$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/9ac55e82-af0b-386e-930f-141c78e43568.roa File: 9ac55e82-af0b-386e-930f-141c78e43568.roa (raw, json) Hash identifier: a5W+DQUuzIaH7H+RvTJ8YDVJRBfsdRuPcNaW7Zo/aaw= Subject key identifier: 1D:5A:D3:34:64:93:5C:52:72:E6:39:56:C0:56:AC:50:19:54:2A:3D Certificate issuer: /CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Certificate serial: 010D0C9F4328584DAAE01B677ED816816073B004 Authority key identifier: 67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/9ac55e82-af0b-386e-930f-141c78e43568.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 17176 IP address blocks: 66.187.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:1b:67:7e:d8:16:81:60:73:b0:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=9204b52d-3d10-4b69-a5b9-656d487e7e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:41:04:90:12:5b:81:00:5a:17:bc:60:7b:77: f2:bf:32:20:ff:ec:38:73:7e:e0:60:ea:5e:c2:5c: a6:84:f1:ed:87:ad:76:f5:b0:88:58:20:e7:45:00: 4f:4c:be:a9:e1:ea:8a:a9:52:61:9b:1e:2e:6b:24: 8f:d5:a9:b9:b4:71:fa:4c:a0:82:0f:9d:bd:53:ec: b3:57:d3:06:a4:57:60:d7:25:77:2c:27:5a:78:3e: 9e:0e:88:4b:ad:b3:14:da:15:6a:c0:2c:da:17:e3: 92:cb:ad:21:95:e6:92:d9:71:28:06:e5:cc:c8:5d: 2c:ba:0d:f5:f9:9a:49:68:78:41:30:b2:bb:57:84: ee:bf:e3:27:6d:af:db:91:ac:e3:72:f9:83:ba:8c: 3f:c9:2a:3c:d1:b8:c6:f5:a8:bc:0c:21:bb:c9:49: 62:73:1d:fe:af:68:71:cc:f0:6e:d3:b0:17:fe:6c: a0:04:60:99:3b:ed:5b:c5:d7:ef:18:f0:55:7d:da: d0:4c:55:2b:e3:42:2d:53:91:4e:c6:5c:b1:93:42: 5f:c1:ca:1d:55:fa:ec:cc:31:25:88:e2:03:90:c0: 92:22:1a:57:2f:63:d8:39:0a:55:d6:84:a1:09:ea: 7e:5a:90:29:ac:86:8e:a4:40:0d:10:a4:05:99:3c: 5f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5A:D3:34:64:93:5C:52:72:E6:39:56:C0:56:AC:50:19:54:2A:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/9ac55e82-af0b-386e-930f-141c78e43568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl X509v3 Authority Key Identifier: keyid:67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer sbgp-ipAddrBlock: critical IPv4: 66.187.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:83:68:77:02:2e:ae:9d:7c:1f:79:14:31:d2:e4:bc:53:71: b5:b6:bb:94:74:be:b1:de:7b:58:a1:76:4f:4c:48:80:3e:3c: 8f:bd:5a:b6:09:97:97:71:0a:0e:51:f5:f6:e2:47:83:84:13: fc:74:bf:bd:42:57:2a:7d:ff:29:ef:86:d2:a3:c6:70:ca:a7: c1:c1:0a:db:c1:1c:c6:26:02:ba:a6:08:23:10:eb:36:d0:f9: c4:32:f2:f9:9b:0c:5b:15:6f:da:3e:d0:cd:55:35:ad:6a:ba: a6:18:ec:3f:a5:09:57:76:45:e0:c5:c8:b4:c9:1b:65:75:f6: 14:d2:3b:ef:91:cb:45:dc:6a:f6:8c:87:cd:97:b1:62:0e:2f: 42:15:50:85:3a:c1:9a:5b:5d:44:49:79:2b:84:5c:6d:2d:6e: f6:5b:a4:82:b1:1e:7b:c9:2f:8f:7f:a9:5f:57:81:48:35:8b: b0:45:c4:f3:01:7d:7e:70:04:fb:d1:3d:97:40:e6:a1:8e:b5: 48:0f:fc:c6:5d:61:82:11:d9:31:10:5d:0b:5b:79:aa:53:eb: 3f:65:20:f0:fd:28:70:43:14:d2:7c:fe:2f:2a:ed:4f:c4:0e: a2:8c:fe:19:b8:42:6a:23:be:e2:fc:66:5f:22:60:1e:a7:4a: 1e:63:78:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4BtnftgWgWBzsAQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjliODc0MzQtMDBkZS00ZDJmLWE0NWQtYWJlMWVmZTVl Y2ZkMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk OTIwNGI1MmQtM2QxMC00YjY5LWE1YjktNjU2ZDQ4N2U3ZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0EEkBJbgQBaF7xge3fyvzIg/+w4c37gYOpe wlymhPHth6129bCIWCDnRQBPTL6p4eqKqVJhmx4uaySP1am5tHH6TKCCD529U+yz V9MGpFdg1yV3LCdaeD6eDohLrbMU2hVqwCzaF+OSy60hleaS2XEoBuXMyF0sug31 +ZpJaHhBMLK7V4Tuv+Mnba/bkazjcvmDuow/ySo80bjG9ai8DCG7yUlicx3+r2hx zPBu07AX/mygBGCZO+1bxdfvGPBVfdrQTFUr40ItU5FOxlyxk0JfwcodVfrszDEl iOIDkMCSIhpXL2PYOQpV1oShCep+WpAprIaOpEANEKQFmTxfXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1a0zRkk1xScuY5VsBWrFAZVCo9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOWI4 NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUxZWZlNWVjZmQvOWFjNTVlODItYWYwYi0z ODZlLTkzMGYtMTQxYzc4ZTQzNTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjliODc0MzQtMDBkZS00ZDJmLWE0 NWQtYWJlMWVmZTVlY2ZkL2I5Yjg3NDM0LTAwZGUtNGQyZi1hNDVkLWFiZTFlZmU1 ZWNmZC5jcmwwHwYDVR0jBBgwFoAUZ7qrgtUltq3erC7/J+WFnJfOPGswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iOWI4NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUx ZWZlNWVjZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrv9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2DaHcCLq6dfB95FDHS5LxTcbW2u5R0vrHee1ihdk9MSIA+PI+9WrYJ l5dxCg5R9fbiR4OEE/x0v71CVyp9/ynvhtKjxnDKp8HBCtvBHMYmArqmCCMQ6zbQ +cQy8vmbDFsVb9o+0M1VNa1quqYY7D+lCVd2ReDFyLTJG2V19hTSO++Ry0XcavaM h82XsWIOL0IVUIU6wZpbXURJeSuEXG0tbvZbpIKxHnvJL49/qV9XgUg1i7BFxPMB fX5wBPvRPZdA5qGOtUgP/MZdYYIR2TEQXQtbeapT6z9lIPD9KHBDFNJ8/i8q7U/E DqKM/hm4QmojvuL8Zl8iYB6nSh5jeAs= -----END CERTIFICATE-----Generated at Wed May 13 05:24:00 2026 by rpki-client