$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d73092b4-54aa-3405-a3ca-45d7d6798270.roa File: d73092b4-54aa-3405-a3ca-45d7d6798270.roa (raw, json) Hash identifier: dnlJBAJC+q4H5Vyfzy5TAn8W0QFP5+EfSIx4RzHSPN4= Subject key identifier: E4:AD:63:E4:61:EB:06:EA:1C:D2:00:1D:3C:1E:3A:06:22:7B:36:BE Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584EA787F815AFA19A808AE4DC00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d73092b4-54aa-3405-a3ca-45d7d6798270.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 23473 IP address blocks: 216.171.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:f8:15:af:a1:9a:80:8a:e4:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f35e70b1-735c-4a16-a52c-f9c4d792f972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e3:5d:7e:fd:96:e1:69:87:e9:e8:d9:b2:8d: d3:85:ac:ab:03:0d:b1:47:40:fe:de:83:50:9d:8d: cb:c4:d4:b8:64:81:06:d8:a0:fd:56:4b:c3:57:78: c0:0a:fc:d0:b8:75:54:36:75:1b:9a:bc:d5:a5:b4: e8:cc:42:a7:bd:bf:89:b3:87:24:39:85:cc:f8:5a: 59:4b:46:49:b9:a5:79:3f:aa:c4:f2:7a:c7:47:9a: 73:4d:67:f7:cd:23:b2:b8:d7:31:48:b3:dc:83:3d: e0:cb:7b:48:c6:c5:97:92:4f:c2:33:de:5b:7b:9b: bc:cb:2b:d8:59:41:2b:dc:81:71:af:03:9e:a7:a6: 06:8c:64:33:6d:57:e5:00:ec:7f:82:23:6a:b8:50: c5:38:9f:0a:c1:dc:aa:f6:57:9e:40:db:9a:39:b2: 7a:14:73:18:80:59:82:e0:6f:39:f3:6d:ec:8d:77: 14:f7:d6:6a:3a:5b:6e:1c:94:9b:98:f4:e0:94:dd: 7f:72:08:37:bd:f5:1c:f4:c4:e8:7a:3d:e3:be:8d: 1f:9e:47:d8:0e:87:31:17:1f:d0:b4:27:5f:7b:37: 0c:fe:7b:43:a5:d3:d9:ab:93:9b:d0:8b:00:f1:2d: 1a:39:ff:16:1f:43:11:cd:5d:5e:04:80:14:fc:a5: 4a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:AD:63:E4:61:EB:06:EA:1C:D2:00:1D:3C:1E:3A:06:22:7B:36:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d73092b4-54aa-3405-a3ca-45d7d6798270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:fd:db:ea:a6:26:49:74:44:6b:42:d6:b8:84:c2:51:c0:7f: b4:9f:9d:2d:64:f5:3d:40:bf:27:0a:2c:96:12:92:f6:1c:b7: 7b:40:f5:e7:14:66:73:1f:eb:bd:dd:db:fc:a5:db:81:d5:1a: e3:ae:a7:6a:bc:a9:34:6e:51:f0:1b:79:6a:b0:d9:39:f0:42: ab:a3:b6:66:8f:66:0f:a3:e8:90:2b:f1:c7:ac:97:00:c6:52: a8:02:f3:3f:b2:9e:f7:0b:00:ae:d1:8a:a4:20:b4:28:dd:c2: a9:22:de:e6:90:98:1a:c9:37:6f:8b:85:55:11:f8:2a:97:c4: 7c:14:64:9d:c9:9a:c9:00:82:fa:6c:47:df:22:37:66:63:63: 0f:42:c5:55:86:20:05:6c:21:90:ca:0a:e4:52:ea:82:0b:69: c3:eb:81:ee:f5:5f:60:d4:0a:67:66:b7:5c:a0:b8:3b:d2:b0: f8:77:7d:fb:aa:79:0e:0c:0d:c5:4e:63:1f:e6:a3:14:16:6d: eb:1a:62:56:31:cc:a2:0e:e3:3c:15:bb:09:7f:c4:86:0c:3b: ef:da:f9:02:d7:7c:46:94:04:c3:23:ed:aa:84:bb:f2:d6:8d: 3a:f8:dd:a8:80:f5:7b:ac:9d:dd:73:33:d3:7b:99:98:22:7c: 17:90:4f:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh/gVr6GagIrk3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjM1ZTcwYjEtNzM1Yy00YTE2LWE1MmMtZjljNGQ3OTJmOTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuONdfv2W4WmH6ejZso3ThayrAw2xR0D+3oNQ nY3LxNS4ZIEG2KD9VkvDV3jACvzQuHVUNnUbmrzVpbTozEKnvb+Js4ckOYXM+FpZ S0ZJuaV5P6rE8nrHR5pzTWf3zSOyuNcxSLPcgz3gy3tIxsWXkk/CM95be5u8yyvY WUEr3IFxrwOep6YGjGQzbVflAOx/giNquFDFOJ8Kwdyq9leeQNuaObJ6FHMYgFmC 4G85823sjXcU99ZqOltuHJSbmPTglN1/cgg3vfUc9MToej3jvo0fnkfYDocxFx/Q tCdfezcM/ntDpdPZq5Ob0IsA8S0aOf8WH0MRzV1eBIAU/KVK8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOStY+Rh6wbqHNIAHTweOgYieza+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZDczMDkyYjQtNTRhYS0z NDA1LWEzY2EtNDVkN2Q2Nzk4MjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAH92+qmJkl0RGtC1riEwlHAf7SfnS1k9T1AvycKLJYSkvYct3tA9ecU ZnMf673d2/yl24HVGuOup2q8qTRuUfAbeWqw2TnwQqujtmaPZg+j6JAr8ceslwDG UqgC8z+ynvcLAK7RiqQgtCjdwqki3uaQmBrJN2+LhVUR+CqXxHwUZJ3JmskAgvps R98iN2ZjYw9CxVWGIAVsIZDKCuRS6oILacPrge71X2DUCmdmt1yguDvSsPh3ffuq eQ4MDcVOYx/moxQWbesaYlYxzKIO4zwVuwl/xIYMO+/a+QLXfEaUBMMj7aqEu/LW jTr43aiA9Xusnd1zM9N7mZgifBeQT98= -----END CERTIFICATE-----Generated at Wed Jul 29 09:17:45 2026 by rpki-client