$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3b667516-b8fd-31bd-8cf8-8bd0bb6aea19.roa File: 3b667516-b8fd-31bd-8cf8-8bd0bb6aea19.roa (raw, json) Hash identifier: wBqCR+inDztaExLnZT9YudsLRT9roAVj+ynSn3NPBbo= Subject key identifier: D8:FC:BF:D3:83:48:64:F3:83:C2:3F:49:0B:50:0E:9E:C3:A5:12:95 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584EA7874ED0D0CF0AB669C19540 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3b667516-b8fd-31bd-8cf8-8bd0bb6aea19.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 23473 IP address blocks: 216.171.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:4e:d0:d0:cf:0a:b6:69:c1:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7a21df2b-3142-425e-b100-8f726a686925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4f:26:16:f4:13:8d:19:27:d8:69:83:00:5e: 08:d0:7d:33:6e:2d:04:b8:2d:b5:f1:1f:aa:95:0c: ca:fd:e5:f9:65:ea:03:0f:e0:c4:e2:fe:32:97:6e: 0e:52:8c:b6:dd:0b:45:c8:78:66:0b:ff:cb:53:4c: 62:17:e9:dc:2b:83:c1:02:89:04:f6:d1:ff:bd:e8: 58:de:12:25:ba:1c:46:b1:d2:56:76:3f:09:ed:61: 83:53:a6:43:cd:da:95:35:c5:30:40:11:7b:11:cf: e3:b0:fa:7b:7e:5b:51:11:0b:0b:d3:58:09:73:21: 80:04:66:b1:91:19:d8:5f:f4:47:6c:a4:74:38:3c: b1:9a:c5:1d:74:4f:72:06:f2:d3:16:9f:c4:c9:5a: 6c:07:6b:74:c1:00:65:a9:9c:b5:d8:1d:51:bc:ca: e0:05:7a:cf:02:5e:85:82:f9:7c:2a:9d:5d:97:78: 4e:31:29:bd:17:45:b1:a3:bb:4f:24:9c:73:fb:1b: a6:2c:8f:67:03:cb:94:4d:56:40:81:16:81:08:42: e8:b2:e8:da:b9:e6:07:1c:04:7a:a5:74:06:f4:96: 05:e9:7a:c3:e2:89:f5:26:17:2d:3f:03:8d:eb:b5: 7e:79:9b:5b:70:6d:a5:bf:51:42:a7:d6:ee:01:49: f0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FC:BF:D3:83:48:64:F3:83:C2:3F:49:0B:50:0E:9E:C3:A5:12:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3b667516-b8fd-31bd-8cf8-8bd0bb6aea19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:80:6e:ea:58:ee:19:85:d0:b3:9d:2b:c2:15:ad:6f:db:2a: 46:a5:60:e7:bb:d6:48:59:bf:c1:f4:96:7b:d2:6e:e6:34:b7: 4e:b7:83:25:ce:a0:39:59:7f:23:d9:db:c9:90:45:14:ce:a8: c5:b1:fa:e2:fe:24:ff:f7:07:a4:bf:86:49:d2:0a:13:e9:eb: 0f:7e:64:b5:82:a7:d0:f4:92:f7:aa:cd:49:ac:13:b3:52:8c: 42:dd:ba:f0:d1:a9:3e:c3:fb:6d:5c:00:ca:db:14:91:f0:f7: 20:d4:60:a4:e5:bc:16:89:c4:f9:bc:ca:35:8a:96:de:40:b7: 41:cd:5f:ed:96:2f:19:46:8f:21:8f:a9:c5:30:2c:78:3a:2f: 78:c4:3f:11:90:f3:de:74:f3:26:e0:2d:02:74:e9:8e:bb:87: 0b:e5:bb:e1:65:3c:43:df:ad:ea:99:6f:e6:40:eb:16:1a:69: 4a:ab:87:b2:a7:c2:ce:59:ed:e3:1b:7e:37:3f:ed:0b:e4:08: d2:04:57:45:eb:f9:a6:46:48:98:dd:6e:91:07:2a:19:0d:7b: dc:dc:09:80:06:07:df:6b:52:43:21:91:07:28:ec:39:6c:45: c1:b2:70:de:40:1d:0b:55:2e:5c:8a:2e:ec:f7:2d:66:a8:a9: be:64:c5:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh07Q0M8KtmnBlUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk N2EyMWRmMmItMzE0Mi00MjVlLWIxMDAtOGY3MjZhNjg2OTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE8mFvQTjRkn2GmDAF4I0H0zbi0EuC218R+q lQzK/eX5ZeoDD+DE4v4yl24OUoy23QtFyHhmC//LU0xiF+ncK4PBAokE9tH/vehY 3hIluhxGsdJWdj8J7WGDU6ZDzdqVNcUwQBF7Ec/jsPp7fltREQsL01gJcyGABGax kRnYX/RHbKR0ODyxmsUddE9yBvLTFp/EyVpsB2t0wQBlqZy12B1RvMrgBXrPAl6F gvl8Kp1dl3hOMSm9F0Wxo7tPJJxz+xumLI9nA8uUTVZAgRaBCELosujaueYHHAR6 pXQG9JYF6XrD4on1JhctPwON67V+eZtbcG2lv1FCp9buAUnwIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNj8v9ODSGTzg8I/SQtQDp7DpRKVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvM2I2Njc1MTYtYjhmZC0z MWJkLThjZjgtOGJkMGJiNmFlYTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuAbupY7hmF0LOdK8IVrW/bKkalYOe71khZv8H0lnvSbuY0t063gyXO oDlZfyPZ28mQRRTOqMWx+uL+JP/3B6S/hknSChPp6w9+ZLWCp9D0kveqzUmsE7NS jELduvDRqT7D+21cAMrbFJHw9yDUYKTlvBaJxPm8yjWKlt5At0HNX+2WLxlGjyGP qcUwLHg6L3jEPxGQ89508ybgLQJ06Y67hwvlu+FlPEPfreqZb+ZA6xYaaUqrh7Kn ws5Z7eMbfjc/7QvkCNIEV0Xr+aZGSJjdbpEHKhkNe9zcCYAGB99rUkMhkQco7Dls RcGycN5AHQtVLlyKLuz3LWaoqb5kxWM= -----END CERTIFICATE-----Generated at Wed Jul 29 06:02:22 2026 by rpki-client