$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/13ec74b3-fbbf-3bab-bd63-55d1a60a6574.roa File: 13ec74b3-fbbf-3bab-bd63-55d1a60a6574.roa (raw, json) Hash identifier: XiNvsQsG4+AwH7adoy3ZCaHFh+aQVg7FbD/Q03t/x7Q= Subject key identifier: E7:7D:A6:9A:11:10:27:E0:60:33:74:3A:5D:A8:4A:85:24:D4:BD:3E Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B8EAD0A6E1300AAE32D1CF200 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/13ec74b3-fbbf-3bab-bd63-55d1a60a6574.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 23473 IP address blocks: 216.171.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ad:0a:6e:13:00:aa:e3:2d:1c:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=f2885605-aa40-43d0-8cfd-dbbab8716b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7e:ba:1f:f0:94:b0:36:5b:36:12:25:8c:d3: 73:7f:f3:2e:a0:b9:74:13:3c:e5:c3:2f:44:25:bf: b2:59:1f:34:07:91:af:4d:e6:90:1b:27:95:f9:ec: 3d:4d:38:04:ab:19:88:11:d9:e1:c9:73:4e:90:41: 16:89:56:bd:ce:9c:f4:ea:26:20:54:b5:b0:0b:3a: 1d:80:e1:30:d9:8b:4c:f2:8b:b1:c7:d7:86:84:6c: 65:b1:9f:1e:1a:a9:93:db:0c:80:74:86:9d:20:8e: 06:dc:5d:52:e2:bf:78:b5:18:a9:ef:eb:3f:9b:34: 50:30:79:30:81:4a:ac:a4:8c:60:f2:cc:84:33:1d: 3f:c4:68:61:9b:4c:5d:58:6d:e2:6a:c0:e1:6e:6e: 0e:c1:cd:9f:42:29:d3:4e:0a:21:ef:51:fc:a9:94: 05:97:a4:49:ae:6f:b1:dc:3f:15:6d:ff:8c:f3:a1: 40:b7:ca:85:8a:5c:35:d1:f4:e7:2a:0a:6f:11:7d: b2:d7:2e:b5:1c:2f:be:ef:57:cc:ab:7d:14:ec:e4: fb:da:cc:b1:d9:9f:b0:33:8b:6f:83:f1:83:50:69: 49:0f:16:e8:99:2d:3d:84:2e:f1:13:02:1d:5f:00: c1:71:22:07:af:6e:4b:ab:fa:e4:ca:c3:95:f6:84: a8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7D:A6:9A:11:10:27:E0:60:33:74:3A:5D:A8:4A:85:24:D4:BD:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/13ec74b3-fbbf-3bab-bd63-55d1a60a6574.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:29:89:59:d5:bd:5d:1c:f0:b8:29:53:d0:78:2f:16:9d:21: 64:3c:b2:4a:3f:42:d8:f3:78:ca:99:a8:af:23:a6:65:b1:63: 98:96:cb:a5:bf:33:aa:58:a1:5b:9f:99:39:a1:94:9c:28:1a: 04:b7:01:ca:5b:ef:6a:62:f8:c5:b5:b3:b1:7c:4e:66:22:5b: a9:7d:cf:ce:e9:9f:88:c1:b9:bd:1a:b2:63:c4:86:77:cb:b8: 97:67:b6:71:a6:9d:b8:65:fa:26:14:da:34:13:83:e5:e8:83: 3a:c7:4f:52:18:fe:bc:3d:79:a5:f8:ab:e9:40:e7:0d:8f:63: e9:35:56:86:12:3d:6d:5a:17:56:f1:2e:97:39:33:1b:4b:4d: e4:8b:3d:c1:9a:74:0a:48:47:8c:12:1b:a8:15:af:65:fc:f1: 15:b8:fe:fd:38:a4:27:79:f7:ce:36:8c:7b:8d:a4:f0:0f:c2: 15:1b:92:b5:67:4d:1f:47:5e:75:66:f3:8a:bf:2f:3a:bf:36: f0:fb:3b:1b:91:01:98:c3:a5:ed:df:cd:28:ab:ec:24:73:f8: 71:3e:8a:dd:c0:58:db:9c:ff:99:e0:54:b1:d0:e7:1c:2b:81: 25:fe:b8:07:c4:66:59:fd:79:4d:11:c9:3d:2c:8c:e4:32:d4: 3e:60:e5:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrQpuEwCq4y0c8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZjI4ODU2MDUtYWE0MC00M2QwLThjZmQtZGJiYWI4NzE2YjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH66H/CUsDZbNhIljNNzf/MuoLl0Ezzlwy9E Jb+yWR80B5GvTeaQGyeV+ew9TTgEqxmIEdnhyXNOkEEWiVa9zpz06iYgVLWwCzod gOEw2YtM8ouxx9eGhGxlsZ8eGqmT2wyAdIadII4G3F1S4r94tRip7+s/mzRQMHkw gUqspIxg8syEMx0/xGhhm0xdWG3iasDhbm4Owc2fQinTTgoh71H8qZQFl6RJrm+x 3D8Vbf+M86FAt8qFilw10fTnKgpvEX2y1y61HC++71fMq30U7OT72syx2Z+wM4tv g/GDUGlJDxbomS09hC7xEwIdXwDBcSIHr25Lq/rkysOV9oSoFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOd9ppoRECfgYDN0Ol2oSoUk1L0+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMTNlYzc0YjMtZmJiZi0z YmFiLWJkNjMtNTVkMWE2MGE2NTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0piVnVvV0c8LgpU9B4LxadIWQ8sko/QtjzeMqZqK8jpmWxY5iWy6W/ M6pYoVufmTmhlJwoGgS3Acpb72pi+MW1s7F8TmYiW6l9z87pn4jBub0asmPEhnfL uJdntnGmnbhl+iYU2jQTg+XogzrHT1IY/rw9eaX4q+lA5w2PY+k1VoYSPW1aF1bx Lpc5MxtLTeSLPcGadApIR4wSG6gVr2X88RW4/v04pCd59842jHuNpPAPwhUbkrVn TR9HXnVm84q/Lzq/NvD7OxuRAZjDpe3fzSir7CRz+HE+it3AWNuc/5ngVLHQ5xwr gSX+uAfEZln9eU0RyT0sjOQy1D5g5dQ= -----END CERTIFICATE-----Generated at Mon Oct 20 08:13:45 2025 by rpki-client