$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2f841437-66c9-3296-93b6-6d83b9f942e7.roa File: 2f841437-66c9-3296-93b6-6d83b9f942e7.roa (raw, json) Hash identifier: mbWUqBgTqT5FC7qjGf/zDJe4JLQvPZ8I1QNtQb8x0HY= Subject key identifier: 3C:61:8E:11:CF:1B:67:98:C6:8C:A0:22:53:91:84:FD:CB:6D:1D:EE Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F4988F7F3B28533AAFB4D2000 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2f841437-66c9-3296-93b6-6d83b9f942e7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 216.171.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:f7:f3:b2:85:33:aa:fb:4d:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a37e022f-374f-435e-8e6d-7f78b0fe7b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e3:76:bd:54:9e:91:cc:95:79:59:57:90:f7: d3:88:ae:e4:2a:a8:ac:46:aa:8a:0f:66:c5:ed:ac: 16:71:f9:10:8f:ce:97:63:d9:0d:6f:bb:57:24:6e: 81:7e:ae:ef:c7:0f:27:ae:c3:3a:58:6f:5a:aa:52: 56:c6:61:b8:c3:3f:71:06:55:fd:5a:96:8a:ed:76: 9c:ba:35:e2:2a:3b:6a:72:40:a5:79:f0:41:ff:f8: 5f:70:d7:15:92:8b:ca:23:61:05:50:cf:c4:b7:37: 08:ae:88:59:1e:14:4c:c8:c0:b2:6e:81:1b:b4:26: 41:21:04:31:b8:04:29:ca:08:6a:fe:d8:50:9b:d8: 7f:76:35:81:fb:75:42:d4:5a:81:14:bb:bd:0e:6a: 0a:1b:3f:2b:8e:36:c0:8b:2c:40:50:43:59:3e:d0: 1a:e0:7b:4f:4b:75:a2:d7:16:99:c5:75:6f:fe:e9: 1d:6a:a0:fd:cd:f3:43:ee:b1:c3:3e:e7:db:64:01: 49:81:ee:62:97:60:87:b4:e7:83:39:48:57:dd:0e: 0b:3b:30:83:3e:28:99:87:6f:fe:97:5b:af:c2:24: 12:e4:9d:19:11:af:0a:d0:f1:f5:a8:e9:c1:fa:9a: e3:0b:3f:82:18:77:31:1c:1c:69:06:40:a1:88:91: 04:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:61:8E:11:CF:1B:67:98:C6:8C:A0:22:53:91:84:FD:CB:6D:1D:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2f841437-66c9-3296-93b6-6d83b9f942e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:4a:e6:4f:d5:04:0b:32:6f:30:d6:2f:e5:6e:7d:8f:e6:d5: f4:64:01:0a:92:57:59:bb:53:d9:03:90:a6:d6:f3:4b:cc:25: 60:f5:df:a8:e2:b6:6f:eb:be:67:a4:aa:84:68:c5:4e:04:79: 59:2a:2f:b5:17:51:fb:ac:94:3e:82:40:0b:b0:17:02:0c:c4: 12:69:65:92:c1:99:f3:be:82:bd:1f:9f:2e:d6:58:e5:c7:a7: 71:1b:83:c1:2f:64:0f:a3:53:cb:e2:ba:c8:a2:bf:45:45:50: cf:8f:fd:f0:96:ce:58:fa:1f:ef:8b:66:b5:b4:8b:9e:0a:37: e0:a5:d6:4f:fc:a9:d9:9c:94:39:a5:22:0f:5e:51:9d:04:21: ae:0e:a0:b6:c8:9c:9b:5a:d1:28:f2:fa:a7:c9:80:70:42:62: c2:c5:33:f0:52:31:3e:b5:2e:86:55:44:86:34:ad:0e:a5:d7: 50:f7:60:50:57:7c:45:96:b8:38:44:04:56:05:cc:5c:39:3b: d6:4a:3b:df:13:d0:67:c2:69:7d:75:d5:0b:bc:ad:46:19:e0: 6b:7d:f3:2a:91:9a:74:e4:34:cd:a7:43:67:b9:ab:14:8d:ab: 6a:61:b8:32:60:04:66:75:97:da:04:de:3d:54:46:be:ec:34: 45:77:39:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiPfzsoUzqvtNIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTM3ZTAyMmYtMzc0Zi00MzVlLThlNmQtN2Y3OGIwZmU3Yjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluN2vVSekcyVeVlXkPfTiK7kKqisRqqKD2bF 7awWcfkQj86XY9kNb7tXJG6Bfq7vxw8nrsM6WG9aqlJWxmG4wz9xBlX9WpaK7Xac ujXiKjtqckClefBB//hfcNcVkovKI2EFUM/EtzcIrohZHhRMyMCyboEbtCZBIQQx uAQpyghq/thQm9h/djWB+3VC1FqBFLu9DmoKGz8rjjbAiyxAUENZPtAa4HtPS3Wi 1xaZxXVv/ukdaqD9zfND7rHDPufbZAFJge5il2CHtOeDOUhX3Q4LOzCDPiiZh2/+ l1uvwiQS5J0ZEa8K0PH1qOnB+prjCz+CGHcxHBxpBkChiJEETwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxhjhHPG2eYxoygIlORhP3LbR3uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMmY4NDE0MzctNjZjOS0z Mjk2LTkzYjYtNmQ4M2I5Zjk0MmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KssMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtK5k/VBAsybzDWL+VufY/m1fRkAQqSV1m7U9kDkKbW80vMJWD136ji tm/rvmekqoRoxU4EeVkqL7UXUfuslD6CQAuwFwIMxBJpZZLBmfO+gr0fny7WWOXH p3Ebg8EvZA+jU8viusiiv0VFUM+P/fCWzlj6H++LZrW0i54KN+Cl1k/8qdmclDml Ig9eUZ0EIa4OoLbInJta0Sjy+qfJgHBCYsLFM/BSMT61LoZVRIY0rQ6l11D3YFBX fEWWuDhEBFYFzFw5O9ZKO98T0GfCaX111Qu8rUYZ4Gt98yqRmnTkNM2nQ2e5qxSN q2phuDJgBGZ1l9oE3j1URr7sNEV3Od4= -----END CERTIFICATE-----Generated at Fri Sep 25 21:56:58 2026 by rpki-client