$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3568e153-bb9a-3142-b886-5e86d1911256.roa File: 3568e153-bb9a-3142-b886-5e86d1911256.roa (raw, json) Hash identifier: pbG06TPznJkgzWR70f5IZdLT2jMhLgi+dy2N5/eU9Y0= Subject key identifier: 55:E4:91:CC:31:77:EC:CD:89:BA:89:C6:DE:EA:2E:E3:E4:A5:EE:CF Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584EA78751C1445EC3E60017DD00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3568e153-bb9a-3142-b886-5e86d1911256.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 23473 IP address blocks: 216.171.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:51:c1:44:5e:c3:e6:00:17:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=32b8d8c0-77a5-48c7-b265-4e161aa60fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:11:04:d6:fa:7e:ea:59:18:f4:98:72:22:21: e0:ed:92:28:66:b0:5c:67:88:79:c4:f2:ab:c5:b8: 74:2f:c6:dd:a7:81:15:d4:9b:2a:eb:c7:3a:f2:3a: 9f:be:7d:d4:a8:05:05:a4:a8:6a:67:21:07:8b:f4: 59:4b:7b:66:e6:92:40:77:d2:6d:04:e9:10:03:db: 9e:6b:76:a4:0f:b1:ac:43:8b:46:5e:98:54:0e:5b: e4:13:9f:cd:c3:32:bc:c4:fd:76:a0:87:80:7e:eb: a8:d6:fd:bd:33:27:05:41:da:56:62:01:97:cb:ad: 54:e8:a7:48:f8:79:c2:1e:af:02:83:58:76:e0:b2: 29:ef:fd:c0:33:3d:80:69:29:41:96:ea:26:3a:0e: 89:26:45:cf:33:54:db:69:87:20:e6:35:b2:c1:ad: 1f:6b:50:03:db:f4:69:7b:77:6f:e8:70:25:6f:25: 4e:d3:2a:79:9c:22:b0:8c:f2:b2:ff:2c:24:34:1f: f2:2a:46:d0:ec:fe:3e:97:c2:44:81:9a:6a:7d:ee: 6c:21:3c:47:73:06:fa:2a:a4:c1:0e:a8:e2:ef:01: bb:3b:d0:a5:a5:9f:f8:b2:fd:19:47:f8:7a:bd:39: 9a:10:63:13:d4:79:3b:d3:f5:6f:97:1b:be:d0:4a: a3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E4:91:CC:31:77:EC:CD:89:BA:89:C6:DE:EA:2E:E3:E4:A5:EE:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3568e153-bb9a-3142-b886-5e86d1911256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:0d:9c:c6:02:c7:5a:9e:5d:aa:cd:8b:72:df:39:f3:01:b5: 1b:01:76:e6:03:f0:06:03:d4:5c:ec:b3:81:15:90:b1:30:65: 28:6d:a5:ff:1a:5d:79:f8:10:01:3e:74:1d:aa:bd:26:50:93: dc:24:c0:d7:15:8d:6a:db:c8:d0:37:95:b6:6e:e6:e4:6f:07: 28:6c:1b:7c:67:0c:72:27:45:8c:24:9f:15:7c:fb:6e:88:56: a8:99:94:83:59:ef:1a:07:d8:fe:07:1e:58:9c:5e:f6:6b:4d: 70:fc:dc:b4:19:b9:96:9e:e0:e7:87:87:e4:c3:c0:d2:12:9e: 8c:67:dc:8a:3c:f7:de:29:43:5c:a9:1b:5f:19:5e:48:21:80: 72:82:11:cb:68:c2:be:43:4d:74:ea:04:34:d7:9f:1a:c4:8e: 85:20:0f:bd:06:ae:ae:d2:9e:55:05:f3:68:43:6d:52:6e:cc: c2:95:f0:dc:0c:b0:aa:80:76:a7:bf:f0:5c:2b:68:94:c7:89: e6:ed:53:62:b7:d2:19:7b:51:47:c7:cb:10:d2:7c:43:28:d6: a9:42:0c:d8:51:88:69:30:94:75:4e:5d:e1:ef:53:60:60:2a: 8f:1d:f7:21:02:c0:4d:f9:d7:6e:77:c4:85:f5:4c:ad:0d:56: 52:83:54:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh1HBRF7D5gAX3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzJiOGQ4YzAtNzdhNS00OGM3LWIyNjUtNGUxNjFhYTYwZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhREE1vp+6lkY9JhyIiHg7ZIoZrBcZ4h5xPKr xbh0L8bdp4EV1Jsq68c68jqfvn3UqAUFpKhqZyEHi/RZS3tm5pJAd9JtBOkQA9ue a3akD7GsQ4tGXphUDlvkE5/NwzK8xP12oIeAfuuo1v29MycFQdpWYgGXy61U6KdI +HnCHq8Cg1h24LIp7/3AMz2AaSlBluomOg6JJkXPM1TbaYcg5jWywa0fa1AD2/Rp e3dv6HAlbyVO0yp5nCKwjPKy/ywkNB/yKkbQ7P4+l8JEgZpqfe5sITxHcwb6KqTB Dqji7wG7O9ClpZ/4sv0ZR/h6vTmaEGMT1Hk70/Vvlxu+0EqjgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXkkcwxd+zNibqJxt7qLuPkpe7PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMzU2OGUxNTMtYmI5YS0z MTQyLWI4ODYtNWU4NmQxOTExMjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYNnMYCx1qeXarNi3LfOfMBtRsBduYD8AYD1Fzss4EVkLEwZShtpf8a XXn4EAE+dB2qvSZQk9wkwNcVjWrbyNA3lbZu5uRvByhsG3xnDHInRYwknxV8+26I VqiZlINZ7xoH2P4HHlicXvZrTXD83LQZuZae4OeHh+TDwNISnoxn3Io8994pQ1yp G18ZXkghgHKCEctowr5DTXTqBDTXnxrEjoUgD70Grq7SnlUF82hDbVJuzMKV8NwM sKqAdqe/8FwraJTHiebtU2K30hl7UUfHyxDSfEMo1qlCDNhRiGkwlHVOXeHvU2Bg Ko8d9yECwE351253xIX1TK0NVlKDVAA= -----END CERTIFICATE-----Generated at Wed Jul 29 08:25:06 2026 by rpki-client