$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa File: 34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa (raw, json) Hash identifier: l52VdPzX/wqBn6uyYZu54vNwwhLOIsf2Y/ucJLt4AcM= Subject key identifier: 03:43:00:78:14:07:DB:C3:83:C4:A6:6F:F1:B8:82:B8:5E:2B:AA:46 Certificate issuer: /CN=43cfd68f-5452-437e-b80d-ac981dd1cf19 Certificate serial: 010D0C9F4328584DBFD07E33A5707AA6E77A7700 Authority key identifier: 29:A4:87:A5:2C:40:C1:F8:27:FA:9B:9F:22:FE:5C:CF:9E:ED:1C:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 63208 IP address blocks: 66.33.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:7e:33:a5:70:7a:a6:e7:7a:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43cfd68f-5452-437e-b80d-ac981dd1cf19 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=f7a5be2e-9457-4fd3-934f-90b8fc47dc6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:68:c5:57:47:ba:16:48:ab:60:5b:61:40:89: 74:1a:71:cc:13:74:22:16:41:e4:b8:cb:41:b4:ab: 3e:d6:b0:e7:24:ce:a7:02:0c:dc:ed:fa:ab:07:e3: 60:75:96:2b:af:b3:9d:a4:8e:5d:ef:f7:a4:5b:50: 9c:45:87:d8:12:96:e1:56:a1:4d:b7:04:7e:43:b5: 4e:0d:d3:a7:17:e0:7a:81:3c:49:99:3d:da:cb:d4: 4a:59:14:74:ff:91:06:d6:7a:2d:8b:66:42:13:63: f5:08:21:80:b1:4a:58:8a:57:11:a0:cd:8a:4c:ff: 58:72:d5:df:a0:de:18:b0:08:79:8c:61:2d:fd:3f: de:64:3f:a9:ff:25:c0:cf:15:38:ed:65:5e:f5:98: 24:6f:7b:a7:74:bd:3b:a6:70:9f:d3:46:da:6a:04: 89:02:28:26:f4:4e:f7:69:fa:1b:ef:d4:65:f7:01: 67:db:54:90:8a:46:1b:37:4e:46:24:ca:4f:1f:b5: e4:cd:28:82:d3:d3:f9:7d:fb:d2:28:ca:f8:0c:0d: 8a:df:48:95:4b:9f:db:2a:42:95:7e:8f:62:90:6b: 20:9a:aa:a6:8e:ff:62:c1:a9:a4:8b:91:f5:62:37: d7:ad:73:fa:aa:79:b0:d8:20:a9:5b:15:50:8e:c8: 88:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:43:00:78:14:07:DB:C3:83:C4:A6:6F:F1:B8:82:B8:5E:2B:AA:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.crl X509v3 Authority Key Identifier: keyid:29:A4:87:A5:2C:40:C1:F8:27:FA:9B:9F:22:FE:5C:CF:9E:ED:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer sbgp-ipAddrBlock: critical IPv4: 66.33.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:fc:c3:bc:c8:5f:f9:21:32:8e:df:86:2e:8f:45:d6:38:f4: 4a:22:b0:f1:b5:3d:de:6a:3d:d5:68:2a:53:f0:b4:71:ed:98: 62:e5:8a:44:4e:04:cb:45:bd:9c:fc:b1:56:5f:7f:1a:66:6d: d5:2b:b8:2c:5a:66:08:2a:9a:86:b3:f9:e4:a6:23:52:a6:32: bb:33:d4:9f:fb:50:75:92:5a:a7:3b:a2:3a:90:61:9f:19:a4: cf:2e:0a:c1:fc:25:f3:8d:69:d5:d3:77:de:1d:74:94:aa:20: d2:c2:c0:29:49:d5:82:18:a0:23:78:b8:18:ff:13:e4:5b:bf: 4f:12:de:26:94:8c:cd:bb:5d:0f:14:99:ac:d4:47:f2:cb:14: 0e:62:b4:96:96:70:2e:d9:e3:0d:25:02:03:70:7d:68:49:ab: f8:75:67:5b:5f:a4:58:d6:a8:33:8d:e6:66:8c:11:97:ec:29: df:ad:d9:cb:23:ff:e9:47:89:09:76:2d:19:68:5a:ed:c4:b2: e7:3a:c1:0d:94:66:62:4e:ae:da:11:bb:20:3c:f2:5f:9b:ea: 91:00:84:05:8a:20:80:6c:7d:bb:1d:e7:be:95:20:71:de:db: ea:12:d7:08:2f:b9:9f:1f:53:26:d2:23:e2:4b:49:6d:b6:ea: 3e:35:6b:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0H4zpXB6pud6dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNjZmQ2OGYtNTQ1Mi00MzdlLWI4MGQtYWM5ODFkZDFj ZjE5MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk ZjdhNWJlMmUtOTQ1Ny00ZmQzLTkzNGYtOTBiOGZjNDdkYzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGjFV0e6FkirYFthQIl0GnHME3QiFkHkuMtB tKs+1rDnJM6nAgzc7fqrB+NgdZYrr7OdpI5d7/ekW1CcRYfYEpbhVqFNtwR+Q7VO DdOnF+B6gTxJmT3ay9RKWRR0/5EG1noti2ZCE2P1CCGAsUpYilcRoM2KTP9YctXf oN4YsAh5jGEt/T/eZD+p/yXAzxU47WVe9Zgkb3undL07pnCf00baagSJAigm9E73 afob79Rl9wFn21SQikYbN05GJMpPH7XkzSiC09P5ffvSKMr4DA2K30iVS5/bKkKV fo9ikGsgmqqmjv9iwamki5H1YjfXrXP6qnmw2CCpWxVQjsiIdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANDAHgUB9vDg8Smb/G4grheK6pGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80M2Nm ZDY4Zi01NDUyLTQzN2UtYjgwZC1hYzk4MWRkMWNmMTkvMzRhNzJhMWUtMTI1Zi0z Nzc1LWE2YTItZDFiZDFhODAzYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDNjZmQ2OGYtNTQ1Mi00MzdlLWI4 MGQtYWM5ODFkZDFjZjE5LzQzY2ZkNjhmLTU0NTItNDM3ZS1iODBkLWFjOTgxZGQx Y2YxOS5jcmwwHwYDVR0jBBgwFoAUKaSHpSxAwfgn+pufIv5cz57tHB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80M2NmZDY4Zi01NDUyLTQzN2UtYjgwZC1hYzk4 MWRkMWNmMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiFfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE78w7zIX/khMo7fhi6PRdY49EoisPG1Pd5qPdVoKlPwtHHtmGLlikRO BMtFvZz8sVZffxpmbdUruCxaZggqmoaz+eSmI1KmMrsz1J/7UHWSWqc7ojqQYZ8Z pM8uCsH8JfONadXTd94ddJSqINLCwClJ1YIYoCN4uBj/E+Rbv08S3iaUjM27XQ8U mazUR/LLFA5itJaWcC7Z4w0lAgNwfWhJq/h1Z1tfpFjWqDON5maMEZfsKd+t2csj /+lHiQl2LRloWu3Esuc6wQ2UZmJOrtoRuyA88l+b6pEAhAWKIIBsfbsd576VIHHe 2+oS1wgvuZ8fUybSI+JLSW226j41a+M= -----END CERTIFICATE-----Generated at Wed May 13 09:14:28 2026 by rpki-client