$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/249b8744-14d9-3626-bbd4-36c3c63af17a.roa File: 249b8744-14d9-3626-bbd4-36c3c63af17a.roa (raw, json) Hash identifier: IQiyhel+fu4Q/9cF8vXDSqZljXRTPAXjJlT9/TaCb/I= Subject key identifier: D6:77:94:07:45:E1:0F:37:09:A4:D8:17:03:69:AD:A3:91:41:12:1C Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584DCC605BB9E4E52BDF87E3F6C0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/249b8744-14d9-3626-bbd4-36c3c63af17a.roa Signing time: Mon 11 May 2026 13:00:31 +0000 ROA not before: Mon 11 May 2026 13:00:31 +0000 ROA not after: Sun 09 Aug 2026 13:00:31 +0000 asID: 23473 IP address blocks: 216.171.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cc:60:5b:b9:e4:e5:2b:df:87:e3:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: May 11 13:00:31 2026 GMT Not After : Aug 9 13:00:31 2026 GMT Subject: CN=6929beac-e581-4f40-b306-a1a3e8567438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:af:b0:71:5d:d7:ca:ae:e1:0f:84:29:96:4e: 68:58:3a:96:4d:47:c7:cf:07:25:6a:54:1a:de:15: 37:c7:37:a4:01:0f:fe:7d:38:0b:1b:f5:ca:c4:b3: c1:8c:2f:aa:5e:a0:e5:d6:e3:b2:65:e0:f7:56:85: 45:6b:aa:98:7d:03:5c:09:9b:2e:a6:aa:6b:6b:44: a3:5a:09:56:ef:7d:5e:a5:38:71:f6:5f:8a:fc:23: 2e:e9:48:e3:82:b4:75:6f:d8:75:ab:bf:cc:0b:5a: ae:b7:64:1f:5c:7f:4c:bd:9d:b5:86:f8:58:fb:9d: bf:f7:c5:1b:18:63:45:09:15:93:5d:6b:aa:80:6a: 7d:07:44:53:0f:0d:21:73:30:01:af:d3:0f:26:63: a7:fb:d3:c7:34:ae:dd:15:fe:22:78:d2:02:84:26: 39:a0:85:87:c0:84:e9:9b:70:a2:03:d0:32:05:a1: 8b:78:5c:d7:88:4f:a9:c5:3d:d9:92:b4:94:da:06: bc:55:13:47:c7:43:b0:50:bf:50:8d:57:2e:ab:63: c1:57:ab:e7:08:50:57:ce:6a:f8:e9:b4:e6:19:50: 25:60:18:7a:0a:cd:80:60:54:4c:02:3b:5b:0c:e5: b2:2c:40:fe:3b:ce:00:93:cc:ab:95:c4:a6:c1:34: ac:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:77:94:07:45:E1:0F:37:09:A4:D8:17:03:69:AD:A3:91:41:12:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/249b8744-14d9-3626-bbd4-36c3c63af17a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:15:10:ad:04:b7:a5:e0:b1:ab:d6:a8:41:6f:70:07:de:f8: 56:4c:05:fe:bd:0a:5b:d1:f6:45:bf:ce:c3:b6:b7:9d:b7:49: 3b:a8:6e:d7:1e:80:c6:ea:90:2b:61:93:a6:d9:7a:b6:5b:4a: c6:8c:25:21:3e:af:92:b9:c7:c6:5d:fa:a0:ff:4b:4b:e1:45: 8d:95:d7:8b:c9:0e:40:69:78:d1:3c:f9:5b:b1:70:a5:c1:d9: 8e:8c:90:ce:cb:e8:0f:cb:27:bd:82:43:32:8b:90:a0:cd:1b: 92:f3:dc:aa:4b:1e:5b:5d:53:31:32:47:2f:cb:7a:17:12:34: 84:49:ab:4a:8c:15:f1:5e:f7:4f:4c:04:0b:5d:17:28:3d:f9: 83:ca:34:51:51:3d:ad:ac:e4:cf:06:5c:68:90:9d:16:2c:65: 86:3d:1f:43:a6:a1:9f:21:8b:dc:5d:a4:78:79:65:37:90:0b: 36:ed:c6:c2:0b:9a:70:da:b2:35:1d:78:10:59:c4:5a:28:f2: 23:ea:74:23:fb:b4:7a:12:4a:ea:5f:23:03:4f:fd:8f:e3:37: 86:0f:a8:38:13:04:01:9c:6e:30:b9:a4:21:46:fd:16:b0:ce: 25:4b:12:af:8c:02:b7:5a:bc:40:f1:05:00:8a:e6:96:ec:c0: ad:5c:ca:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3MYFu55OUr34fj9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDUxMTEzMDAzMVoXDTI2MDgwOTEzMDAzMVowLzEtMCsGA1UEAxMk NjkyOWJlYWMtZTU4MS00ZjQwLWIzMDYtYTFhM2U4NTY3NDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza+wcV3Xyq7hD4Qplk5oWDqWTUfHzwclalQa 3hU3xzekAQ/+fTgLG/XKxLPBjC+qXqDl1uOyZeD3VoVFa6qYfQNcCZsupqpra0Sj WglW731epThx9l+K/CMu6UjjgrR1b9h1q7/MC1qut2QfXH9MvZ21hvhY+52/98Ub GGNFCRWTXWuqgGp9B0RTDw0hczABr9MPJmOn+9PHNK7dFf4ieNIChCY5oIWHwITp m3CiA9AyBaGLeFzXiE+pxT3ZkrSU2ga8VRNHx0OwUL9QjVcuq2PBV6vnCFBXzmr4 6bTmGVAlYBh6Cs2AYFRMAjtbDOWyLED+O84Ak8yrlcSmwTSsIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZ3lAdF4Q83CaTYFwNpraORQRIcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMjQ5Yjg3NDQtMTRkOS0z NjI2LWJiZDQtMzZjM2M2M2FmMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQVEK0Et6XgsavWqEFvcAfe+FZMBf69ClvR9kW/zsO2t523STuobtce gMbqkCthk6bZerZbSsaMJSE+r5K5x8Zd+qD/S0vhRY2V14vJDkBpeNE8+VuxcKXB 2Y6MkM7L6A/LJ72CQzKLkKDNG5Lz3KpLHltdUzEyRy/LehcSNIRJq0qMFfFe909M BAtdFyg9+YPKNFFRPa2s5M8GXGiQnRYsZYY9H0OmoZ8hi9xdpHh5ZTeQCzbtxsIL mnDasjUdeBBZxFoo8iPqdCP7tHoSSupfIwNP/Y/jN4YPqDgTBAGcbjC5pCFG/Raw ziVLEq+MArdavEDxBQCK5pbswK1cyqA= -----END CERTIFICATE-----Generated at Wed May 13 09:04:19 2026 by rpki-client