$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3568e153-bb9a-3142-b886-5e86d1911256.roa File: 3568e153-bb9a-3142-b886-5e86d1911256.roa (raw, json) Hash identifier: GRxpvkoagm7oySuBUuUEOt1waHQOXUMpRHWDlLoskko= Subject key identifier: 67:D4:FC:69:18:7C:9B:75:1B:88:79:8C:79:DF:08:5E:56:81:6E:2C Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584DCC605C3D0EBC3799E2CF9BE6 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3568e153-bb9a-3142-b886-5e86d1911256.roa Signing time: Mon 11 May 2026 13:00:31 +0000 ROA not before: Mon 11 May 2026 13:00:31 +0000 ROA not after: Sun 09 Aug 2026 13:00:31 +0000 asID: 23473 IP address blocks: 216.171.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cc:60:5c:3d:0e:bc:37:99:e2:cf:9b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: May 11 13:00:31 2026 GMT Not After : Aug 9 13:00:31 2026 GMT Subject: CN=5bb0d3a3-bf41-420b-9947-a4e8b689e7ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:11:35:85:e0:fd:9a:49:a2:0c:38:6b:47:1f: da:d0:e6:36:64:35:42:f3:51:1c:aa:01:51:49:32: fc:46:d5:5a:00:08:41:c8:f2:fe:bf:71:ce:81:a0: 6d:8e:6c:8f:e4:e0:48:62:e1:05:12:b1:1c:20:1c: 41:85:05:12:e4:cf:7f:6e:b9:30:bb:d2:0e:7e:16: b4:ac:5c:90:3b:a2:ed:85:cf:66:c8:25:01:e4:f8: df:26:49:8c:d4:3e:38:94:31:e7:17:b5:9b:e8:5f: 57:12:da:22:b3:9f:64:56:9f:4f:82:cb:7c:c1:a1: c3:e9:fe:34:1c:80:72:2c:c4:f9:f3:da:8d:94:33: 42:e9:67:01:16:9d:98:57:15:a7:9f:2e:7f:d9:3a: 91:7c:3b:d8:c5:31:7f:78:86:7f:7a:5d:62:d1:d4: 57:c1:c9:69:15:86:ba:c3:ec:76:50:d6:2c:08:b0: 49:83:51:04:96:ca:9a:5e:b6:95:f5:57:89:15:6c: 9d:99:06:d1:a1:6c:bf:55:db:d6:e5:dd:24:23:68: 20:24:6b:d2:91:59:3a:52:78:33:21:4d:46:59:b6: 33:be:03:9f:89:00:e9:ba:48:f5:a9:7e:9c:b4:b1: ab:fe:5b:bf:cf:ee:19:a7:0f:56:33:97:ac:d7:93: 18:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D4:FC:69:18:7C:9B:75:1B:88:79:8C:79:DF:08:5E:56:81:6E:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3568e153-bb9a-3142-b886-5e86d1911256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:a6:66:04:71:64:16:f8:d8:4f:86:7f:25:f6:bf:99:89:68: bf:ce:42:a2:cd:35:23:77:13:51:18:ef:8f:38:ed:d5:b1:75: c9:b1:be:c8:ad:71:70:27:8c:7d:a1:75:84:07:ce:a4:d5:ec: 16:60:aa:5c:a0:a3:16:23:7d:61:27:52:5b:08:6f:c2:ba:38: bc:7b:bf:ba:7d:dd:3a:d5:b8:6d:f1:fb:4f:63:32:8a:b8:da: d4:13:3f:ba:7b:55:3f:0e:95:d0:d7:0c:38:7d:b8:a8:0d:ac: 97:26:0b:31:d2:1b:0a:b1:aa:1e:58:b0:d3:73:58:51:a8:28: 37:63:17:7b:e5:02:8e:bc:41:8e:91:e5:48:5e:be:a7:41:00: 6c:f0:41:b2:2b:67:b9:d5:67:7b:49:a6:c6:11:54:33:16:57: 64:3b:17:38:20:cc:91:ee:4c:0d:33:1a:23:91:96:36:e2:6b: 53:39:5e:2d:fa:72:c7:0e:f4:91:df:f6:3c:86:c0:41:32:1b: ba:9d:8e:d9:cc:8d:74:23:e5:ad:50:a2:36:ae:45:44:4f:20: e0:4c:5f:da:b4:88:46:12:3f:5d:fc:17:12:8b:bc:16:f3:12: 37:44:6b:b7:cb:ef:6d:0c:e1:b6:ea:b1:17:51:00:5a:0c:09: 8a:6b:c4:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3MYFw9Drw3meLPm+YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDUxMTEzMDAzMVoXDTI2MDgwOTEzMDAzMVowLzEtMCsGA1UEAxMk NWJiMGQzYTMtYmY0MS00MjBiLTk5NDctYTRlOGI2ODllN2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxE1heD9mkmiDDhrRx/a0OY2ZDVC81EcqgFR STL8RtVaAAhByPL+v3HOgaBtjmyP5OBIYuEFErEcIBxBhQUS5M9/brkwu9IOfha0 rFyQO6Lthc9myCUB5PjfJkmM1D44lDHnF7Wb6F9XEtois59kVp9Pgst8waHD6f40 HIByLMT589qNlDNC6WcBFp2YVxWnny5/2TqRfDvYxTF/eIZ/el1i0dRXwclpFYa6 w+x2UNYsCLBJg1EElsqaXraV9VeJFWydmQbRoWy/VdvW5d0kI2ggJGvSkVk6Ungz IU1GWbYzvgOfiQDpukj1qX6ctLGr/lu/z+4Zpw9WM5es15MYZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfU/GkYfJt1G4h5jHnfCF5WgW4sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMzU2OGUxNTMtYmI5YS0z MTQyLWI4ODYtNWU4NmQxOTExMjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWmZgRxZBb42E+GfyX2v5mJaL/OQqLNNSN3E1EY74847dWxdcmxvsit cXAnjH2hdYQHzqTV7BZgqlygoxYjfWEnUlsIb8K6OLx7v7p93TrVuG3x+09jMoq4 2tQTP7p7VT8OldDXDDh9uKgNrJcmCzHSGwqxqh5YsNNzWFGoKDdjF3vlAo68QY6R 5UhevqdBAGzwQbIrZ7nVZ3tJpsYRVDMWV2Q7FzggzJHuTA0zGiORljbia1M5Xi36 cscO9JHf9jyGwEEyG7qdjtnMjXQj5a1QojauRURPIOBMX9q0iEYSP138FxKLvBbz EjdEa7fL720M4bbqsRdRAFoMCYprxHw= -----END CERTIFICATE-----Generated at Wed May 13 10:55:39 2026 by rpki-client