$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/f87456cf-08c3-304e-bc3e-9b21713eff7f.roa File: f87456cf-08c3-304e-bc3e-9b21713eff7f.roa (raw, json) Hash identifier: pygwntVMmOOXAo15riBWKhCirVjCycXRG2GDeM7OuII= Subject key identifier: A5:67:A6:66:A2:E3:5B:96:A5:11:76:53:8B:92:81:6C:04:C3:E2:00 Certificate issuer: /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Certificate serial: 010D0C9F4328584CA061C5C7F7201762575FA4C0 Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/f87456cf-08c3-304e-bc3e-9b21713eff7f.roa Signing time: Sat 24 Jan 2026 02:00:31 +0000 ROA not before: Sat 24 Jan 2026 02:00:31 +0000 ROA not after: Fri 24 Apr 2026 01:00:31 +0000 asID: 400238 IP address blocks: 216.87.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a0:61:c5:c7:f7:20:17:62:57:5f:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Validity Not Before: Jan 24 02:00:31 2026 GMT Not After : Apr 24 01:00:31 2026 GMT Subject: CN=bd1d2704-9910-4e27-943f-09e12a3557f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:08:9a:a7:42:62:dd:16:2b:16:15:00:aa:dd: d9:3b:d0:49:f2:2c:c0:ae:9b:2b:c8:76:54:98:35: dc:48:4b:3f:a8:09:0d:d3:39:15:b2:87:d6:f7:fb: 94:73:ec:fe:01:98:39:72:02:94:55:0d:d4:be:4f: 46:94:62:2a:4b:52:3c:97:ba:97:bc:85:bb:78:34: 8c:92:e0:c5:38:54:49:a6:57:4c:83:45:3d:6d:c1: 47:2e:98:99:71:99:70:0a:dc:c3:7b:b4:3e:db:68: ba:bc:3b:85:c5:73:51:e1:97:98:53:dc:60:b3:5e: 7e:5d:47:cd:34:7f:4f:63:95:ce:15:2b:84:73:88: 54:89:21:3a:bb:e0:04:fa:2a:89:96:51:71:3b:72: 91:f9:64:d5:60:c4:d3:c3:9b:72:df:82:fe:13:a6: ea:6d:bd:2f:78:96:df:ff:de:a3:44:91:41:8b:ba: 60:08:f4:09:0b:59:13:59:12:70:a3:00:4d:48:ca: b6:dd:b7:8f:ec:82:53:1a:51:00:ff:9a:d7:b1:29: b1:3f:c3:2d:e6:39:45:57:6c:8d:1b:55:a1:57:48: f2:9e:c7:61:4b:32:a0:11:25:95:af:d0:7f:c8:b1: 61:a1:40:b0:03:f8:9b:2c:66:a5:1b:79:3e:db:94: fa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:67:A6:66:A2:E3:5B:96:A5:11:76:53:8B:92:81:6C:04:C3:E2:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/f87456cf-08c3-304e-bc3e-9b21713eff7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl X509v3 Authority Key Identifier: keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer sbgp-ipAddrBlock: critical IPv4: 216.87.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:d7:f9:46:45:26:a7:4c:71:bc:46:ba:80:27:4d:fb:64:b4: 81:05:76:5e:0c:cd:ba:a6:d9:39:88:d3:be:9d:dd:69:95:09: 2d:fd:7d:96:f9:09:9f:00:e6:9c:74:df:55:3a:a2:3a:56:9d: 1b:24:63:6f:3a:44:5a:5c:ed:91:60:bd:a1:96:36:02:c9:5e: 9f:09:b0:7c:47:d8:20:41:3d:11:f2:84:c4:de:27:9d:b0:01: a4:8a:19:35:39:ec:83:b5:cd:85:d8:e0:95:fe:ca:23:b3:ad: ba:c7:cc:ef:a1:be:0a:ab:2c:8b:48:80:26:35:43:82:b5:26: 42:63:83:b5:07:21:7c:04:6d:8d:35:ed:28:b2:76:6d:d4:18: 28:97:32:1e:25:10:88:b2:1c:bb:65:aa:65:6b:fb:3a:fa:c0: a7:09:1d:c5:e9:8a:12:c6:ae:0d:dd:5f:4e:c1:82:53:5c:d9: df:c1:dd:59:99:53:e1:f4:13:48:7a:60:eb:81:4e:7c:59:68: 4d:e8:46:6a:19:64:b3:b1:b8:1f:68:e8:5a:44:bf:53:57:b5: b5:61:27:fa:b6:ad:f9:08:2a:60:bd:23:89:96:b6:37:86:bd: 17:2a:70:27:ec:de:9c:01:1d:57:24:e1:7e:63:e3:bf:8f:ed: e0:35:fa:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEygYcXH9yAXYldfpMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY2YTZjOGUtYWE3My00ZDgyLWEyYjEtZTYxOWViM2Yy YWVjMB4XDTI2MDEyNDAyMDAzMVoXDTI2MDQyNDAxMDAzMVowLzEtMCsGA1UEAxMk YmQxZDI3MDQtOTkxMC00ZTI3LTk0M2YtMDllMTJhMzU1N2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAiap0Ji3RYrFhUAqt3ZO9BJ8izArpsryHZU mDXcSEs/qAkN0zkVsofW9/uUc+z+AZg5cgKUVQ3Uvk9GlGIqS1I8l7qXvIW7eDSM kuDFOFRJpldMg0U9bcFHLpiZcZlwCtzDe7Q+22i6vDuFxXNR4ZeYU9xgs15+XUfN NH9PY5XOFSuEc4hUiSE6u+AE+iqJllFxO3KR+WTVYMTTw5ty34L+E6bqbb0veJbf /96jRJFBi7pgCPQJC1kTWRJwowBNSMq23beP7IJTGlEA/5rXsSmxP8Mt5jlFV2yN G1WhV0jynsdhSzKgESWVr9B/yLFhoUCwA/ibLGalG3k+25T6LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVnpmai41uWpRF2U4uSgWwEw+IAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZh NmM4ZS1hYTczLTRkODItYTJiMS1lNjE5ZWIzZjJhZWMvZjg3NDU2Y2YtMDhjMy0z MDRlLWJjM2UtOWIyMTcxM2VmZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWY2YTZjOGUtYWE3My00ZDgyLWEy YjEtZTYxOWViM2YyYWVjLzFmNmE2YzhlLWFhNzMtNGQ4Mi1hMmIxLWU2MTllYjNm MmFlYy5jcmwwHwYDVR0jBBgwFoAU4cKiXdGkcBTXif4pkOW5K7a7dxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZhNmM4ZS1hYTczLTRkODItYTJiMS1lNjE5 ZWIzZjJhZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Fc9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnX+UZFJqdMcbxGuoAnTftktIEFdl4Mzbqm2TmI076d3WmVCS39fZb5 CZ8A5px031U6ojpWnRskY286RFpc7ZFgvaGWNgLJXp8JsHxH2CBBPRHyhMTeJ52w AaSKGTU57IO1zYXY4JX+yiOzrbrHzO+hvgqrLItIgCY1Q4K1JkJjg7UHIXwEbY01 7Siydm3UGCiXMh4lEIiyHLtlqmVr+zr6wKcJHcXpihLGrg3dX07BglNc2d/B3VmZ U+H0E0h6YOuBTnxZaE3oRmoZZLOxuB9o6FpEv1NXtbVhJ/q2rfkIKmC9I4mWtjeG vRcqcCfs3pwBHVck4X5j47+P7eA1+nc= -----END CERTIFICATE-----Generated at Mon Mar 2 03:59:13 2026 by rpki-client