$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2a98ec36-2944-3ff9-bb93-c84e6043ed74.roa File: 2a98ec36-2944-3ff9-bb93-c84e6043ed74.roa (raw, json) Hash identifier: vv2T6B2voKPt3n27iURFe613KUrgTrB7Fq9J1yQLlRo= Subject key identifier: 92:C8:AD:32:71:3E:E2:2D:AD:D9:08:26:FC:2C:D1:F4:17:E6:DB:DB Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F49883AE2372BDCEE1F16BA00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2a98ec36-2944-3ff9-bb93-c84e6043ed74.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 216.171.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:3a:e2:37:2b:dc:ee:1f:16:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=592fae86-1f04-4030-8f6d-39c499c3c627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3a:7a:22:be:d5:56:54:9d:2b:30:e6:86:8b: bd:23:2a:bf:98:04:e7:33:e4:10:6f:0d:c1:83:4b: e5:99:cb:e5:8d:50:e1:1c:8a:d6:47:c7:8c:81:71: c4:69:f2:e6:03:f9:63:c0:8c:85:23:73:44:e3:bc: 93:38:04:63:08:f8:dc:23:21:46:29:00:f1:e5:71: a4:2a:63:bb:a0:6a:6b:c5:57:c5:e8:0f:4f:3c:3b: 7e:bb:42:fc:d6:cf:0b:b4:97:e6:00:b7:fb:94:26: c4:2b:e7:f1:35:3c:6d:99:2f:1e:db:86:21:34:fc: 28:47:50:05:bf:f8:c3:29:fd:08:0a:2d:ae:5d:b5: a1:20:b6:22:99:a6:da:cb:c8:07:03:02:72:01:e1: 7f:e3:b8:5f:e7:43:ca:7c:ee:09:77:db:6b:be:0a: b6:5a:ac:47:09:cd:4c:b6:28:7a:97:69:6d:c2:91: c0:58:c6:67:58:0a:db:d8:bb:79:7a:9e:80:6d:e1: f4:1e:25:e8:9f:cc:22:62:78:3b:35:c2:69:3c:b4: 27:c2:e4:76:a1:63:c1:09:eb:79:a2:92:1c:71:86: da:8b:96:29:94:2d:cb:70:33:a8:98:e7:1c:2c:15: b2:21:c8:15:10:63:0c:8e:6d:56:db:0d:11:d2:46: 7b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C8:AD:32:71:3E:E2:2D:AD:D9:08:26:FC:2C:D1:F4:17:E6:DB:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2a98ec36-2944-3ff9-bb93-c84e6043ed74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:3b:4c:c3:3f:99:0d:e3:b6:d0:34:71:d5:5b:9b:26:4e:70: 7f:54:08:84:c1:db:56:40:80:4c:19:2d:6a:bf:f1:71:c1:e8: a5:a4:2b:04:d7:33:11:e1:3d:be:50:e7:ce:29:e8:19:d3:22: 21:4d:5b:ae:84:38:86:b7:48:7d:6c:fe:1b:db:dd:65:d7:66: 3b:79:bc:66:92:de:38:99:74:54:04:e9:66:64:fb:06:53:1e: 82:16:12:89:98:29:68:af:03:d9:27:9d:92:cd:a5:40:69:d8: 72:30:19:e4:4a:63:b6:e6:e1:14:14:73:bb:6a:1f:2c:77:37: 1e:5e:10:fd:ce:b7:c9:16:6f:aa:0a:63:ab:9a:d7:2e:a7:8a: 53:bd:c2:98:6f:94:ba:92:16:3b:e1:f5:37:c1:a9:1c:83:a2: 1d:db:af:9d:2e:fe:77:43:ba:6b:0e:2a:9c:6f:84:d5:65:58: c4:10:12:f6:da:17:5f:25:eb:9a:34:2c:3f:c9:21:94:13:9a: 92:e6:b8:ef:c9:0a:ba:25:4b:73:6e:de:63:a9:af:d4:f2:e9: 01:a8:cc:49:46:ba:da:6f:68:b0:82:7a:58:b8:69:41:d0:d7: bc:51:cc:44:c5:bf:2f:00:51:51:d9:01:16:08:ba:29:e9:f0: b0:ec:fe:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiDriNyvc7h8WugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTkyZmFlODYtMWYwNC00MDMwLThmNmQtMzljNDk5YzNjNjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzp6Ir7VVlSdKzDmhou9Iyq/mATnM+QQbw3B g0vlmcvljVDhHIrWR8eMgXHEafLmA/ljwIyFI3NE47yTOARjCPjcIyFGKQDx5XGk KmO7oGprxVfF6A9PPDt+u0L81s8LtJfmALf7lCbEK+fxNTxtmS8e24YhNPwoR1AF v/jDKf0ICi2uXbWhILYimabay8gHAwJyAeF/47hf50PKfO4Jd9trvgq2WqxHCc1M tih6l2ltwpHAWMZnWArb2Lt5ep6AbeH0HiXon8wiYng7NcJpPLQnwuR2oWPBCet5 opIccYbai5YplC3LcDOomOccLBWyIcgVEGMMjm1W2w0R0kZ7KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLIrTJxPuItrdkIJvws0fQX5tvbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMmE5OGVjMzYtMjk0NC0z ZmY5LWJiOTMtYzg0ZTYwNDNlZDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADE7TMM/mQ3jttA0cdVbmyZOcH9UCITB21ZAgEwZLWq/8XHB6KWkKwTX MxHhPb5Q584p6BnTIiFNW66EOIa3SH1s/hvb3WXXZjt5vGaS3jiZdFQE6WZk+wZT HoIWEomYKWivA9knnZLNpUBp2HIwGeRKY7bm4RQUc7tqHyx3Nx5eEP3Ot8kWb6oK Y6ua1y6nilO9wphvlLqSFjvh9TfBqRyDoh3br50u/ndDumsOKpxvhNVlWMQQEvba F18l65o0LD/JIZQTmpLmuO/JCrolS3Nu3mOpr9Ty6QGozElGutpvaLCCeli4aUHQ 17xRzETFvy8AUVHZARYIuinp8LDs/s0= -----END CERTIFICATE-----Generated at Fri Sep 25 15:21:01 2026 by rpki-client