$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa File: bf2887aa-43e9-37de-b469-8642f6a243b3.roa (raw, json) Hash identifier: qrfX4xXe/okAoCbCUsDzMRdLwst5AglHeiZLMqOyVM8= Subject key identifier: 6B:2F:9F:E7:5E:C7:53:C1:10:E7:8B:E3:96:63:0B:45:C5:71:C6:F4 Certificate issuer: /CN=87b2cd91-4c9b-4f87-9a28-f01df0224611 Certificate serial: 010D0C9F4328584CE4C76E1ABAC33B27BB658320 Authority key identifier: DF:93:3C:3F:32:06:6E:7B:B0:A8:C6:06:FD:F6:C2:E2:2E:06:D8:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa Signing time: Tue 17 Feb 2026 14:00:41 +0000 ROA not before: Tue 17 Feb 2026 14:00:41 +0000 ROA not after: Mon 18 May 2026 13:00:41 +0000 asID: 63318 IP address blocks: 66.85.252.0/23 maxlen: 24 2602:ff39::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e4:c7:6e:1a:ba:c3:3b:27:bb:65:83:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b2cd91-4c9b-4f87-9a28-f01df0224611 Validity Not Before: Feb 17 14:00:41 2026 GMT Not After : May 18 13:00:41 2026 GMT Subject: CN=3ddc2178-ff78-4c5d-b0e9-07495b895076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:96:6b:2a:c4:c6:1e:6b:17:c3:26:15:01:90: 26:97:a7:0d:ef:2a:ef:db:b8:ca:93:ed:68:bd:7d: 72:6b:dc:db:f4:8d:dc:3b:aa:f8:76:2d:6d:e0:a4: f9:ff:ad:f7:13:27:3f:dd:0a:cc:54:db:73:eb:e7: 29:8d:7e:20:57:ed:4d:0e:79:7a:7b:d8:9d:66:30: eb:76:49:52:59:c4:38:88:21:7c:28:9a:ff:81:d2: b3:12:6e:7e:5b:97:18:fe:d6:97:a4:a2:d2:48:1e: e8:85:86:97:ec:81:75:c1:c6:0a:33:ee:bf:f6:74: f7:53:be:34:d8:34:2c:52:84:f2:a9:53:e9:f7:6d: 14:3f:1d:ee:fd:dd:e8:2f:0b:38:a2:59:67:52:ca: 34:5f:20:3e:a6:e8:6b:27:7e:82:0e:c0:ce:3a:2f: 53:ae:81:56:ef:49:77:63:7d:5b:52:f7:ae:51:97: ff:bd:b3:93:db:ec:c2:e0:17:28:bf:2e:07:04:ea: 22:02:9c:bc:40:3a:ea:0f:ee:10:f9:78:ba:29:be: ce:e9:25:8d:ad:fc:8d:1a:ac:5e:58:fb:f8:cc:bd: 51:34:2d:10:5e:75:ad:d5:12:c1:33:00:b8:79:c6: 1d:4b:c6:f1:30:0b:d1:79:ac:55:a4:86:e7:44:cc: 94:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2F:9F:E7:5E:C7:53:C1:10:E7:8B:E3:96:63:0B:45:C5:71:C6:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.crl X509v3 Authority Key Identifier: keyid:DF:93:3C:3F:32:06:6E:7B:B0:A8:C6:06:FD:F6:C2:E2:2E:06:D8:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer sbgp-ipAddrBlock: critical IPv4: 66.85.252.0/23 IPv6: 2602:ff39::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:3d:e4:c5:73:0d:9d:1a:6b:94:94:15:6c:a0:8a:ce:47:cd: 10:0c:ae:78:fa:cc:7b:91:04:b0:65:30:b7:73:3c:a7:9d:da: 2c:48:38:a7:13:e5:61:4b:b9:7a:4f:75:af:f9:af:7d:7f:ea: b0:5a:57:e5:57:a5:ba:66:51:39:e2:c1:ef:49:28:91:fc:1c: 50:c9:05:7b:2b:b7:06:57:6e:26:ca:17:24:0d:66:59:89:10: 15:a3:b4:e9:77:83:9d:7a:23:13:bd:5b:d4:71:05:86:41:a0: 85:32:8b:52:91:05:34:1f:f9:28:08:cc:8f:b8:a2:46:de:41: 44:4b:32:61:94:63:6b:d8:5c:1d:15:21:1b:7c:b2:29:59:e1: dc:41:d5:2b:15:06:64:4b:03:3f:f7:4f:5a:20:be:fe:7d:30: 07:a2:5d:33:96:ad:48:8d:16:0e:2a:ff:67:f4:6c:f8:89:66: 28:48:85:51:fc:ba:f9:12:77:8c:02:f3:5f:08:4d:c6:f6:b1: 50:98:9f:4e:da:c5:ff:ac:29:a7:e0:94:1a:84:0c:1f:ed:a8: f7:f8:4a:bc:01:37:bb:7f:94:7c:91:2b:28:01:13:59:c1:93: cb:a8:e1:9d:b7:0b:d0:a0:94:5d:19:4c:8f:b5:81:0b:7b:57: 89:b2:78:6e -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEzkx24ausM7J7tlgyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdiMmNkOTEtNGM5Yi00Zjg3LTlhMjgtZjAxZGYwMjI0 NjExMB4XDTI2MDIxNzE0MDA0MVoXDTI2MDUxODEzMDA0MVowLzEtMCsGA1UEAxMk M2RkYzIxNzgtZmY3OC00YzVkLWIwZTktMDc0OTViODk1MDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJZrKsTGHmsXwyYVAZAml6cN7yrv27jKk+1o vX1ya9zb9I3cO6r4di1t4KT5/633Eyc/3QrMVNtz6+cpjX4gV+1NDnl6e9idZjDr dklSWcQ4iCF8KJr/gdKzEm5+W5cY/taXpKLSSB7ohYaX7IF1wcYKM+6/9nT3U740 2DQsUoTyqVPp920UPx3u/d3oLws4ollnUso0XyA+puhrJ36CDsDOOi9TroFW70l3 Y31bUveuUZf/vbOT2+zC4Bcovy4HBOoiApy8QDrqD+4Q+Xi6Kb7O6SWNrfyNGqxe WPv4zL1RNC0QXnWt1RLBMwC4ecYdS8bxMAvReaxVpIbnRMyUTwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGsvn+dex1PBEOeL45ZjC0XFccb0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84N2Iy Y2Q5MS00YzliLTRmODctOWEyOC1mMDFkZjAyMjQ2MTEvYmYyODg3YWEtNDNlOS0z N2RlLWI0NjktODY0MmY2YTI0M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODdiMmNkOTEtNGM5Yi00Zjg3LTlh MjgtZjAxZGYwMjI0NjExLzg3YjJjZDkxLTRjOWItNGY4Ny05YTI4LWYwMWRmMDIy NDYxMS5jcmwwHwYDVR0jBBgwFoAU35M8PzIGbnuwqMYG/fbC4i4G2CwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84N2IyY2Q5MS00YzliLTRmODctOWEyOC1mMDFk ZjAyMjQ2MTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBQlX8MA4E AgACMAgDBgQmAv85ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAbPeTFcw2dGmuUlBVsoIrOR80QDK54+sx7 kQSwZTC3czynndosSDinE+VhS7l6T3Wv+a99f+qwWlflV6W6ZlE54sHvSSiR/BxQ yQV7K7cGV24myhckDWZZiRAVo7Tpd4OdeiMTvVvUcQWGQaCFMotSkQU0H/koCMyP uKJG3kFESzJhlGNr2FwdFSEbfLIpWeHcQdUrFQZkSwM/909aIL7+fTAHol0zlq1I jRYOKv9n9Gz4iWYoSIVR/Lr5EneMAvNfCE3G9rFQmJ9O2sX/rCmn4JQahAwf7aj3 +Eq8ATe7f5R8kSsoARNZwZPLqOGdtwvQoJRdGUyPtYELe1eJsnhu -----END CERTIFICATE-----Generated at Mon Mar 2 17:31:45 2026 by rpki-client