$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/847ae090-12ca-3228-92cf-9c45374cbbd6.roa File: 847ae090-12ca-3228-92cf-9c45374cbbd6.roa (raw, json) Hash identifier: 3gMQt3gQ8wvu86T1SaK73h6kmMmusT9z9BocBo8fY3E= Subject key identifier: C5:3A:34:53:57:7C:E7:3F:D9:06:46:2A:36:CE:F6:2E:1B:64:89:13 Certificate issuer: /CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Certificate serial: 010D0C9F4328584F2D87E22E64E594FDC66A96C0 Authority key identifier: 67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/847ae090-12ca-3228-92cf-9c45374cbbd6.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 17176 IP address blocks: 66.187.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:e2:2e:64:e5:94:fd:c6:6a:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=632aa477-5490-4e66-9a95-0da91ff933f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:68:29:6e:b8:32:dc:c4:36:86:a2:d3:80:bf: b3:80:5d:b2:b8:00:a2:11:fd:e5:4c:22:49:32:f2: 7c:7b:31:82:8e:aa:b7:4c:c5:36:d0:ec:59:88:a3: ba:6c:95:ab:5a:79:b8:8b:c7:55:4d:94:9f:15:7d: 85:e7:62:7d:93:92:51:64:63:69:50:b7:ca:27:06: 7f:99:b7:05:03:87:2b:15:87:00:9b:6e:0d:da:1c: 7a:36:ea:cb:42:be:50:01:c5:74:1f:59:b6:af:12: 80:b1:1d:cf:32:75:da:44:f6:1c:fd:92:32:5f:d9: 57:16:1e:c8:37:6e:79:7d:14:52:ed:33:27:8a:34: 42:72:bd:4a:86:ad:1c:3a:c9:5e:f9:26:3d:63:c6: dc:e8:ce:87:2a:c9:c4:cb:0b:e8:48:19:3e:00:07: ab:8c:63:d8:95:16:ca:92:05:aa:4e:2f:e2:72:fa: 23:ee:7c:f8:bd:76:c5:39:cc:8d:18:4e:c8:37:6f: f4:c9:e4:78:aa:2a:7b:46:b8:25:0f:8a:d2:a0:b6: e7:62:94:d5:09:d3:44:78:a4:f6:8d:46:01:0d:a6: 9f:65:57:9e:10:39:dd:cb:6d:13:8a:63:5b:ba:9d: 75:94:46:51:0d:88:4e:6c:30:14:f6:5c:58:d3:97: 11:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3A:34:53:57:7C:E7:3F:D9:06:46:2A:36:CE:F6:2E:1B:64:89:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/847ae090-12ca-3228-92cf-9c45374cbbd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl X509v3 Authority Key Identifier: keyid:67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer sbgp-ipAddrBlock: critical IPv4: 66.187.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:94:bb:0b:44:d0:d2:c3:ca:71:c2:f0:65:fa:eb:c6:45:d5: f8:ae:80:96:ca:68:08:12:38:87:0d:29:84:8d:7b:57:93:48: 5e:3a:d2:13:2c:73:ec:f7:0e:4f:92:e0:ea:2f:d1:29:35:b6: ca:8a:a8:51:5d:07:9c:02:bc:b1:f7:1f:d0:b7:84:10:78:8c: e0:63:23:0d:f1:74:4f:26:e4:c3:0f:58:d8:9b:a0:41:35:ca: 17:5f:1f:0f:ee:c9:19:b7:01:9b:89:20:39:75:ad:21:74:d1: 4b:d0:f7:ad:42:f8:9c:56:4a:41:bd:da:f3:89:97:55:c9:44: 64:c3:74:5b:4b:df:56:95:6c:0d:67:61:e4:13:21:7a:36:9d: fa:3d:32:8e:cb:83:2b:e9:67:4b:a6:4c:8d:72:2a:13:b2:5e: 8a:cc:b5:71:61:4b:52:ef:50:5c:34:d6:db:37:28:5e:e3:5d: f4:92:45:8c:81:37:be:7c:a5:57:29:b6:16:4f:f1:43:1d:b5: ab:9e:07:3e:3c:14:9d:69:a8:1e:97:aa:29:17:3a:02:55:fc: ab:02:bc:53:29:8a:65:94:6f:04:4d:42:bf:10:b6:e0:58:48: 7b:73:71:5f:7c:e8:62:88:4c:6e:19:89:2d:38:c1:ee:3c:e6: a9:7f:d6:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th+IuZOWU/cZqlsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjliODc0MzQtMDBkZS00ZDJmLWE0NWQtYWJlMWVmZTVl Y2ZkMB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk NjMyYWE0NzctNTQ5MC00ZTY2LTlhOTUtMGRhOTFmZjkzM2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52gpbrgy3MQ2hqLTgL+zgF2yuACiEf3lTCJJ MvJ8ezGCjqq3TMU20OxZiKO6bJWrWnm4i8dVTZSfFX2F52J9k5JRZGNpULfKJwZ/ mbcFA4crFYcAm24N2hx6NurLQr5QAcV0H1m2rxKAsR3PMnXaRPYc/ZIyX9lXFh7I N255fRRS7TMnijRCcr1Khq0cOsle+SY9Y8bc6M6HKsnEywvoSBk+AAerjGPYlRbK kgWqTi/icvoj7nz4vXbFOcyNGE7IN2/0yeR4qip7RrglD4rSoLbnYpTVCdNEeKT2 jUYBDaafZVeeEDndy20TimNbup11lEZRDYhObDAU9lxY05cRoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMU6NFNXfOc/2QZGKjbO9i4bZIkTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOWI4 NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUxZWZlNWVjZmQvODQ3YWUwOTAtMTJjYS0z MjI4LTkyY2YtOWM0NTM3NGNiYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjliODc0MzQtMDBkZS00ZDJmLWE0 NWQtYWJlMWVmZTVlY2ZkL2I5Yjg3NDM0LTAwZGUtNGQyZi1hNDVkLWFiZTFlZmU1 ZWNmZC5jcmwwHwYDVR0jBBgwFoAUZ7qrgtUltq3erC7/J+WFnJfOPGswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iOWI4NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUx ZWZlNWVjZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrv+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqUuwtE0NLDynHC8GX668ZF1fiugJbKaAgSOIcNKYSNe1eTSF460hMs c+z3Dk+S4Oov0Sk1tsqKqFFdB5wCvLH3H9C3hBB4jOBjIw3xdE8m5MMPWNiboEE1 yhdfHw/uyRm3AZuJIDl1rSF00UvQ961C+JxWSkG92vOJl1XJRGTDdFtL31aVbA1n YeQTIXo2nfo9Mo7LgyvpZ0umTI1yKhOyXorMtXFhS1LvUFw01ts3KF7jXfSSRYyB N758pVcpthZP8UMdtaueBz48FJ1pqB6XqikXOgJV/KsCvFMpimWUbwRNQr8QtuBY SHtzcV986GKITG4ZiS04we485ql/1lA= -----END CERTIFICATE-----Generated at Tue Sep 22 12:16:47 2026 by rpki-client