$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c4c7e03e-0a11-3e3a-8963-4c65453dff5d.roa File: c4c7e03e-0a11-3e3a-8963-4c65453dff5d.roa (raw, json) Hash identifier: tptiMZHBmnep1L/bQMy/txhmjOt9GSxc3EbXOHvmUcs= Subject key identifier: 9E:7F:F8:3C:3D:9C:09:B8:31:85:63:6D:17:96:45:9E:1D:9E:B8:15 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D1DE491786FD2DBFFCF0E71A0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c4c7e03e-0a11-3e3a-8963-4c65453dff5d.roa Signing time: Tue 10 Mar 2026 01:00:31 +0000 ROA not before: Tue 10 Mar 2026 01:00:31 +0000 ROA not after: Mon 08 Jun 2026 01:00:31 +0000 asID: 23473 IP address blocks: 66.253.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:e4:91:78:6f:d2:db:ff:cf:0e:71:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 10 01:00:31 2026 GMT Not After : Jun 8 01:00:31 2026 GMT Subject: CN=5adce468-fb4a-4b35-bf7c-cfa58ee3ab5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:79:14:a5:10:bf:de:e4:1f:1b:80:64:09:d8: 63:73:0b:c1:df:ad:57:35:19:da:91:5a:63:c8:28: 51:a8:ca:c4:55:dd:bc:c8:19:8b:31:6b:71:e4:37: a7:c5:b4:4c:10:53:d8:ea:c0:bc:b6:0d:f5:03:dd: 6f:5f:e2:a5:9d:e2:ca:56:f0:2d:95:51:cf:73:bd: 59:8e:d2:79:3e:d1:38:95:eb:02:c3:3a:83:f7:41: 31:32:84:98:cf:a6:89:e1:81:db:14:6e:62:43:23: 1f:1b:a5:a4:25:bd:89:33:b2:d6:d7:13:55:f6:47: 20:b7:ab:6e:2b:38:40:fe:95:3a:bc:b5:d8:3c:6e: 26:59:0f:c4:a8:77:7d:30:63:d7:02:c8:77:d9:14: aa:54:d9:3f:8d:d9:08:13:6c:91:74:26:52:7b:f6: 52:13:35:7d:2b:9e:83:cb:eb:d8:54:3c:3d:74:0a: d7:f2:3c:7a:08:9a:e1:f4:32:5a:4e:42:73:c3:52: 98:07:bf:f8:f0:58:3e:2c:ad:22:90:92:ab:fb:cc: a9:4c:22:58:ab:45:f5:6e:5b:bc:c5:28:1b:98:4c: f7:b2:1d:37:22:90:8d:cc:19:99:bc:70:44:ed:45: dc:eb:9b:ce:14:ac:d9:20:e9:33:6d:68:5e:1e:02: a6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7F:F8:3C:3D:9C:09:B8:31:85:63:6D:17:96:45:9E:1D:9E:B8:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c4c7e03e-0a11-3e3a-8963-4c65453dff5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:8b:ba:cb:64:e6:78:e2:b4:19:47:61:e9:1f:2c:62:12:17: d3:42:11:dd:a0:fb:41:70:38:48:2d:a1:96:57:95:f5:70:24: a1:62:c2:f0:db:b2:10:c3:75:8c:8e:2a:a4:cf:f5:9b:06:08: 29:1e:e0:08:29:45:ff:82:66:85:32:34:38:aa:79:bd:f8:2d: 58:ce:60:63:9c:54:50:b6:2a:01:2a:5c:e0:45:ea:8b:9f:a8: 81:50:a4:6f:b4:68:ab:df:3b:c8:f5:47:43:22:7d:db:89:21: ca:d5:32:f1:1d:c5:1f:26:d4:ba:65:88:fc:66:d5:ec:5a:09: 50:e7:80:47:e6:78:b3:dc:e1:0d:d6:c9:98:27:9d:03:86:1f: 67:25:58:23:cf:a3:8b:69:5b:5d:59:d4:73:84:18:97:f0:71: 30:88:6b:c4:c4:38:b6:c5:63:2b:13:34:da:c3:c0:8a:bc:13: a0:d2:76:9f:fd:87:b1:01:02:ab:93:c4:71:6c:15:8c:13:1e: 17:7c:87:3f:d1:16:c3:35:ca:30:67:14:35:45:97:d9:30:ed: 24:84:d4:21:00:e0:b7:ee:a6:9c:07:ec:3e:f3:49:e0:fa:15: b8:00:89:b6:1e:00:ea:5d:4b:d2:13:42:34:f4:e4:2f:75:17: e0:93:6d:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0d5JF4b9Lb/88OcaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxMDAxMDAzMVoXDTI2MDYwODAxMDAzMVowLzEtMCsGA1UEAxMk NWFkY2U0NjgtZmI0YS00YjM1LWJmN2MtY2ZhNThlZTNhYjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3kUpRC/3uQfG4BkCdhjcwvB361XNRnakVpj yChRqMrEVd28yBmLMWtx5DenxbRMEFPY6sC8tg31A91vX+KlneLKVvAtlVHPc71Z jtJ5PtE4lesCwzqD90ExMoSYz6aJ4YHbFG5iQyMfG6WkJb2JM7LW1xNV9kcgt6tu KzhA/pU6vLXYPG4mWQ/EqHd9MGPXAsh32RSqVNk/jdkIE2yRdCZSe/ZSEzV9K56D y+vYVDw9dArX8jx6CJrh9DJaTkJzw1KYB7/48Fg+LK0ikJKr+8ypTCJYq0X1blu8 xSgbmEz3sh03IpCNzBmZvHBE7UXc65vOFKzZIOkzbWheHgKmYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5/+Dw9nAm4MYVjbReWRZ4dnrgVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYzRjN2UwM2UtMGExMS0z ZTNhLTg5NjMtNGM2NTQ1M2RmZjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQv3mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWLustk5njitBlHYekfLGISF9NCEd2g+0FwOEgtoZZXlfVwJKFiwvDb shDDdYyOKqTP9ZsGCCke4AgpRf+CZoUyNDiqeb34LVjOYGOcVFC2KgEqXOBF6ouf qIFQpG+0aKvfO8j1R0MifduJIcrVMvEdxR8m1LpliPxm1exaCVDngEfmeLPc4Q3W yZgnnQOGH2clWCPPo4tpW11Z1HOEGJfwcTCIa8TEOLbFYysTNNrDwIq8E6DSdp/9 h7EBAquTxHFsFYwTHhd8hz/RFsM1yjBnFDVFl9kw7SSE1CEA4LfuppwH7D7zSeD6 FbgAibYeAOpdS9ITQjT05C91F+CTbXw= -----END CERTIFICATE-----Generated at Sat Mar 21 20:54:14 2026 by rpki-client