$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be53ef38-8051-3287-8cd7-a20a0e60ac78.roa File: be53ef38-8051-3287-8cd7-a20a0e60ac78.roa (raw, json) Hash identifier: 8OZut98ueVpAbIFCrA0B5RD4kw05Nbn4OPyJG7Ni8Xw= Subject key identifier: 58:AC:29:BB:32:35:7B:3C:1B:FD:F7:F1:1C:59:51:BA:4B:3D:ED:52 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F63F82BAA4057A376DD67A360 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be53ef38-8051-3287-8cd7-a20a0e60ac78.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 397195 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:2b:aa:40:57:a3:76:dd:67:a3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=d5fbddce-3858-47a4-962d-47e182c9a2c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:99:9b:bf:bc:4f:e4:b0:32:76:b7:ab:3f:94: 0e:f7:8e:78:98:90:8b:4a:38:f4:f8:24:ee:ca:e9: f3:e7:58:0a:f0:2b:9b:bf:18:60:73:23:e7:95:b3: 12:c2:cf:2e:d9:cc:72:4f:4b:40:a8:4c:e5:62:bf: 97:24:f8:f2:21:a8:c1:c7:25:bf:c4:42:3a:0d:05: 4e:7e:50:83:c4:12:a8:5c:c5:b5:bc:61:53:15:8c: 94:6c:4c:a7:47:ca:14:c2:53:a0:ff:5f:82:a8:54: 68:f9:d6:7e:2d:37:a2:21:eb:34:6a:25:38:e3:0a: 2f:5b:ca:ff:67:53:c4:97:58:70:cf:b9:37:d5:59: 43:45:06:5e:c0:dc:9d:cc:cf:66:c6:a1:1d:28:c1: 4b:67:a7:96:85:1a:75:96:67:f2:df:13:e2:35:d0: 18:64:32:dc:96:6e:ab:a8:25:7f:17:46:02:93:5c: dc:a3:f0:af:67:3f:6d:8b:d5:2e:59:56:78:c3:5b: ee:ac:10:d0:19:c9:19:07:d9:88:89:40:f8:7b:24: cb:92:7e:b2:de:60:e1:3b:e9:81:d4:b8:d8:86:d7: f8:14:3c:f1:78:ca:41:65:d2:4b:88:26:df:0a:99: 34:9c:aa:e8:85:09:bd:11:01:d8:04:20:3f:f6:3f: ac:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AC:29:BB:32:35:7B:3C:1B:FD:F7:F1:1C:59:51:BA:4B:3D:ED:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be53ef38-8051-3287-8cd7-a20a0e60ac78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:95:d5:75:81:77:a7:ee:6c:19:d5:30:a6:d9:87:53:71:bf: d1:c9:33:30:e4:b3:0c:d8:ec:ec:5e:1e:03:d4:0d:4c:09:1c: 90:31:6c:a6:41:51:5f:f6:45:84:10:44:23:2e:f2:d1:62:32: 01:26:83:82:11:09:fb:ec:2c:51:9d:2f:52:98:6d:50:9f:43: d9:61:e9:6e:3b:77:85:5a:16:b9:87:29:15:75:27:52:76:42: 80:0f:c9:0f:72:e1:21:61:2e:b3:97:e6:92:bf:4a:93:d2:cb: 08:89:5f:a3:e2:a2:a8:41:23:83:f9:c3:c3:a3:f4:84:c0:ca: 4a:19:32:76:49:30:6d:3a:e8:7d:a3:0a:de:ea:0e:a8:e5:aa: 33:58:1b:57:74:35:92:44:ed:5a:6e:77:b4:a8:ad:77:18:d6: cf:c2:10:0d:4e:e3:b9:19:c9:06:98:8f:b3:ee:4a:63:69:b9: 7b:b2:c0:85:4d:c6:57:2e:56:0e:f3:9c:e0:6c:28:b3:85:52: df:f6:26:46:dd:ba:39:c4:8b:20:80:db:2b:e4:e0:0d:c7:ba: 5f:56:d4:73:69:52:bf:68:cf:18:38:35:8b:67:1e:46:85:ea: f9:b1:ed:a7:65:a0:54:67:c7:04:8e:da:8f:98:98:cb:3f:71: 32:32:df:8e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9j+CuqQFejdt1no2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk ZDVmYmRkY2UtMzg1OC00N2E0LTk2MmQtNDdlMTgyYzlhMmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZmbv7xP5LAydrerP5QO9454mJCLSjj0+CTu yunz51gK8CubvxhgcyPnlbMSws8u2cxyT0tAqEzlYr+XJPjyIajBxyW/xEI6DQVO flCDxBKoXMW1vGFTFYyUbEynR8oUwlOg/1+CqFRo+dZ+LTeiIes0aiU44wovW8r/ Z1PEl1hwz7k31VlDRQZewNydzM9mxqEdKMFLZ6eWhRp1lmfy3xPiNdAYZDLclm6r qCV/F0YCk1zco/CvZz9ti9UuWVZ4w1vurBDQGckZB9mIiUD4eyTLkn6y3mDhO+mB 1LjYhtf4FDzxeMpBZdJLiCbfCpk0nKrohQm9EQHYBCA/9j+sUwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFisKbsyNXs8G/338RxZUbpLPe1SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmU1M2VmMzgtODA1MS0z Mjg3LThjZDctYTIwYTBlNjBhYzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQByldV1gXen7mwZ1TCm2YdTcb/RyTMw5LMM2OzsXh4D1A1MCRyQMWym QVFf9kWEEEQjLvLRYjIBJoOCEQn77CxRnS9SmG1Qn0PZYeluO3eFWha5hykVdSdS dkKAD8kPcuEhYS6zl+aSv0qT0ssIiV+j4qKoQSOD+cPDo/SEwMpKGTJ2STBtOuh9 owre6g6o5aozWBtXdDWSRO1abne0qK13GNbPwhANTuO5GckGmI+z7kpjabl7ssCF TcZXLlYO85zgbCizhVLf9iZG3bo5xIsggNsr5OANx7pfVtRzaVK/aM8YODWLZx5G her5se2nZaBUZ8cEjtqPmJjLP3EyMt+O -----END CERTIFICATE-----Generated at Tue Oct 6 19:28:04 2026 by rpki-client