$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/31f8bdd9-75ac-3ced-9637-8a8164b64d61.roa File: 31f8bdd9-75ac-3ced-9637-8a8164b64d61.roa (raw, json) Hash identifier: ncUAcyGNsnZtDGhQkkpB7ZRv2bfEPjZwzkMkKLFSrFk= Subject key identifier: 57:02:D4:94:99:7B:86:DA:70:CC:B6:33:32:95:10:EC:AE:BD:0B:47 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584CACF1CC41F5B3D2741F748D00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/31f8bdd9-75ac-3ced-9637-8a8164b64d61.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 23473 IP address blocks: 66.253.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:cc:41:f5:b3:d2:74:1f:74:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=aad8d840-52af-4bf6-ba10-9ca950f3dfb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:44:9c:e1:eb:56:7c:35:de:4c:c4:46:e1:e5: 6d:28:1a:c9:23:21:45:96:02:87:b3:2e:92:77:e1: 34:c1:ac:50:4b:67:b9:76:ce:1a:58:23:a1:e2:51: 01:38:da:ce:28:c8:78:6e:e7:a2:a4:13:04:55:fc: 87:8d:e7:d9:54:73:6b:1d:12:41:da:20:3e:ac:4d: 2b:e8:d8:6a:f2:6c:64:fc:1e:c7:01:4e:ac:8b:e2: e0:14:a0:fa:82:e5:4c:9f:dc:8c:be:e7:ee:63:dd: 57:89:a3:1b:09:b3:c7:0d:0f:a3:3d:60:ee:84:c3: d3:e9:b0:64:85:94:62:03:dd:1a:b5:ba:a9:14:9e: ae:43:c0:d6:85:ae:da:de:09:f2:80:f5:7e:0b:0e: 45:99:dd:10:be:1c:f6:6e:d0:b4:80:0a:34:54:4b: f4:ed:4b:70:6e:09:d9:ca:f3:a2:4a:a1:30:c3:22: d7:58:59:22:d1:7c:54:9d:d3:12:4e:29:65:34:c8: fe:e3:bf:a9:66:a2:6c:50:17:cd:f7:83:ec:15:9b: e5:1b:cb:24:35:c3:56:69:35:1f:29:89:04:f2:4c: 85:40:cc:5f:8c:b7:04:d4:2f:ce:a7:49:10:a3:c0: 0e:97:aa:6d:03:1a:ac:cf:a3:18:af:98:6d:46:63: ff:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:02:D4:94:99:7B:86:DA:70:CC:B6:33:32:95:10:EC:AE:BD:0B:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/31f8bdd9-75ac-3ced-9637-8a8164b64d61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:90:79:54:8d:3b:59:f0:cd:40:08:90:f7:0f:48:cf:5b:e0: 2a:0f:43:1e:af:d0:73:47:f2:e4:58:1e:bf:4f:81:a4:3a:b0: be:32:15:03:e2:00:4f:ad:24:6d:58:f8:0f:4e:58:67:a6:9c: 7e:90:b0:10:56:71:01:23:74:bf:9f:3e:3b:6b:62:9b:f9:06: c8:4f:52:6b:c2:f8:0a:59:96:ff:43:e6:ac:bb:d0:c4:33:08: ae:24:c5:95:f9:69:77:d4:08:7c:df:af:09:ed:af:78:bb:10: 77:ea:9b:94:4f:ca:3d:55:74:e3:0a:b9:14:79:83:68:4c:b6: e1:48:0b:fe:12:26:b7:e4:65:10:64:3a:fa:4b:c8:9f:03:b8: b1:a4:38:28:80:39:5c:bc:68:9e:1c:ec:d6:bb:12:ad:b1:c2: 07:65:d4:72:6c:f7:3f:a5:71:87:17:dd:64:17:85:e6:48:d6: 1f:95:e8:5f:49:57:d8:0a:7d:1c:dd:4d:61:d9:0e:f3:0b:e2: e1:8d:99:8f:28:66:e4:9a:26:e8:32:0e:c6:0b:27:6b:67:23: e2:82:ed:ea:05:52:32:bd:c1:19:24:38:70:68:0a:5e:af:0b: 6d:77:ef:95:f1:64:60:47:83:47:35:58:81:ca:67:26:65:84: d9:f4:60:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8cxB9bPSdB90jQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk YWFkOGQ4NDAtNTJhZi00YmY2LWJhMTAtOWNhOTUwZjNkZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsESc4etWfDXeTMRG4eVtKBrJIyFFlgKHsy6S d+E0waxQS2e5ds4aWCOh4lEBONrOKMh4bueipBMEVfyHjefZVHNrHRJB2iA+rE0r 6Nhq8mxk/B7HAU6si+LgFKD6guVMn9yMvufuY91XiaMbCbPHDQ+jPWDuhMPT6bBk hZRiA90atbqpFJ6uQ8DWha7a3gnygPV+Cw5Fmd0Qvhz2btC0gAo0VEv07UtwbgnZ yvOiSqEwwyLXWFki0XxUndMSTillNMj+47+pZqJsUBfN94PsFZvlG8skNcNWaTUf KYkE8kyFQMxfjLcE1C/Op0kQo8AOl6ptAxqsz6MYr5htRmP/GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcC1JSZe4bacMy2MzKVEOyuvQtHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMzFmOGJkZDktNzVhYy0z Y2VkLTk2MzctOGE4MTY0YjY0ZDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv27MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmQeVSNO1nwzUAIkPcPSM9b4CoPQx6v0HNH8uRYHr9PgaQ6sL4yFQPi AE+tJG1Y+A9OWGemnH6QsBBWcQEjdL+fPjtrYpv5BshPUmvC+ApZlv9D5qy70MQz CK4kxZX5aXfUCHzfrwntr3i7EHfqm5RPyj1VdOMKuRR5g2hMtuFIC/4SJrfkZRBk OvpLyJ8DuLGkOCiAOVy8aJ4c7Na7Eq2xwgdl1HJs9z+lcYcX3WQXheZI1h+V6F9J V9gKfRzdTWHZDvML4uGNmY8oZuSaJugyDsYLJ2tnI+KC7eoFUjK9wRkkOHBoCl6v C21375XxZGBHg0c1WIHKZyZlhNn0YGk= -----END CERTIFICATE-----Generated at Mon Mar 2 07:47:05 2026 by rpki-client