$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d9a36c2e-ec07-3c58-a7c6-76e1675ee80b.roa File: d9a36c2e-ec07-3c58-a7c6-76e1675ee80b.roa (raw, json) Hash identifier: hs8/bwECdfY5nQbqdLP3n76ag2+by1pC7vVax2QqckY= Subject key identifier: DA:A8:C4:B4:4E:19:BC:BD:EA:12:1E:7C:89:9B:15:96:55:7D:10:90 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F51D2A5A32C292F31C9D01980 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d9a36c2e-ec07-3c58-a7c6-76e1675ee80b.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 216.171.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:a5:a3:2c:29:2f:31:c9:d0:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=56042813-728d-45c6-8fab-befee8d30a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c2:08:50:19:e1:d7:68:dd:1f:ae:d7:86:9a: 1b:72:d0:9e:93:34:e6:82:85:b5:a4:ec:96:3a:bd: 9d:4e:fb:d6:c2:f4:4e:59:43:97:7c:21:c8:d5:8b: 7b:dc:c9:c0:b8:3c:6a:89:5a:6b:c3:13:4e:4a:9a: 5c:e1:77:e4:eb:ed:04:2b:24:5b:12:75:1f:25:2b: 8e:ff:8c:25:6b:0c:08:d0:01:67:62:dd:c3:bf:b7: a6:09:b9:0d:91:08:be:03:e3:b5:49:76:e2:83:67: b7:f3:8a:0b:cc:fd:39:5c:91:63:29:0b:cc:23:7d: bd:ba:e8:65:95:55:71:91:b6:d6:72:2c:04:46:22: ab:05:89:a9:ff:9a:14:a6:5c:b0:33:6d:e9:d5:db: 3f:96:1c:ee:2d:af:7e:2b:cf:c1:c3:4f:a6:26:6c: 19:a0:51:d8:e7:17:c9:80:6a:51:8f:e7:d8:19:83: 43:53:8b:f8:fd:4c:77:3b:c6:aa:a8:3f:0d:f2:28: 17:01:59:23:ea:4c:d8:19:08:fc:1e:2d:23:20:52: 49:63:32:c4:9a:ad:6e:0a:93:84:7c:50:a8:c5:b1: d9:6b:b5:81:6d:ec:e4:68:c8:07:0a:80:b3:65:23: ca:f8:a2:12:8e:b3:0e:5c:7b:69:36:2a:50:fb:d0: 1d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A8:C4:B4:4E:19:BC:BD:EA:12:1E:7C:89:9B:15:96:55:7D:10:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d9a36c2e-ec07-3c58-a7c6-76e1675ee80b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:f7:52:8f:fb:cc:ab:84:94:f1:25:0e:6b:a5:b5:8d:2d:61: d9:56:e7:32:12:a9:3e:91:31:f9:b5:c5:03:eb:4d:29:46:12: 7d:33:d7:1b:a7:70:f5:e7:c5:7c:f2:5c:4b:25:1b:9d:b1:58: 73:3d:a7:7d:90:03:ad:3a:e6:1d:37:3c:d4:3b:de:7a:63:8d: 2a:05:91:76:11:e1:fa:ee:55:40:0a:c6:61:3e:37:44:4e:46: 6f:f2:9f:f2:ba:89:24:40:01:1c:55:19:3c:e6:98:1f:18:2a: f9:ac:d3:0a:9f:b6:0b:aa:3f:40:32:c3:1a:d0:13:50:36:6c: a7:6b:dd:75:21:59:d3:ea:33:27:18:bc:30:05:24:5c:1e:ed: 4f:2a:2a:de:94:b7:ec:17:d1:b9:c5:e7:19:83:34:94:5a:ea: 18:70:74:eb:7b:bc:21:1c:54:5c:b0:ee:fe:36:ad:c6:ca:41: 09:6c:22:f2:30:4e:83:fe:ef:25:a5:5e:47:4b:18:7e:cc:63: 37:08:06:d6:6f:fa:2a:e3:d8:94:2c:d6:ef:19:32:95:54:a3: 2f:43:11:e4:b6:3b:fa:fd:b1:85:fb:0f:ca:83:45:ed:80:0c: 45:d6:3c:90:82:dc:e1:7a:33:2f:b9:d3:3f:a6:eb:f2:86:e6: 4b:09:5d:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0qWjLCkvMcnQGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk NTYwNDI4MTMtNzI4ZC00NWM2LThmYWItYmVmZWU4ZDMwYTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcIIUBnh12jdH67XhpobctCekzTmgoW1pOyW Or2dTvvWwvROWUOXfCHI1Yt73MnAuDxqiVprwxNOSppc4Xfk6+0EKyRbEnUfJSuO /4wlawwI0AFnYt3Dv7emCbkNkQi+A+O1SXbig2e384oLzP05XJFjKQvMI329uuhl lVVxkbbWciwERiKrBYmp/5oUplywM23p1ds/lhzuLa9+K8/Bw0+mJmwZoFHY5xfJ gGpRj+fYGYNDU4v4/Ux3O8aqqD8N8igXAVkj6kzYGQj8Hi0jIFJJYzLEmq1uCpOE fFCoxbHZa7WBbezkaMgHCoCzZSPK+KISjrMOXHtpNipQ+9AdaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqoxLROGby96hIefImbFZZVfRCQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZDlhMzZjMmUtZWMwNy0z YzU4LWE3YzYtNzZlMTY3NWVlODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAb3Uo/7zKuElPElDmultY0tYdlW5zISqT6RMfm1xQPrTSlGEn0z1xun cPXnxXzyXEslG52xWHM9p32QA6065h03PNQ73npjjSoFkXYR4fruVUAKxmE+N0RO Rm/yn/K6iSRAARxVGTzmmB8YKvms0wqftguqP0AywxrQE1A2bKdr3XUhWdPqMycY vDAFJFwe7U8qKt6Ut+wX0bnF5xmDNJRa6hhwdOt7vCEcVFyw7v42rcbKQQlsIvIw ToP+7yWlXkdLGH7MYzcIBtZv+irj2JQs1u8ZMpVUoy9DEeS2O/r9sYX7D8qDRe2A DEXWPJCC3OF6My+50z+m6/KG5ksJXR4= -----END CERTIFICATE-----Generated at Mon Oct 5 14:40:17 2026 by rpki-client