$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8a0cb891-7df3-3f1f-9baa-2b030be9c0f4.roa File: 8a0cb891-7df3-3f1f-9baa-2b030be9c0f4.roa (raw, json) Hash identifier: WwwkZEXGWfiHrO6widvkJM8LqHW6Sj/Q6WmJRgvGpAA= Subject key identifier: D3:57:BE:55:27:6F:6F:A4:79:02:8A:27:17:F6:3C:22:C9:7A:F3:01 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D624A63A1858FE371990DD480 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8a0cb891-7df3-3f1f-9baa-2b030be9c0f4.roa Signing time: Fri 03 Apr 2026 13:00:30 +0000 ROA not before: Fri 03 Apr 2026 13:00:30 +0000 ROA not after: Thu 02 Jul 2026 13:00:30 +0000 asID: 23473 IP address blocks: 216.171.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:62:4a:63:a1:85:8f:e3:71:99:0d:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Apr 3 13:00:30 2026 GMT Not After : Jul 2 13:00:30 2026 GMT Subject: CN=d2ab2bfe-25ae-4162-9195-7f51ade60002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:db:48:30:4b:da:ea:c3:ac:df:10:f5:09:c6: 5a:e1:44:6f:9e:a5:31:72:a2:6f:34:bb:3b:fa:b4: 1f:74:3d:84:33:28:d5:d8:d3:fe:08:2a:12:75:69: 2c:ce:0b:e4:d0:51:e7:fe:c6:1c:04:a7:80:4e:59: ba:77:06:97:83:a2:60:19:c5:b5:23:f6:1a:85:96: c6:68:dd:af:39:f5:25:19:99:a7:d6:0e:b9:cc:a8: 71:4a:45:68:f0:ff:90:74:6f:17:a7:c0:d7:f4:7b: 74:30:b1:11:2b:aa:bd:8e:52:21:68:93:c5:7a:77: 4c:5a:da:53:75:8c:6e:5b:df:28:bc:83:43:6c:b3: 63:ca:a6:ec:bf:b5:c4:87:91:93:d2:d1:d8:01:93: 28:a8:25:3b:0a:05:83:ee:28:4e:c7:db:62:a2:8b: fb:0b:27:6c:c6:8d:f0:1e:dd:12:c6:a1:4c:52:05: 77:f7:fa:e9:46:64:01:d5:01:fa:04:7e:51:8e:40: b9:60:4a:12:5c:b7:b4:e3:9d:d7:f3:cd:6b:96:05: 4c:31:09:3d:e1:c7:e6:a6:00:b4:8b:4d:61:c0:c4: 19:4c:76:cb:1a:46:78:52:07:a8:88:81:1a:2c:86: de:d0:aa:99:0d:57:13:5c:98:dd:aa:d7:26:25:f6: 02:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:57:BE:55:27:6F:6F:A4:79:02:8A:27:17:F6:3C:22:C9:7A:F3:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8a0cb891-7df3-3f1f-9baa-2b030be9c0f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:11:9b:0c:63:2a:89:02:8c:27:d9:26:ad:7e:9f:99:84:35: 3f:cf:1c:44:50:10:de:a8:b5:8c:23:20:49:39:68:84:27:fe: 50:ac:10:0a:f0:60:92:61:18:94:59:8c:58:11:16:42:d7:01: d4:28:82:cd:27:6a:47:05:3a:72:df:05:c5:dd:35:8c:f5:85: f4:8f:ee:f0:a4:9e:59:54:b5:30:52:0b:a6:2c:56:73:18:bf: 6e:b4:5f:2d:61:59:29:9b:02:9e:53:17:6f:83:f6:5c:4d:36: 48:02:47:46:eb:3c:62:56:d9:99:a8:9c:30:d3:1d:55:0c:b2: 34:d7:b5:f6:b3:d9:a1:b1:82:7f:3f:16:38:8d:e6:c8:23:e3: 31:01:05:5e:c4:6a:bd:9c:31:bf:74:49:69:ab:d6:9c:25:a8: c6:7f:fe:18:14:89:0c:29:3c:02:ae:da:e5:dd:2f:72:25:9f: 4c:4d:e8:f5:a9:9b:0b:c0:18:c2:f5:35:07:c4:af:2e:84:4f: 66:8a:78:97:cb:29:81:1c:55:6a:a0:f7:50:23:41:cc:75:d1: 10:a7:1d:ee:4b:27:79:b7:ea:b0:56:74:b1:16:4a:de:04:bf: 17:0d:47:61:68:22:dc:b5:6c:f2:f7:b1:be:ac:da:72:0b:bc: 69:f1:d3:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1iSmOhhY/jcZkN1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDQwMzEzMDAzMFoXDTI2MDcwMjEzMDAzMFowLzEtMCsGA1UEAxMk ZDJhYjJiZmUtMjVhZS00MTYyLTkxOTUtN2Y1MWFkZTYwMDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNtIMEva6sOs3xD1CcZa4URvnqUxcqJvNLs7 +rQfdD2EMyjV2NP+CCoSdWkszgvk0FHn/sYcBKeATlm6dwaXg6JgGcW1I/YahZbG aN2vOfUlGZmn1g65zKhxSkVo8P+QdG8Xp8DX9Ht0MLERK6q9jlIhaJPFendMWtpT dYxuW98ovINDbLNjyqbsv7XEh5GT0tHYAZMoqCU7CgWD7ihOx9tioov7Cydsxo3w Ht0SxqFMUgV39/rpRmQB1QH6BH5RjkC5YEoSXLe0453X881rlgVMMQk94cfmpgC0 i01hwMQZTHbLGkZ4UgeoiIEaLIbe0KqZDVcTXJjdqtcmJfYCSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNXvlUnb2+keQKKJxf2PCLJevMBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvOGEwY2I4OTEtN2RmMy0z ZjFmLTliYWEtMmIwMzBiZTljMGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgRmwxjKokCjCfZJq1+n5mENT/PHERQEN6otYwjIEk5aIQn/lCsEArw YJJhGJRZjFgRFkLXAdQogs0nakcFOnLfBcXdNYz1hfSP7vCknllUtTBSC6YsVnMY v260Xy1hWSmbAp5TF2+D9lxNNkgCR0brPGJW2ZmonDDTHVUMsjTXtfaz2aGxgn8/ FjiN5sgj4zEBBV7Ear2cMb90SWmr1pwlqMZ//hgUiQwpPAKu2uXdL3Iln0xN6PWp mwvAGML1NQfEry6ET2aKeJfLKYEcVWqg91AjQcx10RCnHe5LJ3m36rBWdLEWSt4E vxcNR2FoIty1bPL3sb6s2nILvGnx01E= -----END CERTIFICATE-----Generated at Fri Apr 17 11:34:21 2026 by rpki-client