$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf4339c2-ab5d-3ad9-9804-87a148dfbc1d.roa File: bf4339c2-ab5d-3ad9-9804-87a148dfbc1d.roa (raw, json) Hash identifier: zBOItg8s4A1tenz0PrLFCkcVkDvFeYrJOkVMSUc+E4k= Subject key identifier: 43:D1:D6:F0:5C:AE:2D:61:DF:7A:94:20:80:A8:63:72:8A:CD:2E:54 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F63F82A5C556F7236F2CBD9C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf4339c2-ab5d-3ad9-9804-87a148dfbc1d.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 396608 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:2a:5c:55:6f:72:36:f2:cb:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=1d417f94-46ac-4f6b-8c11-1ea417b8dddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:99:64:39:f7:c1:35:13:d1:55:77:c7:b5:29: 63:df:74:f7:d3:a3:c1:78:c3:9f:1f:59:78:c5:c5: d8:7b:45:77:b3:41:8f:93:13:c3:eb:60:56:0b:a2: e7:bc:60:66:fc:dc:d4:f1:0c:c3:49:fe:c5:06:84: 3e:b1:b2:c2:da:84:8c:1f:76:f9:9d:b3:c8:ae:3f: 38:74:a0:22:ac:83:ae:34:aa:38:51:86:fc:d7:2a: 21:2b:30:e7:26:e1:71:82:00:22:3f:d3:43:36:05: d7:82:fd:5a:61:06:39:0e:95:1d:2f:30:e7:ea:03: e3:93:88:7b:17:3d:c7:d8:78:0f:40:be:a8:91:14: 8e:b3:cf:dd:39:0f:2b:3d:42:38:2a:c9:cd:dc:6d: 19:fe:c2:40:f2:f8:73:07:65:0e:52:76:67:6f:d0: d0:3e:90:e2:2c:93:73:b3:eb:8b:2e:66:f6:be:57: 4a:7f:a7:0b:42:97:eb:27:13:41:de:da:b4:80:38: 4e:96:97:6b:59:a2:05:28:e6:12:a8:a6:7f:df:39: e6:17:01:ae:95:d0:b2:50:f3:c3:83:81:86:f2:6e: 97:78:44:1d:7a:9b:c1:76:96:af:12:f7:d2:f8:c7: f0:61:ee:37:96:62:90:12:5e:62:86:9a:b1:aa:58: 74:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D1:D6:F0:5C:AE:2D:61:DF:7A:94:20:80:A8:63:72:8A:CD:2E:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf4339c2-ab5d-3ad9-9804-87a148dfbc1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:17:24:43:be:8c:ac:fe:74:57:f8:26:f8:fd:33:94:77:cf: 59:e6:07:f5:36:f8:12:fe:2b:d8:7b:de:3d:e9:3f:bd:54:4c: 21:67:25:fa:14:ae:b7:9e:ce:94:33:86:32:f0:3c:25:57:cc: 56:72:ac:1e:9d:30:a5:3e:3d:3d:06:22:2c:25:78:9e:8d:97: 70:8c:08:90:6e:2b:79:55:ff:7a:32:da:e5:96:4c:98:00:7c: 35:22:19:6a:53:ba:ab:90:da:05:f6:f0:29:0c:07:c0:76:09: e8:29:98:bb:99:58:2e:02:97:f0:30:52:3b:bf:c3:ae:d4:ae: 94:6f:53:59:a6:32:b0:ba:ef:7c:8f:57:d5:4a:27:e8:77:3a: cb:81:f0:5c:65:45:c0:69:ee:53:88:43:c5:58:0c:54:f3:96: 0e:26:cc:a4:e6:9e:6b:7f:df:c3:4e:d4:3f:e7:98:6a:85:89: 4c:e5:65:e3:65:71:85:f3:b0:d2:3b:ab:a5:f7:5e:eb:16:1d: b2:9f:c7:6f:b0:42:a9:ba:4e:02:2a:80:00:fd:87:4a:00:e5: 9f:f3:99:69:61:c2:2f:41:1a:51:2e:c7:2e:5e:33:41:7c:11: b6:12:77:64:56:60:30:cc:62:3d:bd:ed:cc:be:ab:c8:38:01: cf:8c:e2:70 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9j+CpcVW9yNvLL2cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk MWQ0MTdmOTQtNDZhYy00ZjZiLThjMTEtMWVhNDE3YjhkZGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55lkOffBNRPRVXfHtSlj33T306PBeMOfH1l4 xcXYe0V3s0GPkxPD62BWC6LnvGBm/NzU8QzDSf7FBoQ+sbLC2oSMH3b5nbPIrj84 dKAirIOuNKo4UYb81yohKzDnJuFxggAiP9NDNgXXgv1aYQY5DpUdLzDn6gPjk4h7 Fz3H2HgPQL6okRSOs8/dOQ8rPUI4KsnN3G0Z/sJA8vhzB2UOUnZnb9DQPpDiLJNz s+uLLmb2vldKf6cLQpfrJxNB3tq0gDhOlpdrWaIFKOYSqKZ/3znmFwGuldCyUPPD g4GG8m6XeEQdepvBdpavEvfS+MfwYe43lmKQEl5ihpqxqlh0FQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEPR1vBcri1h33qUIICoY3KKzS5UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmY0MzM5YzItYWI1ZC0z YWQ5LTk4MDQtODdhMTQ4ZGZiYzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQABFyRDvoys/nRX+Cb4/TOUd89Z5gf1NvgS/ivYe9496T+9VEwhZyX6 FK63ns6UM4Yy8DwlV8xWcqwenTClPj09BiIsJXiejZdwjAiQbit5Vf96MtrllkyY AHw1IhlqU7qrkNoF9vApDAfAdgnoKZi7mVguApfwMFI7v8Ou1K6Ub1NZpjKwuu98 j1fVSifodzrLgfBcZUXAae5TiEPFWAxU85YOJsyk5p5rf9/DTtQ/55hqhYlM5WXj ZXGF87DSO6ul917rFh2yn8dvsEKpuk4CKoAA/YdKAOWf85lpYcIvQRpRLscuXjNB fBG2EndkVmAwzGI9ve3MvqvIOAHPjOJw -----END CERTIFICATE-----Generated at Tue Oct 6 14:54:58 2026 by rpki-client