$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a8866e30-3fba-39a8-a386-1b87deac93d9.roa File: a8866e30-3fba-39a8-a386-1b87deac93d9.roa (raw, json) Hash identifier: hmRCRZr7ZB8VKrEN79Is2HeaUlurAM5ou0eEluwklU8= Subject key identifier: 26:46:12:4A:69:5E:2C:ED:8E:E5:27:95:E5:7D:A1:53:88:E3:F3:CF Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D703FC5B88352CB1C3FD0FAA0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a8866e30-3fba-39a8-a386-1b87deac93d9.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 23473 IP address blocks: 66.253.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:c5:b8:83:52:cb:1c:3f:d0:fa:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=292927ce-e6b5-4e8c-8dde-3c19bafd43a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b3:f9:f6:b6:b5:0d:ea:f7:53:3d:77:96:a9: 5b:9f:cf:14:cf:6a:d6:c5:65:7f:08:98:69:d5:73: 4e:f6:5b:a1:0a:68:07:01:f9:ac:49:cb:22:c4:dd: 74:d2:20:13:1d:ee:93:b6:76:b0:2e:a6:d4:d8:57: 95:bb:5b:1b:1f:37:94:5b:19:13:a3:91:e0:e2:72: 4a:bf:c2:ff:cb:02:b0:d0:b9:43:b8:0f:a4:d0:a6: 9c:8d:0a:13:33:91:7a:80:2b:4c:bf:d8:c7:49:ca: 7c:11:07:2a:cb:71:e0:d2:0e:36:23:1d:af:50:58: a9:6f:79:aa:1a:22:fd:00:11:bd:f1:31:97:75:17: 71:85:62:64:89:db:72:97:f6:82:d5:25:16:81:12: e0:dd:7a:03:25:c0:f2:b3:fe:46:6e:00:05:2e:31: a5:e8:bf:1d:15:ff:38:50:a9:6c:8c:bb:fa:b5:c7: 5a:ff:f9:37:c7:c5:5d:79:2f:41:da:18:bd:e8:2a: 49:f2:0d:b0:5d:df:69:c6:db:9c:14:97:2c:25:7a: 39:21:5c:4a:e4:8b:fe:04:51:cf:8d:22:5b:f6:9b: fc:64:b0:75:9e:2e:53:c5:4a:c2:5a:8b:e9:c6:62: ba:bd:f4:26:38:a0:d7:1d:b5:90:2b:ff:fe:66:38: 7f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:46:12:4A:69:5E:2C:ED:8E:E5:27:95:E5:7D:A1:53:88:E3:F3:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a8866e30-3fba-39a8-a386-1b87deac93d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:2a:5d:77:17:44:fb:58:87:f0:32:cf:6a:5e:cd:4f:1b:14: 37:a0:00:8b:9c:cd:55:6a:52:ff:18:b9:6e:93:74:47:85:c9: aa:8e:ec:21:57:f6:33:e9:f6:c1:ff:d6:be:5a:c1:ad:b5:4c: e7:5b:2f:96:dc:14:fb:11:98:69:da:37:36:e0:96:67:58:63: 02:7a:59:7c:40:2c:8c:d1:b7:7e:d6:9c:91:bc:6a:a1:cb:97: f0:86:bd:9b:4d:7a:1e:92:3f:c3:2c:a0:e1:f0:f4:b7:37:57: 88:19:16:f6:7c:ae:b2:15:95:33:30:38:13:5d:07:79:aa:2a: 1b:cc:1b:f6:fa:e1:8b:04:a3:75:fd:06:6e:ca:54:be:c2:c5: f0:fd:23:d7:58:51:60:a7:6b:7a:e5:87:1b:e9:53:1a:cb:a3: 1f:a0:d9:4d:f5:dc:03:be:37:c7:f0:ec:38:95:4d:46:8b:38: e9:9a:90:0c:b3:00:0d:40:4f:01:c4:90:99:a3:ea:e5:eb:c6: 91:65:60:b3:89:f1:c5:27:83:bb:aa:d8:4b:2c:9e:0e:97:30: fe:7c:e2:c1:86:5d:56:e4:a0:83:91:ce:97:d9:a9:9c:ea:3e: a7:18:fb:6e:b6:4c:fe:0a:1a:d6:53:a5:a5:d1:ac:65:3e:2b: d2:73:05:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP8W4g1LLHD/Q+qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk MjkyOTI3Y2UtZTZiNS00ZThjLThkZGUtM2MxOWJhZmQ0M2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprP59ra1Der3Uz13lqlbn88Uz2rWxWV/CJhp 1XNO9luhCmgHAfmsScsixN100iATHe6TtnawLqbU2FeVu1sbHzeUWxkTo5Hg4nJK v8L/ywKw0LlDuA+k0KacjQoTM5F6gCtMv9jHScp8EQcqy3Hg0g42Ix2vUFipb3mq GiL9ABG98TGXdRdxhWJkidtyl/aC1SUWgRLg3XoDJcDys/5GbgAFLjGl6L8dFf84 UKlsjLv6tcda//k3x8VdeS9B2hi96CpJ8g2wXd9pxtucFJcsJXo5IVxK5Iv+BFHP jSJb9pv8ZLB1ni5TxUrCWovpxmK6vfQmOKDXHbWQK//+Zjh/QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZGEkppXiztjuUnleV9oVOI4/PPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTg4NjZlMzAtM2ZiYS0z OWE4LWEzODYtMWI4N2RlYWM5M2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0qXXcXRPtYh/Ayz2pezU8bFDegAIuczVVqUv8YuW6TdEeFyaqO7CFX 9jPp9sH/1r5awa21TOdbL5bcFPsRmGnaNzbglmdYYwJ6WXxALIzRt37WnJG8aqHL l/CGvZtNeh6SP8MsoOHw9Lc3V4gZFvZ8rrIVlTMwOBNdB3mqKhvMG/b64YsEo3X9 Bm7KVL7CxfD9I9dYUWCna3rlhxvpUxrLox+g2U313AO+N8fw7DiVTUaLOOmakAyz AA1ATwHEkJmj6uXrxpFlYLOJ8cUng7uq2Essng6XMP584sGGXVbkoIORzpfZqZzq PqcY+262TP4KGtZTpaXRrGU+K9JzBVQ= -----END CERTIFICATE-----Generated at Fri Apr 17 12:07:47 2026 by rpki-client