$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/956d13a5-23d7-3b60-93c3-22a73ad1de28.roa File: 956d13a5-23d7-3b60-93c3-22a73ad1de28.roa (raw, json) Hash identifier: KUySkkvRWvahAuy1Q50riWIAL3+6diR7mwp26Jthwv0= Subject key identifier: 0A:D4:B0:FE:91:8E:EE:FA:25:1E:1F:34:C7:49:E6:83:CF:78:BB:43 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F0ED2428BFABD0F5A1BFC09A0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/956d13a5-23d7-3b60-93c3-22a73ad1de28.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 174 IP address blocks: 66.253.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:42:8b:fa:bd:0f:5a:1b:fc:09:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=e7fe520c-b859-4eeb-bc94-3a0489a3dc50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:17:cd:3b:48:9f:07:c3:39:44:af:8a:73:dd: d9:88:99:28:f7:56:ff:bf:2f:c9:ce:71:a0:9c:20: 17:2e:bc:97:61:ab:8d:de:dc:e7:dd:fc:67:f1:d1: 1f:3f:be:1e:45:f4:1a:b9:bc:f4:89:83:ac:7b:7c: b6:9c:a8:3f:b4:05:ad:18:45:8a:16:fb:69:de:d2: 3c:c9:5d:11:c1:1a:97:1a:65:cc:4c:67:8d:ef:36: 2e:38:43:ef:86:07:51:d4:0f:23:cd:05:0f:85:22: 92:9c:cb:08:8b:6d:07:d1:42:e9:98:76:40:d1:00: 7e:ea:c4:06:06:ee:59:7e:a2:5e:06:3d:97:7c:39: 32:3e:87:30:0b:02:96:9b:1c:7d:e5:83:6d:10:7b: 92:01:fd:24:8f:6f:27:ea:3a:4f:bb:8e:97:b7:74: de:a9:a3:3d:d2:94:ed:96:84:85:4b:fb:ec:ea:19: 8b:d4:b0:e7:86:90:22:c7:1e:4f:ba:02:f6:1a:cc: a6:e3:ce:45:e8:a0:33:bc:49:f8:ac:62:8a:47:20: 0a:64:ab:15:33:04:94:3b:fa:e2:f4:32:fa:00:c3: 2c:9b:13:0d:50:be:39:d9:bd:f5:10:68:2d:68:ed: 40:24:4e:f2:f8:9f:1e:cd:d5:76:6d:e2:a9:b5:76: 6a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D4:B0:FE:91:8E:EE:FA:25:1E:1F:34:C7:49:E6:83:CF:78:BB:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/956d13a5-23d7-3b60-93c3-22a73ad1de28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:20:71:cb:8a:87:bc:11:46:7a:8b:f3:5f:48:5e:89:29:56: 42:b4:ac:ee:fd:b0:e9:b1:5b:4a:3f:d5:a0:19:87:7a:1a:b5: 04:03:df:29:80:52:cd:38:be:56:78:04:dc:59:2a:16:b5:29: 2a:88:67:2b:52:dc:0f:34:30:84:c9:17:81:a4:ae:38:80:6b: a2:38:28:d9:cc:06:69:9c:28:59:50:df:2d:cc:22:df:bc:23: d0:9a:82:be:df:db:49:a3:7c:ec:0f:53:90:f8:f5:94:9e:2e: 8d:d6:22:b0:ed:fd:f9:11:72:0e:61:b5:7e:09:6c:3e:53:22: fe:d5:a5:1a:52:a1:f2:62:95:ac:6f:cc:9d:bb:42:cb:0f:f8: c9:ae:7b:12:f3:31:70:31:a0:e7:6e:d8:24:7c:ef:a2:de:ef: ca:ba:fe:90:bb:2e:15:82:4e:22:68:a3:87:bc:19:19:99:94: 53:4c:cc:83:90:31:42:3e:6a:fa:54:bd:3f:75:e7:81:8d:b7: b9:5c:18:a9:cf:20:58:83:6a:c9:43:2e:3b:78:5c:12:42:37: 32:73:12:2b:55:bd:4e:63:db:f8:82:ae:c3:4b:e4:34:4e:1a: 33:92:be:c3:cc:75:96:db:89:60:71:8a:71:d5:74:6c:65:76: 2e:2c:be:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0kKL+r0PWhv8CaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk ZTdmZTUyMGMtYjg1OS00ZWViLWJjOTQtM2EwNDg5YTNkYzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRfNO0ifB8M5RK+Kc93ZiJko91b/vy/JznGg nCAXLryXYauN3tzn3fxn8dEfP74eRfQaubz0iYOse3y2nKg/tAWtGEWKFvtp3tI8 yV0RwRqXGmXMTGeN7zYuOEPvhgdR1A8jzQUPhSKSnMsIi20H0ULpmHZA0QB+6sQG Bu5ZfqJeBj2XfDkyPocwCwKWmxx95YNtEHuSAf0kj28n6jpPu46Xt3TeqaM90pTt loSFS/vs6hmL1LDnhpAixx5PugL2Gsym485F6KAzvEn4rGKKRyAKZKsVMwSUO/ri 9DL6AMMsmxMNUL452b31EGgtaO1AJE7y+J8ezdV2beKptXZqhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArUsP6Rju76JR4fNMdJ5oPPeLtDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTU2ZDEzYTUtMjNkNy0z YjYwLTkzYzMtMjJhNzNhZDFkZTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv1XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIgccuKh7wRRnqL819IXokpVkK0rO79sOmxW0o/1aAZh3oatQQD3ymA Us04vlZ4BNxZKha1KSqIZytS3A80MITJF4GkrjiAa6I4KNnMBmmcKFlQ3y3MIt+8 I9Cagr7f20mjfOwPU5D49ZSeLo3WIrDt/fkRcg5htX4JbD5TIv7VpRpSofJilaxv zJ27QssP+MmuexLzMXAxoOdu2CR876Le78q6/pC7LhWCTiJoo4e8GRmZlFNMzIOQ MUI+avpUvT9154GNt7lcGKnPIFiDaslDLjt4XBJCNzJzEitVvU5j2/iCrsNL5DRO GjOSvsPMdZbbiWBxinHVdGxldi4svq8= -----END CERTIFICATE-----Generated at Sun Sep 20 13:06:30 2026 by rpki-client