$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0867d61d-c389-352e-ac6a-d6271b4a63c8.roa File: 0867d61d-c389-352e-ac6a-d6271b4a63c8.roa (raw, json) Hash identifier: 0gu0kMgM6eLObSShtDXzACdTTAh5yE0DaGEp8mUTM4Q= Subject key identifier: BE:DF:CC:2D:A7:60:E3:93:3C:33:A8:C7:57:84:3E:08:67:C9:DC:D6 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584EA7875CBD1F572F611031B460 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0867d61d-c389-352e-ac6a-d6271b4a63c8.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 23473 IP address blocks: 216.171.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:5c:bd:1f:57:2f:61:10:31:b4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=836d0b76-4ede-40b9-ab4f-5fb58968c67e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:14:f0:f7:6c:ca:88:a4:71:ee:d7:84:e1:1b: ab:3a:90:a3:b0:46:34:12:9c:82:fc:b3:28:a5:dd: 82:5a:bc:4a:33:95:2f:17:c5:f7:72:d5:66:22:77: d1:a2:df:7c:42:3f:14:56:6a:ec:08:c2:f1:00:07: a8:c5:e1:4a:07:a7:54:4d:31:38:06:a1:1d:2f:3d: 8a:68:60:bb:6a:25:bd:4b:76:f7:0a:0d:0f:0b:a3: 4f:81:9a:1d:a5:2f:e2:46:20:fd:44:e6:c1:51:10: d2:fc:ab:ba:23:28:48:cf:d4:5f:7b:c8:d5:1f:b4: d2:a4:1d:1f:3c:1a:ec:11:aa:7a:4d:a7:5f:bf:f2: 14:d2:d7:a5:06:39:18:70:47:2e:ab:d5:5e:56:30: 8e:1a:8b:c4:a6:a2:cd:d8:ee:82:be:29:59:8b:44: 61:0f:0b:fb:4b:e4:63:5a:b5:fd:25:d1:17:84:a3: 15:a6:6a:80:f0:17:b9:14:e5:34:b1:56:2a:4a:ec: 36:70:70:b2:c0:cb:84:f6:8f:44:8d:f5:06:8e:15: 03:0d:aa:73:22:e4:df:11:9f:12:4a:80:7c:54:57: 2e:e0:01:2c:e2:5f:61:38:1a:a8:65:18:3f:6f:dd: 25:b4:dc:73:fb:58:c3:38:a6:51:22:94:88:64:68: d7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DF:CC:2D:A7:60:E3:93:3C:33:A8:C7:57:84:3E:08:67:C9:DC:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0867d61d-c389-352e-ac6a-d6271b4a63c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:1a:33:1e:1b:00:b2:43:9b:d0:f0:50:1f:77:4e:2e:95:6b: 6d:f3:d0:ee:84:4e:07:a2:88:34:f8:4d:ca:51:d3:61:bf:c5: 7a:5b:51:b3:5b:86:ee:d0:eb:20:e4:ce:09:34:fb:76:de:5c: dd:51:a6:f5:7f:47:b4:aa:0c:ce:46:59:f7:59:e8:57:19:e5: 07:67:b7:59:12:aa:33:80:fb:54:74:12:5a:e2:6b:2c:3a:28: f5:58:c8:fd:83:3b:62:a4:e6:7b:8c:1a:94:b8:62:5a:07:2d: 00:7a:a5:28:93:76:42:65:95:e0:63:82:b2:e8:26:c8:29:25: 00:32:2a:51:cb:a6:3a:62:bc:a0:6c:c0:57:cc:b2:f8:cb:63: 10:b4:d3:75:0f:d8:1d:e4:cd:f6:69:c8:a2:86:37:da:3a:b7: 81:49:5e:de:a0:06:d2:7e:4d:1b:9b:81:35:8f:1d:ae:ef:f2: 86:39:a6:5f:59:1d:e4:17:5e:7e:03:97:d4:9d:ae:b9:69:cc: b1:4a:c8:ea:00:b8:f1:24:70:58:e2:8e:61:26:ea:d2:c1:35: 28:10:81:c5:20:7f:2e:5f:2a:c8:e6:2d:e3:59:6e:4e:4c:4a: f8:a4:d2:fb:71:5c:23:d9:9c:93:89:a2:e0:58:35:ed:64:30: 41:c6:6c:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh1y9H1cvYRAxtGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODM2ZDBiNzYtNGVkZS00MGI5LWFiNGYtNWZiNTg5NjhjNjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRTw92zKiKRx7teE4RurOpCjsEY0EpyC/LMo pd2CWrxKM5UvF8X3ctVmInfRot98Qj8UVmrsCMLxAAeoxeFKB6dUTTE4BqEdLz2K aGC7aiW9S3b3Cg0PC6NPgZodpS/iRiD9RObBURDS/Ku6IyhIz9Rfe8jVH7TSpB0f PBrsEap6Tadfv/IU0telBjkYcEcuq9VeVjCOGovEpqLN2O6CvilZi0RhDwv7S+Rj WrX9JdEXhKMVpmqA8Be5FOU0sVYqSuw2cHCywMuE9o9EjfUGjhUDDapzIuTfEZ8S SoB8VFcu4AEs4l9hOBqoZRg/b90ltNxz+1jDOKZRIpSIZGjXQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7fzC2nYOOTPDOox1eEPghnydzWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMDg2N2Q2MWQtYzM4OS0z NTJlLWFjNmEtZDYyNzFiNGE2M2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQaMx4bALJDm9DwUB93Ti6Va23z0O6ETgeiiDT4TcpR02G/xXpbUbNb hu7Q6yDkzgk0+3beXN1RpvV/R7SqDM5GWfdZ6FcZ5Qdnt1kSqjOA+1R0Elriayw6 KPVYyP2DO2Kk5nuMGpS4YloHLQB6pSiTdkJlleBjgrLoJsgpJQAyKlHLpjpivKBs wFfMsvjLYxC003UP2B3kzfZpyKKGN9o6t4FJXt6gBtJ+TRubgTWPHa7v8oY5pl9Z HeQXXn4Dl9SdrrlpzLFKyOoAuPEkcFjijmEm6tLBNSgQgcUgfy5fKsjmLeNZbk5M Svik0vtxXCPZnJOJouBYNe1kMEHGbEc= -----END CERTIFICATE-----Generated at Wed Jul 29 04:47:53 2026 by rpki-client