$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/01533e1d-c490-3947-af70-01b1b1ad210c.roa File: 01533e1d-c490-3947-af70-01b1b1ad210c.roa (raw, json) Hash identifier: 65GsdTq4vrYL+oDQ1RS20pCD8KUbTO230Q4D/a8bqkw= Subject key identifier: DA:BA:73:E8:F9:26:79:ED:C3:A4:AE:2B:8E:CE:E8:E6:A5:00:BF:85 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F07D776FF4508BA0D0D8E5240 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/01533e1d-c490-3947-af70-01b1b1ad210c.roa Signing time: Tue 01 Sep 2026 13:00:12 +0000 ROA not before: Tue 01 Sep 2026 13:00:12 +0000 ROA not after: Mon 30 Nov 2026 14:00:12 +0000 asID: 23473 IP address blocks: 66.253.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:d7:76:ff:45:08:ba:0d:0d:8e:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 1 13:00:12 2026 GMT Not After : Nov 30 14:00:12 2026 GMT Subject: CN=5ba8543f-53c5-470c-ab3a-d1e52d5e10e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c7:16:d4:0d:6c:96:7f:78:29:ce:7c:8d:31: 43:4c:72:65:32:e8:35:fe:af:f8:5d:43:d4:59:62: fb:65:b8:d1:e8:f4:69:f4:4d:f6:fa:a4:ec:8e:18: 69:c5:9c:7d:c5:d7:f2:51:eb:b2:ab:6d:3a:61:3b: e6:eb:c3:3f:df:ec:f6:1c:98:81:45:6c:4c:97:32: 91:28:01:cf:57:6d:51:b9:f1:d9:f4:93:d9:38:ef: 14:0b:4c:4d:28:57:67:16:67:ab:1f:65:ae:75:2c: 22:5e:9e:99:e4:22:4c:36:e1:37:c7:70:b7:2a:72: 8f:fa:61:af:65:a7:c2:a8:0a:30:18:73:74:30:f5: 5f:15:86:53:80:9d:ec:7d:a7:97:33:f7:ad:45:1a: dc:0f:e1:1d:2b:50:0e:1a:3c:c8:2b:20:b4:15:83: fd:e3:48:a4:3a:42:50:11:20:d6:15:a8:80:7b:86: ee:a0:cb:7f:77:16:58:81:ab:d3:4b:b8:e2:4d:1e: c7:29:84:23:09:fe:3d:0f:36:1a:c3:9b:37:e3:73: a0:26:d7:52:6b:9d:37:69:be:8b:a4:ad:9c:1c:97: a1:20:64:ac:39:d4:28:b1:ea:5d:0c:16:0e:a1:34: 96:f4:fb:14:b5:cd:c3:2b:47:05:52:f3:79:29:02: 36:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:BA:73:E8:F9:26:79:ED:C3:A4:AE:2B:8E:CE:E8:E6:A5:00:BF:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/01533e1d-c490-3947-af70-01b1b1ad210c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:48:eb:d6:07:f7:0f:92:87:85:50:71:fd:dc:ab:1e:d6:ed: 67:36:6c:24:ac:e2:ec:66:ef:b1:73:1b:04:88:d9:14:ee:6b: af:a6:26:1f:ba:db:d1:9b:a5:d7:16:db:2f:19:91:18:c9:63: 1c:f3:16:b2:98:ed:2a:68:06:38:08:19:d8:eb:1a:95:2c:fb: c5:83:6d:40:38:ce:70:7a:68:0f:a4:5d:fb:6b:a9:be:1b:2c: 11:3c:90:f1:2d:ec:e1:42:6e:3d:ec:83:10:40:76:44:94:05: 54:bb:38:fa:ca:24:dd:9c:bb:00:13:7b:a4:5f:d6:ee:6e:20: 2e:43:02:73:93:a1:20:43:15:d1:0e:fc:99:e0:79:57:25:90: 47:e6:69:e2:66:a3:5b:9d:98:c8:69:4e:65:69:83:5b:89:74: 05:40:33:26:e4:7e:ba:71:1d:de:f4:bb:6a:88:e9:ef:ca:12: 4a:65:88:6e:3f:8e:a7:de:67:0d:7e:98:ef:d1:f3:de:3b:58: e3:86:e7:04:0d:e7:a8:0e:82:f6:59:75:ce:87:c1:19:25:28: d7:f9:ee:cc:e7:b2:70:8f:5e:2e:be:84:f7:9f:a5:ce:50:b4: 59:5a:3c:e6:45:ff:5c:55:1d:fa:cf:ec:87:d3:c8:6d:fe:39: 38:bc:fe:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8H13b/RQi6DQ2OUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkwMTEzMDAxMloXDTI2MTEzMDE0MDAxMlowLzEtMCsGA1UEAxMk NWJhODU0M2YtNTNjNS00NzBjLWFiM2EtZDFlNTJkNWUxMGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8cW1A1sln94Kc58jTFDTHJlMug1/q/4XUPU WWL7ZbjR6PRp9E32+qTsjhhpxZx9xdfyUeuyq206YTvm68M/3+z2HJiBRWxMlzKR KAHPV21RufHZ9JPZOO8UC0xNKFdnFmerH2WudSwiXp6Z5CJMNuE3x3C3KnKP+mGv ZafCqAowGHN0MPVfFYZTgJ3sfaeXM/etRRrcD+EdK1AOGjzIKyC0FYP940ikOkJQ ESDWFaiAe4buoMt/dxZYgavTS7jiTR7HKYQjCf49DzYaw5s343OgJtdSa503ab6L pK2cHJehIGSsOdQosepdDBYOoTSW9PsUtc3DK0cFUvN5KQI2RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNq6c+j5Jnntw6SuK47O6OalAL+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMDE1MzNlMWQtYzQ5MC0z OTQ3LWFmNzAtMDFiMWIxYWQyMTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv3kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFI69YH9w+Sh4VQcf3cqx7W7Wc2bCSs4uxm77FzGwSI2RTua6+mJh+6 29GbpdcW2y8ZkRjJYxzzFrKY7SpoBjgIGdjrGpUs+8WDbUA4znB6aA+kXftrqb4b LBE8kPEt7OFCbj3sgxBAdkSUBVS7OPrKJN2cuwATe6Rf1u5uIC5DAnOToSBDFdEO /JngeVclkEfmaeJmo1udmMhpTmVpg1uJdAVAMybkfrpxHd70u2qI6e/KEkpliG4/ jqfeZw1+mO/R8947WOOG5wQN56gOgvZZdc6HwRklKNf57sznsnCPXi6+hPefpc5Q tFlaPOZF/1xVHfrP7IfTyG3+OTi8/q0= -----END CERTIFICATE-----Generated at Sat Sep 26 17:09:39 2026 by rpki-client