$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1dee5a07-d856-35c8-a37f-003fc54b85f3.roa File: 1dee5a07-d856-35c8-a37f-003fc54b85f3.roa (raw, json) Hash identifier: 4AeCfm6Gae1ZfvVTodmpF5T2O4BbXFbxHQUKSvi+IWA= Subject key identifier: 90:EB:E2:47:2E:8A:F4:79:75:9D:56:E6:0D:7A:F4:3B:5F:35:2E:DF Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F49899E889D95C4175B040580 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1dee5a07-d856-35c8-a37f-003fc54b85f3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 66.253.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:9e:88:9d:95:c4:17:5b:04:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4bda1f9d-124d-4ce8-bc4c-84ebb7c5fd6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e1:f7:ab:86:68:7a:74:ab:ec:a9:2e:ef:0c: 36:54:79:37:3a:da:34:3c:b5:8a:d4:16:ea:52:a8: 39:6c:52:7d:53:0a:f8:c6:b1:41:6b:a4:63:32:42: 70:35:b9:88:3c:7f:58:cf:4e:ad:86:01:1a:6d:6f: e7:2a:0e:76:0c:21:d9:59:2b:d8:38:f9:62:16:cc: 2d:49:c2:ad:80:ad:02:76:2a:c3:39:17:71:18:cd: 99:d7:95:17:4d:be:81:16:de:17:ab:81:a0:e9:69: ce:5d:a2:50:9e:8a:8d:03:23:35:20:0f:75:16:19: 73:84:6a:b7:d9:d0:9d:ad:71:a3:1f:3e:5f:13:83: 5a:c0:13:81:87:5a:48:80:bb:5e:7f:eb:79:6c:72: dc:50:58:08:4b:85:e7:35:72:80:c8:eb:70:d6:af: 86:2e:a9:9a:94:77:b6:32:c6:3e:36:fb:74:bf:b7: 0d:1a:92:1a:84:34:e6:2d:2d:bd:42:b1:2c:af:67: c2:a0:e8:a3:ee:7c:e3:9f:91:75:d8:1c:23:4c:c8: 3d:72:ad:c8:92:66:6d:f0:d7:05:d2:2f:44:fb:14: 46:57:62:0a:b0:af:1c:8d:41:fd:fe:8e:aa:c4:c6: ec:7d:80:91:52:7f:82:ce:49:45:bc:9b:c5:21:24: dc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:EB:E2:47:2E:8A:F4:79:75:9D:56:E6:0D:7A:F4:3B:5F:35:2E:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1dee5a07-d856-35c8-a37f-003fc54b85f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:1c:f7:32:e4:33:c9:cb:e7:ed:ec:8f:42:12:d5:95:2e:76: 35:07:36:32:93:dc:df:fe:a3:8b:0d:37:04:34:e6:d3:ea:86: 75:f5:3a:f6:01:2d:e7:25:d8:f8:2e:c6:97:7a:88:9d:ce:da: da:63:4a:3a:74:b1:83:38:a8:a9:12:2f:9b:6e:bb:9b:e2:58: 3e:fa:72:f4:86:1d:54:b3:01:21:8a:b6:67:86:96:35:f5:44: c4:f4:ed:4b:c4:81:54:e7:09:41:6f:9a:7f:87:88:76:9c:56: 9c:07:ed:0c:20:6e:02:0a:3a:0d:31:ce:e7:8a:4e:42:8f:6b: a8:6e:0f:5a:e2:35:ef:dd:85:31:14:da:41:7c:25:04:9e:77: c9:b9:12:69:ac:5f:03:f0:e4:9c:9e:34:e0:16:d7:5d:68:41: fd:90:69:f6:98:8a:10:58:da:78:36:e4:eb:47:d1:bc:54:83: d1:a9:da:10:3d:44:04:95:6e:85:a7:9d:9f:56:ef:b9:f2:ef: 40:08:32:da:8a:31:19:3c:55:cf:18:ed:11:82:18:7d:70:99: 9e:31:80:65:fe:6b:51:10:6f:86:70:c4:a7:b7:a6:02:7c:2c: 8f:71:8c:4d:0b:4d:32:28:25:75:97:ba:8c:ce:3f:44:66:93: fa:f1:3c:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiZ6InZXEF1sEBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGJkYTFmOWQtMTI0ZC00Y2U4LWJjNGMtODRlYmI3YzVmZDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOH3q4ZoenSr7Kku7ww2VHk3Oto0PLWK1Bbq Uqg5bFJ9Uwr4xrFBa6RjMkJwNbmIPH9Yz06thgEabW/nKg52DCHZWSvYOPliFswt ScKtgK0CdirDORdxGM2Z15UXTb6BFt4Xq4Gg6WnOXaJQnoqNAyM1IA91FhlzhGq3 2dCdrXGjHz5fE4NawBOBh1pIgLtef+t5bHLcUFgIS4XnNXKAyOtw1q+GLqmalHe2 MsY+Nvt0v7cNGpIahDTmLS29QrEsr2fCoOij7nzjn5F12BwjTMg9cq3IkmZt8NcF 0i9E+xRGV2IKsK8cjUH9/o6qxMbsfYCRUn+CzklFvJvFISTcOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDr4kcuivR5dZ1W5g169DtfNS7fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMWRlZTVhMDctZDg1Ni0z NWM4LWEzN2YtMDAzZmM1NGI4NWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0c9zLkM8nL5+3sj0IS1ZUudjUHNjKT3N/+o4sNNwQ05tPqhnX1OvYB Lecl2Pguxpd6iJ3O2tpjSjp0sYM4qKkSL5tuu5viWD76cvSGHVSzASGKtmeGljX1 RMT07UvEgVTnCUFvmn+HiHacVpwH7QwgbgIKOg0xzueKTkKPa6huD1riNe/dhTEU 2kF8JQSed8m5EmmsXwPw5JyeNOAW111oQf2QafaYihBY2ng25OtH0bxUg9Gp2hA9 RASVboWnnZ9W77ny70AIMtqKMRk8Vc8Y7RGCGH1wmZ4xgGX+a1EQb4ZwxKe3pgJ8 LI9xjE0LTTIoJXWXuozOP0Rmk/rxPBQ= -----END CERTIFICATE-----Generated at Fri Sep 25 17:40:03 2026 by rpki-client