$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4bc9954b-ac5d-3aa0-baf5-640c55692392.roa File: 4bc9954b-ac5d-3aa0-baf5-640c55692392.roa (raw, json) Hash identifier: 4QYBaul0VMWmXQDObGCmKv4aO7Fc3giXh1VYOGLb6mk= Subject key identifier: 57:DF:3F:3F:A4:A3:F0:88:81:D9:12:D0:56:4D:F8:7C:37:5A:C1:80 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D624A56540106D4D00CC739FE Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4bc9954b-ac5d-3aa0-baf5-640c55692392.roa Signing time: Fri 03 Apr 2026 13:00:30 +0000 ROA not before: Fri 03 Apr 2026 13:00:30 +0000 ROA not after: Thu 02 Jul 2026 13:00:30 +0000 asID: 23473 IP address blocks: 66.253.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:62:4a:56:54:01:06:d4:d0:0c:c7:39:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Apr 3 13:00:30 2026 GMT Not After : Jul 2 13:00:30 2026 GMT Subject: CN=d4bd7e6c-88b7-4d88-9af1-8f30fe5ffb0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:47:ae:69:73:30:2a:99:a4:0e:91:58:4b:97: e0:12:94:49:7c:7d:50:b4:70:8c:03:ff:3b:ed:c3: 2a:02:f5:86:4f:3c:62:04:14:b9:79:65:ca:dc:c7: b7:76:3e:39:84:23:4f:5f:76:04:02:0d:9e:e6:83: 93:b0:5d:98:55:f9:2d:9f:4b:7d:8c:5a:65:c2:d3: 50:e5:bc:30:fc:54:0f:c6:92:4d:15:e4:41:64:a1: 39:09:ff:db:b8:58:45:ad:bf:80:2b:31:ad:a5:c1: eb:b8:76:f4:55:c2:03:c6:23:97:ba:f5:03:6f:37: 10:6a:2b:4f:82:12:0b:9b:b8:78:1d:20:7e:2b:dd: 9e:3e:c1:24:38:e1:b1:50:e2:e0:f0:10:2d:25:95: 2a:80:c7:ab:9a:2d:94:39:96:bf:1e:e6:ed:23:16: 2a:cb:a2:f9:d3:5e:be:bf:41:c9:73:4b:61:16:0d: aa:3b:60:2d:3a:77:70:a0:e0:bd:78:6a:d8:2a:f2: 50:72:81:ea:0c:ec:5f:55:d6:86:18:b1:a2:0a:32: e4:03:46:c9:64:3d:8a:2d:02:03:88:f6:24:75:22: 71:ae:6c:e7:7b:1d:51:86:1d:4f:a3:7a:98:70:e5: 09:32:8f:8d:67:06:93:21:cd:76:93:fa:6a:97:78: a6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DF:3F:3F:A4:A3:F0:88:81:D9:12:D0:56:4D:F8:7C:37:5A:C1:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4bc9954b-ac5d-3aa0-baf5-640c55692392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:aa:68:ad:2d:2b:5e:0f:f4:ae:9c:1c:48:ae:71:a8:03:f6: 8e:cb:ab:c5:d2:68:73:65:cf:61:49:fc:a5:5e:7a:e0:ed:9f: 76:a1:11:8f:b3:d1:dd:1d:f5:0e:4a:55:59:68:44:73:ac:13: eb:52:09:37:f8:da:8d:4c:ef:a5:06:27:7d:86:59:25:a4:83: 71:ca:9f:13:45:3e:7c:d0:38:9c:d6:01:b8:ef:25:f2:d0:21: 68:11:1d:73:78:78:3b:d7:fe:46:a8:9e:c3:77:75:4b:4d:a1: a8:05:54:d8:db:97:1b:a9:f7:f5:21:f7:97:24:5e:9f:11:5f: 45:c0:ca:ba:83:9b:ab:11:47:62:da:ad:9b:86:85:ba:92:af: 01:10:f7:b6:a8:73:54:ef:6f:1d:b7:40:13:23:3c:0c:cd:e7: b0:34:74:35:5a:76:96:92:6e:1f:75:44:a7:3b:13:1c:c8:01: 08:14:e6:02:3f:bb:56:de:7c:98:da:15:96:22:20:c5:d7:98: a0:95:a6:88:f3:12:79:06:46:4b:bd:ea:1f:77:21:15:fc:74: ee:ac:00:34:dd:87:20:04:01:a9:d3:36:c6:b8:8e:30:93:23: d9:f2:c8:63:d2:db:95:da:f4:d9:7d:27:70:fd:b4:be:bb:63: e6:83:e1:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1iSlZUAQbU0AzHOf4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDQwMzEzMDAzMFoXDTI2MDcwMjEzMDAzMFowLzEtMCsGA1UEAxMk ZDRiZDdlNmMtODhiNy00ZDg4LTlhZjEtOGYzMGZlNWZmYjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEeuaXMwKpmkDpFYS5fgEpRJfH1QtHCMA/87 7cMqAvWGTzxiBBS5eWXK3Me3dj45hCNPX3YEAg2e5oOTsF2YVfktn0t9jFplwtNQ 5bww/FQPxpJNFeRBZKE5Cf/buFhFrb+AKzGtpcHruHb0VcIDxiOXuvUDbzcQaitP ghILm7h4HSB+K92ePsEkOOGxUOLg8BAtJZUqgMermi2UOZa/HubtIxYqy6L5016+ v0HJc0thFg2qO2AtOndwoOC9eGrYKvJQcoHqDOxfVdaGGLGiCjLkA0bJZD2KLQID iPYkdSJxrmznex1Rhh1Po3qYcOUJMo+NZwaTIc12k/pql3imKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFffPz+ko/CIgdkS0FZN+Hw3WsGAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNGJjOTk1NGItYWM1ZC0z YWEwLWJhZjUtNjQwYzU1NjkyMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECqaK0tK14P9K6cHEiucagD9o7Lq8XSaHNlz2FJ/KVeeuDtn3ahEY+z 0d0d9Q5KVVloRHOsE+tSCTf42o1M76UGJ32GWSWkg3HKnxNFPnzQOJzWAbjvJfLQ IWgRHXN4eDvX/kaonsN3dUtNoagFVNjblxup9/Uh95ckXp8RX0XAyrqDm6sRR2La rZuGhbqSrwEQ97aoc1Tvbx23QBMjPAzN57A0dDVadpaSbh91RKc7ExzIAQgU5gI/ u1befJjaFZYiIMXXmKCVpojzEnkGRku96h93IRX8dO6sADTdhyAEAanTNsa4jjCT I9nyyGPS25Xa9Nl9J3D9tL67Y+aD4as= -----END CERTIFICATE-----Generated at Fri Apr 17 16:44:01 2026 by rpki-client