$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d1edd12e-ecf8-3c06-bf69-5d9918f38673.roa File: d1edd12e-ecf8-3c06-bf69-5d9918f38673.roa (raw, json) Hash identifier: yDP45xyI9NqM+UrrBlcNzFT0uq6aaoxswWBxLISH6DM= Subject key identifier: 54:86:32:1B:90:92:C3:DE:C9:C6:72:85:EC:DF:FE:B2:BF:31:92:2C Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B3126F6D14F60263554A38E00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d1edd12e-ecf8-3c06-bf69-5d9918f38673.roa Signing time: Sun 14 Sep 2025 13:00:42 +0000 ROA not before: Sun 14 Sep 2025 13:00:42 +0000 ROA not after: Sat 13 Dec 2025 14:00:42 +0000 asID: 23473 IP address blocks: 216.171.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:31:26:f6:d1:4f:60:26:35:54:a3:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 14 13:00:42 2025 GMT Not After : Dec 13 14:00:42 2025 GMT Subject: CN=f109fcf6-92f6-46fc-ba52-70579d0529b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ff:75:2c:bf:0f:7f:97:50:5c:25:63:61:7f: 8f:e6:72:78:03:62:25:cd:08:e1:11:4a:12:89:e7: 5d:4f:9a:d7:5b:07:21:c6:77:c0:a0:2c:37:85:64: a2:2c:4d:69:db:9c:3a:f0:5b:dc:34:0b:3e:ef:5f: 8b:c6:8f:37:4b:56:af:d4:0d:fe:40:e0:74:23:72: dc:fe:6a:db:04:9b:48:56:5c:4e:d0:60:98:d2:e8: 76:11:98:ce:b1:7d:dd:9d:7f:90:41:ff:b4:b1:d3: c4:cb:03:0c:24:5b:0a:b4:20:42:1c:fe:74:85:23: e1:7f:f4:03:d7:91:67:4c:61:99:94:ea:d3:70:78: bf:8c:a9:ea:4f:28:dd:27:66:2b:ba:19:95:a1:0c: 3c:05:cf:e2:89:34:1f:4a:40:50:7d:28:69:08:0d: ae:de:62:d5:eb:15:f3:05:3d:4a:25:93:30:65:27: 8b:91:22:a5:90:59:cd:30:8f:43:74:06:e2:f8:c5: 9d:0c:c0:ff:36:80:6c:54:43:f2:43:49:23:ea:4e: 0e:fc:ed:52:66:ec:69:eb:95:70:6a:ad:de:9d:8c: 07:c2:09:70:6b:60:5c:be:88:f1:82:ad:b3:2c:00: 07:e6:9d:d0:85:52:7a:42:24:40:0b:75:31:02:1c: 32:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:86:32:1B:90:92:C3:DE:C9:C6:72:85:EC:DF:FE:B2:BF:31:92:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d1edd12e-ecf8-3c06-bf69-5d9918f38673.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:70:03:b1:89:2b:ce:21:75:d3:29:35:78:83:28:33:40:d4: 57:93:c8:6c:18:5f:04:01:28:10:41:a0:73:fc:b1:f7:47:42: 16:70:f2:ff:68:9e:88:8e:cc:0a:84:51:de:45:71:e2:3c:45: e9:93:ea:79:fc:8f:8f:49:3e:d4:57:d0:b3:96:65:6a:f4:98: ed:ce:5f:39:23:b1:67:72:56:95:af:33:b7:b2:bb:5a:86:19: 76:cf:da:66:55:36:7c:a1:a7:14:bc:ce:8e:3f:c5:d3:6e:b4: 5c:02:f9:f8:78:18:42:ec:79:74:39:58:e4:48:78:81:df:27: 26:cf:4a:9c:db:ab:9b:52:5d:e7:6f:f8:9a:19:52:23:c2:31: 01:2a:a2:02:4b:04:49:24:09:20:6e:a9:93:4f:6c:e2:20:9c: e8:54:c3:d4:68:01:5c:9a:7a:3a:46:aa:50:d7:ec:0c:66:9f: 5f:fd:ef:5c:6f:52:27:b8:7b:81:03:d3:61:bc:7b:2b:73:e8: 4d:b8:f1:46:42:22:2c:bb:ff:3f:9f:25:12:10:17:0e:fc:1b: 7b:1a:6b:28:f7:d7:0b:4a:c9:8b:b7:1e:ad:cd:ff:53:8b:00: 1c:5e:1d:0e:f3:84:0a:a4:59:aa:14:ce:89:19:c5:97:fe:a4: a2:13:3b:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsxJvbRT2AmNVSjjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDkxNDEzMDA0MloXDTI1MTIxMzE0MDA0MlowLzEtMCsGA1UEAxMk ZjEwOWZjZjYtOTJmNi00NmZjLWJhNTItNzA1NzlkMDUyOWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf91LL8Pf5dQXCVjYX+P5nJ4A2IlzQjhEUoS ieddT5rXWwchxnfAoCw3hWSiLE1p25w68FvcNAs+71+Lxo83S1av1A3+QOB0I3Lc /mrbBJtIVlxO0GCY0uh2EZjOsX3dnX+QQf+0sdPEywMMJFsKtCBCHP50hSPhf/QD 15FnTGGZlOrTcHi/jKnqTyjdJ2YruhmVoQw8Bc/iiTQfSkBQfShpCA2u3mLV6xXz BT1KJZMwZSeLkSKlkFnNMI9DdAbi+MWdDMD/NoBsVEPyQ0kj6k4O/O1SZuxp65Vw aq3enYwHwglwa2Bcvojxgq2zLAAH5p3QhVJ6QiRAC3UxAhwy8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSGMhuQksPeycZyhezf/rK/MZIsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZDFlZGQxMmUtZWNmOC0z YzA2LWJmNjktNWQ5OTE4ZjM4NjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlwA7GJK84hddMpNXiDKDNA1FeTyGwYXwQBKBBBoHP8sfdHQhZw8v9o noiOzAqEUd5FceI8RemT6nn8j49JPtRX0LOWZWr0mO3OXzkjsWdyVpWvM7eyu1qG GXbP2mZVNnyhpxS8zo4/xdNutFwC+fh4GELseXQ5WORIeIHfJybPSpzbq5tSXedv +JoZUiPCMQEqogJLBEkkCSBuqZNPbOIgnOhUw9RoAVyaejpGqlDX7Axmn1/971xv Uie4e4ED02G8eytz6E248UZCIiy7/z+fJRIQFw78G3saayj31wtKyYu3Hq3N/1OL ABxeHQ7zhAqkWaoUzokZxZf+pKITO40= -----END CERTIFICATE-----Generated at Fri Oct 10 03:55:31 2025 by rpki-client