$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef91536a-6165-3248-b2df-6f916cdd18de.roa File: ef91536a-6165-3248-b2df-6f916cdd18de.roa (raw, json) Hash identifier: 17/w3wlW36MhhN7zcLavRwnCSObxFv74ihGH95AkUDk= Subject key identifier: 78:64:FC:8A:28:85:C3:21:00:33:93:A0:B0:EE:B7:AC:24:D9:AD:95 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E2C39ADFAECDCF89A8177C4EC Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef91536a-6165-3248-b2df-6f916cdd18de.roa Signing time: Sun 14 Jun 2026 21:00:12 +0000 ROA not before: Sun 14 Jun 2026 21:00:12 +0000 ROA not after: Sat 12 Sep 2026 21:00:12 +0000 asID: 26134 IP address blocks: 216.87.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2c:39:ad:fa:ec:dc:f8:9a:81:77:c4:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 14 21:00:12 2026 GMT Not After : Sep 12 21:00:12 2026 GMT Subject: CN=4abf4703-d266-4d07-b691-6df733321cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b1:50:4e:30:40:58:65:a6:96:a3:43:ec:db: f9:05:b6:74:b4:de:e4:67:f4:ce:32:e4:40:c5:15: d4:90:19:e2:a8:89:f3:5c:37:de:9b:d6:f5:4e:aa: 90:5f:5d:b3:bc:13:54:90:18:da:9d:23:0d:d2:5a: a9:c2:6f:3b:49:5a:f0:a6:90:a8:44:86:84:e8:a5: 88:ef:83:d8:5c:63:06:84:f6:25:b7:db:b2:e0:3b: 45:f5:5d:94:4e:93:d3:7e:6e:b7:7b:a9:4c:2c:2e: 92:bf:4b:83:ad:48:42:97:5a:74:78:29:d3:58:28: 65:93:90:83:76:07:8c:61:de:86:9f:86:e6:cc:af: 22:32:cf:b8:04:87:92:68:f8:bf:86:fc:66:65:9a: 1f:b8:16:37:98:03:24:93:44:7f:82:e3:83:3c:c7: cf:49:c9:97:f7:d1:9e:9e:07:e5:a0:cd:d6:11:d0: 18:d4:45:62:ad:82:9b:0e:31:f4:f0:0d:4a:02:9e: 12:e5:04:46:c8:21:8b:0c:59:e1:94:92:11:46:d5: 1d:ff:83:56:a8:b5:27:29:62:4d:2f:b1:31:69:8c: 8b:b1:68:51:71:9c:3f:4a:72:7d:0c:cb:80:e6:6c: e3:e4:a2:15:cb:a0:b0:27:fa:3d:d2:0f:b5:5b:a9: 11:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:64:FC:8A:28:85:C3:21:00:33:93:A0:B0:EE:B7:AC:24:D9:AD:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef91536a-6165-3248-b2df-6f916cdd18de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:6b:3b:c0:8d:9c:f2:92:1f:31:ee:8c:5d:53:e4:86:61:c2: 17:f1:17:51:f0:eb:56:09:87:27:78:5d:4c:c6:c9:98:98:39: de:f9:6e:d1:7c:c7:73:3e:06:ca:8f:9b:bd:76:0d:0f:42:b4: 29:58:8f:5b:14:2d:fd:ab:e4:b2:60:f7:6b:72:b4:5d:40:9b: 88:47:e5:2b:da:55:2a:0d:8d:ce:2e:08:ad:d0:f7:32:f0:8a: be:cc:3c:5a:71:cd:48:ee:32:ef:72:ba:48:9a:41:ae:2f:90: 3a:87:88:51:d9:6f:ae:e8:e9:e2:68:cf:69:64:2f:63:de:b1: d8:63:23:7e:99:94:ca:77:32:9e:c6:d6:16:a7:2c:2e:f5:11: bc:02:a2:c5:94:51:3d:b1:c7:50:55:11:7f:da:41:24:cc:8b: b3:1d:c3:57:9f:f3:a2:99:f0:d3:79:8a:9c:f8:9e:55:98:cc: 25:50:39:b1:f4:cc:f9:8c:e0:28:10:80:c0:bd:e1:7d:63:cc: 8a:26:9a:3e:85:41:bb:5d:1b:1b:97:f7:22:42:22:4c:77:78: 9d:15:84:f9:a0:b0:fd:15:db:b2:67:47:ad:a7:fc:45:31:fd: 3f:7c:0e:24:d4:43:04:c1:1e:de:95:d5:cf:d5:eb:a1:a9:af: da:41:5d:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4sOa367Nz4moF3xOwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYxNDIxMDAxMloXDTI2MDkxMjIxMDAxMlowLzEtMCsGA1UEAxMk NGFiZjQ3MDMtZDI2Ni00ZDA3LWI2OTEtNmRmNzMzMzIxY2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7FQTjBAWGWmlqND7Nv5BbZ0tN7kZ/TOMuRA xRXUkBniqInzXDfem9b1TqqQX12zvBNUkBjanSMN0lqpwm87SVrwppCoRIaE6KWI 74PYXGMGhPYlt9uy4DtF9V2UTpPTfm63e6lMLC6Sv0uDrUhCl1p0eCnTWChlk5CD dgeMYd6Gn4bmzK8iMs+4BIeSaPi/hvxmZZofuBY3mAMkk0R/guODPMfPScmX99Ge ngfloM3WEdAY1EVirYKbDjH08A1KAp4S5QRGyCGLDFnhlJIRRtUd/4NWqLUnKWJN L7ExaYyLsWhRcZw/SnJ9DMuA5mzj5KIVy6CwJ/o90g+1W6kRawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhk/IoohcMhADOToLDut6wk2a2VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWY5MTUzNmEtNjE2NS0z MjQ4LWIyZGYtNmY5MTZjZGQxOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdrO8CNnPKSHzHujF1T5IZhwhfxF1Hw61YJhyd4XUzGyZiYOd75btF8 x3M+BsqPm712DQ9CtClYj1sULf2r5LJg92tytF1Am4hH5SvaVSoNjc4uCK3Q9zLw ir7MPFpxzUjuMu9yukiaQa4vkDqHiFHZb67o6eJoz2lkL2PesdhjI36ZlMp3Mp7G 1hanLC71EbwCosWUUT2xx1BVEX/aQSTMi7Mdw1ef86KZ8NN5ipz4nlWYzCVQObH0 zPmM4CgQgMC94X1jzIommj6FQbtdGxuX9yJCIkx3eJ0VhPmgsP0V27JnR62n/EUx /T98DiTUQwTBHt6V1c/V66Gpr9pBXdk= -----END CERTIFICATE-----Generated at Sun Jun 28 17:21:47 2026 by rpki-client