$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/56d249be-a08c-33dd-bd90-8fadbe2c3147.roa File: 56d249be-a08c-33dd-bd90-8fadbe2c3147.roa (raw, json) Hash identifier: kd0yy/ZwcDB7FsIPaoyPaPBBmwmac4Ut1fT3nl8Iw98= Subject key identifier: D4:65:C3:AF:AE:85:7B:92:61:EB:52:93:B9:C1:05:D7:A2:E3:44:D6 Certificate issuer: /CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f Certificate serial: 010D0C9F4328584F4986CD9452C2C527DE1EF400 Authority key identifier: E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/56d249be-a08c-33dd-bd90-8fadbe2c3147.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396168 IP address blocks: 66.33.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:cd:94:52:c2:c5:27:de:1e:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7f1628a7-9b36-45f3-8410-11282f99dc5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e1:54:8a:3e:b4:6b:ac:75:47:fc:38:84:4d: 5c:02:d8:01:13:b9:01:9d:be:33:90:e7:55:7e:bd: fa:ee:ff:d4:19:fa:a3:34:43:71:47:c4:c7:fa:be: 8c:d9:f1:db:48:cf:ce:43:90:47:17:08:f1:5d:88: b3:1a:22:da:74:0f:9a:ec:3d:b9:bb:f4:ef:3a:3e: a3:a7:60:e8:be:52:a8:fb:77:53:52:f1:47:12:0e: 53:d2:56:0c:f1:09:be:8b:4b:18:39:98:2d:6e:c6: fc:fc:e0:c7:a9:c6:c3:e9:ea:c1:a0:0c:43:b0:0d: a9:8b:a9:b4:52:92:5b:9e:1a:14:b9:62:d9:c9:90: f5:21:88:dc:7d:12:e5:78:a0:dd:c9:7c:5c:54:f1: e0:36:4c:29:27:2f:96:66:51:f2:77:78:f0:67:da: 40:0c:61:59:31:dc:0a:1b:f4:2c:32:c0:12:15:b1: 19:a6:d1:67:82:17:6b:0a:e4:ad:80:a7:20:84:cf: fb:fc:1e:49:c4:77:f6:a0:de:5f:c0:44:06:1e:96: 65:f1:97:41:36:30:3d:11:02:96:60:8b:a0:67:32: 45:01:26:30:2b:51:3a:3f:dc:9c:e0:44:66:4e:28: fa:00:e3:52:b9:7a:5f:7c:d5:3f:7a:0d:4b:a5:53: 6d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:65:C3:AF:AE:85:7B:92:61:EB:52:93:B9:C1:05:D7:A2:E3:44:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/56d249be-a08c-33dd-bd90-8fadbe2c3147.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.crl X509v3 Authority Key Identifier: keyid:E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer sbgp-ipAddrBlock: critical IPv4: 66.33.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:5e:c3:17:db:23:13:8f:f6:c4:de:0d:61:4e:b8:35:be:0a: 5c:2b:8f:33:a5:d5:71:81:36:39:6d:35:7e:26:c1:bd:d3:12: 5c:fb:c4:d5:0b:33:c3:e6:59:10:0f:cb:25:2a:43:11:de:3f: ee:28:80:03:95:39:17:7e:a4:c5:c5:dc:90:38:a8:5d:61:36: ed:72:b4:f5:5a:5c:96:db:00:19:b8:60:6c:f8:d5:93:f3:54: 83:6f:de:7b:da:7e:3b:66:55:c6:f9:03:27:a9:c0:f7:a3:f1: fe:7a:8b:a4:51:22:a7:4d:b9:2a:39:96:e3:d2:75:81:0c:e5: b9:5d:74:c6:86:08:6a:10:57:0f:95:a0:40:7c:17:e3:7f:6a: 66:35:92:79:94:5f:9c:11:f2:cc:bb:9c:45:ad:47:ee:4f:bd: e4:e7:f7:e8:9d:b3:aa:6e:21:4e:6a:e6:25:92:9b:88:a5:40: ac:6e:e6:04:6f:78:b8:0a:21:f1:ec:27:ac:f0:2c:cb:fd:72: 88:32:4a:d6:9e:89:ce:bd:06:e2:28:32:9c:9d:07:45:30:c0: 7e:7b:61:ee:ec:28:f0:a6:8a:44:2c:64:57:56:0e:d8:99:7e: 75:8b:e7:7c:1d:cc:dc:c5:d9:9c:45:99:4d:fa:44:64:be:8e: 9c:42:09:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhs2UUsLFJ94e9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2N2EzNzQtZGJkMy00YmZhLWI4MmMtNmRiZmQ2NGU1 NzhmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2YxNjI4YTctOWIzNi00NWYzLTg0MTAtMTEyODJmOTlkYzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOFUij60a6x1R/w4hE1cAtgBE7kBnb4zkOdV fr367v/UGfqjNENxR8TH+r6M2fHbSM/OQ5BHFwjxXYizGiLadA+a7D25u/TvOj6j p2DovlKo+3dTUvFHEg5T0lYM8Qm+i0sYOZgtbsb8/ODHqcbD6erBoAxDsA2pi6m0 UpJbnhoUuWLZyZD1IYjcfRLleKDdyXxcVPHgNkwpJy+WZlHyd3jwZ9pADGFZMdwK G/QsMsASFbEZptFnghdrCuStgKcghM/7/B5JxHf2oN5fwEQGHpZl8ZdBNjA9EQKW YIugZzJFASYwK1E6P9yc4ERmTij6AONSuXpffNU/eg1LpVNtnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRlw6+uhXuSYetSk7nBBdei40TWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZTY3 YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJmZDY0ZTU3OGYvNTZkMjQ5YmUtYTA4Yy0z M2RkLWJkOTAtOGZhZGJlMmMzMTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmU2N2EzNzQtZGJkMy00YmZhLWI4 MmMtNmRiZmQ2NGU1NzhmLzJlNjdhMzc0LWRiZDMtNGJmYS1iODJjLTZkYmZkNjRl NTc4Zi5jcmwwHwYDVR0jBBgwFoAU4EaVkSgTL9WOY7iPKkNSxMOhOY4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZTY3YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJm ZDY0ZTU3OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiE7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxewxfbIxOP9sTeDWFOuDW+ClwrjzOl1XGBNjltNX4mwb3TElz7xNUL M8PmWRAPyyUqQxHeP+4ogAOVORd+pMXF3JA4qF1hNu1ytPVaXJbbABm4YGz41ZPz VINv3nvafjtmVcb5AyepwPej8f56i6RRIqdNuSo5luPSdYEM5blddMaGCGoQVw+V oEB8F+N/amY1knmUX5wR8sy7nEWtR+5PveTn9+ids6puIU5q5iWSm4ilQKxu5gRv eLgKIfHsJ6zwLMv9cogyStaeic69BuIoMpydB0UwwH57Ye7sKPCmikQsZFdWDtiZ fnWL53wdzNzF2ZxFmU36RGS+jpxCCZo= -----END CERTIFICATE-----Generated at Sat Sep 26 05:03:46 2026 by rpki-client