$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa File: 34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa (raw, json) Hash identifier: RElhzdvZMTGfwQekkM8etRGyDLLvSP8fTGbKC+HLw9c= Subject key identifier: E9:B5:EC:F2:7B:B7:BF:83:A8:ED:F5:8B:A6:18:75:F5:C1:67:B3:2B Certificate issuer: /CN=43cfd68f-5452-437e-b80d-ac981dd1cf19 Certificate serial: 010D0C9F4328584F42781F0AC25270DB0179A880 Authority key identifier: 29:A4:87:A5:2C:40:C1:F8:27:FA:9B:9F:22:FE:5C:CF:9E:ED:1C:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 63208 IP address blocks: 66.33.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:1f:0a:c2:52:70:db:01:79:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43cfd68f-5452-437e-b80d-ac981dd1cf19 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=5664209f-54c2-4972-b0dc-fb2007177610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:13:29:c6:bc:e1:48:c6:66:34:26:6a:ab:cf: fc:81:a0:4b:fb:bb:76:17:d1:f1:b2:3f:b8:a6:a0: 3a:fc:65:61:1a:82:28:ca:b6:2e:5e:07:09:51:09: 1d:f7:c5:fc:c0:0d:e0:94:c2:2c:0b:a3:dc:c8:63: d9:b6:39:22:fd:af:f4:2a:56:1b:2a:c0:13:16:4f: b0:4d:52:a0:14:ab:70:72:dd:37:2a:67:e6:59:a6: b2:35:ac:42:20:84:4c:76:6c:c9:aa:db:1b:02:80: 16:c8:3d:8f:0e:53:1a:9b:3e:96:a4:95:bc:4a:4f: 93:ca:cb:ca:01:25:f5:05:21:a1:4c:94:51:0c:fb: 5e:d5:c7:66:5e:18:73:20:83:3e:72:7b:67:c7:35: 22:49:9f:0d:b5:1a:8d:9e:d7:6a:09:4d:06:34:63: a6:61:66:47:2e:82:a3:f1:95:14:03:f1:8f:a4:26: 8d:08:50:09:89:40:e1:56:a7:48:21:fb:be:20:d0: b0:77:87:b9:8b:03:92:18:b0:5a:5f:df:1f:f9:07: 16:77:c7:69:c5:0b:9f:c3:21:20:43:67:54:1f:69: 86:94:10:9a:d4:5d:c0:75:a7:ab:90:cb:42:f4:69: eb:67:70:7d:33:ea:97:5b:16:dd:3e:4d:72:05:8a: 15:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B5:EC:F2:7B:B7:BF:83:A8:ED:F5:8B:A6:18:75:F5:C1:67:B3:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.crl X509v3 Authority Key Identifier: keyid:29:A4:87:A5:2C:40:C1:F8:27:FA:9B:9F:22:FE:5C:CF:9E:ED:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer sbgp-ipAddrBlock: critical IPv4: 66.33.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:51:54:5f:88:78:84:9a:bf:40:f3:09:7c:c8:31:8b:a3:c3: 31:17:5f:3c:f9:f7:22:57:48:bb:6c:6a:58:7e:48:54:50:25: 11:15:dd:d5:87:c8:4e:74:36:9c:19:97:e7:36:b9:71:12:55: c9:62:44:37:3d:17:e5:01:69:f9:5d:6a:2d:95:88:c7:9b:94: 0d:38:a3:50:29:75:46:6f:f9:55:c8:53:30:98:9d:b1:ec:ad: de:df:d1:d4:a5:16:4f:8a:81:45:12:4a:a8:45:bd:29:cb:a3: e1:61:b4:42:b5:f3:22:62:ed:6c:5d:98:d6:8e:a0:f3:40:ab: 85:a7:f4:f2:6a:df:ba:c3:76:11:be:bd:73:97:de:b0:9e:a5: e5:a0:f1:0d:21:9a:41:33:06:d6:cf:a6:b1:f2:88:00:3a:7d: c6:76:a5:1d:a7:25:8f:10:4b:93:47:b4:f3:be:3f:79:e2:28: 76:76:20:93:a1:67:bd:bf:a5:b7:78:b1:19:33:de:e0:c8:84: 55:7d:d4:2d:44:38:65:28:f0:e6:d3:17:3c:b5:d3:cd:ac:63: 86:0e:6f:b1:24:6b:2d:ac:80:be:01:88:72:b0:50:5f:bb:59: 90:40:f0:cc:8e:73:6a:5f:c8:90:b3:10:c5:97:b3:4a:7d:ef: a7:4b:8d:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeB8KwlJw2wF5qIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNjZmQ2OGYtNTQ1Mi00MzdlLWI4MGQtYWM5ODFkZDFj ZjE5MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk NTY2NDIwOWYtNTRjMi00OTcyLWIwZGMtZmIyMDA3MTc3NjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxMpxrzhSMZmNCZqq8/8gaBL+7t2F9Hxsj+4 pqA6/GVhGoIoyrYuXgcJUQkd98X8wA3glMIsC6PcyGPZtjki/a/0KlYbKsATFk+w TVKgFKtwct03KmfmWaayNaxCIIRMdmzJqtsbAoAWyD2PDlMamz6WpJW8Sk+TysvK ASX1BSGhTJRRDPte1cdmXhhzIIM+cntnxzUiSZ8NtRqNntdqCU0GNGOmYWZHLoKj 8ZUUA/GPpCaNCFAJiUDhVqdIIfu+INCwd4e5iwOSGLBaX98f+QcWd8dpxQufwyEg Q2dUH2mGlBCa1F3AdaerkMtC9GnrZ3B9M+qXWxbdPk1yBYoVSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOm17PJ7t7+DqO31i6YYdfXBZ7MrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80M2Nm ZDY4Zi01NDUyLTQzN2UtYjgwZC1hYzk4MWRkMWNmMTkvMzRhNzJhMWUtMTI1Zi0z Nzc1LWE2YTItZDFiZDFhODAzYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDNjZmQ2OGYtNTQ1Mi00MzdlLWI4 MGQtYWM5ODFkZDFjZjE5LzQzY2ZkNjhmLTU0NTItNDM3ZS1iODBkLWFjOTgxZGQx Y2YxOS5jcmwwHwYDVR0jBBgwFoAUKaSHpSxAwfgn+pufIv5cz57tHB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80M2NmZDY4Zi01NDUyLTQzN2UtYjgwZC1hYzk4 MWRkMWNmMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiFfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1RVF+IeISav0DzCXzIMYujwzEXXzz59yJXSLtsalh+SFRQJREV3dWH yE50NpwZl+c2uXESVcliRDc9F+UBafldai2ViMeblA04o1ApdUZv+VXIUzCYnbHs rd7f0dSlFk+KgUUSSqhFvSnLo+FhtEK18yJi7WxdmNaOoPNAq4Wn9PJq37rDdhG+ vXOX3rCepeWg8Q0hmkEzBtbPprHyiAA6fcZ2pR2nJY8QS5NHtPO+P3niKHZ2IJOh Z72/pbd4sRkz3uDIhFV91C1EOGUo8ObTFzy1082sY4YOb7Ekay2sgL4BiHKwUF+7 WZBA8MyOc2pfyJCzEMWXs0p976dLjf4= -----END CERTIFICATE-----Generated at Fri Sep 25 18:03:44 2026 by rpki-client