$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/887961af-3aed-3506-bd33-2d162c0a8179.roa File: 887961af-3aed-3506-bd33-2d162c0a8179.roa (raw, json) Hash identifier: +beYLJzFZhngN3czBIADHil6B7zC/umxqY/oTuaL3H8= Subject key identifier: 4C:41:6A:95:6C:66:57:E9:02:AE:01:BE:74:41:B4:4F:4E:21:A0:5A Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584CACF1CE468AE5FEDA3E0A9098 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/887961af-3aed-3506-bd33-2d162c0a8179.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 23473 IP address blocks: 66.253.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:ce:46:8a:e5:fe:da:3e:0a:90:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=070df6d4-a29f-43b0-b376-2c16e365edad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:de:cc:d2:c4:9d:e1:d8:32:9f:8d:e4:3e:60: a9:6a:25:e5:53:9c:c2:75:c7:86:5e:a6:11:6b:08: a6:9a:bf:3b:af:53:2b:b9:45:33:5d:3f:da:77:82: 7f:1e:60:d6:67:ab:b7:46:48:7f:b5:ce:e3:ff:ff: 97:a0:71:0c:35:ff:f6:f8:12:56:85:43:fe:b1:5f: f4:2c:d0:14:6c:1a:08:b9:a1:0b:1e:4a:c6:4d:0c: c4:f6:ef:39:80:02:5d:6c:bb:23:f1:d6:4f:a0:74: 6e:77:ff:cc:e5:16:53:c8:32:c9:52:45:27:00:2d: 12:7d:cc:f5:53:39:d5:e5:78:ca:9e:ed:2a:71:37: ea:07:50:4e:31:f5:0f:7d:9c:02:60:91:dc:9d:41: c6:54:31:83:fa:86:3a:f6:ee:bb:8d:3d:4d:10:3b: 84:bf:57:fd:3b:e7:48:04:fa:27:c2:96:05:46:4d: ac:66:93:ee:1d:9a:fd:c7:b9:e7:bc:a5:d1:7b:e7: c0:c2:bc:8f:08:15:54:72:0c:b3:0e:b8:1e:ec:be: 75:93:df:f2:1d:0b:27:50:14:33:3f:6d:0c:40:fd: a6:a9:77:83:a9:6d:79:a2:af:28:d2:ff:f7:a0:03: fd:25:15:ff:d6:ef:7f:bd:c8:c8:35:0d:e5:0e:a2: 78:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:41:6A:95:6C:66:57:E9:02:AE:01:BE:74:41:B4:4F:4E:21:A0:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/887961af-3aed-3506-bd33-2d162c0a8179.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:56:9e:e5:a3:5e:ce:76:6c:17:5a:9e:0a:0f:45:03:e6:2f: 1a:82:fd:73:0a:ae:f7:31:28:6b:07:50:c5:eb:46:61:7c:31: fb:35:ef:68:ff:f1:86:0f:88:74:57:62:2c:bf:b6:80:79:a2: 4e:db:ad:73:30:00:de:21:86:42:f5:ce:d2:c5:92:bb:4e:22: 77:96:8b:a8:0c:fb:60:3c:70:ce:24:f0:b8:e5:30:2b:10:19: 55:3d:4d:57:8b:44:b3:f2:da:bf:21:c5:29:17:9d:3c:24:15: 51:ec:6d:ae:7a:52:55:03:8b:e6:ce:28:d0:3b:15:50:74:b0: 0a:44:2a:cd:12:2c:48:eb:ff:41:18:9c:d3:4f:70:62:28:53: e3:5e:81:b3:bd:43:eb:18:73:87:d5:0d:61:4b:02:3b:64:56: 3c:c5:12:c7:52:8c:b6:19:bb:a2:67:d5:ab:5d:57:87:9c:ff: 2c:64:7a:e4:68:32:6d:67:f8:86:96:94:d7:97:df:38:83:17: c4:6b:71:1d:cc:a6:10:98:0f:8f:b8:bc:6b:00:cb:c1:b1:3f: c3:89:5b:a8:79:7c:57:18:01:3c:80:19:0e:f6:e7:00:b0:3f: a5:72:87:86:7b:e9:8e:ab:86:a5:cf:69:79:97:78:ba:55:f2: 7a:bf:1c:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8c5GiuX+2j4KkJgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk MDcwZGY2ZDQtYTI5Zi00M2IwLWIzNzYtMmMxNmUzNjVlZGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N7M0sSd4dgyn43kPmCpaiXlU5zCdceGXqYR awimmr87r1MruUUzXT/ad4J/HmDWZ6u3Rkh/tc7j//+XoHEMNf/2+BJWhUP+sV/0 LNAUbBoIuaELHkrGTQzE9u85gAJdbLsj8dZPoHRud//M5RZTyDLJUkUnAC0Sfcz1 UznV5XjKnu0qcTfqB1BOMfUPfZwCYJHcnUHGVDGD+oY69u67jT1NEDuEv1f9O+dI BPonwpYFRk2sZpPuHZr9x7nnvKXRe+fAwryPCBVUcgyzDrge7L51k9/yHQsnUBQz P20MQP2mqXeDqW15oq8o0v/3oAP9JRX/1u9/vcjINQ3lDqJ4sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExBapVsZlfpAq4BvnRBtE9OIaBaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvODg3OTYxYWYtM2FlZC0z NTA2LWJkMzMtMmQxNjJjMGE4MTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRWnuWjXs52bBdangoPRQPmLxqC/XMKrvcxKGsHUMXrRmF8Mfs172j/ 8YYPiHRXYiy/toB5ok7brXMwAN4hhkL1ztLFkrtOIneWi6gM+2A8cM4k8LjlMCsQ GVU9TVeLRLPy2r8hxSkXnTwkFVHsba56UlUDi+bOKNA7FVB0sApEKs0SLEjr/0EY nNNPcGIoU+NegbO9Q+sYc4fVDWFLAjtkVjzFEsdSjLYZu6Jn1atdV4ec/yxkeuRo Mm1n+IaWlNeX3ziDF8RrcR3MphCYD4+4vGsAy8GxP8OJW6h5fFcYATyAGQ725wCw P6Vyh4Z76Y6rhqXPaXmXeLpV8nq/HHw= -----END CERTIFICATE-----Generated at Mon Mar 2 08:38:50 2026 by rpki-client