$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/01025f72-50bb-3e93-bbd5-963f95ae70a7.roa File: 01025f72-50bb-3e93-bbd5-963f95ae70a7.roa (raw, json) Hash identifier: Gsh0Smik19LrbzMEAioj5pwbcQ34mUC+Ao6QAurHMho= Subject key identifier: 56:92:45:86:53:44:C2:CC:3D:83:C8:E7:42:3E:99:4B:D5:50:DE:EA Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584F4DA28F810A186BF607B75BA8 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/01025f72-50bb-3e93-bbd5-963f95ae70a7.roa Signing time: Sat 26 Sep 2026 13:00:12 +0000 ROA not before: Sat 26 Sep 2026 13:00:12 +0000 ROA not after: Fri 25 Dec 2026 14:00:12 +0000 asID: 7270 IP address blocks: 66.33.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4d:a2:8f:81:0a:18:6b:f6:07:b7:5b:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Sep 26 13:00:12 2026 GMT Not After : Dec 25 14:00:12 2026 GMT Subject: CN=0643e45a-8f57-4850-8e53-ada1c46d865f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:47:9d:88:8e:8e:85:30:0d:aa:a4:95:74:f3: 2d:54:2c:d7:d2:b3:c5:65:69:ba:de:79:9e:b8:a0: dd:ab:e2:8b:ac:05:f7:fb:b6:03:de:e2:b5:df:92: 96:b6:ed:d4:c2:e7:17:7d:e3:9e:a7:aa:d3:d9:d7: c6:63:cb:3f:dd:22:ca:58:9f:63:77:fe:0c:be:6a: 93:8a:e9:82:a4:7a:44:dc:08:49:43:52:f9:d5:ca: b2:ff:95:ac:5b:23:5b:ef:d6:f8:5d:1b:bd:d4:76: 0f:1c:8c:9a:bc:ae:4c:d7:61:bb:51:37:d5:67:78: d9:81:65:f6:a5:1a:4e:dc:d4:56:2a:7c:63:5d:bc: 84:60:3a:d8:ff:fc:03:95:4c:fb:ee:7c:87:0e:a3: 44:a6:3e:92:8c:d2:84:26:ee:32:2c:79:83:bc:16: 82:4d:14:bc:28:ba:94:cd:42:e7:a9:e6:93:41:cc: c1:b3:f7:c0:ff:1b:75:3e:92:6b:17:75:af:b6:c8: c9:3d:0a:4c:28:c1:13:26:bd:8a:7d:cd:12:6c:d4: ff:af:d0:79:af:05:4c:bc:ff:5c:a8:a5:d9:ac:ef: 9b:48:21:60:fc:ce:33:d4:1c:bb:b8:e4:53:9f:8a: 6f:a9:54:9c:51:40:5e:ee:fe:54:b5:cc:6c:4e:23: f8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:92:45:86:53:44:C2:CC:3D:83:C8:E7:42:3E:99:4B:D5:50:DE:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/01025f72-50bb-3e93-bbd5-963f95ae70a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 66.33.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:dc:3d:37:8e:19:a1:bc:e0:02:de:2b:fc:23:1e:39:12:65: d2:83:f5:50:80:6c:23:14:7f:21:d8:32:85:c7:21:d2:24:e1: de:20:6a:e6:9e:76:f7:50:d4:a8:86:54:07:30:84:94:b0:44: ed:2e:11:95:04:9f:ec:4b:00:e5:de:9d:19:1d:93:c4:63:36: db:9b:d6:55:97:0e:37:36:aa:7b:92:f0:15:97:44:f6:71:9a: 89:6c:9c:86:c8:cd:bc:e3:dd:23:c7:0a:41:18:a2:1b:d7:ab: de:fd:3d:13:2d:9c:e1:56:62:d2:de:84:42:b2:bc:20:f0:60: 8b:7d:52:10:60:4a:35:09:75:20:41:08:8b:05:30:bf:22:e5: d4:80:6d:c9:a9:63:f9:93:0a:cc:73:3f:4f:95:47:ad:59:a5: 8a:73:1d:3a:6f:ac:1c:29:8f:5e:3f:f1:be:2b:71:e0:20:db: 08:3d:06:7b:09:b2:d2:92:c9:1e:50:8d:aa:60:59:52:8a:a9: c5:13:02:e9:96:3a:0d:c7:9e:17:1a:c4:ff:ff:e8:93:1d:b0: 8e:09:e1:f5:01:51:ca:1e:d9:d8:a3:2b:55:d4:f3:63:d5:4d: bb:b8:5f:40:a5:fa:b0:41:c9:2b:13:b7:59:e4:7f:eb:64:b7: a8:63:72:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Noo+BChhr9ge3W6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDkyNjEzMDAxMloXDTI2MTIyNTE0MDAxMlowLzEtMCsGA1UEAxMk MDY0M2U0NWEtOGY1Ny00ODUwLThlNTMtYWRhMWM0NmQ4NjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUediI6OhTANqqSVdPMtVCzX0rPFZWm63nme uKDdq+KLrAX3+7YD3uK135KWtu3UwucXfeOep6rT2dfGY8s/3SLKWJ9jd/4MvmqT iumCpHpE3AhJQ1L51cqy/5WsWyNb79b4XRu91HYPHIyavK5M12G7UTfVZ3jZgWX2 pRpO3NRWKnxjXbyEYDrY//wDlUz77nyHDqNEpj6SjNKEJu4yLHmDvBaCTRS8KLqU zULnqeaTQczBs/fA/xt1PpJrF3WvtsjJPQpMKMETJr2Kfc0SbNT/r9B5rwVMvP9c qKXZrO+bSCFg/M4z1By7uORTn4pvqVScUUBe7v5UtcxsTiP4twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaSRYZTRMLMPYPI50I+mUvVUN7qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvMDEwMjVmNzItNTBiYi0z ZTkzLWJiZDUtOTYzZjk1YWU3MGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQiGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjcPTeOGaG84ALeK/wjHjkSZdKD9VCAbCMUfyHYMoXHIdIk4d4gauae dvdQ1KiGVAcwhJSwRO0uEZUEn+xLAOXenRkdk8RjNtub1lWXDjc2qnuS8BWXRPZx molsnIbIzbzj3SPHCkEYohvXq979PRMtnOFWYtLehEKyvCDwYIt9UhBgSjUJdSBB CIsFML8i5dSAbcmpY/mTCsxzP0+VR61ZpYpzHTpvrBwpj14/8b4rceAg2wg9BnsJ stKSyR5QjapgWVKKqcUTAumWOg3HnhcaxP//6JMdsI4J4fUBUcoe2dijK1XU82PV Tbu4X0Cl+rBBySsTt1nkf+tkt6hjcqY= -----END CERTIFICATE-----Generated at Tue Sep 29 00:45:38 2026 by rpki-client