$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cb0e87ea-809b-355a-9ddc-cf8f8f977633.roa File: cb0e87ea-809b-355a-9ddc-cf8f8f977633.roa (raw, json) Hash identifier: p4OTUrr1Zix/YLjUypJaixDeUlEByd2K9e+8UE6eOMA= Subject key identifier: 31:5A:F1:82:DC:B3:18:82:52:43:68:65:4B:61:13:62:8D:D0:13:A1 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584CACF1D2FE5E3707B2D5E521C0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cb0e87ea-809b-355a-9ddc-cf8f8f977633.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 23473 IP address blocks: 66.253.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:d2:fe:5e:37:07:b2:d5:e5:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=0e6643b7-a26e-4a43-9221-34b8b4f1baab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4f:f0:9b:61:9d:28:34:b5:f7:7d:9a:69:3e: 86:4d:a9:1c:59:15:b2:7c:b0:d0:03:9f:93:db:d8: e6:85:72:25:83:c3:91:dd:a4:5c:f7:ae:83:40:94: 50:61:66:a8:a1:e5:8d:a3:d3:68:c2:e5:cf:74:76: aa:ab:98:a5:f0:ab:d5:8e:ff:c7:d9:fa:67:53:e2: a4:f6:37:8a:94:58:f0:c3:25:5d:c4:db:77:12:4a: 32:01:0e:2a:e5:d0:52:45:df:b1:f4:ba:9c:24:e8: 42:c1:60:c4:d5:a4:4a:ce:33:be:51:fa:f0:ff:a1: fc:d9:be:6d:2b:e1:fe:c5:fe:ba:2a:a9:94:e2:09: 72:f6:c8:26:76:d9:96:a2:6c:83:b2:84:89:11:e7: 7d:f8:dc:28:e7:f2:71:67:10:e5:b1:7e:44:3e:4b: c6:fe:9a:d0:cc:49:8c:95:e4:bf:70:82:42:7f:89: 1e:b8:d4:00:af:f0:38:ea:72:e6:eb:fb:60:1e:60: 42:65:eb:42:45:dc:15:41:75:ae:e2:c2:7d:2f:15: e0:a4:5b:c2:ba:10:19:18:26:49:46:98:19:f4:13: 54:46:62:7f:02:98:21:14:e7:e7:64:bd:04:dd:12: 1a:a8:93:82:f7:fb:cf:18:fe:87:a4:8b:03:30:e5: 6d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5A:F1:82:DC:B3:18:82:52:43:68:65:4B:61:13:62:8D:D0:13:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cb0e87ea-809b-355a-9ddc-cf8f8f977633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:f9:75:95:9a:ab:2f:6c:76:cd:f2:e5:9e:ed:12:30:11:fd: 19:4b:de:de:a0:7c:42:8f:83:b5:23:f1:06:0e:d6:e5:40:89: 6d:53:ce:08:52:8f:ed:dd:ef:ac:0f:1a:58:a9:a6:dc:9f:27: 05:c9:e5:4d:0c:e1:77:8b:14:1a:9f:16:bf:ac:51:fd:a6:08: b2:11:c1:91:06:5d:e7:b2:e3:b4:5c:63:a0:dd:76:52:47:b6: b4:1a:5d:7c:07:c9:b3:6d:3c:f2:51:ee:59:24:9b:04:8c:0e: 08:61:12:5a:62:86:16:c1:c3:54:5c:2c:52:53:19:6c:b2:9e: d3:e3:4b:54:66:59:4a:dd:70:24:a4:92:d4:3d:fc:94:10:53: 04:1a:23:d9:f8:f0:e9:cf:80:e1:42:51:46:19:0f:27:1c:8e: 48:be:8f:c7:8a:db:d6:db:ab:41:39:7c:18:fe:51:50:38:5f: 86:08:67:64:58:53:30:cf:8a:ef:a0:1f:d7:dd:5d:17:40:9a: 68:89:c0:4b:a1:62:41:58:17:e5:5c:3e:fd:5f:13:0d:a8:80: 15:a4:e1:fb:ac:fe:38:22:7b:2e:5f:91:5c:a2:1d:bd:20:5d: 35:bb:5f:1e:2e:8c:40:04:c2:13:f8:e0:29:b3:08:92:1b:10: ae:a8:d6:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8dL+XjcHstXlIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk MGU2NjQzYjctYTI2ZS00YTQzLTkyMjEtMzRiOGI0ZjFiYWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2k/wm2GdKDS1932aaT6GTakcWRWyfLDQA5+T 29jmhXIlg8OR3aRc966DQJRQYWaooeWNo9NowuXPdHaqq5il8KvVjv/H2fpnU+Kk 9jeKlFjwwyVdxNt3EkoyAQ4q5dBSRd+x9LqcJOhCwWDE1aRKzjO+Ufrw/6H82b5t K+H+xf66KqmU4gly9sgmdtmWomyDsoSJEed9+Nwo5/JxZxDlsX5EPkvG/prQzEmM leS/cIJCf4keuNQAr/A46nLm6/tgHmBCZetCRdwVQXWu4sJ9LxXgpFvCuhAZGCZJ RpgZ9BNURmJ/ApghFOfnZL0E3RIaqJOC9/vPGP6HpIsDMOVtYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFa8YLcsxiCUkNoZUthE2KN0BOhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvY2IwZTg3ZWEtODA5Yi0z NTVhLTlkZGMtY2Y4ZjhmOTc3NjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv3EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/5dZWaqy9sds3y5Z7tEjAR/RlL3t6gfEKPg7Uj8QYO1uVAiW1TzghS j+3d76wPGlipptyfJwXJ5U0M4XeLFBqfFr+sUf2mCLIRwZEGXeey47RcY6DddlJH trQaXXwHybNtPPJR7lkkmwSMDghhElpihhbBw1RcLFJTGWyyntPjS1RmWUrdcCSk ktQ9/JQQUwQaI9n48OnPgOFCUUYZDyccjki+j8eK29bbq0E5fBj+UVA4X4YIZ2RY UzDPiu+gH9fdXRdAmmiJwEuhYkFYF+VcPv1fEw2ogBWk4fus/jgiey5fkVyiHb0g XTW7Xx4ujEAEwhP44CmzCJIbEK6o1sA= -----END CERTIFICATE-----Generated at Mon Mar 2 07:44:36 2026 by rpki-client