$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d1edd12e-ecf8-3c06-bf69-5d9918f38673.roa File: d1edd12e-ecf8-3c06-bf69-5d9918f38673.roa (raw, json) Hash identifier: JmnNLK//mo9rytgXMfc6jd1s3oXB3OA3bkXt4WGjIlg= Subject key identifier: 4A:69:A1:EB:56:59:03:16:21:6E:99:81:F7:8C:4E:B4:29:6A:24:09 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F4988E3F1F20CB16A56C85D00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d1edd12e-ecf8-3c06-bf69-5d9918f38673.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 216.171.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:e3:f1:f2:0c:b1:6a:56:c8:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=72c7cf0c-bdfe-4e4e-8ae2-c694138c8de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a4:44:8d:97:2b:fd:99:f6:39:4d:0e:ea:5f: c2:fe:74:4c:e0:fe:18:5a:eb:5b:e1:f9:54:e1:2d: 1c:7d:a3:90:44:08:42:10:28:6d:c3:bd:08:a5:38: 08:ed:3b:5f:62:d7:0a:48:48:c0:e0:7c:ad:37:b6: 46:20:e4:48:83:4e:12:f9:21:51:bf:92:e0:75:c0: ac:2f:67:da:22:fb:a2:87:4e:49:75:c8:71:d4:28: 4c:55:0f:0e:24:c0:36:56:45:31:a3:b2:ae:20:00: cb:b8:af:f4:4d:9a:fa:57:ab:87:79:de:03:d1:eb: 87:9b:fc:55:76:06:b1:bd:3a:21:6c:d0:48:f7:ea: ec:44:f9:70:be:a6:fa:5b:67:bd:0e:9a:11:b1:89: 46:53:dd:79:62:62:ee:bd:06:da:9e:62:23:ac:de: 93:b6:5f:67:ab:5f:34:7f:0a:21:0d:bc:66:c2:3f: b8:52:f9:fd:c4:74:e2:c3:a2:01:5e:2b:b8:d5:5f: 1f:f1:b0:f3:fd:f6:3d:09:00:a1:5f:0b:6f:a4:81: 90:7d:ce:87:1d:38:d4:95:a5:03:5e:48:0f:f7:e4: b6:d9:56:fb:02:86:97:50:e3:e0:63:bc:e8:c3:8d: a3:b5:5f:a9:a3:3b:e6:2a:46:10:3d:51:29:b4:7e: 6d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:69:A1:EB:56:59:03:16:21:6E:99:81:F7:8C:4E:B4:29:6A:24:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d1edd12e-ecf8-3c06-bf69-5d9918f38673.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:17:79:8d:a0:de:be:dc:27:b8:0c:e2:1b:bd:c3:8d:5e:db: cf:53:fe:e5:48:b8:39:ed:71:94:95:8b:02:36:a0:60:72:fb: d4:69:7a:88:56:0a:17:2e:9c:c1:05:d3:04:c2:91:87:c2:28: 46:0f:83:70:74:71:38:86:ae:27:92:66:39:33:ab:39:61:d0: f9:44:63:9f:55:53:2b:76:d9:fe:d0:0b:14:cb:99:e7:e6:77: 70:60:64:47:b4:4c:94:4e:c6:b7:3f:18:c2:39:96:c8:ba:db: 0b:ac:d5:c4:0b:7b:27:00:6a:e4:d3:03:6a:6c:7e:41:57:b7: b8:36:fc:74:67:9b:48:cc:2e:5c:95:dc:e3:66:ae:50:34:96: 15:7b:03:b4:89:4d:ba:c8:4e:2f:57:19:e1:62:3e:60:86:b8: 83:c6:de:c4:c6:58:63:f8:f1:d0:78:c2:9a:ea:42:ea:60:53: 77:ae:1b:c7:ec:fd:37:ef:66:b0:6a:5d:7f:69:6a:cf:e8:26: e0:52:41:2b:b0:e4:ef:51:00:ee:11:84:46:d6:8a:bc:a3:8f: ee:3c:8b:dd:d7:fe:c5:43:6c:e7:4e:95:b7:a1:20:be:b1:e5: 78:b3:28:31:28:ea:48:ef:46:66:0b:d9:f0:8a:bf:5c:ae:de: 5a:80:57:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiOPx8gyxalbIXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzJjN2NmMGMtYmRmZS00ZTRlLThhZTItYzY5NDEzOGM4ZGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKREjZcr/Zn2OU0O6l/C/nRM4P4YWutb4flU 4S0cfaOQRAhCEChtw70IpTgI7TtfYtcKSEjA4HytN7ZGIORIg04S+SFRv5LgdcCs L2faIvuih05Jdchx1ChMVQ8OJMA2VkUxo7KuIADLuK/0TZr6V6uHed4D0euHm/xV dgaxvTohbNBI9+rsRPlwvqb6W2e9DpoRsYlGU915YmLuvQbanmIjrN6Ttl9nq180 fwohDbxmwj+4Uvn9xHTiw6IBXiu41V8f8bDz/fY9CQChXwtvpIGQfc6HHTjUlaUD XkgP9+S22Vb7AoaXUOPgY7zow42jtV+pozvmKkYQPVEptH5t/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEppoetWWQMWIW6ZgfeMTrQpaiQJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZDFlZGQxMmUtZWNmOC0z YzA2LWJmNjktNWQ5OTE4ZjM4NjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcXeY2g3r7cJ7gM4hu9w41e289T/uVIuDntcZSViwI2oGBy+9RpeohW ChcunMEF0wTCkYfCKEYPg3B0cTiGrieSZjkzqzlh0PlEY59VUyt22f7QCxTLmefm d3BgZEe0TJROxrc/GMI5lsi62wus1cQLeycAauTTA2psfkFXt7g2/HRnm0jMLlyV 3ONmrlA0lhV7A7SJTbrITi9XGeFiPmCGuIPG3sTGWGP48dB4wprqQupgU3euG8fs /TfvZrBqXX9pas/oJuBSQSuw5O9RAO4RhEbWiryjj+48i93X/sVDbOdOlbehIL6x 5XizKDEo6kjvRmYL2fCKv1yu3lqAV90= -----END CERTIFICATE-----Generated at Sat Sep 26 23:39:43 2026 by rpki-client