$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ba673ec9-7c73-3400-8360-e3f1d1159429.roa File: ba673ec9-7c73-3400-8360-e3f1d1159429.roa (raw, json) Hash identifier: zFrAoSSOIuVg6DbuXsXFo5H3itihG+5+BMPaY6UXzjI= Subject key identifier: B2:5B:D0:A9:62:19:B0:66:F6:DB:F1:D2:0E:4A:EE:8F:64:18:E2:B8 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584EA17A77C665FDE5DA084A6500 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ba673ec9-7c73-3400-8360-e3f1d1159429.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 23473 IP address blocks: 66.253.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:77:c6:65:fd:e5:da:08:4a:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=e840d7bc-0e96-4fc3-9069-c3066fe2e145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:30:8f:56:59:37:38:32:f5:a6:ee:5d:81:28: 7b:ca:de:5f:9b:50:f3:7c:84:d5:2d:57:f4:a2:8b: 25:48:6f:5d:8a:65:61:76:e4:0b:dc:e0:e0:fa:18: 4c:cc:0a:bf:81:a8:1a:5a:d3:60:c1:06:17:ca:22: 37:b9:aa:54:d5:42:27:d0:e0:ed:cd:54:88:b1:f6: 5a:a8:7c:39:bc:6b:89:ce:36:44:28:88:50:84:86: e3:5d:ac:cb:05:bb:66:ee:45:0e:bb:90:a5:a2:ed: bf:1e:13:df:b4:71:7e:3f:a9:1f:fe:9e:27:5b:f4: 53:3b:9b:b0:e4:8a:62:07:e5:a4:56:11:67:7e:87: 6f:f3:17:b9:30:eb:fe:96:95:e3:d2:29:cc:bf:0b: d0:c8:c2:71:ad:68:69:dc:39:3e:df:80:61:c5:0a: 75:5c:f6:ad:54:a0:0b:25:07:31:d0:1a:90:6b:29: 5a:90:aa:64:de:b1:2e:eb:8e:bd:2f:57:23:38:fd: 4d:bd:c9:42:cb:ca:0c:e2:24:69:d3:cb:e7:8f:40: 00:62:1c:be:d4:b8:de:8f:b6:bb:67:59:86:05:89: 27:71:6e:95:d9:00:1e:f1:07:72:a2:4c:15:f8:02: 8a:b5:5b:0e:1a:3d:1c:63:47:5b:64:aa:a0:e6:b8: 5c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5B:D0:A9:62:19:B0:66:F6:DB:F1:D2:0E:4A:EE:8F:64:18:E2:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ba673ec9-7c73-3400-8360-e3f1d1159429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:3b:23:85:70:39:ce:8c:06:5b:50:8c:ff:36:1d:98:d7:59: 96:13:aa:0c:ba:da:ec:00:bd:f6:a9:d7:d2:db:95:fc:79:16: 33:da:26:a9:c9:47:ac:a6:96:16:2c:18:79:8f:56:48:e0:16: 55:85:62:ce:05:1a:3e:83:1a:c1:cc:f4:74:8e:ad:0f:90:4c: 65:93:05:15:d7:d2:bb:b6:0b:6e:6e:c1:04:67:5b:c0:fe:80: cf:c1:d2:a8:f1:84:be:0f:43:b5:3d:a4:51:b8:88:00:43:2f: 16:50:1c:c9:aa:08:c2:25:84:14:02:da:67:15:91:e7:ca:14: ca:a3:0c:18:89:b3:08:6b:b7:81:40:f0:85:dc:ac:4d:a3:0a: ea:59:e1:b7:60:c4:9a:13:25:33:4b:d3:e2:36:0d:97:e3:98: 3a:2b:74:8f:76:7d:e6:0a:71:cc:11:25:6b:ec:d3:88:28:f0: dd:45:49:ea:96:6f:9b:ea:4e:40:ef:12:09:66:e5:76:8a:17: d2:fc:3b:86:48:e0:2c:d8:ec:7c:db:70:00:e3:f7:ce:12:55: ec:77:30:5d:93:a6:42:e2:32:99:8b:ea:2e:e5:f4:55:78:05: bf:5b:5a:f6:f3:c2:c0:5d:a2:86:5a:b4:c8:1d:d5:c6:11:c2: fa:98:ff:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6henfGZf3l2ghKZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk ZTg0MGQ3YmMtMGU5Ni00ZmMzLTkwNjktYzMwNjZmZTJlMTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijCPVlk3ODL1pu5dgSh7yt5fm1DzfITVLVf0 ooslSG9dimVhduQL3ODg+hhMzAq/gagaWtNgwQYXyiI3uapU1UIn0ODtzVSIsfZa qHw5vGuJzjZEKIhQhIbjXazLBbtm7kUOu5Clou2/HhPftHF+P6kf/p4nW/RTO5uw 5IpiB+WkVhFnfodv8xe5MOv+lpXj0inMvwvQyMJxrWhp3Dk+34BhxQp1XPatVKAL JQcx0BqQaylakKpk3rEu6469L1cjOP1NvclCy8oM4iRp08vnj0AAYhy+1Ljej7a7 Z1mGBYkncW6V2QAe8QdyokwV+AKKtVsOGj0cY0dbZKqg5rhcPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJb0KliGbBm9tvx0g5K7o9kGOK4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYmE2NzNlYzktN2M3My0z NDAwLTgzNjAtZTNmMWQxMTU5NDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv3JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADw7I4VwOc6MBltQjP82HZjXWZYTqgy62uwAvfap19Lblfx5FjPaJqnJ R6ymlhYsGHmPVkjgFlWFYs4FGj6DGsHM9HSOrQ+QTGWTBRXX0ru2C25uwQRnW8D+ gM/B0qjxhL4PQ7U9pFG4iABDLxZQHMmqCMIlhBQC2mcVkefKFMqjDBiJswhrt4FA 8IXcrE2jCupZ4bdgxJoTJTNL0+I2DZfjmDordI92feYKccwRJWvs04go8N1FSeqW b5vqTkDvEglm5XaKF9L8O4ZI4CzY7HzbcADj984SVex3MF2TpkLiMpmL6i7l9FV4 Bb9bWvbzwsBdooZatMgd1cYRwvqY/10= -----END CERTIFICATE-----Generated at Wed Jul 29 04:53:30 2026 by rpki-client