$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0867d61d-c389-352e-ac6a-d6271b4a63c8.roa File: 0867d61d-c389-352e-ac6a-d6271b4a63c8.roa (raw, json) Hash identifier: OjhpZvbaJLJIFfHkagr9AUBVHmw4CH4qWakoyzqMtPc= Subject key identifier: 81:A5:AB:FB:1A:2F:70:1B:73:93:B6:B7:5D:B0:2F:54:B2:C4:46:C6 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F49884587595E3A654061F680 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0867d61d-c389-352e-ac6a-d6271b4a63c8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 216.171.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:45:87:59:5e:3a:65:40:61:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1f6ea1fd-b0e5-4607-ba82-17115cef8ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3b:be:ec:9d:be:7a:e6:7c:cb:ff:22:9c:89: 01:ce:62:47:6a:84:8e:76:fa:d5:18:ad:88:7e:a7: af:e2:37:86:ee:f0:47:d5:cc:b6:e5:e1:cd:41:b1: 58:45:8f:87:30:a4:e1:4c:8a:5c:3d:9a:98:cc:df: 53:4c:2a:9e:94:36:5e:a5:5d:44:b5:3c:41:f4:1d: 3a:01:6b:84:79:b4:96:8f:78:9a:6e:04:1f:fc:98: 96:71:ef:b8:68:cd:b4:0e:43:b9:2f:e1:29:7f:a4: 24:fc:0f:b5:18:63:eb:39:ef:4d:4c:0d:85:f0:4d: 60:0e:73:0a:c4:88:5e:d2:c9:2a:cb:c0:36:85:e7: 2c:23:85:3e:73:c6:86:18:19:0c:5e:f6:75:16:97: 81:7f:18:0e:6c:15:a1:b1:01:9f:d9:1d:a5:0f:fe: ad:f9:ad:80:e6:7e:00:7b:f6:e2:89:92:39:72:1a: 84:61:8c:95:85:cd:72:7a:54:ce:64:ca:86:5e:45: 69:00:88:49:9c:29:e5:f6:15:d4:f2:97:71:11:10: 15:c1:8e:d0:df:8a:35:b8:bb:94:07:03:81:05:16: c0:ba:04:dd:69:b8:a1:7d:be:6a:16:02:3a:a8:17: 6f:93:f2:49:60:bd:4d:0f:c7:12:81:8f:65:10:23: 4d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A5:AB:FB:1A:2F:70:1B:73:93:B6:B7:5D:B0:2F:54:B2:C4:46:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0867d61d-c389-352e-ac6a-d6271b4a63c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:27:7e:26:3e:88:98:ff:f3:73:95:f5:f3:d8:d7:56:9f:31: f1:ac:8a:e9:4c:2c:71:d8:36:c5:ef:75:13:08:38:49:74:5f: 2e:da:9f:e7:d4:c2:19:fc:b6:72:0c:45:c9:48:0b:92:2a:f5: f1:0e:d9:ec:33:cb:02:fc:d0:3d:64:49:b7:e0:e7:3d:b6:70: 79:b1:ac:2d:01:7b:d7:1d:55:bf:13:3b:79:d1:83:bc:38:0b: 7a:1d:4b:06:55:31:8e:0e:f6:99:97:96:59:27:88:32:b6:73: 37:a9:8a:fd:59:93:a0:f5:ee:7d:58:c3:65:a7:38:1c:02:e5: 2c:e1:55:6f:53:62:e2:24:91:cc:f6:1f:95:a4:fb:54:bd:96: 3c:ae:fd:35:b4:54:fd:b8:95:c3:09:f4:b9:d8:d8:03:28:9d: 5b:e7:eb:23:f3:57:e3:c0:3b:e6:b2:25:9c:39:59:8e:96:9c: 1f:6a:bc:83:73:a6:e1:43:ce:8f:0d:e3:68:a5:dc:67:37:f6: 13:03:09:17:a1:a6:40:4b:83:b6:70:4f:b5:30:19:27:29:a8: 4d:f9:61:b1:39:d4:a6:15:c1:f8:fe:44:23:08:73:73:df:72: 9b:db:db:05:37:f4:10:62:9d:ca:48:45:97:c8:01:8f:c9:3a: ba:ce:93:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiEWHWV46ZUBh9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWY2ZWExZmQtYjBlNS00NjA3LWJhODItMTcxMTVjZWY4ZmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTu+7J2+euZ8y/8inIkBzmJHaoSOdvrVGK2I fqev4jeG7vBH1cy25eHNQbFYRY+HMKThTIpcPZqYzN9TTCqelDZepV1EtTxB9B06 AWuEebSWj3iabgQf/JiWce+4aM20DkO5L+Epf6Qk/A+1GGPrOe9NTA2F8E1gDnMK xIhe0skqy8A2hecsI4U+c8aGGBkMXvZ1FpeBfxgObBWhsQGf2R2lD/6t+a2A5n4A e/biiZI5chqEYYyVhc1yelTOZMqGXkVpAIhJnCnl9hXU8pdxERAVwY7Q34o1uLuU BwOBBRbAugTdabihfb5qFgI6qBdvk/JJYL1ND8cSgY9lECNNJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGlq/saL3Abc5O2t12wL1SyxEbGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMDg2N2Q2MWQtYzM4OS0z NTJlLWFjNmEtZDYyNzFiNGE2M2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAnfiY+iJj/83OV9fPY11afMfGsiulMLHHYNsXvdRMIOEl0Xy7an+fU whn8tnIMRclIC5Iq9fEO2ewzywL80D1kSbfg5z22cHmxrC0Be9cdVb8TO3nRg7w4 C3odSwZVMY4O9pmXllkniDK2czepiv1Zk6D17n1Yw2WnOBwC5SzhVW9TYuIkkcz2 H5Wk+1S9ljyu/TW0VP24lcMJ9LnY2AMonVvn6yPzV+PAO+ayJZw5WY6WnB9qvINz puFDzo8N42il3Gc39hMDCRehpkBLg7ZwT7UwGScpqE35YbE51KYVwfj+RCMIc3Pf cpvb2wU39BBincpIRZfIAY/JOrrOkxo= -----END CERTIFICATE-----Generated at Fri Sep 25 11:41:21 2026 by rpki-client