$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f21897cb-4228-380a-8a5d-bbd1b3af7d67.roa File: f21897cb-4228-380a-8a5d-bbd1b3af7d67.roa (raw, json) Hash identifier: rkmdF5fwtsLK6vbiLO6BJziorqQb3HCPbA64VRuChd8= Subject key identifier: BD:14:3F:B8:17:82:18:E9:F2:E8:8F:FE:F7:16:C3:37:4C:46:7B:AE Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584E5BAF614A55F810893EC10080 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f21897cb-4228-380a-8a5d-bbd1b3af7d67.roa Signing time: Wed 01 Jul 2026 21:00:12 +0000 ROA not before: Wed 01 Jul 2026 21:00:12 +0000 ROA not after: Tue 29 Sep 2026 21:00:12 +0000 asID: 23473 IP address blocks: 216.171.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:af:61:4a:55:f8:10:89:3e:c1:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jul 1 21:00:12 2026 GMT Not After : Sep 29 21:00:12 2026 GMT Subject: CN=af66a824-f11f-45b9-925b-c968498c9fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b8:0e:c4:e2:f7:06:f0:6d:22:8c:63:ca:e8: 90:9b:02:21:c1:88:63:00:eb:08:38:d6:4a:c0:de: 44:26:bc:cf:4c:43:fc:c0:9e:9a:97:fb:12:f6:2b: 8f:c8:53:2a:fd:83:f4:60:94:2c:57:f1:73:cf:da: 36:c8:bf:72:57:a7:2c:87:30:5f:f4:f2:07:dc:6d: e2:b0:44:8c:18:4b:bc:45:3c:ca:e0:2e:72:3e:ba: 0f:03:6e:3c:3f:d1:44:54:b9:67:33:fb:c2:5f:b3: fe:ce:d5:09:9e:89:cc:59:26:e4:84:16:ac:c0:be: 67:13:53:73:9e:a7:34:73:9e:ac:6b:6d:64:e4:58: 12:51:a1:b1:3a:d4:3d:19:8f:3e:c3:17:9c:e5:43: 81:c6:3b:c8:f2:d8:89:9f:cf:fa:ff:6b:69:a8:3b: d3:e8:16:e7:9c:23:6b:3b:2c:ee:9c:15:dc:ec:7a: 7d:90:c5:3b:23:18:74:1a:b6:d7:06:d9:a7:cc:1b: 4f:fd:b1:3b:5f:42:7b:cb:b1:16:88:39:b8:a9:23: 6f:0f:f1:40:c7:91:96:70:3c:0c:33:95:47:76:a6: a9:f2:12:4f:d9:b2:d6:ea:7e:71:c6:50:c4:c5:b4: b5:03:07:73:31:a0:42:9f:b3:4f:f8:27:6b:75:42: bc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:14:3F:B8:17:82:18:E9:F2:E8:8F:FE:F7:16:C3:37:4C:46:7B:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f21897cb-4228-380a-8a5d-bbd1b3af7d67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:9b:f6:d0:bb:20:4b:f9:89:6b:f0:13:c9:d4:bb:34:de:15: eb:62:e9:1e:33:1f:2b:81:55:f9:b3:a0:08:1f:f2:6e:97:24: e3:55:46:c4:23:af:48:35:d5:22:f1:31:7d:da:43:e9:d7:fe: 4e:0b:c6:e3:4a:47:85:8d:28:fb:a3:63:ea:c3:6f:cb:d6:8d: bf:5d:2e:5c:69:d7:20:46:31:20:1f:28:4b:db:ea:d8:4e:55: 85:6b:20:8d:84:e9:23:95:a3:1e:19:73:77:8a:ba:0d:ce:79: 26:9d:bc:ca:55:e8:9c:d4:df:52:23:9f:38:40:04:2b:77:27: 32:5e:b9:a8:6f:ca:20:cc:c7:5f:4b:95:a2:d1:81:e1:06:6a: 8a:e9:03:95:0c:66:8c:37:32:37:85:66:0a:e8:ef:aa:a3:97: 7d:17:48:14:7d:2d:4a:fe:6f:02:64:f4:12:a2:0c:e4:02:e6: b9:a5:d5:0b:07:83:7f:da:38:ed:de:e5:a9:48:2a:77:ea:26: c6:13:a7:35:07:f5:c2:8b:76:7e:b7:32:f4:9c:d5:3b:dc:2f: 04:f0:dc:e3:3f:a5:7a:f4:be:68:e1:99:77:87:62:c8:7f:e2: 7d:53:7a:21:d1:19:a9:ca:20:31:9e:3b:de:29:7b:49:af:47: d0:60:0d:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5br2FKVfgQiT7BAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDcwMTIxMDAxMloXDTI2MDkyOTIxMDAxMlowLzEtMCsGA1UEAxMk YWY2NmE4MjQtZjExZi00NWI5LTkyNWItYzk2ODQ5OGM5ZmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLgOxOL3BvBtIoxjyuiQmwIhwYhjAOsIONZK wN5EJrzPTEP8wJ6al/sS9iuPyFMq/YP0YJQsV/Fzz9o2yL9yV6cshzBf9PIH3G3i sESMGEu8RTzK4C5yProPA248P9FEVLlnM/vCX7P+ztUJnonMWSbkhBaswL5nE1Nz nqc0c56sa21k5FgSUaGxOtQ9GY8+wxec5UOBxjvI8tiJn8/6/2tpqDvT6BbnnCNr OyzunBXc7Hp9kMU7Ixh0GrbXBtmnzBtP/bE7X0J7y7EWiDm4qSNvD/FAx5GWcDwM M5VHdqap8hJP2bLW6n5xxlDExbS1AwdzMaBCn7NP+CdrdUK8PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0UP7gXghjp8uiP/vcWwzdMRnuuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZjIxODk3Y2ItNDIyOC0z ODBhLThhNWQtYmJkMWIzYWY3ZDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKb9tC7IEv5iWvwE8nUuzTeFeti6R4zHyuBVfmzoAgf8m6XJONVRsQj r0g11SLxMX3aQ+nX/k4LxuNKR4WNKPujY+rDb8vWjb9dLlxp1yBGMSAfKEvb6thO VYVrII2E6SOVox4Zc3eKug3OeSadvMpV6JzU31IjnzhABCt3JzJeuahvyiDMx19L laLRgeEGaorpA5UMZow3MjeFZgro76qjl30XSBR9LUr+bwJk9BKiDOQC5rml1QsH g3/aOO3e5alIKnfqJsYTpzUH9cKLdn63MvSc1TvcLwTw3OM/pXr0vmjhmXeHYsh/ 4n1TeiHRGanKIDGeO94pe0mvR9BgDbw= -----END CERTIFICATE-----Generated at Fri Jul 24 09:30:17 2026 by rpki-client