$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9337d05d-521d-3b5a-ab4d-42e0233e01e9.roa File: 9337d05d-521d-3b5a-ab4d-42e0233e01e9.roa (raw, json) Hash identifier: /bMdCWv/Q+a+KXRT8yxkncCvgT+jNtRV6BUIlLAlTc8= Subject key identifier: 78:6D:89:20:4A:56:DD:97:7C:F4:5F:6D:E0:59:F5:C5:AC:49:49:66 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F1037A33E199DA800465B1D80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9337d05d-521d-3b5a-ab4d-42e0233e01e9.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 23473 IP address blocks: 66.253.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:a3:3e:19:9d:a8:00:46:5b:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=d36d475e-de40-4d10-a868-bb5ba12c9e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:81:17:9e:e7:f0:70:5a:6d:8a:7b:d1:19:5a: 2e:83:6e:7c:4a:6c:17:be:11:43:42:d4:d5:61:5c: c0:c8:24:4c:d0:9d:48:93:02:74:e4:ad:3c:83:86: f7:0d:49:2a:23:c7:92:fd:90:c0:64:77:f3:9f:48: 76:08:1e:d9:ae:46:09:c9:26:55:03:84:41:b9:24: 87:6e:23:04:4c:6e:0d:12:09:8f:16:5c:b6:6a:4f: 74:da:ab:f9:1d:4a:58:2c:db:06:bc:67:b8:a3:d6: c5:8d:53:45:94:20:ad:f9:42:6a:18:ac:e2:47:ac: 8f:30:38:69:f9:d7:21:ac:c9:27:b6:38:91:5a:8b: a9:c8:a2:23:c6:ce:30:69:7c:00:32:91:f6:55:e3: f0:af:82:a1:60:67:bf:41:69:14:b0:7f:8a:18:1b: 7b:94:e3:87:92:ac:65:e9:17:1c:33:d2:20:47:ae: 6f:4e:e7:40:ad:55:43:4d:5f:7a:fb:eb:d9:60:66: b0:a3:46:0c:ed:be:3d:40:cc:75:5e:d7:b4:fb:5e: d7:d1:44:db:2c:b9:b2:75:56:3d:d0:57:70:e0:44: 2d:6b:2f:f2:18:f9:af:e3:ec:3c:24:91:d9:3e:0f: 63:76:f6:35:5b:dd:83:91:4d:8a:e5:d1:02:db:2c: 82:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6D:89:20:4A:56:DD:97:7C:F4:5F:6D:E0:59:F5:C5:AC:49:49:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9337d05d-521d-3b5a-ab4d-42e0233e01e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:fe:b5:b0:eb:a0:a2:97:70:79:83:91:6f:53:cb:59:19:dc: 51:59:73:11:2c:95:1d:d8:13:26:8b:bf:07:74:a5:95:3d:18: 7d:37:b3:00:f7:9a:20:96:79:f2:0c:0b:9b:e9:30:d3:99:8a: b9:9a:9f:21:95:a8:25:4e:2e:26:09:ec:66:b9:5f:96:aa:fe: ec:cd:f1:f8:d6:c3:d4:34:64:a0:de:14:18:62:2a:54:90:77: 68:32:6d:f6:53:d5:a5:bd:9a:54:4c:0d:0c:04:d1:e8:42:1d: a4:ca:96:00:3b:86:3f:f1:95:56:ef:0f:3c:cf:8a:bd:b7:a2: 83:1e:84:c5:f6:c5:9b:2a:dd:e8:ad:aa:45:f2:cf:43:16:14: 14:f3:70:64:f0:ad:27:22:e9:41:23:c3:98:b8:a4:43:d8:9c: 73:16:cc:47:7f:ec:b0:19:9a:f7:7b:7c:d3:e1:ff:bb:34:cb: 35:ff:d8:e3:9a:ec:f0:5c:83:d2:8d:1a:65:5e:f3:6d:1e:70: 3c:bd:e5:65:89:64:05:75:0f:a8:86:2c:dd:c8:d2:b9:a7:6e: 26:2f:2a:85:35:08:70:73:87:fc:3d:8c:14:9f:1c:16:3e:72: bc:c8:54:ca:5b:c1:8b:0f:95:c5:39:39:5f:14:62:a2:f8:4b: 70:37:03:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN6M+GZ2oAEZbHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk ZDM2ZDQ3NWUtZGU0MC00ZDEwLWE4NjgtYmI1YmExMmM5ZTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoEXnufwcFptinvRGVoug258SmwXvhFDQtTV YVzAyCRM0J1IkwJ05K08g4b3DUkqI8eS/ZDAZHfzn0h2CB7ZrkYJySZVA4RBuSSH biMETG4NEgmPFly2ak902qv5HUpYLNsGvGe4o9bFjVNFlCCt+UJqGKziR6yPMDhp +dchrMkntjiRWoupyKIjxs4waXwAMpH2VePwr4KhYGe/QWkUsH+KGBt7lOOHkqxl 6RccM9IgR65vTudArVVDTV96++vZYGawo0YM7b49QMx1Xte0+17X0UTbLLmydVY9 0Fdw4EQtay/yGPmv4+w8JJHZPg9jdvY1W92DkU2K5dEC2yyCGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhtiSBKVt2XfPRfbeBZ9cWsSUlmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvOTMzN2QwNWQtNTIxZC0z YjVhLWFiNGQtNDJlMDIzM2UwMWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/+tbDroKKXcHmDkW9Ty1kZ3FFZcxEslR3YEyaLvwd0pZU9GH03swD3 miCWefIMC5vpMNOZirmanyGVqCVOLiYJ7Ga5X5aq/uzN8fjWw9Q0ZKDeFBhiKlSQ d2gybfZT1aW9mlRMDQwE0ehCHaTKlgA7hj/xlVbvDzzPir23ooMehMX2xZsq3eit qkXyz0MWFBTzcGTwrSci6UEjw5i4pEPYnHMWzEd/7LAZmvd7fNPh/7s0yzX/2OOa 7PBcg9KNGmVe820ecDy95WWJZAV1D6iGLN3I0rmnbiYvKoU1CHBzh/w9jBSfHBY+ crzIVMpbwYsPlcU5OV8UYqL4S3A3A94= -----END CERTIFICATE-----Generated at Sat Sep 26 13:54:04 2026 by rpki-client