$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/aaf36ef3-323d-3ef3-ac8f-e756d1eed2e0.roa File: aaf36ef3-323d-3ef3-ac8f-e756d1eed2e0.roa (raw, json) Hash identifier: hQNu6s7xCB1g+C5q3fneseeVCRa+kWWYleahsRfFjI0= Subject key identifier: A4:FB:BB:C5:D3:E9:BC:37:B3:73:B7:2F:20:53:87:00:E1:38:34:04 Certificate issuer: /CN=a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3 Certificate serial: 010D0C9F4328584E97B5078557D9EEBBC130D080 Authority key identifier: 99:A5:47:B0:4B:E2:1A:51:D0:C3:31:B0:5C:47:4D:9A:10:8A:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/aaf36ef3-323d-3ef3-ac8f-e756d1eed2e0.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 30247 IP address blocks: 66.33.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:07:85:57:d9:ee:bb:c1:30:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3 Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=62a47778-6d04-4caa-af64-a8d77c6df086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:89:a1:cb:8f:f9:4d:19:2b:39:0f:47:fc:5a: 78:e6:c9:50:d0:18:f3:62:38:16:33:e1:9a:ab:ad: 81:c6:3b:91:1c:c9:cb:38:6f:cb:53:82:7d:d2:4a: fe:92:62:6b:a3:1a:c3:63:df:94:e5:be:1f:bb:50: 42:d0:e1:66:5d:95:3d:5a:cb:6c:f8:4f:4a:f8:a4: 01:d2:43:f0:ba:10:46:d0:5e:66:4c:c3:aa:88:12: ea:c2:65:21:d0:92:b4:b7:ed:a5:93:17:66:8d:c6: ea:99:14:46:1a:4e:c6:3d:45:9d:82:6b:63:a0:37: 9b:f3:2e:da:56:59:9a:64:c9:a3:dc:0a:94:4c:60: 0f:bb:60:68:68:88:e2:b5:16:74:67:a8:aa:77:01: 69:5b:09:8f:40:28:72:d8:2a:0a:ba:27:12:54:28: b8:3c:84:5e:23:66:88:76:94:4a:7d:ad:b2:bc:2a: e1:53:84:0a:18:2b:3b:d5:1f:34:e0:35:f1:07:f1: 6e:84:d5:64:d7:22:69:5e:1f:e6:87:c9:04:2a:23: 53:37:a4:a2:02:80:4c:db:5d:a5:54:66:7e:c3:43: 72:7a:3f:79:d0:c3:e6:08:9a:5b:00:98:fc:3b:1a: de:18:73:7e:6a:56:05:67:ee:9c:36:fd:ed:34:c1: 0e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FB:BB:C5:D3:E9:BC:37:B3:73:B7:2F:20:53:87:00:E1:38:34:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/aaf36ef3-323d-3ef3-ac8f-e756d1eed2e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.crl X509v3 Authority Key Identifier: keyid:99:A5:47:B0:4B:E2:1A:51:D0:C3:31:B0:5C:47:4D:9A:10:8A:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.cer sbgp-ipAddrBlock: critical IPv4: 66.33.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:42:15:95:54:3c:80:9d:6a:a7:39:e7:6c:93:da:da:e1:33: 2c:39:ca:5b:db:6a:31:ba:94:1c:e1:ae:95:d3:0b:5f:c1:3a: 12:c7:74:13:33:10:3f:8f:5c:2b:d7:cc:8b:1f:c3:35:dc:eb: df:6f:09:be:da:70:ce:32:81:4a:92:4f:60:a5:95:d2:44:53: a2:3c:75:21:98:08:84:78:ea:78:8d:2d:9e:bf:45:c1:ee:4d: 10:da:ab:4a:0d:20:a6:fc:a7:af:05:c2:6d:9c:4a:8d:b9:bc: 4a:73:98:a4:9c:b0:e3:1f:be:c1:59:a5:64:cc:ef:62:c8:99: 05:94:28:0f:99:df:75:c8:af:3c:8d:93:1d:c5:36:57:73:5c: b6:4a:36:42:51:62:c0:6a:01:cb:86:ca:09:fe:08:89:cf:7b: 72:11:15:cc:7b:8a:9a:9d:d2:fa:9d:28:29:ba:40:15:2d:63: 77:10:3f:98:21:8d:7d:8a:7e:78:42:90:6d:6c:d3:b0:43:be: 40:ea:1f:aa:db:04:1e:a3:14:e7:a7:d0:37:18:03:dd:c9:35: 69:f4:37:0b:be:9a:c2:7b:2e:e1:b2:33:f2:d4:86:8e:1d:0b: 91:02:c9:7b:11:2c:00:31:49:56:64:0e:e9:0b:cf:ee:e8:0c: dd:9a:32:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQeFV9nuu8Ew0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVlMGQ1OWItYzAyZi00OWNiLThmMTktY2MxMGYwN2Zj NWQzMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk NjJhNDc3NzgtNmQwNC00Y2FhLWFmNjQtYThkNzdjNmRmMDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmImhy4/5TRkrOQ9H/Fp45slQ0BjzYjgWM+Ga q62BxjuRHMnLOG/LU4J90kr+kmJroxrDY9+U5b4fu1BC0OFmXZU9Wsts+E9K+KQB 0kPwuhBG0F5mTMOqiBLqwmUh0JK0t+2lkxdmjcbqmRRGGk7GPUWdgmtjoDeb8y7a VlmaZMmj3AqUTGAPu2BoaIjitRZ0Z6iqdwFpWwmPQChy2CoKuicSVCi4PIReI2aI dpRKfa2yvCrhU4QKGCs71R804DXxB/FuhNVk1yJpXh/mh8kEKiNTN6SiAoBM212l VGZ+w0Nyej950MPmCJpbAJj8OxreGHN+alYFZ+6cNv3tNMEOUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKT7u8XT6bw3s3O3LyBThwDhODQEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNWUw ZDU5Yi1jMDJmLTQ5Y2ItOGYxOS1jYzEwZjA3ZmM1ZDMvYWFmMzZlZjMtMzIzZC0z ZWYzLWFjOGYtZTc1NmQxZWVkMmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTVlMGQ1OWItYzAyZi00OWNiLThm MTktY2MxMGYwN2ZjNWQzL2E1ZTBkNTliLWMwMmYtNDljYi04ZjE5LWNjMTBmMDdm YzVkMy5jcmwwHwYDVR0jBBgwFoAUmaVHsEviGlHQwzGwXEdNmhCKcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNWUwZDU5Yi1jMDJmLTQ5Y2ItOGYxOS1jYzEw ZjA3ZmM1ZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQiEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVCFZVUPICdaqc552yT2trhMyw5ylvbajG6lBzhrpXTC1/BOhLHdBMz ED+PXCvXzIsfwzXc699vCb7acM4ygUqST2ClldJEU6I8dSGYCIR46niNLZ6/RcHu TRDaq0oNIKb8p68Fwm2cSo25vEpzmKScsOMfvsFZpWTM72LImQWUKA+Z33XIrzyN kx3FNldzXLZKNkJRYsBqAcuGygn+CInPe3IRFcx7ipqd0vqdKCm6QBUtY3cQP5gh jX2KfnhCkG1s07BDvkDqH6rbBB6jFOen0DcYA93JNWn0Nwu+msJ7LuGyM/LUho4d C5ECyXsRLAAxSVZkDukLz+7oDN2aMoc= -----END CERTIFICATE-----Generated at Fri Jul 24 03:05:04 2026 by rpki-client