$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d097ad3a-9678-3ce7-aeed-5310dbb6a634.roa File: d097ad3a-9678-3ce7-aeed-5310dbb6a634.roa (raw, json) Hash identifier: O71Y9cv1k3/XaUatT/IAISIXLzaTYl5aFyxqWPBt6pY= Subject key identifier: 6F:85:73:A8:65:FC:C6:4B:7B:78:DF:86:98:99:41:85:5F:3A:D2:E8 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584EA793FC1CC50CC60CBBD5B580 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d097ad3a-9678-3ce7-aeed-5310dbb6a634.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 23473 IP address blocks: 216.171.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:fc:1c:c5:0c:c6:0c:bb:d5:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9ba0c04b-78f3-4fc1-811f-56a68bbbe813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2e:f1:ef:14:7f:12:b2:db:e6:af:d1:46:72: bf:29:dd:82:92:71:32:eb:b6:f9:aa:ca:10:61:71: 6e:7e:6f:6f:21:79:e2:30:4a:4a:78:36:bf:27:c6: f0:33:10:14:22:3c:2d:25:2d:16:1f:6a:4e:e5:56: b1:de:09:9d:5b:5e:3e:2b:29:a5:ba:0a:be:68:82: f6:21:ea:1d:60:77:3c:06:14:8f:3b:4b:ff:7c:10: 66:34:7a:1a:9a:04:7b:17:b1:4e:08:33:e6:ea:ff: 4f:c3:5e:f7:6a:41:0d:d4:4c:51:e9:85:22:34:07: 0e:ca:c5:57:df:3d:e0:81:b2:72:42:4a:47:14:d0: 48:d1:18:5f:46:77:c1:06:10:ce:3b:14:f7:af:a2: 12:07:e4:a5:4e:65:b6:13:82:2a:ed:78:37:4f:0b: c7:c2:43:b1:c1:aa:e1:12:97:b6:a3:bc:a9:04:71: 2f:01:d2:c3:eb:f5:fc:4f:77:da:86:0e:a3:35:14: 87:30:8d:14:f2:00:e9:7c:a5:71:2d:d6:ec:1a:8f: c6:c9:33:b1:4e:f6:e2:91:db:c0:dc:89:ec:97:85: 5c:b5:ba:e9:24:1e:53:9b:5e:5c:5f:30:f6:c0:5b: 9d:c3:8c:31:57:6f:a9:08:85:db:dc:ea:2d:c4:f8: 75:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:85:73:A8:65:FC:C6:4B:7B:78:DF:86:98:99:41:85:5F:3A:D2:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d097ad3a-9678-3ce7-aeed-5310dbb6a634.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:8d:17:0e:01:bc:f9:69:8c:f5:3f:96:9c:17:18:52:46:5c: 0b:a0:f8:5f:a1:45:74:42:46:02:21:d6:75:6a:a3:38:ab:d5: 91:65:e5:f9:e7:49:2a:4f:57:ec:96:60:ce:39:34:30:20:ca: 46:db:ed:12:c1:42:f6:65:63:27:70:70:72:81:b7:0a:49:e1: a5:a6:f8:38:98:f9:9c:d1:c8:c2:86:e7:d0:5d:97:74:af:69: 13:f0:b8:88:f0:b8:29:fa:b6:27:6f:d7:10:c3:8a:50:6f:5e: 00:db:74:7a:3c:91:5c:f7:46:f1:85:d2:9a:4b:d5:39:ac:34: ed:49:b8:30:89:7f:cf:d8:80:29:6d:3a:ca:57:70:c5:39:7e: ea:59:89:c4:90:31:3d:b7:7c:ac:92:46:46:ae:8f:2c:82:29: eb:0e:7e:1e:25:07:e0:20:a6:7f:b5:c6:19:3c:06:61:09:26: 7f:36:ea:1c:86:cf:0e:eb:d5:44:ee:ba:72:90:bb:fb:a7:6c: 8a:cc:f9:3d:f9:a6:e0:22:c7:ac:74:1b:d6:16:1e:ad:ac:53: c1:d4:40:3c:9b:65:56:15:50:0a:5d:25:b2:19:5e:c7:63:00: fd:4a:05:98:56:a9:b4:f2:a1:73:ca:69:e7:38:69:9d:e8:8d: ff:09:83:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk/wcxQzGDLvVtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWJhMGMwNGItNzhmMy00ZmMxLTgxMWYtNTZhNjhiYmJlODEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC7x7xR/ErLb5q/RRnK/Kd2CknEy67b5qsoQ YXFufm9vIXniMEpKeDa/J8bwMxAUIjwtJS0WH2pO5Vax3gmdW14+Kymlugq+aIL2 IeodYHc8BhSPO0v/fBBmNHoamgR7F7FOCDPm6v9Pw173akEN1ExR6YUiNAcOysVX 3z3ggbJyQkpHFNBI0RhfRnfBBhDOOxT3r6ISB+SlTmW2E4Iq7Xg3TwvHwkOxwarh Epe2o7ypBHEvAdLD6/X8T3fahg6jNRSHMI0U8gDpfKVxLdbsGo/GyTOxTvbikdvA 3Insl4VctbrpJB5Tm15cXzD2wFudw4wxV2+pCIXb3OotxPh1+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+Fc6hl/MZLe3jfhpiZQYVfOtLoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZDA5N2FkM2EtOTY3OC0z Y2U3LWFlZWQtNTMxMGRiYjZhNjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyNFw4BvPlpjPU/lpwXGFJGXAug+F+hRXRCRgIh1nVqozir1ZFl5fnn SSpPV+yWYM45NDAgykbb7RLBQvZlYydwcHKBtwpJ4aWm+DiY+ZzRyMKG59Bdl3Sv aRPwuIjwuCn6tidv1xDDilBvXgDbdHo8kVz3RvGF0ppL1TmsNO1JuDCJf8/YgClt OspXcMU5fupZicSQMT23fKySRkaujyyCKesOfh4lB+Agpn+1xhk8BmEJJn826hyG zw7r1UTuunKQu/unbIrM+T35puAix6x0G9YWHq2sU8HUQDybZVYVUApdJbIZXsdj AP1KBZhWqbTyoXPKaec4aZ3ojf8Jg4U= -----END CERTIFICATE-----Generated at Wed Jul 29 09:13:08 2026 by rpki-client