$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/65a82de9-be43-3fc9-ad61-3d73f417c879.roa File: 65a82de9-be43-3fc9-ad61-3d73f417c879.roa (raw, json) Hash identifier: KPXHjGTAs7TDtJ5HXRJQfMmAdJqI5iY7j+3qxELeWGg= Subject key identifier: 60:45:34:D7:66:90:D3:A8:80:BB:18:A6:95:E6:F0:9D:B9:C4:5A:02 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584EF87CB91AF5CBF63799687900 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/65a82de9-be43-3fc9-ad61-3d73f417c879.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 23473 IP address blocks: 66.253.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:b9:1a:f5:cb:f6:37:99:68:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=2a4e4277-c5d3-4679-9958-12684af64625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9a:85:b1:e4:aa:28:6a:71:3d:db:b7:f9:32: 87:e4:d1:1e:d7:84:a9:2c:a6:fa:61:20:e4:68:f8: 3d:26:b8:74:e5:f8:e6:8b:d4:c9:a4:ef:5f:62:5c: ca:28:cd:3e:de:73:f1:e2:87:03:aa:7f:96:d2:11: 9e:95:41:cb:ee:9e:75:b9:40:a3:ab:d1:17:66:85: 7b:7c:ac:a7:5c:e7:89:7b:2f:bd:f8:5b:28:60:8a: 6b:f7:ed:a5:f1:25:fc:7d:20:4b:93:b8:67:0d:64: 5d:25:f3:df:c0:80:e1:04:15:d7:41:18:a9:ad:0c: 4b:b4:18:f8:e1:e7:00:3a:77:69:ab:b4:63:4b:4a: e6:a7:dd:79:16:cd:51:22:6a:72:f5:fd:61:e8:08: 13:88:6f:43:5a:08:15:ef:32:21:f5:7e:33:ea:7a: 76:5c:18:29:d8:d7:3d:f5:83:77:bf:39:5c:7c:38: b7:2c:27:1d:84:f0:bf:59:0f:01:4b:59:b6:6c:c4: 38:f7:8d:67:96:98:af:32:cb:d5:67:73:d0:ba:ca: c7:65:b6:43:76:94:cd:8d:1e:7f:32:f7:86:30:3e: 18:26:39:04:3c:20:e5:03:07:cb:c3:29:af:3f:39: 05:20:77:67:c9:8c:ad:8f:be:6e:eb:9b:ae:d4:e7: 36:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:45:34:D7:66:90:D3:A8:80:BB:18:A6:95:E6:F0:9D:B9:C4:5A:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/65a82de9-be43-3fc9-ad61-3d73f417c879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:2c:fb:12:f3:79:5c:35:99:8c:a8:8e:77:ca:50:98:8f:66: 11:6d:88:96:c6:50:c3:7a:c6:1c:c0:e7:32:f7:20:98:7f:75: 67:3f:e7:20:79:b4:79:0c:1d:91:02:26:35:a1:b7:33:da:e4: 9b:e2:57:fe:03:76:1a:26:17:22:67:3d:1e:79:72:43:47:21: 38:5b:11:33:37:d0:48:71:25:46:78:8d:b2:0a:bd:79:f1:e3: b0:ad:0f:18:b0:2d:28:d7:a5:e4:69:95:9e:c2:41:cc:7a:8d: 3b:4d:c6:b1:ec:c8:49:ce:4c:50:4e:d6:c5:92:60:1f:c4:32: c0:2f:a5:e6:d4:4b:a2:07:38:f3:42:bd:1a:9e:42:8d:5b:a4: f9:fa:6d:9c:14:7f:07:4b:59:de:2e:06:4c:45:05:97:9e:1f: cf:9d:5c:be:0c:9b:5e:ac:11:00:c3:99:af:ac:67:f2:55:73: af:b6:b7:9a:fb:3c:81:46:9a:3b:f1:29:21:85:12:bf:00:b9: 3a:c2:9e:5a:44:86:9d:99:f9:e1:89:a6:0a:62:40:10:bb:5d: 0e:fd:82:43:d7:f3:14:ea:09:a9:4a:a8:02:23:e1:c0:7a:fc: f3:d4:71:b0:ce:5b:2d:be:b6:63:5f:d2:f0:89:a5:f7:6d:52: 38:ad:fe:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fLka9cv2N5loeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk MmE0ZTQyNzctYzVkMy00Njc5LTk5NTgtMTI2ODRhZjY0NjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspqFseSqKGpxPdu3+TKH5NEe14SpLKb6YSDk aPg9Jrh05fjmi9TJpO9fYlzKKM0+3nPx4ocDqn+W0hGelUHL7p51uUCjq9EXZoV7 fKynXOeJey+9+FsoYIpr9+2l8SX8fSBLk7hnDWRdJfPfwIDhBBXXQRiprQxLtBj4 4ecAOndpq7RjS0rmp915Fs1RImpy9f1h6AgTiG9DWggV7zIh9X4z6np2XBgp2Nc9 9YN3vzlcfDi3LCcdhPC/WQ8BS1m2bMQ4941nlpivMsvVZ3PQusrHZbZDdpTNjR5/ MveGMD4YJjkEPCDlAwfLwymvPzkFIHdnyYytj75u65uu1Oc2YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBFNNdmkNOogLsYppXm8J25xFoCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNjVhODJkZTktYmU0My0z ZmM5LWFkNjEtM2Q3M2Y0MTdjODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQs+xLzeVw1mYyojnfKUJiPZhFtiJbGUMN6xhzA5zL3IJh/dWc/5yB5 tHkMHZECJjWhtzPa5JviV/4DdhomFyJnPR55ckNHIThbETM30EhxJUZ4jbIKvXnx 47CtDxiwLSjXpeRplZ7CQcx6jTtNxrHsyEnOTFBO1sWSYB/EMsAvpebUS6IHOPNC vRqeQo1bpPn6bZwUfwdLWd4uBkxFBZeeH8+dXL4Mm16sEQDDma+sZ/JVc6+2t5r7 PIFGmjvxKSGFEr8AuTrCnlpEhp2Z+eGJpgpiQBC7XQ79gkPX8xTqCalKqAIj4cB6 /PPUcbDOWy2+tmNf0vCJpfdtUjit/t8= -----END CERTIFICATE-----Generated at Fri Sep 25 13:29:42 2026 by rpki-client