$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f9c30950-1899-3256-a75e-ccfa35eea089.roa File: f9c30950-1899-3256-a75e-ccfa35eea089.roa (raw, json) Hash identifier: DWy7O6zqScScwfFRH4c30tKElXQlhmy2kfclvpmmUyE= Subject key identifier: A7:95:B8:6E:4F:C6:CC:DB:85:8B:D7:D8:89:5C:4B:6E:9E:0B:45:5E Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584CACF1CD00C47BBDF13CFCCF00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f9c30950-1899-3256-a75e-ccfa35eea089.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 23473 IP address blocks: 66.253.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:cd:00:c4:7b:bd:f1:3c:fc:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=c93f6a4e-4769-43a4-a367-7bd21ff04119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cf:e3:61:16:1f:b9:7d:f7:36:b7:d5:04:58: 89:35:b4:da:b4:d3:e3:00:fb:ab:75:cb:e7:d8:2b: bf:85:c6:8b:d2:c5:48:60:55:d6:7c:f2:df:c5:30: b8:2f:eb:fd:b7:02:eb:cf:79:2b:51:0b:b3:d8:54: db:28:d9:d7:1a:34:0a:e9:23:28:ba:35:e1:2f:3e: 7a:37:86:d0:0d:82:8e:3e:5b:d5:79:bb:2e:a1:9a: d9:e6:03:a7:d4:50:60:b9:58:4d:f0:71:ce:c3:2c: 70:53:06:ae:32:5f:98:da:f4:72:d2:66:58:72:f3: 3b:b0:04:d4:c2:af:46:30:b3:c2:ae:21:45:43:58: 71:51:b2:5c:82:e9:6d:2e:b0:e2:b0:ae:da:f7:98: 89:70:3d:49:d9:aa:59:3c:af:a7:05:27:6e:1b:40: 71:57:93:22:0a:5a:d8:77:f7:59:e8:43:11:5c:26: 9d:b1:ed:5d:f5:bf:41:5e:a5:b4:0e:3f:b8:72:ce: f1:38:1e:c1:5f:55:e2:5f:ba:2d:c5:9f:85:18:c4: ed:b8:6a:3e:80:87:24:45:f2:a8:67:26:17:68:0f: 20:fe:a7:19:bb:0a:7f:1a:b7:11:d5:11:77:fb:74: 6d:b1:bd:fb:d5:59:70:8e:53:58:15:7e:90:dd:b5: 8b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:95:B8:6E:4F:C6:CC:DB:85:8B:D7:D8:89:5C:4B:6E:9E:0B:45:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f9c30950-1899-3256-a75e-ccfa35eea089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:01:df:bf:ae:08:9c:22:18:5c:cc:f2:02:36:40:39:dc:8a: fc:21:93:53:e3:57:a0:f2:01:57:44:81:21:45:a1:20:69:1e: 0d:cf:b7:29:b8:1c:d0:b7:f7:73:35:2d:63:9d:92:40:63:5e: fe:8f:6f:86:b5:ab:b5:a5:d3:a3:4a:78:fc:9d:5f:94:62:24: 6c:84:a1:a8:6a:60:0f:e2:ba:8c:0c:f7:ab:0e:b6:eb:1c:6e: 7d:f6:51:bd:f4:e7:e8:cf:70:b5:e3:6d:fd:4a:6c:e1:20:69: 64:1d:11:8c:f7:dc:06:a0:e2:dc:37:f6:f5:02:6c:0e:4b:3b: 27:c6:4b:f6:34:69:1d:bd:d8:bd:64:f1:a3:a5:d5:c7:17:e4: 60:cf:8d:3f:cc:45:ec:66:8b:eb:c5:04:f9:1c:b0:a4:35:6d: 52:06:48:43:e7:84:ce:15:2c:c9:99:af:14:e1:9d:b7:43:fd: 3d:ee:3e:b3:00:62:77:d4:21:9a:5f:2c:72:31:71:1e:36:f0: 32:86:ac:4d:dc:27:0b:bd:16:43:ed:8a:02:b1:7d:fc:72:54: 25:77:bc:ea:30:f3:07:dd:4b:03:ff:ae:3b:42:51:a1:ad:17: bf:0e:ac:27:70:96:ca:08:8a:32:ce:d6:d7:4f:c2:65:5a:20: d4:6e:61:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8c0AxHu98Tz8zwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk YzkzZjZhNGUtNDc2OS00M2E0LWEzNjctN2JkMjFmZjA0MTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8/jYRYfuX33NrfVBFiJNbTatNPjAPurdcvn 2Cu/hcaL0sVIYFXWfPLfxTC4L+v9twLrz3krUQuz2FTbKNnXGjQK6SMoujXhLz56 N4bQDYKOPlvVebsuoZrZ5gOn1FBguVhN8HHOwyxwUwauMl+Y2vRy0mZYcvM7sATU wq9GMLPCriFFQ1hxUbJcgultLrDisK7a95iJcD1J2apZPK+nBSduG0BxV5MiClrY d/dZ6EMRXCadse1d9b9BXqW0Dj+4cs7xOB7BX1XiX7otxZ+FGMTtuGo+gIckRfKo ZyYXaA8g/qcZuwp/GrcR1RF3+3Rtsb371VlwjlNYFX6Q3bWLgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeVuG5PxszbhYvX2IlcS26eC0VeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZjljMzA5NTAtMTg5OS0z MjU2LWE3NWUtY2NmYTM1ZWVhMDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMB37+uCJwiGFzM8gI2QDncivwhk1PjV6DyAVdEgSFFoSBpHg3Ptym4 HNC393M1LWOdkkBjXv6Pb4a1q7Wl06NKePydX5RiJGyEoahqYA/iuowM96sOtusc bn32Ub305+jPcLXjbf1KbOEgaWQdEYz33Aag4tw39vUCbA5LOyfGS/Y0aR292L1k 8aOl1ccX5GDPjT/MRexmi+vFBPkcsKQ1bVIGSEPnhM4VLMmZrxThnbdD/T3uPrMA YnfUIZpfLHIxcR428DKGrE3cJwu9FkPtigKxffxyVCV3vOow8wfdSwP/rjtCUaGt F78OrCdwlsoIijLO1tdPwmVaINRuYd0= -----END CERTIFICATE-----Generated at Mon Mar 2 09:20:46 2026 by rpki-client