$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/10d2fad9-d85a-38ed-9b0e-bf0954f24155.roa File: 10d2fad9-d85a-38ed-9b0e-bf0954f24155.roa (raw, json) Hash identifier: fYyq0vLFjEwXYj9XlBdm3Jjwy8M8MMojwN5excmHubQ= Subject key identifier: EC:6B:D8:23:A1:48:D4:05:EB:35:89:89:6E:6C:73:C3:77:5C:2F:20 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F1037939F85F71696A5244950 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/10d2fad9-d85a-38ed-9b0e-bf0954f24155.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 23473 IP address blocks: 66.253.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:93:9f:85:f7:16:96:a5:24:49:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=35eb3aca-63e1-4109-a1f1-146a48538b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c8:1a:97:bc:e5:7d:01:32:d3:46:b1:58:e7: 93:04:84:02:12:87:79:ab:c0:bf:d1:85:70:81:87: 34:6d:4e:65:04:e9:0a:b3:1e:e9:9d:40:71:45:cf: 39:05:35:0c:22:17:01:cc:25:74:86:90:9f:19:a0: e0:7e:8a:98:37:90:60:da:39:c8:05:67:64:20:e6: 4a:d5:f4:0a:f4:1f:06:9b:86:d3:b4:0b:e6:f6:7f: 51:f9:3a:88:df:53:96:d3:28:c0:41:3b:e5:c1:43: 0b:1f:9c:f7:c4:34:6b:e1:5f:a1:20:86:5f:58:84: 30:ec:c6:85:c4:6e:c6:a0:2a:28:9f:b3:2f:1d:91: 22:e4:81:a5:0b:19:59:c9:20:1e:7f:f3:0d:8e:e9: d6:4d:3b:8a:01:64:e1:27:6c:1b:98:45:cd:5a:da: 0a:e4:df:ad:1c:37:a6:88:62:dd:c2:fc:7d:88:89: fe:7e:42:3f:38:a1:98:22:f3:0d:f5:92:45:58:5f: d4:03:71:1e:0c:15:99:b4:71:b7:9c:df:30:dc:a1: 35:a6:11:ae:e7:24:35:60:a5:91:c6:40:64:fd:19: 18:ed:c1:91:d6:0a:fe:1c:d2:5e:fb:47:6d:92:08: c0:6a:8e:d8:18:36:48:fe:4b:65:be:ea:29:9f:13: d2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6B:D8:23:A1:48:D4:05:EB:35:89:89:6E:6C:73:C3:77:5C:2F:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/10d2fad9-d85a-38ed-9b0e-bf0954f24155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:54:89:cf:b2:da:07:eb:64:fe:cf:b9:af:d0:24:5b:ed:00: 09:8d:34:af:79:12:5b:16:8a:0e:05:67:59:b3:c3:24:43:88: 69:46:c2:c5:0a:25:3f:be:8c:2a:aa:3d:c8:3d:7f:d1:92:6f: 4c:a2:44:fe:8c:a7:aa:a0:89:33:e7:55:a0:b7:24:7b:45:9f: a0:44:95:2f:05:02:8c:d5:2c:c6:6a:d8:31:43:d9:ff:9f:c0: 1d:26:79:47:16:ac:2d:72:e4:7f:e1:4a:dd:9c:50:71:ac:ed: 4c:30:10:c0:c2:ef:6d:00:5c:d0:cf:39:14:06:e1:20:a3:2b: ca:3a:3d:b7:a1:78:b4:39:7e:89:45:93:7e:4e:e7:2f:0a:55: b7:74:c8:d3:c2:f5:98:b7:87:bd:1e:bd:f0:9c:a9:2d:62:8c: 80:3d:95:e2:51:b3:b5:a5:eb:e9:62:85:88:a6:23:5c:3e:af: 44:25:3a:a6:8b:ef:23:88:6f:b0:c3:ae:0f:ad:c6:d2:25:c0: 6c:46:34:e4:5f:be:e2:bc:2d:74:cd:94:de:bd:29:ad:e4:53: ca:18:98:f2:ea:e3:90:72:71:20:05:92:74:65:ce:28:b2:90: 24:02:af:6e:51:4f:3e:6b:d3:17:57:21:28:ce:34:92:07:89: 60:f6:e5:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN5OfhfcWlqUkSVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk MzVlYjNhY2EtNjNlMS00MTA5LWExZjEtMTQ2YTQ4NTM4YjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisgal7zlfQEy00axWOeTBIQCEod5q8C/0YVw gYc0bU5lBOkKsx7pnUBxRc85BTUMIhcBzCV0hpCfGaDgfoqYN5Bg2jnIBWdkIOZK 1fQK9B8Gm4bTtAvm9n9R+TqI31OW0yjAQTvlwUMLH5z3xDRr4V+hIIZfWIQw7MaF xG7GoCoon7MvHZEi5IGlCxlZySAef/MNjunWTTuKAWThJ2wbmEXNWtoK5N+tHDem iGLdwvx9iIn+fkI/OKGYIvMN9ZJFWF/UA3EeDBWZtHG3nN8w3KE1phGu5yQ1YKWR xkBk/RkY7cGR1gr+HNJe+0dtkgjAao7YGDZI/ktlvuopnxPS/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxr2COhSNQF6zWJiW5sc8N3XC8gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMTBkMmZhZDktZDg1YS0z OGVkLTliMGUtYmYwOTU0ZjI0MTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRUic+y2gfrZP7Pua/QJFvtAAmNNK95ElsWig4FZ1mzwyRDiGlGwsUK JT++jCqqPcg9f9GSb0yiRP6Mp6qgiTPnVaC3JHtFn6BElS8FAozVLMZq2DFD2f+f wB0meUcWrC1y5H/hSt2cUHGs7UwwEMDC720AXNDPORQG4SCjK8o6PbeheLQ5folF k35O5y8KVbd0yNPC9Zi3h70evfCcqS1ijIA9leJRs7Wl6+lihYimI1w+r0QlOqaL 7yOIb7DDrg+txtIlwGxGNORfvuK8LXTNlN69Ka3kU8oYmPLq45BycSAFknRlziiy kCQCr25RTz5r0xdXISjONJIHiWD25fk= -----END CERTIFICATE-----Generated at Fri Sep 25 22:18:26 2026 by rpki-client