$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f25bdc5b-5b0d-397f-b37a-5d995e4ef9ca.roa File: f25bdc5b-5b0d-397f-b37a-5d995e4ef9ca.roa (raw, json) Hash identifier: 0aqMhjJ+Wg/Y3rNT/Ae+XN3/QmNIOIXqcfH+2DcD6Jw= Subject key identifier: E5:31:B6:62:9A:45:64:43:A4:1B:67:52:DA:EA:E3:90:EF:08:5C:3D Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584E858F9054BB5EB6CD9A9E1A80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f25bdc5b-5b0d-397f-b37a-5d995e4ef9ca.roa Signing time: Thu 16 Jul 2026 21:00:12 +0000 ROA not before: Thu 16 Jul 2026 21:00:12 +0000 ROA not after: Wed 14 Oct 2026 21:00:12 +0000 asID: 23473 IP address blocks: 66.253.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:85:8f:90:54:bb:5e:b6:cd:9a:9e:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jul 16 21:00:12 2026 GMT Not After : Oct 14 21:00:12 2026 GMT Subject: CN=1aa8783f-4b5d-48e5-a19f-aac45c6f3b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bf:2f:5f:b5:25:91:2b:69:d2:61:0f:76:e8: 8c:36:a3:a2:5a:1a:dd:21:a6:3e:29:0f:86:87:53: e5:80:fb:74:ec:65:af:1a:cb:58:08:f6:7c:3c:1c: bf:ee:f5:a0:3b:c8:31:ae:dc:25:24:81:91:9a:e5: 27:c5:d6:52:a2:bb:d4:4f:30:af:d8:e8:dd:26:05: 4d:16:50:18:6e:f0:39:21:47:f0:40:87:bb:6c:e1: 84:ff:d3:22:7b:73:d2:7c:13:11:f0:67:b1:9e:20: 18:07:29:77:8a:41:08:16:9c:46:26:be:e8:e1:de: 73:45:8e:ae:27:01:2e:9d:22:1f:24:27:c8:56:25: d5:94:17:ef:14:09:b3:31:25:45:6d:cb:a0:e5:4f: 84:3c:49:23:3c:88:08:c3:be:46:bd:4e:fc:10:27: 1b:fc:b6:0f:fd:4c:f7:59:50:cc:4b:d9:38:fe:fd: 14:a7:f1:de:36:bc:3b:c3:8f:ea:ec:94:bb:87:b8: 6b:e9:9d:0a:4d:6f:f6:4c:de:81:e6:74:5c:b6:dd: 46:c1:94:84:16:d9:3c:bc:18:76:cc:9d:10:e2:c8: 64:1c:76:3c:a6:2c:3d:2b:fe:f8:41:3a:4b:ff:1c: 20:2d:32:f8:19:d5:a0:24:ae:c3:57:92:da:d0:09: 5f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:31:B6:62:9A:45:64:43:A4:1B:67:52:DA:EA:E3:90:EF:08:5C:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f25bdc5b-5b0d-397f-b37a-5d995e4ef9ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:60:1c:57:15:46:c8:4d:ab:db:e9:b5:00:93:28:5c:28:54: aa:da:cb:e0:36:68:54:b5:59:70:bc:2a:6a:d5:94:17:62:0f: 0c:3f:e6:ac:ad:1b:d3:bb:20:b7:12:d3:3c:57:12:bf:ae:aa: 16:3c:c2:c1:cd:f7:08:a0:73:a6:24:98:0c:a9:1c:25:51:c9: f5:94:7c:a2:b0:8c:59:89:c3:b2:f7:21:c4:2a:bc:b0:fd:d1: 3e:55:35:42:1e:ba:0a:38:50:81:14:ce:87:53:a6:25:35:b4: f0:2e:d3:5e:93:c9:cd:58:3a:54:37:5e:b4:36:51:f0:2a:d8: 72:fd:f7:62:aa:ad:05:14:67:c8:30:f7:0b:3e:ad:18:ee:a8: f4:3d:8b:73:cf:cf:76:9a:e9:ec:c7:96:95:36:20:ef:f7:d7: 8a:02:32:28:13:9b:26:c7:b3:97:2c:c1:62:af:36:9f:d1:6e: a8:d6:fc:ec:09:26:19:bc:f0:31:b6:1c:3a:dd:b8:e3:f0:8b: a1:b6:a7:58:be:99:22:89:82:a0:d2:6c:e7:28:65:f2:71:d6: 57:f0:24:85:d8:50:33:84:34:cb:9b:f7:f9:4a:1f:c1:f6:69: a2:21:01:56:27:2c:0b:2d:d4:2f:a8:e6:72:1d:34:e4:8d:99: 7d:8f:3e:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Fj5BUu162zZqeGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDcxNjIxMDAxMloXDTI2MTAxNDIxMDAxMlowLzEtMCsGA1UEAxMk MWFhODc4M2YtNGI1ZC00OGU1LWExOWYtYWFjNDVjNmYzYjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr78vX7UlkStp0mEPduiMNqOiWhrdIaY+KQ+G h1PlgPt07GWvGstYCPZ8PBy/7vWgO8gxrtwlJIGRmuUnxdZSorvUTzCv2OjdJgVN FlAYbvA5IUfwQIe7bOGE/9Mie3PSfBMR8GexniAYByl3ikEIFpxGJr7o4d5zRY6u JwEunSIfJCfIViXVlBfvFAmzMSVFbcug5U+EPEkjPIgIw75GvU78ECcb/LYP/Uz3 WVDMS9k4/v0Up/HeNrw7w4/q7JS7h7hr6Z0KTW/2TN6B5nRctt1GwZSEFtk8vBh2 zJ0Q4shkHHY8piw9K/74QTpL/xwgLTL4GdWgJK7DV5La0Alf/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUxtmKaRWRDpBtnUtrq45DvCFw9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZjI1YmRjNWItNWIwZC0z OTdmLWIzN2EtNWQ5OTVlNGVmOWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1gHFcVRshNq9vptQCTKFwoVKray+A2aFS1WXC8KmrVlBdiDww/5qyt G9O7ILcS0zxXEr+uqhY8wsHN9wigc6YkmAypHCVRyfWUfKKwjFmJw7L3IcQqvLD9 0T5VNUIeugo4UIEUzodTpiU1tPAu016Tyc1YOlQ3XrQ2UfAq2HL992KqrQUUZ8gw 9ws+rRjuqPQ9i3PPz3aa6ezHlpU2IO/314oCMigTmybHs5cswWKvNp/RbqjW/OwJ Jhm88DG2HDrduOPwi6G2p1i+mSKJgqDSbOcoZfJx1lfwJIXYUDOENMub9/lKH8H2 aaIhAVYnLAst1C+o5nIdNOSNmX2PPnQ= -----END CERTIFICATE-----Generated at Fri Jul 24 15:39:18 2026 by rpki-client