$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d9a36c2e-ec07-3c58-a7c6-76e1675ee80b.roa File: d9a36c2e-ec07-3c58-a7c6-76e1675ee80b.roa (raw, json) Hash identifier: rvWCleS7krWkjbUJt4HAWXB3aWgNxGTcqbU+rz6Dpm4= Subject key identifier: 88:52:38:66:F7:37:48:99:34:52:FA:6C:E2:19:5F:64:A0:A2:29:FA Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D2D3F72C6E0640B90F7B03580 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d9a36c2e-ec07-3c58-a7c6-76e1675ee80b.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 23473 IP address blocks: 216.171.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:72:c6:e0:64:0b:90:f7:b0:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=48ae6e95-b11b-4c35-9af5-430ed0a38372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f5:b2:1f:b5:24:ee:36:56:dd:6a:d7:36:a8: c1:1e:3b:35:dd:c6:0d:2c:88:27:24:f9:02:b3:0c: ee:69:4c:e8:b0:d0:3f:87:8a:71:30:f7:5f:7f:a6: 26:b3:4b:81:19:e1:ec:87:33:85:d1:b7:e4:ff:ed: fe:86:7f:66:1b:11:13:b2:77:5c:4d:25:27:a9:7a: 93:65:74:25:93:62:c6:81:d4:b0:65:32:32:f2:1c: 68:44:d5:92:84:a1:0c:7c:cd:c5:b4:54:97:0b:7c: 26:d4:89:8d:df:ca:84:31:a7:80:44:f8:c8:99:60: 9a:00:bf:26:33:8a:0e:91:bc:99:b3:ea:c3:04:66: 01:df:16:19:88:fb:a8:01:0c:67:4c:1b:86:0d:0d: 53:7b:eb:32:d6:06:e4:fa:65:12:51:b7:2f:35:d8: 76:10:a8:6b:f0:fb:c3:4a:d3:68:6f:68:07:a2:97: ee:dd:79:c3:11:04:1a:e0:37:4b:b2:e6:91:cf:50: aa:d8:d5:05:d9:38:09:e3:df:da:b9:89:ed:52:02: 9a:0d:51:13:9a:77:be:cd:2e:98:80:e1:15:12:9b: 74:51:8f:ca:44:9c:36:ef:a7:f2:13:37:e4:00:6a: 56:b2:e3:5e:3d:e1:b2:d3:3e:22:24:75:fb:7d:a4: f9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:52:38:66:F7:37:48:99:34:52:FA:6C:E2:19:5F:64:A0:A2:29:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d9a36c2e-ec07-3c58-a7c6-76e1675ee80b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:fb:d7:98:62:fe:7e:75:f3:ca:5b:1a:08:52:1f:85:6e:ee: a3:09:df:62:ca:cf:e8:ca:e5:15:c2:f2:2f:3f:41:ae:0b:92: 8d:d0:23:71:be:7d:d7:06:98:3c:a0:d6:4f:98:54:0d:38:4b: 5e:95:f0:ae:3f:4c:86:00:da:cd:c3:84:26:ce:5c:0a:85:3c: 88:b9:b7:a6:7b:92:7c:fe:18:a7:a0:1b:de:05:3e:14:d8:e0: 1b:b1:85:c1:61:b6:06:8a:d9:58:e0:67:49:0f:32:40:83:d4: 4f:c3:88:2c:48:9a:b8:0c:5d:c4:7c:3c:00:8b:56:68:57:38: 69:4a:ff:77:57:5d:4c:e6:3e:a3:16:50:16:94:d7:05:2e:09: e8:f7:3b:57:8b:c1:12:ed:b0:7f:8d:9c:ec:98:81:7b:00:ee: 7e:1c:a5:4e:22:6b:08:5d:41:98:13:6a:09:a3:bd:b4:4f:2c: 3d:de:f0:4d:1b:4b:25:2a:68:b4:b4:bc:8a:d0:43:65:aa:64: e2:54:cf:68:29:f4:6f:dc:71:ef:71:b8:bc:c0:8f:e3:b5:b5: 1d:ae:53:2e:2f:38:82:b6:5f:91:86:b2:62:4d:5e:f5:d0:b1: 11:5e:a5:cf:62:51:77:f7:45:87:c3:d5:24:af:ee:eb:7b:5d: 06:c1:e3:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP3LG4GQLkPewNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk NDhhZTZlOTUtYjExYi00YzM1LTlhZjUtNDMwZWQwYTM4MzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/WyH7Uk7jZW3WrXNqjBHjs13cYNLIgnJPkC swzuaUzosNA/h4pxMPdff6Yms0uBGeHshzOF0bfk/+3+hn9mGxETsndcTSUnqXqT ZXQlk2LGgdSwZTIy8hxoRNWShKEMfM3FtFSXC3wm1ImN38qEMaeARPjImWCaAL8m M4oOkbyZs+rDBGYB3xYZiPuoAQxnTBuGDQ1Te+sy1gbk+mUSUbcvNdh2EKhr8PvD StNob2gHopfu3XnDEQQa4DdLsuaRz1Cq2NUF2TgJ49/auYntUgKaDVETmne+zS6Y gOEVEpt0UY/KRJw276fyEzfkAGpWsuNePeGy0z4iJHX7faT5+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhSOGb3N0iZNFL6bOIZX2Sgoin6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZDlhMzZjMmUtZWMwNy0z YzU4LWE3YzYtNzZlMTY3NWVlODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7715hi/n5188pbGghSH4Vu7qMJ32LKz+jK5RXC8i8/Qa4Lko3QI3G+ fdcGmDyg1k+YVA04S16V8K4/TIYA2s3DhCbOXAqFPIi5t6Z7knz+GKegG94FPhTY 4BuxhcFhtgaK2VjgZ0kPMkCD1E/DiCxImrgMXcR8PACLVmhXOGlK/3dXXUzmPqMW UBaU1wUuCej3O1eLwRLtsH+NnOyYgXsA7n4cpU4iawhdQZgTagmjvbRPLD3e8E0b SyUqaLS0vIrQQ2WqZOJUz2gp9G/cce9xuLzAj+O1tR2uUy4vOIK2X5GGsmJNXvXQ sRFepc9iUXf3RYfD1SSv7ut7XQbB424= -----END CERTIFICATE-----Generated at Sat Mar 21 20:54:08 2026 by rpki-client