$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd6c0aea-9f81-3979-91b8-7a645a4bb690.roa File: cd6c0aea-9f81-3979-91b8-7a645a4bb690.roa (raw, json) Hash identifier: Nmk11tfhpFx7bCpgSLooGMaaMqxwOBNLmEKnP/+lreo= Subject key identifier: 2B:81:4E:3A:2E:7B:3E:3E:DE:52:8B:E6:AE:57:34:9C:5F:3C:E0:3D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F63F82B4FC1EB413426510B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd6c0aea-9f81-3979-91b8-7a645a4bb690.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 396560 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:2b:4f:c1:eb:41:34:26:51:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=f57d8b56-1236-4812-a0ab-dff5bab3f595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:15:bf:3d:d9:d3:e4:05:42:2d:7f:ce:68:d3: a6:3f:f1:c0:dd:3d:04:eb:1d:26:ab:ec:9b:99:23: b4:d4:e6:4c:3f:53:b6:a4:f5:bb:97:d2:73:f8:cb: 89:b4:80:34:9d:87:03:1f:41:07:c8:29:c9:f0:07: 80:0b:2d:41:7a:fc:3c:76:a1:0e:6b:6e:41:16:8a: a5:93:4d:05:44:54:aa:dd:56:ba:71:fc:0d:90:9e: 3e:ff:62:54:f3:dc:af:d7:72:be:2e:bf:d2:8f:0f: 96:84:c1:7c:75:8d:fe:2e:87:aa:78:d1:e8:1e:02: ed:45:15:33:53:de:a6:26:50:16:cf:b6:35:0c:d2: 0e:d9:73:89:84:97:5a:8c:9f:4d:20:b6:0f:ec:77: db:a5:de:04:42:84:2b:3d:93:de:c6:9f:c4:7d:44: 29:35:b6:d0:21:2f:ed:1d:2e:ee:a2:36:49:42:3b: d5:ae:54:54:14:08:52:1b:ab:71:c9:cb:fb:1a:63: b7:6e:93:40:6e:c4:fa:75:58:28:dc:fc:42:c9:f7: 93:21:b3:6b:cd:b4:bb:89:21:19:80:c0:ab:62:30: 39:78:bd:41:47:d9:d2:06:58:65:dc:71:34:17:b9: 61:a2:06:50:0f:41:50:cb:54:16:1a:e7:c9:44:33: e1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:81:4E:3A:2E:7B:3E:3E:DE:52:8B:E6:AE:57:34:9C:5F:3C:E0:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd6c0aea-9f81-3979-91b8-7a645a4bb690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:8a:7d:74:10:29:58:b2:6e:22:3c:c0:43:27:94:6d:6a:b8: 83:48:98:d8:4e:96:58:4c:b3:c3:14:e3:8c:0a:4f:a3:43:c8: cb:d7:68:a7:68:2b:6f:fb:59:89:91:bc:08:ee:33:87:2f:11: dc:1b:28:a1:8b:40:e5:c5:e1:45:23:37:43:32:b5:e3:ff:4c: d5:9d:5a:23:3a:00:fc:ba:f4:87:7a:64:d2:1d:e2:03:21:f6: 10:56:33:ce:43:ba:a0:ea:b2:84:45:a8:2c:ce:aa:55:1e:3b: e4:11:5f:c1:92:22:88:68:d8:48:1b:a0:a0:d5:cc:f5:63:79: e0:6e:2e:7a:e9:47:13:fd:47:ea:9d:92:50:12:35:d4:35:6a: 1f:a4:5d:55:19:e8:04:c3:50:9f:8d:7c:54:8a:26:9a:88:5e: 34:59:ec:50:89:c8:e4:33:35:43:3a:93:3d:d2:50:1f:82:cb: 72:05:0f:1e:82:fe:b1:ac:ac:c4:46:4b:37:28:2d:87:eb:61: 88:3b:23:3d:12:ef:24:b3:ce:f4:db:ee:af:89:b8:10:aa:21: 82:00:d8:ef:29:90:06:af:3c:28:ca:7d:fb:09:d0:8c:62:d2: 53:b0:0d:26:7c:84:de:02:b3:c9:28:c6:73:ef:b0:48:d8:b9: 7f:a4:40:e3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9j+CtPwetBNCZRCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk ZjU3ZDhiNTYtMTIzNi00ODEyLWEwYWItZGZmNWJhYjNmNTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhW/PdnT5AVCLX/OaNOmP/HA3T0E6x0mq+yb mSO01OZMP1O2pPW7l9Jz+MuJtIA0nYcDH0EHyCnJ8AeACy1Bevw8dqEOa25BFoql k00FRFSq3Va6cfwNkJ4+/2JU89yv13K+Lr/Sjw+WhMF8dY3+LoeqeNHoHgLtRRUz U96mJlAWz7Y1DNIO2XOJhJdajJ9NILYP7Hfbpd4EQoQrPZPexp/EfUQpNbbQIS/t HS7uojZJQjvVrlRUFAhSG6txycv7GmO3bpNAbsT6dVgo3PxCyfeTIbNrzbS7iSEZ gMCrYjA5eL1BR9nSBlhl3HE0F7lhogZQD0FQy1QWGufJRDPh3QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCuBTjouez4+3lKL5q5XNJxfPOA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Q2YzBhZWEtOWY4MS0z OTc5LTkxYjgtN2E2NDVhNGJiNjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAEin10EClYsm4iPMBDJ5RtariDSJjYTpZYTLPDFOOMCk+jQ8jL12in aCtv+1mJkbwI7jOHLxHcGyihi0DlxeFFIzdDMrXj/0zVnVojOgD8uvSHemTSHeID IfYQVjPOQ7qg6rKERagszqpVHjvkEV/BkiKIaNhIG6Cg1cz1Y3ngbi566UcT/Ufq nZJQEjXUNWofpF1VGegEw1CfjXxUiiaaiF40WexQicjkMzVDOpM90lAfgstyBQ8e gv6xrKzERks3KC2H62GIOyM9Eu8ks8702+6vibgQqiGCANjvKZAGrzwoyn37CdCM YtJTsA0mfITeArPJKMZz77BI2Ll/pEDj -----END CERTIFICATE-----Generated at Tue Oct 6 18:11:42 2026 by rpki-client