSt8hjj XdEwW3Hx+2BvW2VgqqbI2cE/nMX8fSXpmnVXjflfssOqdlWqCKHcRYNp/v8/hufz 7IwlZzL73ag+xtv69jk6qS95i3C2mGiN1TpbnKbF+jgOU8YmhsUgdklP4hRsUL/p LDHKO4lf/ce4cLho1f16mMEXkzgfWI6NJptFllpzzOF+hKYr8QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJyV2wyvVlHgGYenqHdhXVI3HEu4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmJhYTA0NDYtZjkwOS0z MzA0LTg4OGMtMzk5ZmQ4MGI3ZTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAZU6JnOyCLR7cLZFlwMI1k8c3NUL0WMFNWoKHxZEBA7iH5AghfrAwz BSETWItk3k0KScVbLlGjBBOkeftU6GhjRJ/nubD3jt/2FSV/paEHVQr8AwoPGm/a JO4rLYb5UoyHDuOiw6y55nTedWdP8Toc3DQKAK+jv1kR4FrY3f95UXBbleskDFbR HdWmrWFh5GR01I7W0J6yKJgP1vdNjYdSTnjJS8vIRYcAtrMpAKFFhgOKfTSnQJOR Y8xRcUZ5F5fRdzeTs5MbXzuNq0Erv95x54BydImV2/o8zTwfCDmOXKAcwfpGzbQq Q8BJU28aRwXcH4nNCQ0zsdZ8yMh7uVlS -----END CERTIFICATE-----Generated at Tue Oct 6 15:14:12 2026 by rpki-client