$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4de84952-dc02-31e3-8005-0b11b1af8648.roa File: 4de84952-dc02-31e3-8005-0b11b1af8648.roa (raw, json) Hash identifier: 2QizW1keA9e4WmsxEgHuc1H7oKr4pL7uSLixbIkv1BM= Subject key identifier: 74:36:93:61:A5:3A:D7:77:2A:C7:0C:6D:C9:DD:E2:5E:63:7F:B7:08 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584CACF1C1D986C86BC39D7F8D00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4de84952-dc02-31e3-8005-0b11b1af8648.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 23473 IP address blocks: 66.253.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:c1:d9:86:c8:6b:c3:9d:7f:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=ebedfde6-47d1-4991-a702-434e39cd4ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e0:77:78:03:ae:ad:00:a0:a4:5e:8e:10:77: 52:19:55:2d:69:dd:70:58:62:57:b4:13:bf:5f:98: 26:2e:41:45:1e:c6:f6:9d:6c:85:d4:1e:09:76:90: e9:c6:68:47:87:75:29:87:3f:26:ca:0b:21:f2:37: 72:da:9a:15:a4:5e:87:07:d2:7d:e6:b9:b3:96:d3: ca:45:47:94:07:3c:4a:50:4c:4f:31:68:38:ec:35: 65:7f:2f:9a:bd:d2:a3:3a:83:6e:e8:b1:8c:81:29: 83:21:10:44:6a:da:b7:41:c5:a3:71:2b:40:6c:56: 8b:c9:73:56:c2:0c:33:9d:4e:c8:e9:7d:24:1c:e4: 0a:f4:b1:1c:74:5f:c3:84:c8:ca:41:0a:08:5a:2f: 4a:7e:52:c9:3a:79:a3:37:b6:af:1f:6b:7c:f9:a2: 5d:6c:01:f5:c6:39:74:15:32:54:7f:64:3c:3c:f3: 14:35:7e:7c:9a:02:ad:ed:b4:94:6d:f5:b1:ca:cb: 76:cc:ad:16:b7:f2:d4:d7:d2:15:44:b2:9a:05:71: 9c:e8:3c:32:5a:a8:f8:b0:8f:65:63:d9:70:9b:af: 02:8d:be:58:fb:2b:de:0c:78:86:e8:7e:ca:d9:42: eb:37:77:34:73:cb:63:c6:00:fd:80:1c:99:6f:9e: 0a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:36:93:61:A5:3A:D7:77:2A:C7:0C:6D:C9:DD:E2:5E:63:7F:B7:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4de84952-dc02-31e3-8005-0b11b1af8648.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:3b:99:d0:b1:a9:94:71:60:4b:de:ee:c8:b4:c5:4b:be:3e: 9a:ba:7f:d7:1c:53:47:66:16:2c:b7:3a:0b:27:66:0f:33:78: 35:ad:17:5b:f7:54:43:4b:de:47:49:6c:a5:4f:c2:07:78:d9: f1:9b:82:f0:92:a8:6a:99:c6:b3:d0:16:40:8c:4c:cf:6d:8b: 6b:d5:7a:88:83:fe:bb:f3:3b:5e:13:c8:fd:e6:da:58:3c:c3: 25:54:bf:15:43:cc:00:3f:03:1f:cd:fd:ed:f7:4c:1a:cf:b6: 20:34:a6:6f:e7:29:0d:02:3c:3c:83:42:da:e9:70:8e:8a:fa: b5:ab:70:44:7d:be:e3:10:66:77:06:ba:a8:30:71:4a:5f:d3: f8:8e:3c:86:e9:02:44:75:a4:a3:4b:f5:44:8a:a4:7b:c2:52: 21:45:cb:ca:30:56:8e:e6:9a:9b:56:b2:da:47:09:22:c6:6c: c4:46:16:aa:57:b0:3a:47:b3:0a:2a:22:7a:77:87:43:0c:8b: 7b:62:64:70:aa:56:cc:5b:44:ae:51:68:9a:69:7f:5b:2f:11: 27:13:2a:16:1b:e9:10:99:14:aa:d4:42:18:43:c6:d6:a4:ce: 7c:56:f6:9c:95:4b:74:e9:0c:37:aa:5b:46:a2:e1:b3:06:2c: ee:7c:b3:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8cHZhshrw51/jQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk ZWJlZGZkZTYtNDdkMS00OTkxLWE3MDItNDM0ZTM5Y2Q0ZGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeB3eAOurQCgpF6OEHdSGVUtad1wWGJXtBO/ X5gmLkFFHsb2nWyF1B4JdpDpxmhHh3Uphz8mygsh8jdy2poVpF6HB9J95rmzltPK RUeUBzxKUExPMWg47DVlfy+avdKjOoNu6LGMgSmDIRBEatq3QcWjcStAbFaLyXNW wgwznU7I6X0kHOQK9LEcdF/DhMjKQQoIWi9KflLJOnmjN7avH2t8+aJdbAH1xjl0 FTJUf2Q8PPMUNX58mgKt7bSUbfWxyst2zK0Wt/LU19IVRLKaBXGc6DwyWqj4sI9l Y9lwm68Cjb5Y+yveDHiG6H7K2ULrN3c0c8tjxgD9gByZb54KswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQ2k2GlOtd3KscMbcnd4l5jf7cIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNGRlODQ5NTItZGMwMi0z MWUzLTgwMDUtMGIxMWIxYWY4NjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv26MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACY7mdCxqZRxYEve7si0xUu+Ppq6f9ccU0dmFiy3OgsnZg8zeDWtF1v3 VENL3kdJbKVPwgd42fGbgvCSqGqZxrPQFkCMTM9ti2vVeoiD/rvzO14TyP3m2lg8 wyVUvxVDzAA/Ax/N/e33TBrPtiA0pm/nKQ0CPDyDQtrpcI6K+rWrcER9vuMQZncG uqgwcUpf0/iOPIbpAkR1pKNL9USKpHvCUiFFy8owVo7mmptWstpHCSLGbMRGFqpX sDpHswoqInp3h0MMi3tiZHCqVsxbRK5RaJppf1svEScTKhYb6RCZFKrUQhhDxtak znxW9pyVS3TpDDeqW0ai4bMGLO58swQ= -----END CERTIFICATE-----Generated at Mon Mar 2 08:07:52 2026 by rpki-client