$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef91536a-6165-3248-b2df-6f916cdd18de.roa File: ef91536a-6165-3248-b2df-6f916cdd18de.roa (raw, json) Hash identifier: cvIr25S7EJ1Bnpa5Yhu3LWZ+hK1eCvckS80UT4Zvesw= Subject key identifier: B1:99:B1:96:BA:DE:FE:3C:3F:4C:89:FB:CA:C8:74:F6:74:14:EA:B8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584ECE9C7A047B496555985B1300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef91536a-6165-3248-b2df-6f916cdd18de.roa Signing time: Wed 12 Aug 2026 01:00:11 +0000 ROA not before: Wed 12 Aug 2026 01:00:11 +0000 ROA not after: Tue 10 Nov 2026 02:00:11 +0000 asID: 26134 IP address blocks: 216.87.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ce:9c:7a:04:7b:49:65:55:98:5b:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 12 01:00:11 2026 GMT Not After : Nov 10 02:00:11 2026 GMT Subject: CN=8fc76ac3-1db4-460e-9a06-f10a48a8b210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:18:f3:54:a6:8d:81:10:24:74:96:7e:24:8d: 72:f6:6e:40:e2:04:ba:9c:8a:f3:d2:be:51:e2:cb: 36:dc:6d:92:16:30:ca:73:5d:f8:98:9c:09:83:a4: 36:0c:4a:2c:b8:04:7f:11:7d:48:74:f2:1b:2d:be: e0:0e:32:cf:2f:eb:f8:27:c8:18:98:a8:db:90:ed: 88:cd:7e:89:a1:36:1e:b9:6f:ea:c9:f1:cc:f8:99: 46:c5:7e:ba:88:90:9f:c9:c6:93:b6:a1:ea:62:8f: 1e:6c:bf:e0:f4:fc:e7:73:41:36:cb:11:ca:e3:f0: 5f:f7:f8:56:df:55:b7:ea:a3:2f:1c:cc:ba:6f:af: 0e:82:f7:04:b8:9e:a5:41:a8:12:d4:70:c0:ac:27: 70:1f:a2:24:48:4e:92:87:7c:75:33:d1:b8:9b:00: 87:e1:c5:d5:7f:96:6e:60:cb:bd:42:18:d5:1d:27: 8e:63:58:90:f0:11:e6:30:8b:80:46:c5:39:10:3c: df:13:2e:f8:c7:bc:88:6a:5c:45:52:e5:23:7e:7f: 66:c9:99:ba:51:b0:fd:2d:af:ca:7c:9d:9d:1c:f7: 5c:c1:13:9c:81:47:41:47:23:da:13:66:c6:8f:3f: 1a:b4:bd:ac:b4:f9:40:7b:ab:11:31:27:8e:48:a6: 36:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:99:B1:96:BA:DE:FE:3C:3F:4C:89:FB:CA:C8:74:F6:74:14:EA:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef91536a-6165-3248-b2df-6f916cdd18de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:bb:6b:6e:de:cf:de:4c:36:71:a2:1c:ad:f5:41:a1:22:b9: de:99:05:0a:d1:7a:d7:40:eb:97:cb:87:0f:a3:ba:a1:fe:ae: aa:ac:33:82:c6:2e:35:20:45:c3:e4:7d:00:1b:95:5b:f4:70: 5b:8c:a7:01:ae:07:92:54:24:c8:58:23:ee:a9:22:75:f2:14: 2d:d0:39:79:65:1b:48:bf:b9:50:5b:47:f7:51:d0:72:ce:4c: df:26:12:6e:92:47:66:33:a7:d8:8a:4c:9b:7c:0c:bb:b7:51: 94:c9:e7:58:fa:18:e0:df:41:30:eb:0b:16:70:0e:77:93:6b: 75:1c:dd:d0:27:00:24:e5:25:6f:f6:2e:94:e0:77:e1:93:a9: 10:dd:87:61:4f:9b:91:e3:b1:13:15:4e:17:c2:6f:77:df:d3: 70:85:74:5c:f4:45:aa:06:27:21:1b:a1:ae:ca:dd:8b:79:b8: 4e:73:1b:64:a0:66:f3:1a:f1:bf:a9:17:c2:02:64:0d:50:1c: 0e:a7:6a:a7:9c:97:42:ba:a4:ac:74:1d:cc:8c:48:db:e8:cd: bc:cc:3d:b3:5a:91:b9:f5:a8:5f:ea:0c:39:19:ee:e5:53:07: 79:cf:e9:38:49:53:43:9c:70:f8:ce:b2:38:7b:ae:e8:ac:1e: 51:ed:cf:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7OnHoEe0llVZhbEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgxMjAxMDAxMVoXDTI2MTExMDAyMDAxMVowLzEtMCsGA1UEAxMk OGZjNzZhYzMtMWRiNC00NjBlLTlhMDYtZjEwYTQ4YThiMjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBjzVKaNgRAkdJZ+JI1y9m5A4gS6nIrz0r5R 4ss23G2SFjDKc134mJwJg6Q2DEosuAR/EX1IdPIbLb7gDjLPL+v4J8gYmKjbkO2I zX6JoTYeuW/qyfHM+JlGxX66iJCfycaTtqHqYo8ebL/g9Pznc0E2yxHK4/Bf9/hW 31W36qMvHMy6b68OgvcEuJ6lQagS1HDArCdwH6IkSE6Sh3x1M9G4mwCH4cXVf5Zu YMu9QhjVHSeOY1iQ8BHmMIuARsU5EDzfEy74x7yIalxFUuUjfn9myZm6UbD9La/K fJ2dHPdcwROcgUdBRyPaE2bGjz8atL2stPlAe6sRMSeOSKY2PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGZsZa63v48P0yJ+8rIdPZ0FOq4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWY5MTUzNmEtNjE2NS0z MjQ4LWIyZGYtNmY5MTZjZGQxOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGu7a27ez95MNnGiHK31QaEiud6ZBQrRetdA65fLhw+juqH+rqqsM4LG LjUgRcPkfQAblVv0cFuMpwGuB5JUJMhYI+6pInXyFC3QOXllG0i/uVBbR/dR0HLO TN8mEm6SR2Yzp9iKTJt8DLu3UZTJ51j6GODfQTDrCxZwDneTa3Uc3dAnACTlJW/2 LpTgd+GTqRDdh2FPm5HjsRMVThfCb3ff03CFdFz0RaoGJyEboa7K3Yt5uE5zG2Sg ZvMa8b+pF8ICZA1QHA6naqecl0K6pKx0HcyMSNvozbzMPbNakbn1qF/qDDkZ7uVT B3nP6ThJU0OccPjOsjh7ruisHlHtz50= -----END CERTIFICATE-----Generated at Wed Aug 19 15:16:24 2026 by rpki-client