$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa1e13ce-9970-30d6-aad3-dea1431848fe.roa File: fa1e13ce-9970-30d6-aad3-dea1431848fe.roa (raw, json) Hash identifier: oOJ/cnX4WzKhNkuc/4tOypnL10OB5//u0pqPZCXfR5g= Subject key identifier: F6:07:62:03:03:08:94:31:0F:A5:A2:2D:03:41:E8:2C:67:9D:AE:8C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F63F827881AA2BB60AF40F880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa1e13ce-9970-30d6-aad3-dea1431848fe.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 396595 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:27:88:1a:a2:bb:60:af:40:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=d16a7461-514d-4c48-9f12-f948ea83e76f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6b:c6:ac:ed:71:e6:f1:5c:ef:77:e3:d3:c0: 3a:45:e2:18:7d:0c:28:1b:e3:bf:f7:63:bb:87:6a: e1:f6:17:e6:44:7b:ad:e9:cd:fc:b5:ef:86:7b:d0: 2d:74:d5:0a:b1:ec:18:12:18:2e:e0:ad:a1:24:6a: c2:38:60:cf:17:d7:0a:4a:7e:39:26:d8:9f:00:5a: b6:ce:fd:f9:e6:37:03:63:4f:7c:13:7f:6b:9b:d9: c8:bd:2e:4b:7f:b9:fb:09:a6:f5:8a:a4:23:00:cc: fe:5d:fe:93:85:90:35:3f:49:85:ba:4c:0e:d3:91: e1:ac:58:2a:70:ba:41:63:bb:73:da:08:8c:eb:48: 58:fb:02:97:52:60:57:99:6f:bf:d9:20:04:f0:de: 28:38:e3:54:7e:40:b3:67:b0:db:cb:f5:cb:76:05: fd:b1:17:4a:e8:0d:6a:b5:75:fc:d7:96:ff:f0:16: 63:ca:75:6b:cf:d9:22:52:6f:e0:db:24:97:d3:97: b0:0a:43:e2:bf:95:4d:e5:6f:6a:5c:77:53:27:ea: 0d:2e:1d:31:32:3b:8d:e4:53:02:3e:c5:f4:14:13: e1:8d:7a:18:bf:77:13:5d:75:e0:47:0f:2f:de:f0: 1f:ec:bc:7a:0c:20:4e:a0:c0:d0:22:ed:1e:34:aa: d9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:07:62:03:03:08:94:31:0F:A5:A2:2D:03:41:E8:2C:67:9D:AE:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fa1e13ce-9970-30d6-aad3-dea1431848fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:8e:23:53:1b:af:e9:fc:94:92:91:67:04:b7:48:24:c4:3d: fe:1e:9a:f4:68:59:13:e2:fe:73:ac:cf:82:5a:5f:8f:8d:ed: b1:75:15:06:9e:1f:81:66:27:29:64:e3:03:1c:61:39:88:0c: 5b:b2:2e:21:de:99:bd:95:f2:d8:95:82:d4:58:77:6e:97:bc: 4b:4b:56:41:f1:b4:d7:ef:2a:4c:51:2f:92:64:de:4d:cb:91: ed:11:03:59:49:88:ef:d0:b3:f1:8c:1d:be:ae:e5:1f:51:33: 0f:83:ad:fe:13:83:06:a1:81:dc:42:85:89:e6:fc:52:32:71: cf:b9:81:38:74:16:1e:eb:d9:f7:7e:5c:65:35:6c:78:c8:36: e6:e6:f5:ea:fb:f1:30:3c:d6:49:1d:aa:db:86:12:e0:e1:f8: 2e:53:6d:fa:9a:ee:ae:67:65:1e:4b:72:12:31:40:55:ad:c2: 47:73:1b:9f:25:84:e9:9b:c7:00:e8:0c:ea:b0:49:de:8b:d4: d4:35:d1:02:b9:53:61:98:b4:e9:45:23:1d:7e:22:7b:b6:df: de:4e:a2:c2:b2:5f:e7:ac:54:22:18:31:ee:3c:ed:e3:e8:9a: 24:4f:41:f2:d4:03:f3:2b:c8:75:0d:ed:c0:0b:34:e3:58:78: 09:73:d4:d8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9j+CeIGqK7YK9A+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk ZDE2YTc0NjEtNTE0ZC00YzQ4LTlmMTItZjk0OGVhODNlNzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmvGrO1x5vFc73fj08A6ReIYfQwoG+O/92O7 h2rh9hfmRHut6c38te+Ge9AtdNUKsewYEhgu4K2hJGrCOGDPF9cKSn45JtifAFq2 zv355jcDY098E39rm9nIvS5Lf7n7Cab1iqQjAMz+Xf6ThZA1P0mFukwO05HhrFgq cLpBY7tz2giM60hY+wKXUmBXmW+/2SAE8N4oOONUfkCzZ7Dby/XLdgX9sRdK6A1q tXX815b/8BZjynVrz9kiUm/g2ySX05ewCkPiv5VN5W9qXHdTJ+oNLh0xMjuN5FMC PsX0FBPhjXoYv3cTXXXgRw8v3vAf7Lx6DCBOoMDQIu0eNKrZ+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPYHYgMDCJQxD6WiLQNB6Cxnna6MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmExZTEzY2UtOTk3MC0z MGQ2LWFhZDMtZGVhMTQzMTg0OGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBUjiNTG6/p/JSSkWcEt0gkxD3+Hpr0aFkT4v5zrM+CWl+Pje2xdRUG nh+BZicpZOMDHGE5iAxbsi4h3pm9lfLYlYLUWHdul7xLS1ZB8bTX7ypMUS+SZN5N y5HtEQNZSYjv0LPxjB2+ruUfUTMPg63+E4MGoYHcQoWJ5vxSMnHPuYE4dBYe69n3 flxlNWx4yDbm5vXq+/EwPNZJHarbhhLg4fguU236mu6uZ2UeS3ISMUBVrcJHcxuf JYTpm8cA6AzqsEnei9TUNdECuVNhmLTpRSMdfiJ7tt/eTqLCsl/nrFQiGDHuPO3j 6JokT0Hy1APzK8h1De3ACzTjWHgJc9TY -----END CERTIFICATE-----Generated at Tue Oct 6 19:58:11 2026 by rpki-client