$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cd4f07ea-112f-32be-8929-8ba3c89a0e8f.roa File: cd4f07ea-112f-32be-8929-8ba3c89a0e8f.roa (raw, json) Hash identifier: lZ2FdTqXD4R4m55J3MXL5jTUOepVhX10TVO/H4/auuM= Subject key identifier: 37:DF:09:84:E2:6E:61:A3:33:7D:12:EA:A2:C7:3B:51:6A:76:AC:48 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584E9A7FD019EC49EEC006EF8090 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cd4f07ea-112f-32be-8929-8ba3c89a0e8f.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 23473 IP address blocks: 216.171.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:d0:19:ec:49:ee:c0:06:ef:80:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=161a58fb-caaa-47b6-ab2e-420c2be242ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9e:12:d1:ba:9e:90:f6:c4:19:c9:f0:35:af: 5b:c8:b5:c4:d4:fb:92:6f:ec:6c:b9:45:6f:94:c5: 1b:e1:5d:df:02:36:60:39:0f:73:c3:f4:e3:bf:9f: ef:b9:d1:d7:1e:f2:eb:50:4c:50:8f:8e:ce:d7:6e: 64:82:51:00:df:55:8c:7e:7d:b6:27:50:0c:40:e8: 36:be:0a:db:cc:4a:76:87:fe:3d:fc:14:41:c2:27: 80:3c:4c:6b:19:96:ad:35:e5:02:6e:a7:b8:dc:7f: 5a:dc:cf:0c:e4:2a:66:42:84:6c:22:be:36:b2:2e: a5:5d:28:15:8b:ca:ab:5c:e3:f4:25:a4:c4:b7:56: 13:19:08:76:cf:c6:a5:c0:9d:e3:9e:c6:cf:b0:ab: 1b:58:63:76:18:78:e5:60:0a:ff:67:2d:39:ce:0f: 12:63:35:8f:ff:50:1d:df:2d:20:03:08:c6:f5:a7: 9f:87:d8:a5:ce:38:0f:85:89:3e:6c:02:3c:30:89: fb:4e:d3:af:2f:dc:b8:8c:d1:5d:ab:d8:00:e8:d4: cd:f1:c4:51:f9:cd:2d:a5:31:b4:0e:28:9b:bb:c7: 2b:5c:65:d9:fb:12:ca:7a:20:07:d4:99:bb:de:d5: 29:03:d7:da:ad:47:e2:ba:10:df:1d:52:22:f7:03: 13:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DF:09:84:E2:6E:61:A3:33:7D:12:EA:A2:C7:3B:51:6A:76:AC:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cd4f07ea-112f-32be-8929-8ba3c89a0e8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:de:0b:15:e8:29:a9:92:3c:ad:f4:01:19:5f:0a:d0:19:de: 76:9d:c1:95:14:41:e8:73:b8:33:75:b5:40:27:f4:85:dd:7a: 42:33:4a:dd:cc:61:f5:16:50:10:e6:4b:73:69:b6:0d:11:8d: 05:14:4d:ba:ac:12:6f:4d:c4:1b:7a:c7:3e:fe:5e:ce:48:02: 5e:62:e1:94:1a:5a:1f:e0:f0:c0:ed:fe:95:5a:f9:79:5e:e4: fd:6a:05:67:63:70:04:f8:8c:65:17:74:fc:55:dc:fe:42:23: e7:52:57:d6:67:cc:67:4f:17:3e:a2:5e:ce:4f:15:b1:ca:a1: 76:eb:53:c0:01:dd:05:56:8a:e8:97:97:08:ea:bf:2e:05:74: 1d:f7:ad:a7:de:27:44:9c:4d:e4:5a:1b:4d:ea:7e:a1:01:c6: 4e:17:30:07:cd:51:15:f4:64:06:c4:49:24:5e:98:26:dd:e7: bf:9a:6f:25:65:7f:5c:7f:e1:fa:b1:ad:75:5a:4d:a7:0d:8e: 3c:4d:28:12:83:1b:df:02:23:7d:71:5c:e3:41:9f:01:07:7d: 16:e7:10:71:9f:c5:3f:ee:b1:11:0b:60:83:fd:f6:79:6c:43: e9:6f:0a:b0:46:60:c9:3c:c7:87:15:e1:8c:1e:d5:27:bd:cb: e6:a4:cf:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af9AZ7EnuwAbvgJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk MTYxYTU4ZmItY2FhYS00N2I2LWFiMmUtNDIwYzJiZTI0MmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ4S0bqekPbEGcnwNa9byLXE1PuSb+xsuUVv lMUb4V3fAjZgOQ9zw/Tjv5/vudHXHvLrUExQj47O125kglEA31WMfn22J1AMQOg2 vgrbzEp2h/49/BRBwieAPExrGZatNeUCbqe43H9a3M8M5CpmQoRsIr42si6lXSgV i8qrXOP0JaTEt1YTGQh2z8alwJ3jnsbPsKsbWGN2GHjlYAr/Zy05zg8SYzWP/1Ad 3y0gAwjG9aefh9ilzjgPhYk+bAI8MIn7TtOvL9y4jNFdq9gA6NTN8cRR+c0tpTG0 Diibu8crXGXZ+xLKeiAH1Jm73tUpA9farUfiuhDfHVIi9wMTJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDffCYTibmGjM30S6qLHO1FqdqxIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvY2Q0ZjA3ZWEtMTEyZi0z MmJlLTg5MjktOGJhM2M4OWEwZThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGreCxXoKamSPK30ARlfCtAZ3nadwZUUQehzuDN1tUAn9IXdekIzSt3M YfUWUBDmS3Nptg0RjQUUTbqsEm9NxBt6xz7+Xs5IAl5i4ZQaWh/g8MDt/pVa+Xle 5P1qBWdjcAT4jGUXdPxV3P5CI+dSV9ZnzGdPFz6iXs5PFbHKoXbrU8AB3QVWiuiX lwjqvy4FdB33rafeJ0ScTeRaG03qfqEBxk4XMAfNURX0ZAbESSRemCbd57+abyVl f1x/4fqxrXVaTacNjjxNKBKDG98CI31xXONBnwEHfRbnEHGfxT/usRELYIP99nls Q+lvCrBGYMk8x4cV4Ywe1Se9y+akz4Y= -----END CERTIFICATE-----Generated at Fri Jul 24 12:13:29 2026 by rpki-client