$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ba25dad7-de41-3db2-95c3-60dfd7a76c45.roa File: ba25dad7-de41-3db2-95c3-60dfd7a76c45.roa (raw, json) Hash identifier: B/ensCbxT38xCc6fOPy77zNNLPPKWix9qjH2oaKlYbg= Subject key identifier: DD:AB:6A:31:A1:44:E9:59:30:14:58:8C:57:26:E0:58:0F:A6:08:BF Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F498A3B6C5143E10297877BE0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ba25dad7-de41-3db2-95c3-60dfd7a76c45.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 216.171.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:3b:6c:51:43:e1:02:97:87:7b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7335c4da-e9e7-4ad7-b830-a87407d3dc80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:9d:7e:67:11:d8:38:9f:27:61:5d:96:0c:66: 53:36:ff:05:c6:6c:86:10:8c:5e:01:2e:c7:54:6c: 52:94:c7:cc:98:0e:13:ad:05:43:3d:09:23:4d:14: a9:19:0f:c7:06:43:63:6d:9f:17:ed:03:c7:b0:52: 16:1a:6f:f7:f5:90:b7:45:31:24:67:a9:25:3d:16: 25:10:5b:0d:e6:77:20:c3:94:3f:bd:b0:1d:f5:cc: ee:6e:3a:e6:68:17:32:cd:59:90:00:b8:00:32:d8: 58:b5:ed:10:6a:0e:58:4f:1d:bf:d6:d5:69:17:e5: eb:de:48:f6:db:c2:00:ee:9a:db:2e:28:f7:f4:4f: 8a:c4:8b:80:b3:42:5b:74:78:b4:30:23:3b:8d:41: 5c:3b:20:0c:e1:4b:09:41:55:c3:0b:7b:a6:fa:7d: 0c:f4:ad:6f:64:15:65:03:76:7c:46:b6:dc:c0:19: c6:e7:f9:39:50:0a:39:e8:6e:5a:bf:55:ca:b9:a1: 82:18:07:7d:ca:cc:e0:ae:38:4a:21:3d:55:8a:5d: ed:a9:d7:14:8a:aa:56:69:cc:1d:a4:8b:18:bd:c7: 50:5a:c8:80:53:b8:c5:54:ef:af:79:fc:67:53:3e: 48:e6:1b:94:78:b6:10:56:2a:bf:3b:d2:99:fb:7f: 51:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AB:6A:31:A1:44:E9:59:30:14:58:8C:57:26:E0:58:0F:A6:08:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ba25dad7-de41-3db2-95c3-60dfd7a76c45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:0c:0b:65:ea:ee:16:a4:56:ec:89:54:ef:e4:67:bb:4e:9c: 84:67:ba:3f:aa:fc:d6:8c:ba:e9:82:46:a4:b7:8c:66:0f:3a: f5:bb:88:4d:30:23:19:0a:09:5f:0e:98:fd:3b:a6:f5:53:31: c0:59:f0:41:84:cf:a4:23:a1:a2:a6:b5:b3:cf:59:a8:cc:b9: b8:28:37:5c:29:bc:ea:e6:1f:a7:eb:e5:b6:db:b5:9a:6e:97: f8:3f:42:33:4f:f2:c2:30:bd:32:af:08:56:8a:9c:e1:24:8f: a2:da:71:4f:78:67:4e:3b:18:73:cd:9f:09:ae:7f:e3:5f:09: 0f:ea:07:d2:c6:9e:83:82:57:51:17:92:98:77:82:9f:5a:bc: 70:67:ba:b3:23:98:b7:8d:70:99:3d:43:a1:ed:a4:de:88:51: d1:b9:93:83:86:7d:9d:15:71:55:f9:50:e5:de:9c:03:ca:35: d9:d6:5a:d2:97:71:28:2f:ea:44:3b:4e:6a:d5:2e:7c:23:62: 9a:95:06:94:46:0d:59:39:f6:3b:98:3b:6f:31:ae:dd:89:b9: d3:1f:5c:91:c3:86:91:61:b1:88:35:77:30:f9:db:a1:cb:bb: ae:6a:50:80:51:b8:c7:b9:fc:11:f2:f5:c2:dc:6e:92:15:fa: 55:b3:c2:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JijtsUUPhApeHe+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzMzNWM0ZGEtZTllNy00YWQ3LWI4MzAtYTg3NDA3ZDNkYzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA951+ZxHYOJ8nYV2WDGZTNv8FxmyGEIxeAS7H VGxSlMfMmA4TrQVDPQkjTRSpGQ/HBkNjbZ8X7QPHsFIWGm/39ZC3RTEkZ6klPRYl EFsN5ncgw5Q/vbAd9czubjrmaBcyzVmQALgAMthYte0Qag5YTx2/1tVpF+Xr3kj2 28IA7prbLij39E+KxIuAs0JbdHi0MCM7jUFcOyAM4UsJQVXDC3um+n0M9K1vZBVl A3Z8RrbcwBnG5/k5UAo56G5av1XKuaGCGAd9yszgrjhKIT1Vil3tqdcUiqpWacwd pIsYvcdQWsiAU7jFVO+vefxnUz5I5huUeLYQViq/O9KZ+39RywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2rajGhROlZMBRYjFcm4FgPpgi/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYmEyNWRhZDctZGU0MS0z ZGIyLTk1YzMtNjBkZmQ3YTc2YzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgMC2Xq7hakVuyJVO/kZ7tOnIRnuj+q/NaMuumCRqS3jGYPOvW7iE0w IxkKCV8OmP07pvVTMcBZ8EGEz6QjoaKmtbPPWajMubgoN1wpvOrmH6fr5bbbtZpu l/g/QjNP8sIwvTKvCFaKnOEkj6LacU94Z047GHPNnwmuf+NfCQ/qB9LGnoOCV1EX kph3gp9avHBnurMjmLeNcJk9Q6HtpN6IUdG5k4OGfZ0VcVX5UOXenAPKNdnWWtKX cSgv6kQ7TmrVLnwjYpqVBpRGDVk59juYO28xrt2JudMfXJHDhpFhsYg1dzD526HL u65qUIBRuMe5/BHy9cLcbpIV+lWzwto= -----END CERTIFICATE-----Generated at Fri Sep 25 11:03:56 2026 by rpki-client