$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa File: bf2887aa-43e9-37de-b469-8642f6a243b3.roa (raw, json) Hash identifier: QD/QB1jFUIhuTIsy3iYeEcm9ys56RvFeYaqThZDSySk= Subject key identifier: 8A:E1:D0:AF:92:91:BC:A4:8E:02:AF:38:FB:40:BB:A8:33:37:54:BB Certificate issuer: /CN=87b2cd91-4c9b-4f87-9a28-f01df0224611 Certificate serial: 010D0C9F4328584DC56591EF18B6968F2F7790D0 Authority key identifier: DF:93:3C:3F:32:06:6E:7B:B0:A8:C6:06:FD:F6:C2:E2:2E:06:D8:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa Signing time: Sat 09 May 2026 01:00:25 +0000 ROA not before: Sat 09 May 2026 01:00:25 +0000 ROA not after: Fri 07 Aug 2026 01:00:25 +0000 asID: 63318 IP address blocks: 66.85.252.0/23 maxlen: 24 2602:ff39::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c5:65:91:ef:18:b6:96:8f:2f:77:90:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b2cd91-4c9b-4f87-9a28-f01df0224611 Validity Not Before: May 9 01:00:25 2026 GMT Not After : Aug 7 01:00:25 2026 GMT Subject: CN=3e195a86-d105-48eb-889a-8ad60d44f6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fc:8b:31:eb:c2:e1:ea:19:a8:4c:31:f0:41: 25:8f:9e:e5:aa:49:28:45:b6:75:65:2e:d1:03:72: 93:85:4d:da:8d:9f:7a:8e:13:05:a6:f4:a4:a7:31: da:f4:1f:04:16:e9:86:ae:21:f1:86:1a:4c:ad:0e: 81:e6:d3:66:e1:f4:65:1f:95:e0:50:24:10:20:43: 6f:1f:fb:99:d0:63:51:9c:b2:82:9e:f6:5b:81:33: 21:f3:5c:e8:f1:1f:ba:b2:c8:64:bf:da:ce:40:90: e3:46:f6:b9:05:be:0e:0a:dc:eb:4a:58:74:e5:64: 65:a5:66:86:fe:01:e9:06:30:4e:b1:1c:47:d4:83: 5a:4b:62:16:97:b6:01:c2:fd:6b:bf:d5:ca:11:34: 71:08:67:3f:e2:36:42:a1:69:9a:7a:16:92:90:45: 74:e8:df:31:eb:51:37:b0:85:0f:47:b1:d1:14:c6: fa:b9:96:20:2e:e6:20:c1:96:57:e3:36:e8:08:0c: 9e:5e:af:99:21:44:3c:5a:01:92:a5:26:13:70:7b: cc:6f:f3:78:ab:32:85:72:03:1f:7f:bf:43:83:b0: 35:44:9f:26:3a:2f:2d:fe:cb:f8:3b:66:47:39:f5: 06:95:68:77:93:6a:fc:45:15:f3:61:fe:16:25:6e: 9b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E1:D0:AF:92:91:BC:A4:8E:02:AF:38:FB:40:BB:A8:33:37:54:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.crl X509v3 Authority Key Identifier: keyid:DF:93:3C:3F:32:06:6E:7B:B0:A8:C6:06:FD:F6:C2:E2:2E:06:D8:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer sbgp-ipAddrBlock: critical IPv4: 66.85.252.0/23 IPv6: 2602:ff39::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:86:d4:68:06:75:e3:10:bc:d8:3b:4b:42:dd:e3:bf:0e:14: d5:60:81:2f:8b:ac:47:9d:ce:2f:e7:d7:4e:c5:a1:83:5e:a2: 8a:9e:a3:27:55:5a:b3:0f:ae:98:b8:16:4e:98:7f:e4:0f:02: 65:bb:84:a1:76:fb:7f:66:95:d5:34:4a:23:fc:26:c1:c3:e7: 6f:90:eb:b4:50:c6:32:51:9d:8d:aa:1c:fc:e5:0c:ff:73:84: 3a:1a:b8:26:a9:82:26:e3:2b:78:0d:87:f8:e9:a3:ef:05:04: b9:ca:ff:76:f5:2c:21:b4:06:c7:5b:8a:fb:88:34:36:5c:11: 0e:98:c1:e2:b0:ac:13:ea:f5:41:92:16:9c:04:81:23:8c:19: be:7d:90:8c:cc:4d:14:a5:ae:24:52:f9:ca:5c:17:ff:79:a0: 41:7b:e1:5c:cd:5d:9a:89:25:8f:c6:89:db:48:01:1a:1a:5d: 7a:bc:be:2c:8f:c2:f5:2d:3a:c1:76:a1:f3:20:77:a7:ac:92: f6:55:3f:4c:ca:7c:6d:2e:a1:53:00:c6:5f:0d:06:41:0c:3f: 71:57:31:c2:03:1a:1f:e6:1c:e8:8e:14:97:98:e4:4f:f7:69: f1:c1:d1:1d:01:f7:cf:c2:af:5c:16:f0:d0:a9:53:2d:b8:f3: 45:b1:b9:78 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE3FZZHvGLaWjy93kNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdiMmNkOTEtNGM5Yi00Zjg3LTlhMjgtZjAxZGYwMjI0 NjExMB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk M2UxOTVhODYtZDEwNS00OGViLTg4OWEtOGFkNjBkNDRmNmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPyLMevC4eoZqEwx8EElj57lqkkoRbZ1ZS7R A3KThU3ajZ96jhMFpvSkpzHa9B8EFumGriHxhhpMrQ6B5tNm4fRlH5XgUCQQIENv H/uZ0GNRnLKCnvZbgTMh81zo8R+6sshkv9rOQJDjRva5Bb4OCtzrSlh05WRlpWaG /gHpBjBOsRxH1INaS2IWl7YBwv1rv9XKETRxCGc/4jZCoWmaehaSkEV06N8x61E3 sIUPR7HRFMb6uZYgLuYgwZZX4zboCAyeXq+ZIUQ8WgGSpSYTcHvMb/N4qzKFcgMf f79Dg7A1RJ8mOi8t/sv4O2ZHOfUGlWh3k2r8RRXzYf4WJW6b9wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFIrh0K+SkbykjgKvOPtAu6gzN1S7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84N2Iy Y2Q5MS00YzliLTRmODctOWEyOC1mMDFkZjAyMjQ2MTEvYmYyODg3YWEtNDNlOS0z N2RlLWI0NjktODY0MmY2YTI0M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODdiMmNkOTEtNGM5Yi00Zjg3LTlh MjgtZjAxZGYwMjI0NjExLzg3YjJjZDkxLTRjOWItNGY4Ny05YTI4LWYwMWRmMDIy NDYxMS5jcmwwHwYDVR0jBBgwFoAU35M8PzIGbnuwqMYG/fbC4i4G2CwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84N2IyY2Q5MS00YzliLTRmODctOWEyOC1mMDFk ZjAyMjQ2MTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBQlX8MA4E AgACMAgDBgQmAv85ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBqhtRoBnXjELzYO0tC3eO/DhTVYIEvi6xH nc4v59dOxaGDXqKKnqMnVVqzD66YuBZOmH/kDwJlu4Shdvt/ZpXVNEoj/CbBw+dv kOu0UMYyUZ2Nqhz85Qz/c4Q6GrgmqYIm4yt4DYf46aPvBQS5yv929SwhtAbHW4r7 iDQ2XBEOmMHisKwT6vVBkhacBIEjjBm+fZCMzE0Upa4kUvnKXBf/eaBBe+FczV2a iSWPxonbSAEaGl16vL4sj8L1LTrBdqHzIHenrJL2VT9MynxtLqFTAMZfDQZBDD9x VzHCAxof5hzojhSXmORP92nxwdEdAffPwq9cFvDQqVMtuPNFsbl4 -----END CERTIFICATE-----Generated at Wed May 13 15:59:46 2026 by rpki-client