$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8a1ae9d-fdfe-38a3-ae3c-b31f1f75e401.roa File: c8a1ae9d-fdfe-38a3-ae3c-b31f1f75e401.roa (raw, json) Hash identifier: GawGGp17E0G2RX41xr+xWf3agdrVp4NjH8y3XWZVpSk= Subject key identifier: 73:2A:78:C2:C2:30:AD:29:EF:2E:77:26:1A:65:01:9D:6D:10:DF:00 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F63F82A2B0694865852878880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8a1ae9d-fdfe-38a3-ae3c-b31f1f75e401.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 396563 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:2a:2b:06:94:86:58:52:87:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=ec2599f6-30af-4d2f-8961-2c2b2485ca7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2a:61:17:fa:1e:1b:af:8c:a5:ab:f1:fd:70: e2:d2:e3:7d:89:38:e7:41:88:23:b9:c1:1a:d9:12: ff:5b:14:c6:1a:a7:c8:04:bb:06:aa:59:ef:6a:ba: b9:96:be:0c:a6:50:87:6a:b8:ee:fe:7c:a6:06:2a: 8f:80:12:b7:c8:44:75:b6:a6:3a:69:a6:67:a9:62: f4:b0:66:2a:6f:ad:c0:00:eb:08:c8:62:6e:e5:44: c1:b1:b2:94:5e:fd:9b:2f:d4:16:6d:e6:00:76:8c: 8f:24:e6:70:8b:48:b8:f7:5e:12:93:4b:15:26:1d: db:c7:f2:2b:f2:a7:2e:93:ae:df:d7:62:a7:f9:7e: bb:ec:27:29:e9:22:04:81:b5:a3:b3:b4:eb:56:d2: 1d:1d:07:0b:7f:ac:98:4c:a9:07:54:48:da:ea:67: 13:d1:1f:41:14:3f:8b:c0:53:60:66:94:31:51:89: 11:0f:81:6c:3b:38:47:30:b1:75:a5:b1:36:42:e4: 1e:5a:7f:0f:0e:3f:38:da:05:b2:8c:a0:85:53:da: c7:41:c5:a4:0f:7a:44:40:47:68:43:7c:de:78:42: c8:3e:8e:32:bf:1e:2c:cc:eb:62:13:d3:80:a2:80: c6:e3:6d:bc:ff:6a:23:3e:aa:d9:7a:58:ff:fe:8e: 7d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2A:78:C2:C2:30:AD:29:EF:2E:77:26:1A:65:01:9D:6D:10:DF:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8a1ae9d-fdfe-38a3-ae3c-b31f1f75e401.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:20:bd:69:0f:91:c6:49:7a:2b:d5:0a:00:4d:69:9b:ba:eb: 06:0e:4c:b7:e5:c0:61:a7:fe:99:af:8a:5c:54:07:aa:9e:72: 0f:26:9f:91:a7:35:3e:83:cf:29:e5:38:11:1b:96:c5:ea:92: 3f:32:ab:8f:73:f1:fe:92:e9:7e:74:b0:0a:eb:e7:1a:01:05: 55:ad:f0:7a:e2:35:74:6e:5a:fd:5d:65:23:71:e3:69:59:60: 71:7f:63:2e:41:9f:4a:a7:83:87:d5:04:64:82:dc:f6:89:9d: 31:c8:94:3c:9e:40:fc:6a:a7:7b:a2:46:ac:a3:1c:3c:e8:62: ee:65:0c:fc:86:25:03:c5:9f:9a:22:2e:aa:f3:e2:a7:4d:f6: 8e:bd:3a:4a:b0:48:74:18:47:c9:d7:d0:9e:8d:be:1a:cb:66: 4f:ed:f4:9c:5c:29:e6:35:17:39:99:68:27:ff:03:e4:45:02: 10:49:d4:6e:de:d1:75:7e:77:c7:8d:65:64:4b:0e:0b:6e:bb: 44:43:3d:78:0a:41:73:30:45:02:99:31:f7:ea:16:7d:f1:a0: dd:80:3e:b9:e6:8b:83:c8:da:80:9c:3f:56:05:ad:49:11:f3: 98:a2:3e:be:b1:0e:d2:f0:d0:06:67:2b:15:70:9b:2a:c3:27: ed:04:37:31 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9j+CorBpSGWFKHiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk ZWMyNTk5ZjYtMzBhZi00ZDJmLTg5NjEtMmMyYjI0ODVjYTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyphF/oeG6+Mpavx/XDi0uN9iTjnQYgjucEa 2RL/WxTGGqfIBLsGqlnvarq5lr4MplCHarju/nymBiqPgBK3yER1tqY6aaZnqWL0 sGYqb63AAOsIyGJu5UTBsbKUXv2bL9QWbeYAdoyPJOZwi0i4914Sk0sVJh3bx/Ir 8qcuk67f12Kn+X677Ccp6SIEgbWjs7TrVtIdHQcLf6yYTKkHVEja6mcT0R9BFD+L wFNgZpQxUYkRD4FsOzhHMLF1pbE2QuQeWn8PDj842gWyjKCFU9rHQcWkD3pEQEdo Q3zeeELIPo4yvx4szOtiE9OAooDG4228/2ojPqrZelj//o59DQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHMqeMLCMK0p7y53JhplAZ1tEN8AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzhhMWFlOWQtZmRmZS0z OGEzLWFlM2MtYjMxZjFmNzVlNDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAkIL1pD5HGSXor1QoATWmbuusGDky35cBhp/6Zr4pcVAeqnnIPJp+R pzU+g88p5TgRG5bF6pI/MquPc/H+kul+dLAK6+caAQVVrfB64jV0blr9XWUjceNp WWBxf2MuQZ9Kp4OH1QRkgtz2iZ0xyJQ8nkD8aqd7okasoxw86GLuZQz8hiUDxZ+a Ii6q8+KnTfaOvTpKsEh0GEfJ19Cejb4ay2ZP7fScXCnmNRc5mWgn/wPkRQIQSdRu 3tF1fnfHjWVkSw4LbrtEQz14CkFzMEUCmTH36hZ98aDdgD655ouDyNqAnD9WBa1J EfOYoj6+sQ7S8NAGZysVcJsqwyftBDcx -----END CERTIFICATE-----Generated at Wed Oct 7 11:21:26 2026 by rpki-client