$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd0d4123-7088-3c8b-99b5-ced7e667305b.roa File: bd0d4123-7088-3c8b-99b5-ced7e667305b.roa (raw, json) Hash identifier: XSWum6NC8Od0DcfYya1xjUOW1Hz5Z1bZYEra569r8Ug= Subject key identifier: 52:82:1B:F2:6E:B1:58:23:2E:FB:59:EF:20:9F:25:1B:EF:88:91:32 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F63F8288170D6A61045F9BF80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd0d4123-7088-3c8b-99b5-ced7e667305b.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 396581 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:28:81:70:d6:a6:10:45:f9:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=92da0513-5281-480c-9aec-c17b729c00cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:49:38:ff:f3:c7:e2:5b:26:a9:8c:5b:91:e4: 4d:19:c9:77:04:27:11:fb:34:e1:e1:9e:a0:8a:f1: af:6e:83:3d:d3:10:f3:2c:56:b3:4b:45:71:0a:83: 38:07:65:65:25:54:1a:96:26:0d:98:1d:56:9c:d5: 1a:11:79:5c:09:3a:fb:aa:75:d9:a3:c8:7d:0c:ac: 4f:6e:e6:d0:69:77:13:9f:31:6a:21:4f:7f:0d:60: ba:c3:ea:b3:09:71:8f:e3:0b:96:85:a3:e0:04:f5: 4b:e6:6b:a2:32:c2:b2:63:3d:69:c7:bf:19:cf:34: 5f:71:77:52:a5:da:4e:bb:01:23:10:73:ff:aa:06: 0a:67:c1:48:70:ae:f8:a5:d8:73:e1:ef:39:4b:de: 0e:0f:0f:ff:37:b8:b0:71:6c:8d:26:7d:6c:d2:8d: 1a:ad:dd:6f:00:81:9a:48:fa:67:12:f8:9d:02:cc: 1e:40:c9:20:db:f4:e6:69:c5:41:a3:20:25:db:28: 4f:a7:fc:79:59:0f:0b:6f:9b:da:54:c0:44:66:5b: fa:08:fb:51:1f:7c:65:02:99:5d:1d:c4:25:e4:8c: 6c:64:0a:f9:39:f9:d6:4b:e8:c9:61:6c:ac:ae:a6: e3:0f:6a:bd:50:b6:b2:df:1d:2f:e8:3d:fe:5b:01: 87:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:82:1B:F2:6E:B1:58:23:2E:FB:59:EF:20:9F:25:1B:EF:88:91:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd0d4123-7088-3c8b-99b5-ced7e667305b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:aa:87:a0:c8:69:6c:24:ec:4b:cc:67:69:7e:b5:b4:7f:90: 19:67:5f:4d:3c:1d:bc:ec:67:61:e9:b3:57:94:72:ad:c6:b2: cf:15:b5:63:19:ca:1d:07:6a:a8:05:3f:93:ed:72:86:d3:b5: e1:b2:52:61:d4:2c:65:04:fa:23:f7:1e:a6:3d:ae:11:b2:c6: 8f:cf:e8:5b:f0:c8:78:6b:3d:2d:7a:01:36:21:8c:a8:84:7f: 11:0d:52:14:dc:eb:35:54:b9:4d:87:9a:f9:71:1a:0d:05:de: 2f:af:d1:ab:f0:c2:45:0a:87:ff:8b:a0:10:ae:6c:62:75:33: 77:06:f0:5a:05:d0:49:b3:c7:97:5e:c8:c7:41:0a:b6:2d:1d: 0a:6b:87:d7:6f:79:80:a2:ce:cb:70:ad:28:5b:77:4d:d0:e9: 93:01:d1:a4:ba:3d:a6:5b:55:65:02:00:70:23:78:59:17:1c: e5:6e:4e:e7:13:eb:5d:49:be:61:56:ea:b5:63:c4:9b:24:63: 85:af:b2:7d:37:3d:0a:0f:44:86:d5:25:cf:b9:c6:3f:3f:69: 9e:bb:93:50:90:84:80:f7:43:5d:0b:a7:0a:d7:78:f5:98:b0: b1:74:67:15:ad:12:56:63:e4:d7:4c:62:fd:40:a5:a1:3d:bd: 7f:f3:38:4e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9j+CiBcNamEEX5v4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk OTJkYTA1MTMtNTI4MS00ODBjLTlhZWMtYzE3YjcyOWMwMGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkk4//PH4lsmqYxbkeRNGcl3BCcR+zTh4Z6g ivGvboM90xDzLFazS0VxCoM4B2VlJVQaliYNmB1WnNUaEXlcCTr7qnXZo8h9DKxP bubQaXcTnzFqIU9/DWC6w+qzCXGP4wuWhaPgBPVL5muiMsKyYz1px78ZzzRfcXdS pdpOuwEjEHP/qgYKZ8FIcK74pdhz4e85S94ODw//N7iwcWyNJn1s0o0ard1vAIGa SPpnEvidAsweQMkg2/TmacVBoyAl2yhPp/x5WQ8Lb5vaVMBEZlv6CPtRH3xlApld HcQl5IxsZAr5OfnWS+jJYWysrqbjD2q9ULay3x0v6D3+WwGH3wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFKCG/JusVgjLvtZ7yCfJRvviJEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmQwZDQxMjMtNzA4OC0z YzhiLTk5YjUtY2VkN2U2NjczMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBMqoegyGlsJOxLzGdpfrW0f5AZZ19NPB287Gdh6bNXlHKtxrLPFbVj GcodB2qoBT+T7XKG07XhslJh1CxlBPoj9x6mPa4RssaPz+hb8Mh4az0tegE2IYyo hH8RDVIU3Os1VLlNh5r5cRoNBd4vr9Gr8MJFCof/i6AQrmxidTN3BvBaBdBJs8eX XsjHQQq2LR0Ka4fXb3mAos7LcK0oW3dN0OmTAdGkuj2mW1VlAgBwI3hZFxzlbk7n E+tdSb5hVuq1Y8SbJGOFr7J9Nz0KD0SG1SXPucY/P2meu5NQkISA90NdC6cK13j1 mLCxdGcVrRJWY+TXTGL9QKWhPb1/8zhO -----END CERTIFICATE-----Generated at Tue Oct 6 19:55:55 2026 by rpki-client