$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/252e39e6-5918-3151-b47d-848d05b870d0.roa File: 252e39e6-5918-3151-b47d-848d05b870d0.roa (raw, json) Hash identifier: F5DAlcynW4nIby/QHGkjnOoam1ynrd3+Y6etVZesU98= Subject key identifier: 36:AF:45:27:A2:03:46:BC:69:9D:08:23:9E:8E:99:4C:47:0B:55:72 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584EA17A82658F33821F7C8D8E80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/252e39e6-5918-3151-b47d-848d05b870d0.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 23473 IP address blocks: 66.253.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:82:65:8f:33:82:1f:7c:8d:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=6446c9bd-7749-4914-83af-a2f803454225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f3:21:8f:55:91:20:39:99:9f:39:55:f4:9d: 0d:a2:43:de:9f:43:58:8d:63:99:49:19:3f:e6:2f: 12:67:06:58:d1:dc:b6:00:44:aa:50:ea:db:0f:93: 15:e7:66:bf:1a:f6:22:0a:75:33:cb:7d:c3:21:ca: 9f:4b:d0:5d:dd:67:30:e4:46:7d:ae:da:35:37:e6: d6:a0:a6:3d:f8:73:d5:f5:fa:78:88:05:d6:dc:51: 86:4a:43:77:84:89:a1:c4:c9:85:37:1d:3b:5d:f0: 7c:89:88:67:15:78:c3:c2:1e:77:67:00:96:ed:35: b2:0f:ee:27:e1:10:ee:5d:e7:20:8f:50:6c:bc:15: c3:28:9b:38:22:82:a0:23:f4:47:72:f3:01:78:f2: 35:e5:60:1e:1c:41:3d:28:79:64:3d:fd:86:c7:bf: 34:52:53:bc:3d:fa:61:7c:f3:6d:61:e3:7f:fd:00: cb:a5:e1:e9:d0:fa:a6:1f:90:72:f4:1e:56:74:58: d6:56:14:b4:f3:55:0d:77:d6:fd:eb:31:77:8f:5f: 5c:a2:90:90:50:5f:21:ff:c2:4d:7e:e8:54:b0:5a: 88:45:93:a3:e3:32:29:83:97:31:39:7c:01:c3:e8: c0:db:e5:fa:f1:e1:19:7f:60:38:50:5c:db:0b:d6: 55:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AF:45:27:A2:03:46:BC:69:9D:08:23:9E:8E:99:4C:47:0B:55:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/252e39e6-5918-3151-b47d-848d05b870d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:ee:5e:a5:87:f1:4f:e9:58:8d:a1:1b:cf:06:1b:2f:2d:c7: c8:2b:f6:60:21:ef:3b:94:ca:9a:47:b7:d6:d9:52:22:3e:cd: 10:03:73:44:2c:9c:5a:ac:90:a6:fd:40:46:c7:8b:60:e6:33: bf:7a:95:0c:dd:d0:8c:f3:0d:30:ff:a4:ec:1e:a9:29:7c:5c: b6:c0:05:28:73:06:56:2d:a6:d9:f0:29:1f:0d:32:53:89:30: c3:65:0c:d6:23:1c:3b:dd:96:bc:95:93:e6:a4:d2:3d:fe:03: dc:49:4f:2b:f7:4a:82:e8:27:b9:2a:19:c0:fe:f9:d4:2c:03: af:ce:97:02:9b:40:56:a3:fb:33:06:a2:86:1e:2c:09:5a:98: 09:ab:79:01:bb:02:90:8c:8c:6d:25:65:5a:0a:5b:d2:cd:7d: d8:ba:02:02:ca:d9:1b:2c:8d:95:5b:1f:1b:42:50:19:d3:b0: 41:54:75:ff:fd:59:84:92:18:96:e9:4e:59:72:ec:40:20:35: d7:fd:ee:4b:e1:26:82:a4:f1:d7:06:88:bf:24:49:3e:23:6a: 2b:8f:37:29:21:2b:19:b3:8f:09:cd:00:b0:3d:34:4e:06:af: dc:6e:d0:7d:69:37:04:9d:11:d1:e2:d2:3f:26:d8:c6:94:71: e6:23:af:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6heoJljzOCH3yNjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk NjQ0NmM5YmQtNzc0OS00OTE0LTgzYWYtYTJmODAzNDU0MjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/Mhj1WRIDmZnzlV9J0NokPen0NYjWOZSRk/ 5i8SZwZY0dy2AESqUOrbD5MV52a/GvYiCnUzy33DIcqfS9Bd3Wcw5EZ9rto1N+bW oKY9+HPV9fp4iAXW3FGGSkN3hImhxMmFNx07XfB8iYhnFXjDwh53ZwCW7TWyD+4n 4RDuXecgj1BsvBXDKJs4IoKgI/RHcvMBePI15WAeHEE9KHlkPf2Gx780UlO8Pfph fPNtYeN//QDLpeHp0PqmH5By9B5WdFjWVhS081UNd9b96zF3j19copCQUF8h/8JN fuhUsFqIRZOj4zIpg5cxOXwBw+jA2+X68eEZf2A4UFzbC9ZV6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDavRSeiA0a8aZ0II56OmUxHC1VyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMjUyZTM5ZTYtNTkxOC0z MTUxLWI0N2QtODQ4ZDA1Yjg3MGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv3VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXuXqWH8U/pWI2hG88GGy8tx8gr9mAh7zuUyppHt9bZUiI+zRADc0Qs nFqskKb9QEbHi2DmM796lQzd0IzzDTD/pOweqSl8XLbABShzBlYtptnwKR8NMlOJ MMNlDNYjHDvdlryVk+ak0j3+A9xJTyv3SoLoJ7kqGcD++dQsA6/OlwKbQFaj+zMG ooYeLAlamAmreQG7ApCMjG0lZVoKW9LNfdi6AgLK2RssjZVbHxtCUBnTsEFUdf/9 WYSSGJbpTlly7EAgNdf97kvhJoKk8dcGiL8kST4jaiuPNykhKxmzjwnNALA9NE4G r9xu0H1pNwSdEdHi0j8m2MaUceYjr0s= -----END CERTIFICATE-----Generated at Wed Jul 29 04:57:36 2026 by rpki-client