$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8da0b153-563b-3bf3-98e3-16f5c48fc2c7.roa File: 8da0b153-563b-3bf3-98e3-16f5c48fc2c7.roa (raw, json) Hash identifier: pW7hgIJ7PLDlZqcGb2BzwO15KJ0cPBI2B5Iexn+chK4= Subject key identifier: 85:04:99:AF:B5:AC:8D:4C:CD:8D:9A:35:38:3E:02:6B:C9:A7:B0:41 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584F4976ADC3F3A2F559DC970228 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8da0b153-563b-3bf3-98e3-16f5c48fc2c7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13768 IP address blocks: 66.33.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:ad:c3:f3:a2:f5:59:dc:97:02:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a1de6b1c-4039-4b7d-a7f4-70a240e089b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bd:e4:c2:28:3b:70:ba:8e:d9:a1:7c:52:11: fd:3e:8e:d2:a1:fe:2c:dc:e3:7f:5d:4d:bf:1d:84: 83:bc:7c:89:be:b2:ef:88:33:5d:19:f1:7f:21:bf: 0d:bd:95:9f:c9:8b:e3:84:93:c2:23:11:e9:f3:48: 92:03:e3:27:bb:6b:ac:19:4d:67:02:93:73:29:bd: dc:f0:ef:31:ba:dc:a5:6b:39:38:7b:7c:21:16:7f: 31:a4:fe:cc:93:49:03:41:ba:f8:00:1f:9b:67:15: 10:f6:80:0e:95:21:b8:51:6a:44:6f:ae:d8:b4:06: 1c:83:f5:12:b9:41:b4:19:ce:4f:a6:1b:f0:0d:dc: d0:f9:83:b5:31:be:a3:34:23:4e:96:d3:31:21:8d: 24:65:31:b2:62:83:b7:7d:9f:0b:bb:8b:8d:c8:e4: 5e:85:a7:30:a4:91:05:bc:d0:c8:e0:e6:21:77:ff: 3e:f0:c8:5f:fe:ee:5c:8d:21:17:85:a6:1a:2f:36: c5:3b:57:66:55:67:55:cc:71:e5:39:52:e0:33:35: cf:5f:b5:30:a4:df:93:33:b5:80:df:75:ba:ae:48: e3:82:f9:b8:25:74:99:9a:81:93:9e:d6:d4:b3:fd: e6:76:af:70:3b:b7:44:e6:cf:a9:7b:43:fd:4b:d3: a8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:04:99:AF:B5:AC:8D:4C:CD:8D:9A:35:38:3E:02:6B:C9:A7:B0:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8da0b153-563b-3bf3-98e3-16f5c48fc2c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 66.33.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:d0:76:da:5e:c3:35:37:10:81:6e:32:a2:62:0c:0b:f3:8f: 26:df:d1:1a:df:3e:18:c2:ee:cf:e0:fc:be:82:46:b3:c9:0c: 97:08:c5:b1:75:65:37:ca:74:fb:64:c3:05:b2:9f:74:98:d7: da:87:74:aa:4d:d3:2e:37:53:01:c0:7c:8d:06:a4:8c:f2:7b: 0e:89:a9:76:36:84:64:61:46:2b:10:75:43:8d:2f:03:45:ec: 4c:c3:ca:de:08:4a:c9:56:86:78:79:c6:6d:d1:9d:01:5c:f5: 2f:e2:24:dc:03:6a:a8:c8:f1:a6:a0:27:dd:d4:f9:1f:da:52: d3:7d:54:c3:c5:37:e6:7d:83:c2:d4:32:de:59:44:57:f9:ef: 85:cd:2f:27:24:af:e2:43:2d:98:d6:3c:85:00:1e:01:4b:2e: ea:c1:59:17:7d:2d:07:fa:1c:c8:5c:a8:37:b3:38:a0:aa:b4: f0:49:9f:c5:75:6d:5f:66:8f:a0:1f:86:90:72:3b:61:37:c1: 38:b2:2c:7e:ff:d7:4f:2c:ab:73:64:17:03:d8:76:d8:c2:2d: b9:26:86:89:c7:0e:5d:58:bf:3d:55:a5:30:cd:08:58:ee:9c: da:5d:dc:7c:7e:27:40:e0:ee:bf:be:63:d4:29:3e:2f:2e:b0: cc:8e:94:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdq3D86L1WdyXAigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTFkZTZiMWMtNDAzOS00YjdkLWE3ZjQtNzBhMjQwZTA4OWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL3kwig7cLqO2aF8UhH9Po7Sof4s3ON/XU2/ HYSDvHyJvrLviDNdGfF/Ib8NvZWfyYvjhJPCIxHp80iSA+Mnu2usGU1nApNzKb3c 8O8xutylazk4e3whFn8xpP7Mk0kDQbr4AB+bZxUQ9oAOlSG4UWpEb67YtAYcg/US uUG0Gc5PphvwDdzQ+YO1Mb6jNCNOltMxIY0kZTGyYoO3fZ8Lu4uNyORehacwpJEF vNDI4OYhd/8+8Mhf/u5cjSEXhaYaLzbFO1dmVWdVzHHlOVLgMzXPX7UwpN+TM7WA 33W6rkjjgvm4JXSZmoGTntbUs/3mdq9wO7dE5s+pe0P9S9OoTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUEma+1rI1MzY2aNTg+AmvJp7BBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvOGRhMGIxNTMtNTYzYi0z YmYzLTk4ZTMtMTZmNWM0OGZjMmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbQdtpewzU3EIFuMqJiDAvzjybf0RrfPhjC7s/g/L6CRrPJDJcIxbF1 ZTfKdPtkwwWyn3SY19qHdKpN0y43UwHAfI0GpIzyew6JqXY2hGRhRisQdUONLwNF 7EzDyt4ISslWhnh5xm3RnQFc9S/iJNwDaqjI8aagJ93U+R/aUtN9VMPFN+Z9g8LU Mt5ZRFf574XNLyckr+JDLZjWPIUAHgFLLurBWRd9LQf6HMhcqDezOKCqtPBJn8V1 bV9mj6AfhpByO2E3wTiyLH7/108sq3NkFwPYdtjCLbkmhonHDl1Yvz1VpTDNCFju nNpd3Hx+J0Dg7r++Y9QpPi8usMyOlM8= -----END CERTIFICATE-----Generated at Sun Nov 15 11:59:42 2026 by rpki-client