$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ba25dad7-de41-3db2-95c3-60dfd7a76c45.roa File: ba25dad7-de41-3db2-95c3-60dfd7a76c45.roa (raw, json) Hash identifier: qhOF/6B0/klSo5QwFl0Y1368LKoObnkPTfjKc+TolPk= Subject key identifier: AA:E4:32:6D:B8:DC:DF:91:F4:29:1B:47:F5:93:B3:BD:D7:62:1C:FF Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B4A4735EF9DF4F25C21C1B780 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ba25dad7-de41-3db2-95c3-60dfd7a76c45.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 23473 IP address blocks: 216.171.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:35:ef:9d:f4:f2:5c:21:c1:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=aefe4351-102b-4e7d-98be-d889cf76824a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c1:e0:8e:f0:80:92:f9:1f:33:c8:34:2c:80: ae:0f:29:98:34:e9:2f:96:06:e1:d6:63:d3:6b:5b: 90:07:da:94:3e:9e:da:72:3c:cd:3a:48:67:7c:76: d6:97:57:21:a0:6b:c0:43:f5:f5:2c:56:36:39:ae: 8a:6f:f3:91:5d:08:2a:2b:75:f5:b1:b4:c6:1f:ff: 3e:d4:78:90:9a:a6:18:43:af:07:73:4b:05:de:38: e9:f0:67:bc:65:5e:90:ca:12:b6:a7:68:32:c5:8a: e5:a2:30:78:7d:22:59:66:0f:5c:c9:1b:9b:29:df: 7d:8a:9a:2d:c4:53:ab:25:2d:b6:71:31:17:88:69: a3:d2:ba:1f:1b:be:a6:14:1c:45:99:f9:89:8c:ed: 6c:d6:14:1e:d2:51:2a:f8:1d:c4:4e:12:fd:c5:aa: ce:60:fe:ed:3d:e3:84:94:60:7f:c4:fb:52:ee:1a: ba:3c:98:28:b6:21:fe:25:1e:38:ae:96:f3:95:50: 09:dc:45:6d:09:06:e0:dc:93:2d:8c:b3:28:c3:3d: bd:c3:1b:3f:c0:a2:ff:01:e0:66:98:15:5d:3b:01: 30:38:f4:ad:e0:5b:8a:45:f2:22:59:47:20:30:9d: 94:14:42:ec:02:c6:d8:14:cb:17:ad:9f:61:19:47: ad:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E4:32:6D:B8:DC:DF:91:F4:29:1B:47:F5:93:B3:BD:D7:62:1C:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ba25dad7-de41-3db2-95c3-60dfd7a76c45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:98:2e:43:d8:50:2a:e0:3a:30:c5:38:7b:d4:c5:d4:35:9f: 79:5a:39:5a:51:86:ad:d4:cb:9b:23:65:33:28:e5:cf:b4:0e: a8:32:aa:10:ce:cb:7b:54:73:07:83:a8:cf:98:00:1d:e3:ad: 13:ee:93:7a:66:16:e6:0c:9b:e3:cb:2b:b0:09:a5:25:ef:c1: 4c:df:fc:4f:76:18:09:fa:3c:d8:f8:3b:c8:6b:dc:14:05:c7: 04:5b:36:4f:29:b3:e7:b2:9b:10:ed:26:dc:50:d3:a6:6c:ad: 68:3f:20:05:63:2a:a6:85:49:08:8c:ce:09:77:35:bc:7c:eb: e5:80:5b:c5:be:aa:a0:ef:3b:86:40:a4:ef:b8:26:e4:16:43: 5a:de:fd:cb:98:d8:1f:2b:82:ba:0a:07:8d:1e:3b:b2:1b:80: a9:5b:05:23:77:aa:2b:32:ef:1f:a7:f7:cd:1e:59:c5:2c:50: 20:34:b7:01:50:d7:64:79:69:ec:66:d5:98:25:5b:fa:4f:5a: f8:b4:5f:1b:5a:73:f3:77:e8:bc:11:67:55:59:c4:52:c6:86: 17:11:af:cd:d5:3e:ee:b4:14:72:e3:ef:dd:3e:f5:41:a7:e2: f3:e1:d4:01:ac:7a:9a:ab:2c:3e:7e:93:b4:26:69:87:b1:c9: 9d:36:4c:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRzXvnfTyXCHBt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk YWVmZTQzNTEtMTAyYi00ZTdkLTk4YmUtZDg4OWNmNzY4MjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocHgjvCAkvkfM8g0LICuDymYNOkvlgbh1mPT a1uQB9qUPp7acjzNOkhnfHbWl1choGvAQ/X1LFY2Oa6Kb/ORXQgqK3X1sbTGH/8+ 1HiQmqYYQ68Hc0sF3jjp8Ge8ZV6QyhK2p2gyxYrlojB4fSJZZg9cyRubKd99ipot xFOrJS22cTEXiGmj0rofG76mFBxFmfmJjO1s1hQe0lEq+B3EThL9xarOYP7tPeOE lGB/xPtS7hq6PJgotiH+JR44rpbzlVAJ3EVtCQbg3JMtjLMowz29wxs/wKL/AeBm mBVdOwEwOPSt4FuKRfIiWUcgMJ2UFELsAsbYFMsXrZ9hGUethQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrkMm243N+R9CkbR/WTs73XYhz/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYmEyNWRhZDctZGU0MS0z ZGIyLTk1YzMtNjBkZmQ3YTc2YzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuYLkPYUCrgOjDFOHvUxdQ1n3laOVpRhq3Uy5sjZTMo5c+0DqgyqhDO y3tUcweDqM+YAB3jrRPuk3pmFuYMm+PLK7AJpSXvwUzf/E92GAn6PNj4O8hr3BQF xwRbNk8ps+eymxDtJtxQ06ZsrWg/IAVjKqaFSQiMzgl3Nbx86+WAW8W+qqDvO4ZA pO+4JuQWQ1re/cuY2B8rgroKB40eO7IbgKlbBSN3qisy7x+n980eWcUsUCA0twFQ 12R5aexm1ZglW/pPWvi0Xxtac/N36LwRZ1VZxFLGhhcRr83VPu60FHLj790+9UGn 4vPh1AGsepqrLD5+k7QmaYexyZ02TE4= -----END CERTIFICATE-----Generated at Fri Oct 10 03:57:26 2025 by rpki-client