$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ba25dad7-de41-3db2-95c3-60dfd7a76c45.roa File: ba25dad7-de41-3db2-95c3-60dfd7a76c45.roa (raw, json) Hash identifier: LuArd3LvkHRssjx4d+LIvJ0ym7FdINmvq+njDc3ZUO4= Subject key identifier: 51:16:B8:56:B9:8C:6F:07:20:61:88:BA:CE:38:15:1A:92:16:4A:CB Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D0A77C0F041C57B77E5CC2780 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ba25dad7-de41-3db2-95c3-60dfd7a76c45.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 23473 IP address blocks: 216.171.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:c0:f0:41:c5:7b:77:e5:cc:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=b2421a2d-184a-4e73-9dd4-f15b97b018fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a1:33:3c:85:11:11:0c:dc:8e:17:19:29:da: 36:c2:68:67:54:35:d0:b5:6c:2f:27:9c:bc:49:1c: 36:7e:b8:da:a1:b4:cc:1e:00:47:4e:bf:15:86:de: f5:59:22:25:4e:1a:67:91:0d:cd:dc:ee:d7:0d:ac: 5d:e2:52:c5:eb:fc:4b:c2:a3:dd:af:d6:1f:94:ec: 1b:b9:b7:8c:6d:97:3d:c9:ca:b3:12:ce:2c:cc:7e: 21:07:23:f9:2d:6c:d9:e3:51:ef:85:91:61:bf:c0: 72:b1:7f:53:71:06:9f:ec:c7:16:a7:62:48:ce:48: 0b:a6:91:5d:db:b2:03:c1:c7:2c:b6:8d:3c:03:ce: 77:a8:bf:17:93:25:1c:a4:b5:e3:4b:7e:44:10:48: 80:c7:63:28:78:15:0c:49:9a:c7:73:88:f3:30:cc: 24:30:7e:71:ef:2b:13:d3:b0:b4:f8:59:47:28:0b: 5f:2e:ed:60:43:d2:09:62:b5:5d:b7:4a:94:0a:8e: ec:e8:f2:62:74:0d:cf:fb:41:28:ae:5f:83:8a:53: e1:b0:bf:3c:cb:33:54:61:80:3c:45:18:b2:ab:f3: 85:cc:19:6d:0c:20:dd:42:15:cb:8a:57:9e:3e:17: e0:d8:a5:9c:b4:9b:6b:12:15:89:54:56:0e:f3:90: 14:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:16:B8:56:B9:8C:6F:07:20:61:88:BA:CE:38:15:1A:92:16:4A:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ba25dad7-de41-3db2-95c3-60dfd7a76c45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:4d:3e:67:f0:67:7f:d2:3e:46:1f:de:f6:b6:be:fe:49:0f: 5a:d7:8f:34:85:fd:90:96:2a:61:49:7d:2e:21:de:b5:9d:02: e0:e7:5d:2b:0d:a2:cc:71:2c:fc:62:ab:23:1c:ea:3d:cd:2d: fd:61:85:7e:ce:97:5d:c0:32:3f:ec:3b:57:98:b8:a2:a0:c1: af:5b:76:5d:54:08:96:a2:26:3a:5a:88:f9:21:44:82:f8:33: 6d:3c:68:ff:b7:ca:63:c8:47:e7:ca:d4:a0:dd:7c:39:96:cb: fa:4a:74:29:80:4e:e5:48:3f:b6:57:7f:3a:3c:10:f6:f3:be: c0:26:7e:2c:98:a2:b5:53:00:4e:e0:03:bd:07:22:a0:04:00: 61:04:04:eb:a0:24:26:08:9f:39:20:a3:1e:06:4a:e1:89:a0: 1c:5f:31:46:ba:8b:b6:51:a4:c9:c1:3f:20:b9:76:07:ed:94: 1e:84:43:2e:df:7e:97:91:10:b9:9a:09:ed:5f:f5:35:94:40: c6:c1:0d:44:8e:0c:57:4f:77:9f:f5:bf:3e:5f:50:60:7e:63: 41:d9:e6:d1:68:4b:75:e6:1b:41:ad:b4:0f:f7:73:b6:60:59: 65:cb:3a:d6:3d:cc:96:42:6b:51:a8:23:39:91:54:53:f9:33: fd:26:38:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd8DwQcV7d+XMJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk YjI0MjFhMmQtMTg0YS00ZTczLTlkZDQtZjE1Yjk3YjAxOGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaEzPIUREQzcjhcZKdo2wmhnVDXQtWwvJ5y8 SRw2frjaobTMHgBHTr8Vht71WSIlThpnkQ3N3O7XDaxd4lLF6/xLwqPdr9YflOwb ubeMbZc9ycqzEs4szH4hByP5LWzZ41HvhZFhv8BysX9TcQaf7McWp2JIzkgLppFd 27IDwccsto08A853qL8XkyUcpLXjS35EEEiAx2MoeBUMSZrHc4jzMMwkMH5x7ysT 07C0+FlHKAtfLu1gQ9IJYrVdt0qUCo7s6PJidA3P+0Eorl+DilPhsL88yzNUYYA8 RRiyq/OFzBltDCDdQhXLileePhfg2KWctJtrEhWJVFYO85AUqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEWuFa5jG8HIGGIus44FRqSFkrLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYmEyNWRhZDctZGU0MS0z ZGIyLTk1YzMtNjBkZmQ3YTc2YzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlNPmfwZ3/SPkYf3va2vv5JD1rXjzSF/ZCWKmFJfS4h3rWdAuDnXSsN osxxLPxiqyMc6j3NLf1hhX7Ol13AMj/sO1eYuKKgwa9bdl1UCJaiJjpaiPkhRIL4 M208aP+3ymPIR+fK1KDdfDmWy/pKdCmATuVIP7ZXfzo8EPbzvsAmfiyYorVTAE7g A70HIqAEAGEEBOugJCYInzkgox4GSuGJoBxfMUa6i7ZRpMnBPyC5dgftlB6EQy7f fpeRELmaCe1f9TWUQMbBDUSODFdPd5/1vz5fUGB+Y0HZ5tFoS3XmG0GttA/3c7Zg WWXLOtY9zJZCa1GoIzmRVFP5M/0mOJ4= -----END CERTIFICATE-----Generated at Sat Mar 21 20:52:27 2026 by rpki-client