$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fba7842e-3f6e-33fc-9737-af36fba97972.roa File: fba7842e-3f6e-33fc-9737-af36fba97972.roa (raw, json) Hash identifier: Nqw11OC8yYJQqsL3tJazQzgqeLaT7IapvDEjCK6IgzA= Subject key identifier: F6:A1:1A:8D:40:5A:C0:41:CB:31:E1:F5:BB:94:44:2C:C6:3A:9A:B6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F63F8298B9F78F60B185A7400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fba7842e-3f6e-33fc-9737-af36fba97972.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 396564 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:29:8b:9f:78:f6:0b:18:5a:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=38161e1a-ef7e-4592-8ebc-970bb35e0c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c6:77:48:ac:09:95:08:41:4d:1a:72:8c:9e: 60:17:36:0e:a0:69:56:26:31:e5:92:4a:87:d3:61: a2:47:af:27:63:c9:1a:f3:ee:d2:3d:09:08:98:e5: 26:b1:24:0e:e7:01:a7:49:cb:53:3d:86:fa:44:e2: 46:a7:06:bf:0c:f8:f1:68:5f:7d:c2:12:6c:3c:3d: 83:d9:cb:55:d7:4e:30:27:d3:31:12:51:05:cc:92: eb:ce:57:4e:65:11:ec:50:70:0a:94:1d:31:97:1b: 58:d4:a5:25:77:8e:72:35:98:7c:5d:4c:8c:38:66: 8b:9f:0d:bd:35:01:e6:f2:95:74:1f:72:5e:26:1d: 1f:ce:9a:90:a5:62:6d:93:c6:fc:29:c3:e7:33:3a: 69:75:1d:23:4c:bd:e5:4e:74:e7:c5:3f:1d:bb:cd: 68:0d:77:b9:39:0d:9a:e7:b4:bd:82:d9:4f:d4:7d: 81:f8:dd:2f:ee:fd:44:6e:5b:85:f3:b4:af:1c:de: 23:e3:d6:fd:97:57:c0:ca:01:b0:4a:05:94:99:12: 01:cf:2a:01:5c:f3:bd:91:e5:da:49:c2:3f:cd:50: a7:67:9a:cb:11:e0:03:8a:ec:4e:f4:b9:5c:e3:be: 75:0f:17:53:21:f7:a5:71:e8:f8:33:5a:77:74:5a: ea:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A1:1A:8D:40:5A:C0:41:CB:31:E1:F5:BB:94:44:2C:C6:3A:9A:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fba7842e-3f6e-33fc-9737-af36fba97972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:0f:a1:8c:c5:83:36:a0:d5:67:ac:37:62:ac:f9:78:2e:e0: 56:45:2d:76:00:dd:be:36:83:66:a5:56:ca:e9:8d:55:d6:84: c0:10:b7:d7:99:88:a3:33:64:46:a9:8f:53:f7:60:49:57:67: da:33:6f:cb:c0:06:49:3c:de:f6:f5:4f:95:dc:ab:23:58:a0: c7:30:3a:c3:48:88:7f:49:31:77:51:31:8a:38:7b:78:bc:1f: d2:7b:db:3b:8f:29:d9:e3:9f:12:04:1b:cc:f3:2f:18:0b:04: 4a:ce:e0:e6:d3:52:a0:f4:d9:f2:e0:2b:6c:e9:10:1e:74:9a: 5d:81:ad:46:a4:ca:1e:49:8e:ac:eb:5a:8f:70:2d:e9:68:2d: 5d:0f:40:6b:d7:fd:d8:20:fa:b5:c9:91:25:d8:98:b1:bc:ae: 31:7c:c0:18:8c:2d:bd:ba:bc:c3:16:6d:50:55:8f:58:35:c5: 20:e3:5a:dd:58:99:4f:e6:08:99:3b:98:d8:1d:a2:a4:82:6c: 9b:e0:ca:b6:7d:94:d4:98:c1:93:a0:70:29:6a:81:01:62:d6: 32:88:01:6d:07:bf:20:31:6f:5e:08:09:c5:70:ec:04:b5:6d: a8:32:44:8e:a1:54:b4:4d:a2:0b:b1:30:e3:ea:4e:4b:0b:4f: e4:df:a0:1c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9j+CmLn3j2CxhadAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk MzgxNjFlMWEtZWY3ZS00NTkyLThlYmMtOTcwYmIzNWUwYzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8Z3SKwJlQhBTRpyjJ5gFzYOoGlWJjHlkkqH 02GiR68nY8ka8+7SPQkImOUmsSQO5wGnSctTPYb6ROJGpwa/DPjxaF99whJsPD2D 2ctV104wJ9MxElEFzJLrzldOZRHsUHAKlB0xlxtY1KUld45yNZh8XUyMOGaLnw29 NQHm8pV0H3JeJh0fzpqQpWJtk8b8KcPnMzppdR0jTL3lTnTnxT8du81oDXe5OQ2a 57S9gtlP1H2B+N0v7v1EbluF87SvHN4j49b9l1fAygGwSgWUmRIBzyoBXPO9keXa ScI/zVCnZ5rLEeADiuxO9Llc4751DxdTIfelcej4M1p3dFrqJQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPahGo1AWsBByzHh9buURCzGOpq2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmJhNzg0MmUtM2Y2ZS0z M2ZjLTk3MzctYWYzNmZiYTk3OTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBQD6GMxYM2oNVnrDdirPl4LuBWRS12AN2+NoNmpVbK6Y1V1oTAELfX mYijM2RGqY9T92BJV2faM2/LwAZJPN729U+V3KsjWKDHMDrDSIh/STF3UTGKOHt4 vB/Se9s7jynZ458SBBvM8y8YCwRKzuDm01Kg9Nny4Cts6RAedJpdga1GpMoeSY6s 61qPcC3paC1dD0Br1/3YIPq1yZEl2JixvK4xfMAYjC29urzDFm1QVY9YNcUg41rd WJlP5giZO5jYHaKkgmyb4Mq2fZTUmMGToHApaoEBYtYyiAFtB78gMW9eCAnFcOwE tW2oMkSOoVS0TaILsTDj6k5LC0/k36Ac -----END CERTIFICATE-----Generated at Wed Oct 7 07:59:58 2026 by rpki-client