$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d517b061-165f-3e61-bd0e-ee90c4f7f613.roa File: d517b061-165f-3e61-bd0e-ee90c4f7f613.roa (raw, json) Hash identifier: htIlY35aOCBcBS+YZcl2UrqZ+1sIFrFonADPi0s2zY4= Subject key identifier: 9F:80:E5:91:F9:FC:26:3E:69:BB:39:88:CD:68:62:B4:6A:28:BD:50 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584E5A4A1FDD71BC6BD9BA38B880 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d517b061-165f-3e61-bd0e-ee90c4f7f613.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 23473 IP address blocks: 216.171.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:4a:1f:dd:71:bc:6b:d9:ba:38:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=e6867c95-56ec-479a-a621-adf1d46fc045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:33:75:e7:b5:98:41:f8:c3:ab:2d:28:13:a8: ce:e5:cf:ab:b1:46:72:ed:54:30:9f:de:52:f3:be: b7:c8:59:31:30:af:0a:a0:ae:7d:56:e6:2f:d3:35: 84:5b:22:4f:a7:17:2b:03:8a:5a:01:85:ad:62:c1: 66:c0:8b:d2:d0:29:73:f6:fe:a8:2c:bf:e1:86:bd: cb:53:78:28:c3:bc:10:76:0f:d7:b2:5f:f8:e6:4f: 26:dd:b0:11:f8:17:3e:93:a1:ee:19:82:33:34:e3: 1f:46:1a:be:09:9a:89:fa:18:cc:44:a8:eb:b7:f0: 46:90:a7:4d:1c:a0:f5:b1:65:3b:36:42:b6:9c:4c: 4c:f3:01:e0:7e:18:e1:d2:a6:cf:e0:79:96:aa:5f: 36:ea:b6:86:85:a3:77:90:e2:cf:6c:51:db:f4:59: 4f:60:25:6f:09:c9:dc:92:2e:2e:7a:f0:fe:0d:27: d3:0d:7e:2b:2f:e0:17:8a:f7:17:ad:7f:7a:77:c5: ec:89:90:37:28:d9:1e:75:36:1f:b0:19:82:a5:2d: 5e:f1:50:56:f7:14:93:20:25:70:5c:92:5d:7c:e5: 6b:f3:36:99:ff:83:05:bf:c6:0c:1d:02:f4:ec:88: 3e:d0:25:2b:2f:d1:a3:7a:9b:1c:9f:24:1b:2f:e7: 4c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:80:E5:91:F9:FC:26:3E:69:BB:39:88:CD:68:62:B4:6A:28:BD:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d517b061-165f-3e61-bd0e-ee90c4f7f613.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:69:f2:68:ff:4b:4a:3c:a7:56:37:b3:87:4b:15:a1:eb:c2: 38:1f:60:c0:d3:16:3f:3d:9e:3a:14:72:55:0b:4a:6b:04:3f: 6d:e9:ac:5e:fb:d2:a6:de:11:7a:48:10:d2:ab:a1:42:27:84: d7:6e:5b:a1:ac:a8:30:bb:db:7a:4c:41:bd:d9:4b:f9:bf:62: 74:88:98:d7:35:c8:4d:db:2b:9d:ca:7d:ec:7d:69:fb:5d:04: f4:26:5e:28:75:c4:ba:1a:b3:e7:f7:4e:2a:f1:64:73:63:26: 02:f1:be:6e:6b:f1:66:6b:c2:89:81:59:92:20:e5:35:87:46: 29:47:6e:8b:6e:56:27:97:f8:04:aa:30:77:f7:86:15:18:7c: a2:96:ed:75:42:b2:26:48:81:4f:eb:7a:c7:8b:c6:1b:e5:d8: 91:a0:c3:d5:4a:bf:fb:4c:16:5e:2d:b6:08:f5:53:7d:e7:f3: 83:a0:e7:0d:b0:de:98:a1:5e:86:96:27:5c:22:67:d5:2e:83: 1c:b2:f9:2e:fc:fb:0e:4a:9a:96:68:db:70:87:a0:ca:9f:b8: b5:c0:a0:b9:7d:e4:d0:cc:02:de:8d:4c:88:70:53:d3:d0:87: 7b:6f:02:f8:dd:26:6f:a8:72:69:4a:ac:d2:8e:ad:77:14:40: 79:0c:68:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSh/dcbxr2bo4uIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk ZTY4NjdjOTUtNTZlYy00NzlhLWE2MjEtYWRmMWQ0NmZjMDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTN157WYQfjDqy0oE6jO5c+rsUZy7VQwn95S 8763yFkxMK8KoK59VuYv0zWEWyJPpxcrA4paAYWtYsFmwIvS0Clz9v6oLL/hhr3L U3gow7wQdg/Xsl/45k8m3bAR+Bc+k6HuGYIzNOMfRhq+CZqJ+hjMRKjrt/BGkKdN HKD1sWU7NkK2nExM8wHgfhjh0qbP4HmWql826raGhaN3kOLPbFHb9FlPYCVvCcnc ki4uevD+DSfTDX4rL+AXivcXrX96d8XsiZA3KNkedTYfsBmCpS1e8VBW9xSTICVw XJJdfOVr8zaZ/4MFv8YMHQL07Ig+0CUrL9GjepscnyQbL+dMrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+A5ZH5/CY+abs5iM1oYrRqKL1QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZDUxN2IwNjEtMTY1Zi0z ZTYxLWJkMGUtZWU5MGM0ZjdmNjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Ks4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENp8mj/S0o8p1Y3s4dLFaHrwjgfYMDTFj89njoUclULSmsEP23prF77 0qbeEXpIENKroUInhNduW6GsqDC723pMQb3ZS/m/YnSImNc1yE3bK53Kfex9aftd BPQmXih1xLoas+f3TirxZHNjJgLxvm5r8WZrwomBWZIg5TWHRilHbotuVieX+ASq MHf3hhUYfKKW7XVCsiZIgU/reseLxhvl2JGgw9VKv/tMFl4ttgj1U33n84Og5w2w 3pihXoaWJ1wiZ9Uugxyy+S78+w5KmpZo23CHoMqfuLXAoLl95NDMAt6NTIhwU9PQ h3tvAvjdJm+ocmlKrNKOrXcUQHkMaEc= -----END CERTIFICATE-----Generated at Fri Jul 24 04:58:26 2026 by rpki-client