$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa File: bf2887aa-43e9-37de-b469-8642f6a243b3.roa (raw, json) Hash identifier: dQ3QboIao4AV09v0jbkTAvslPipyfKD+C/ovRTtBk+E= Subject key identifier: 14:D9:3B:2D:44:A0:FB:3A:D5:79:C9:8C:32:B3:F0:0E:68:6F:13:BD Certificate issuer: /CN=87b2cd91-4c9b-4f87-9a28-f01df0224611 Certificate serial: 010D0C9F4328584F480D37370E6096566B5B2300 Authority key identifier: DF:93:3C:3F:32:06:6E:7B:B0:A8:C6:06:FD:F6:C2:E2:2E:06:D8:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 63318 IP address blocks: 66.85.252.0/23 maxlen: 24 2602:ff39::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:37:37:0e:60:96:56:6b:5b:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b2cd91-4c9b-4f87-9a28-f01df0224611 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=d321b27a-8af7-4f44-929a-11635e7cff3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:03:ee:02:d0:29:3a:df:02:81:df:0d:21:2e: cd:78:68:1f:c5:5b:52:07:4c:35:a0:91:00:23:98: ac:2d:b9:d8:71:e4:6b:00:a4:ba:38:ed:4c:eb:ba: e2:54:ad:1d:cf:c4:c4:e7:a0:45:54:e5:1f:a5:48: 64:c4:3d:ca:a4:32:03:3a:e6:45:35:00:e4:ac:16: 8c:81:5f:5d:ee:5c:d4:ea:90:fb:38:70:9f:cc:2b: 03:47:82:dc:12:44:61:64:dd:2a:0a:2a:f5:93:60: 04:11:58:54:e9:2d:2b:43:d3:58:18:b6:b7:7e:2f: 63:e5:2a:87:fa:de:c0:c0:25:98:f4:aa:c1:30:93: 6c:cb:54:ed:1a:db:f6:87:a5:91:17:40:bf:46:a4: ad:de:85:75:cd:73:c8:d9:09:52:94:aa:22:9a:fa: 47:65:6c:83:0e:53:1d:02:a4:00:9b:06:c9:3b:24: 0f:97:bc:6f:18:46:a0:f7:33:f0:47:99:3f:ac:63: b2:c9:74:25:ff:00:ff:02:be:38:d9:76:25:ea:29: 8f:0a:9d:cb:db:01:40:c0:65:30:f8:cc:d9:b7:56: 66:e2:ea:91:87:0d:44:79:d2:a2:04:fa:26:d0:4a: b7:43:b8:86:26:5e:4e:f5:22:cb:ca:ec:1c:8f:a3: a5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D9:3B:2D:44:A0:FB:3A:D5:79:C9:8C:32:B3:F0:0E:68:6F:13:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.crl X509v3 Authority Key Identifier: keyid:DF:93:3C:3F:32:06:6E:7B:B0:A8:C6:06:FD:F6:C2:E2:2E:06:D8:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer sbgp-ipAddrBlock: critical IPv4: 66.85.252.0/23 IPv6: 2602:ff39::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:12:b5:0c:38:58:8a:ba:0a:de:c7:d6:b6:31:5e:af:c6:4f: 5e:77:66:1d:39:fd:87:82:ae:50:14:8d:a8:ba:19:0c:e2:77: 7b:85:5a:46:da:74:fe:d2:90:07:ab:72:a1:26:fd:3c:4d:8e: e4:f0:15:f5:83:5c:5a:31:fd:bb:a6:7c:3b:d0:07:b8:15:1a: e5:c2:30:4a:c5:53:71:dc:3b:2b:83:e7:84:62:f5:ba:de:3f: e0:40:43:36:39:fa:56:35:42:d2:e3:67:02:a4:72:c1:8b:6d: a8:1d:6c:d6:a7:03:a2:03:a7:5b:2d:6a:b3:c6:06:16:27:1d: fc:91:5b:12:e0:f1:b3:ae:05:cd:84:00:7e:ed:d7:63:98:8f: 04:2e:a6:67:76:a3:b8:3f:ab:b3:53:84:d1:0b:23:8d:5b:70: 8a:83:4d:08:b2:4e:44:9c:1b:89:10:57:d4:f4:bf:83:28:c9: b1:1c:c5:32:a8:82:87:7b:1c:ea:33:0a:66:d4:c4:b0:06:58: 73:48:7c:db:11:a3:71:76:a6:78:36:ed:bc:05:9d:b5:92:34: 8c:73:a0:85:76:cf:b6:50:5c:1d:b2:86:a5:68:3d:b0:64:fe: 1b:69:07:c9:8f:9c:44:45:81:c1:66:7d:d7:01:5b:dc:f2:3d: 04:92:af:45 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9IDTc3DmCWVmtbIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdiMmNkOTEtNGM5Yi00Zjg3LTlhMjgtZjAxZGYwMjI0 NjExMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZDMyMWIyN2EtOGFmNy00ZjQ0LTkyOWEtMTE2MzVlN2NmZjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugPuAtApOt8Cgd8NIS7NeGgfxVtSB0w1oJEA I5isLbnYceRrAKS6OO1M67riVK0dz8TE56BFVOUfpUhkxD3KpDIDOuZFNQDkrBaM gV9d7lzU6pD7OHCfzCsDR4LcEkRhZN0qCir1k2AEEVhU6S0rQ9NYGLa3fi9j5SqH +t7AwCWY9KrBMJNsy1TtGtv2h6WRF0C/RqSt3oV1zXPI2QlSlKoimvpHZWyDDlMd AqQAmwbJOyQPl7xvGEag9zPwR5k/rGOyyXQl/wD/Ar442XYl6imPCp3L2wFAwGUw +MzZt1Zm4uqRhw1EedKiBPom0Eq3Q7iGJl5O9SLLyuwcj6OlVQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBTZOy1EoPs61XnJjDKz8A5obxO9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84N2Iy Y2Q5MS00YzliLTRmODctOWEyOC1mMDFkZjAyMjQ2MTEvYmYyODg3YWEtNDNlOS0z N2RlLWI0NjktODY0MmY2YTI0M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODdiMmNkOTEtNGM5Yi00Zjg3LTlh MjgtZjAxZGYwMjI0NjExLzg3YjJjZDkxLTRjOWItNGY4Ny05YTI4LWYwMWRmMDIy NDYxMS5jcmwwHwYDVR0jBBgwFoAU35M8PzIGbnuwqMYG/fbC4i4G2CwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84N2IyY2Q5MS00YzliLTRmODctOWEyOC1mMDFk ZjAyMjQ2MTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBQlX8MA4E AgACMAgDBgQmAv85ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBGErUMOFiKugrex9a2MV6vxk9ed2YdOf2H gq5QFI2ouhkM4nd7hVpG2nT+0pAHq3KhJv08TY7k8BX1g1xaMf27pnw70Ae4FRrl wjBKxVNx3Dsrg+eEYvW63j/gQEM2OfpWNULS42cCpHLBi22oHWzWpwOiA6dbLWqz xgYWJx38kVsS4PGzrgXNhAB+7ddjmI8ELqZndqO4P6uzU4TRCyONW3CKg00Isk5E nBuJEFfU9L+DKMmxHMUyqIKHexzqMwpm1MSwBlhzSHzbEaNxdqZ4Nu28BZ21kjSM c6CFds+2UFwdsoalaD2wZP4baQfJj5xERYHBZn3XAVvc8j0Ekq9F -----END CERTIFICATE-----Generated at Sun Oct 11 23:56:26 2026 by rpki-client