$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cb0e87ea-809b-355a-9ddc-cf8f8f977633.roa File: cb0e87ea-809b-355a-9ddc-cf8f8f977633.roa (raw, json) Hash identifier: QctPs1daKJcuMgJw1jE3cibzSOpziX7IT/kuBru8DmI= Subject key identifier: B2:79:92:F5:22:88:A1:19:AA:02:2E:41:77:8B:69:02:53:5B:4B:59 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D8D8FFB6C3436FED48E5E5980 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cb0e87ea-809b-355a-9ddc-cf8f8f977633.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 23473 IP address blocks: 66.253.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:fb:6c:34:36:fe:d4:8e:5e:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=521d6994-f418-47ea-a3af-34ecadf266a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:58:d4:04:4a:de:51:a3:96:cb:d7:50:76:d4: 16:c9:ba:ae:e0:53:34:20:9a:a5:9d:d8:63:ea:f3: 50:86:fa:37:bd:bc:13:fa:37:5f:18:49:2c:f1:69: 29:6f:48:28:a0:3c:33:9c:ac:89:33:c4:7d:61:1c: 56:38:fe:1e:ce:f0:cc:80:f6:c2:29:28:f3:ac:9a: 98:fe:b8:2c:7a:6d:cd:4a:10:81:ea:2e:96:58:4b: 77:0c:bf:b7:1f:c4:fe:f8:fb:e2:7d:63:96:3c:64: 38:73:a4:96:ec:55:b9:7e:2d:5e:ea:f7:43:0d:c6: 39:0f:35:9a:d6:24:7b:6a:f0:f7:76:98:0e:30:41: fe:53:09:6a:78:bd:2b:b2:46:17:50:6c:cb:2a:34: ed:f9:54:41:30:75:c4:fa:75:fc:07:25:a2:f7:06: 16:10:1b:ec:d4:26:0b:0d:2a:54:cc:68:a4:5b:1b: 38:0d:9b:3d:23:6a:9b:ad:ef:0e:3f:fe:c9:c0:84: a3:0f:4f:30:fe:1d:84:5b:82:0e:43:1d:4b:72:f4: 72:63:7b:e9:93:50:b8:9d:28:e9:97:d2:65:b3:f6: 9c:a9:65:d1:b6:e5:3e:0b:fa:8f:95:db:bf:0b:45: 45:b8:b2:3d:17:89:55:31:9e:50:52:e7:60:c0:39: 62:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:79:92:F5:22:88:A1:19:AA:02:2E:41:77:8B:69:02:53:5B:4B:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cb0e87ea-809b-355a-9ddc-cf8f8f977633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f5:32:55:00:1a:1a:ff:a9:4e:12:e3:4f:23:ae:3b:f6:76: ea:08:eb:89:a0:79:33:0a:60:5b:95:fe:d3:63:6e:d6:91:13: f5:f8:96:b4:5a:fd:32:9d:23:66:ad:f3:77:76:ae:db:61:64: f3:46:73:b7:11:93:65:d6:74:df:98:e0:ad:f2:32:50:96:49: cf:c7:7e:a3:61:c9:09:4a:de:ec:e2:6b:35:fb:7b:d2:94:9e: 2d:01:f7:f7:71:77:fe:68:b8:b9:d3:52:20:d5:f6:8a:c9:c3: e8:b4:77:4d:ba:1e:c9:18:5b:92:3c:aa:54:0d:aa:37:37:20: 12:9e:2b:2a:fc:4e:c0:7b:84:b8:5b:20:1b:6a:a1:79:17:9b: 4e:3b:e0:80:e7:7b:1e:3e:c0:50:85:5b:c9:2f:8d:cc:f7:e0: 85:51:92:d6:e4:93:dc:72:28:7d:65:39:23:2e:8f:78:29:20: 0f:52:00:32:43:22:24:eb:f9:d4:ba:75:0b:07:2f:a3:e3:cc: 93:07:3f:2c:73:db:cc:21:b5:89:3e:79:f7:4c:3c:4b:e0:e1: f7:99:26:ec:29:8f:05:55:ea:38:55:88:9f:12:f4:cd:11:25: 9c:d6:4f:1e:5a:42:27:a3:25:7e:11:df:d8:d3:6f:3d:42:bb: 3b:aa:f6:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Nj/tsNDb+1I5eWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk NTIxZDY5OTQtZjQxOC00N2VhLWEzYWYtMzRlY2FkZjI2NmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsljUBEreUaOWy9dQdtQWybqu4FM0IJqlndhj 6vNQhvo3vbwT+jdfGEks8Wkpb0gooDwznKyJM8R9YRxWOP4ezvDMgPbCKSjzrJqY /rgsem3NShCB6i6WWEt3DL+3H8T++PvifWOWPGQ4c6SW7FW5fi1e6vdDDcY5DzWa 1iR7avD3dpgOMEH+UwlqeL0rskYXUGzLKjTt+VRBMHXE+nX8ByWi9wYWEBvs1CYL DSpUzGikWxs4DZs9I2qbre8OP/7JwISjD08w/h2EW4IOQx1LcvRyY3vpk1C4nSjp l9Jls/acqWXRtuU+C/qPldu/C0VFuLI9F4lVMZ5QUudgwDliWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJ5kvUiiKEZqgIuQXeLaQJTW0tZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvY2IwZTg3ZWEtODA5Yi0z NTVhLTlkZGMtY2Y4ZjhmOTc3NjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv3EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAz1MlUAGhr/qU4S408jrjv2duoI64mgeTMKYFuV/tNjbtaRE/X4lrRa /TKdI2at83d2rtthZPNGc7cRk2XWdN+Y4K3yMlCWSc/HfqNhyQlK3uziazX7e9KU ni0B9/dxd/5ouLnTUiDV9orJw+i0d026HskYW5I8qlQNqjc3IBKeKyr8TsB7hLhb IBtqoXkXm0474IDnex4+wFCFW8kvjcz34IVRktbkk9xyKH1lOSMuj3gpIA9SADJD IiTr+dS6dQsHL6PjzJMHPyxz28whtYk+efdMPEvg4feZJuwpjwVV6jhViJ8S9M0R JZzWTx5aQiejJX4R39jTbz1Cuzuq9mw= -----END CERTIFICATE-----Generated at Thu May 7 03:13:51 2026 by rpki-client