$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d517b061-165f-3e61-bd0e-ee90c4f7f613.roa File: d517b061-165f-3e61-bd0e-ee90c4f7f613.roa (raw, json) Hash identifier: TDBpFE9DZWIa1JwRqye+xFQ1QRRbWyKeY9rt62/Pt4I= Subject key identifier: 01:08:58:37:F1:CC:9A:6D:DF:06:4B:E2:C4:84:B4:62:9C:03:16:C8 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584BB88D53DC294E552EA3727E00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d517b061-165f-3e61-bd0e-ee90c4f7f613.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 23473 IP address blocks: 216.171.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:53:dc:29:4e:55:2e:a3:72:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=aa589c42-a564-46e5-95c9-873821419f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1e:0d:38:eb:8a:64:d8:88:1c:99:e0:f1:4c: d6:74:d8:57:c0:68:f2:6e:12:55:cf:d7:b5:af:e5: d4:dc:90:7a:62:fe:f3:62:8f:a2:28:55:49:ee:91: ce:4f:b4:1f:1b:87:ab:d0:66:a2:04:27:ec:bb:6c: 5f:60:b8:d2:e8:78:94:23:9b:76:82:b4:86:f0:1e: 82:e8:ac:f9:0d:56:cf:f9:01:a6:fe:45:d9:09:33: ba:34:58:eb:ef:90:d3:a1:68:20:24:1b:a5:9d:1d: 10:f4:b9:66:ab:98:a4:fc:c6:eb:7f:9b:18:e8:9e: 13:db:f0:72:f0:b0:8c:8f:20:22:fc:67:f8:dd:95: 3a:05:9d:d9:4c:a6:c7:6f:cd:0e:da:09:fa:28:83: a1:cc:98:88:bd:61:b3:da:62:89:77:51:db:0f:23: 25:32:84:f0:ae:fc:29:db:b8:53:76:6b:17:57:f7: d0:99:f9:85:4c:2c:6d:75:d1:9b:8e:ba:d1:de:d4: 8f:5b:e0:e8:95:15:9e:6e:fc:35:aa:84:34:96:45: d8:01:44:e9:e3:31:72:f0:66:2c:dd:de:c4:7f:3b: 50:13:e2:28:48:ca:36:b4:6b:7e:55:c3:46:31:4b: 57:43:37:58:f9:8c:01:45:1a:5a:7e:cb:0b:fc:d0: dd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:08:58:37:F1:CC:9A:6D:DF:06:4B:E2:C4:84:B4:62:9C:03:16:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d517b061-165f-3e61-bd0e-ee90c4f7f613.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:21:ca:fe:68:f1:03:62:31:16:94:32:ff:29:80:8a:a1:1c: d2:8c:91:b9:a2:77:0e:d0:26:f1:e7:06:0a:44:f3:ad:80:af: 3c:5c:ab:7e:81:56:d0:9b:07:8e:fa:63:f9:07:4f:d1:7e:e0: 30:97:c5:3b:f3:9d:6f:47:17:87:7b:91:de:ef:1f:3d:ac:bc: 33:93:bc:43:dd:c4:4b:92:ef:97:ea:3e:35:8a:4a:fa:91:ef: 5a:67:36:ed:03:66:de:59:dc:6b:5b:ea:28:67:9a:6d:42:67: 63:50:1f:ed:64:81:f5:27:f4:e6:19:40:3b:32:b2:3a:4a:49: 9d:cd:24:85:d4:ab:04:44:96:f6:65:5a:11:ad:b7:10:37:eb: b8:bd:5d:53:88:e9:17:8f:fa:c0:66:ab:02:5c:dc:6e:fc:ef: 07:7c:45:10:2f:96:cd:0f:7a:51:da:ff:7d:c0:79:53:26:4b: e5:61:86:31:57:ce:b0:ce:ef:7d:bf:1f:c2:2b:ae:b0:73:bd: 33:0e:7f:91:ca:07:fc:f7:50:7c:63:8a:d0:ef:92:dd:0a:b1: 9b:77:e1:22:a8:72:17:14:45:89:1f:3b:c9:5d:98:19:4b:44: 75:9e:1b:db:c0:36:91:f6:86:60:a8:c7:d2:ec:11:68:9f:b5: cd:4c:9f:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jVPcKU5VLqNyfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YWE1ODljNDItYTU2NC00NmU1LTk1YzktODczODIxNDE5ZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh4NOOuKZNiIHJng8UzWdNhXwGjybhJVz9e1 r+XU3JB6Yv7zYo+iKFVJ7pHOT7QfG4er0GaiBCfsu2xfYLjS6HiUI5t2grSG8B6C 6Kz5DVbP+QGm/kXZCTO6NFjr75DToWggJBulnR0Q9Llmq5ik/Mbrf5sY6J4T2/By 8LCMjyAi/Gf43ZU6BZ3ZTKbHb80O2gn6KIOhzJiIvWGz2mKJd1HbDyMlMoTwrvwp 27hTdmsXV/fQmfmFTCxtddGbjrrR3tSPW+DolRWebvw1qoQ0lkXYAUTp4zFy8GYs 3d7EfztQE+IoSMo2tGt+VcNGMUtXQzdY+YwBRRpafssL/NDdNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEIWDfxzJpt3wZL4sSEtGKcAxbIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZDUxN2IwNjEtMTY1Zi0z ZTYxLWJkMGUtZWU5MGM0ZjdmNjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Ks4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADohyv5o8QNiMRaUMv8pgIqhHNKMkbmidw7QJvHnBgpE862Arzxcq36B VtCbB476Y/kHT9F+4DCXxTvznW9HF4d7kd7vHz2svDOTvEPdxEuS75fqPjWKSvqR 71pnNu0DZt5Z3Gtb6ihnmm1CZ2NQH+1kgfUn9OYZQDsysjpKSZ3NJIXUqwRElvZl WhGttxA367i9XVOI6ReP+sBmqwJc3G787wd8RRAvls0PelHa/33AeVMmS+VhhjFX zrDO732/H8IrrrBzvTMOf5HKB/z3UHxjitDvkt0KsZt34SKochcURYkfO8ldmBlL RHWeG9vANpH2hmCox9LsEWiftc1Mn88= -----END CERTIFICATE-----Generated at Tue Nov 4 23:41:52 2025 by rpki-client