$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d73092b4-54aa-3405-a3ca-45d7d6798270.roa File: d73092b4-54aa-3405-a3ca-45d7d6798270.roa (raw, json) Hash identifier: pZw74eGWtEN2ADUffyL7On1IdCzoa1FWo9DkTNzTBes= Subject key identifier: F6:ED:88:D9:27:78:08:88:A0:5D:22:72:47:56:25:78:7E:E5:36:47 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584DD1F5C2A9A3B3E9846C860000 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d73092b4-54aa-3405-a3ca-45d7d6798270.roa Signing time: Wed 13 May 2026 13:00:31 +0000 ROA not before: Wed 13 May 2026 13:00:31 +0000 ROA not after: Tue 11 Aug 2026 13:00:31 +0000 asID: 23473 IP address blocks: 216.171.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d1:f5:c2:a9:a3:b3:e9:84:6c:86:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: May 13 13:00:31 2026 GMT Not After : Aug 11 13:00:31 2026 GMT Subject: CN=60482ce6-b18a-4d4b-afe8-be7c60285ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ab:90:0b:ef:43:f6:a3:22:d4:7f:e5:d8:1c: a0:2c:f0:9a:d3:0e:d4:01:9d:3f:ea:51:de:c2:f7: 05:10:0e:b9:a3:32:60:aa:46:2c:7c:ee:3f:a6:c1: 77:6f:27:a3:19:f2:3e:71:b9:78:d2:1c:9a:cd:33: 45:ac:9a:7f:30:79:f5:c6:b5:4f:f2:5d:25:90:d6: d4:53:07:8a:4d:7a:3f:85:2d:66:63:99:8f:cf:89: 4e:d7:80:95:5c:bc:1d:1b:a5:5f:92:aa:76:57:2e: 03:8e:04:52:a0:ee:0e:30:88:df:c6:cd:9c:15:5e: 85:f7:66:70:fd:b9:7b:e7:1e:38:5a:2d:27:83:d8: 8f:b3:c7:8f:c1:a8:53:a9:44:0a:49:bd:f6:e9:e4: 4d:53:b3:52:4d:a6:6c:57:82:bf:96:b8:1f:f6:d1: 5c:af:95:a5:48:55:f9:81:d7:9c:6e:f6:08:fd:3b: ad:97:6f:2b:81:ef:58:3a:4b:fc:36:77:31:a2:35: 69:35:94:8e:17:58:61:f9:00:e8:9c:12:37:e4:5e: 99:d4:72:58:87:d5:8d:c2:bc:9f:b0:1b:6b:45:44: ac:5f:04:3f:15:7a:35:7c:83:0a:a1:e0:6a:2b:dc: 0e:d1:f7:f8:82:09:40:45:b8:43:45:0d:66:4a:3e: b4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:ED:88:D9:27:78:08:88:A0:5D:22:72:47:56:25:78:7E:E5:36:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d73092b4-54aa-3405-a3ca-45d7d6798270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:76:57:e5:e2:6c:49:3a:74:27:76:c5:83:10:40:02:75:4b: 48:86:3b:7b:e1:67:2e:6d:ed:8b:6b:d5:d5:b5:c2:a3:f4:c7: 15:78:bf:9f:9b:0a:ff:42:5f:5f:08:f2:83:7a:41:7b:89:76: 85:70:cd:29:bc:c8:f0:51:2f:cd:12:8f:df:7b:79:99:63:36: f9:c0:35:e9:91:d8:ed:ad:0e:e9:e6:75:73:60:6e:bc:0a:5f: dd:79:a1:4d:fc:76:b3:ec:4f:33:a3:a2:50:2f:6a:2a:2f:9a: c1:b1:67:75:00:20:28:d9:23:35:45:d2:c8:44:e4:77:98:ef: f0:a9:46:38:33:83:71:70:03:46:b0:51:24:47:4f:33:01:17: 2c:e0:ff:f1:a2:eb:33:53:d3:4b:0a:6f:a6:92:b8:01:71:62: 16:96:b7:55:1d:1c:ed:df:b2:45:f3:32:cc:49:a6:82:8f:b9: fd:22:b8:33:d4:a9:51:b3:37:bc:43:f6:bd:33:0f:5e:23:e9: e1:83:af:d2:79:d7:6d:9e:e2:eb:44:67:de:99:d8:93:b2:3b: 73:26:23:91:c1:be:69:49:ee:3e:c0:90:0b:29:8b:39:39:65: 71:b6:c6:de:32:f6:19:e2:0b:1b:4a:04:30:0f:6d:13:66:4d: 13:ff:99:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3R9cKpo7PphGyGAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDUxMzEzMDAzMVoXDTI2MDgxMTEzMDAzMVowLzEtMCsGA1UEAxMk NjA0ODJjZTYtYjE4YS00ZDRiLWFmZTgtYmU3YzYwMjg1Y2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnauQC+9D9qMi1H/l2BygLPCa0w7UAZ0/6lHe wvcFEA65ozJgqkYsfO4/psF3byejGfI+cbl40hyazTNFrJp/MHn1xrVP8l0lkNbU UweKTXo/hS1mY5mPz4lO14CVXLwdG6Vfkqp2Vy4DjgRSoO4OMIjfxs2cFV6F92Zw /bl75x44Wi0ng9iPs8ePwahTqUQKSb326eRNU7NSTaZsV4K/lrgf9tFcr5WlSFX5 gdecbvYI/Tutl28rge9YOkv8NncxojVpNZSOF1hh+QDonBI35F6Z1HJYh9WNwryf sBtrRUSsXwQ/FXo1fIMKoeBqK9wO0ff4gglARbhDRQ1mSj60dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbtiNkneAiIoF0ickdWJXh+5TZHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZDczMDkyYjQtNTRhYS0z NDA1LWEzY2EtNDVkN2Q2Nzk4MjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFN2V+XibEk6dCd2xYMQQAJ1S0iGO3vhZy5t7Ytr1dW1wqP0xxV4v5+b Cv9CX18I8oN6QXuJdoVwzSm8yPBRL80Sj997eZljNvnANemR2O2tDunmdXNgbrwK X915oU38drPsTzOjolAvaiovmsGxZ3UAICjZIzVF0shE5HeY7/CpRjgzg3FwA0aw USRHTzMBFyzg//Gi6zNT00sKb6aSuAFxYhaWt1UdHO3fskXzMsxJpoKPuf0iuDPU qVGzN7xD9r0zD14j6eGDr9J5122e4utEZ96Z2JOyO3MmI5HBvmlJ7j7AkAspizk5 ZXG2xt4y9hniCxtKBDAPbRNmTRP/meg= -----END CERTIFICATE-----Generated at Sat Jun 13 16:21:24 2026 by rpki-client