$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3ca72b4e-3888-32d6-99a0-79251d7b40e0.roa File: 3ca72b4e-3888-32d6-99a0-79251d7b40e0.roa (raw, json) Hash identifier: /m3OifiVU63pCKxoyukznkZnMy2FZ+lDZ1XQOQHnGts= Subject key identifier: 5F:C2:8E:63:9C:49:F9:83:40:3A:88:C9:92:C4:80:8D:06:80:EB:77 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584F47441C2893D161F22F042E30 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3ca72b4e-3888-32d6-99a0-79251d7b40e0.roa Signing time: Thu 24 Sep 2026 06:15:05 +0000 ROA not before: Thu 24 Sep 2026 06:15:05 +0000 ROA not after: Wed 23 Dec 2026 07:15:05 +0000 asID: 7270 IP address blocks: 66.33.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:47:44:1c:28:93:d1:61:f2:2f:04:2e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Sep 24 06:15:05 2026 GMT Not After : Dec 23 07:15:05 2026 GMT Subject: CN=dff8b37e-3d16-439c-88e6-98cb0faa3cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:80:3c:9e:50:84:19:ef:a5:af:e6:07:53:22: 23:5c:ad:30:66:26:5f:e6:11:bb:f9:55:ed:bd:27: 47:60:8b:0e:63:43:68:8a:c6:4c:a3:29:ac:37:36: 5c:ad:87:92:03:9e:28:66:8f:82:b2:e1:8f:fe:49: d3:6f:51:77:98:6f:fe:07:81:a7:fd:35:61:b9:91: ff:11:f7:98:cd:37:f3:5a:a2:67:ec:d4:24:63:7e: 18:00:f2:7e:4b:8d:75:07:5c:64:4e:e5:23:bf:a1: d3:ce:3b:e3:e2:76:26:d8:b8:6a:0d:60:f6:b8:f2: 87:f9:2a:25:fb:dc:7e:0c:c8:d3:9e:5f:03:c5:49: d2:92:dd:9d:28:22:32:76:1f:a7:a9:68:be:a9:48: 57:71:61:e3:2f:36:8b:22:f6:57:e4:9a:06:9f:bb: 3f:38:ad:7e:9b:1e:f1:2f:3f:43:15:d4:a4:39:6b: 3c:a5:a7:7f:89:4a:af:9a:ab:c1:2e:b8:0c:2c:43: fe:0f:02:e8:b7:8d:9f:76:55:89:af:93:a8:35:d0: e6:98:fd:68:20:6b:6a:ae:1f:0d:fe:f7:0b:c9:fd: 97:f7:85:d4:e4:e7:4f:fb:fe:06:c4:a4:cd:70:41: ce:8e:cb:be:a4:cb:60:72:a8:ce:7a:06:0d:f8:35: 05:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C2:8E:63:9C:49:F9:83:40:3A:88:C9:92:C4:80:8D:06:80:EB:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3ca72b4e-3888-32d6-99a0-79251d7b40e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 66.33.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:a9:37:95:54:ca:90:d4:f2:88:96:6f:3a:96:43:24:84:29: 09:3f:91:dc:68:6c:ed:62:f0:50:7c:d4:54:69:08:7d:d2:5f: 3e:08:7c:a1:3b:fe:f5:ff:93:fa:a6:2f:81:dd:a5:7e:6e:61: db:7a:25:7b:b3:8e:7f:ab:8c:1d:6f:30:59:8b:1a:82:03:cb: 09:aa:1c:02:8c:8a:db:c6:31:a2:ca:00:f8:07:de:de:54:5a: a6:aa:58:8a:0b:66:f5:75:aa:4f:9e:83:49:00:67:b1:00:9e: 3f:0c:90:cd:e6:59:cc:4e:5c:af:06:29:d9:b3:9a:7f:53:3b: 5f:09:4a:59:3d:bc:c6:22:bf:1d:8d:2a:f8:a6:6a:d2:de:a1: 62:d3:7d:a0:7c:60:74:64:a9:e5:f6:02:74:c2:b8:26:00:06: c2:24:d1:2b:29:1e:a4:4c:22:0a:ed:87:58:e4:7a:5b:f6:3a: 43:75:08:54:fc:49:cb:0f:57:8c:70:c6:84:8c:43:b9:b3:3c: 72:93:45:86:a0:39:95:6e:1d:d6:b0:38:46:ac:6b:33:98:bf: 4f:34:6c:e7:15:07:38:6a:18:8e:61:ce:a5:b7:45:2a:a9:b9: 8b:e8:ab:c4:4b:69:99:b7:df:1b:4c:bf:8a:5f:a5:fa:de:52: 49:51:04:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9HRBwok9Fh8i8ELjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDkyNDA2MTUwNVoXDTI2MTIyMzA3MTUwNVowLzEtMCsGA1UEAxMk ZGZmOGIzN2UtM2QxNi00MzljLTg4ZTYtOThjYjBmYWEzY2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYA8nlCEGe+lr+YHUyIjXK0wZiZf5hG7+VXt vSdHYIsOY0NoisZMoymsNzZcrYeSA54oZo+CsuGP/knTb1F3mG/+B4Gn/TVhuZH/ EfeYzTfzWqJn7NQkY34YAPJ+S411B1xkTuUjv6HTzjvj4nYm2LhqDWD2uPKH+Sol +9x+DMjTnl8DxUnSkt2dKCIydh+nqWi+qUhXcWHjLzaLIvZX5JoGn7s/OK1+mx7x Lz9DFdSkOWs8pad/iUqvmqvBLrgMLEP+DwLot42fdlWJr5OoNdDmmP1oIGtqrh8N /vcLyf2X94XU5OdP+/4GxKTNcEHOjsu+pMtgcqjOegYN+DUFkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/CjmOcSfmDQDqIyZLEgI0GgOt3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvM2NhNzJiNGUtMzg4OC0z MmQ2LTk5YTAtNzkyNTFkN2I0MGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqpN5VUypDU8oiWbzqWQySEKQk/kdxobO1i8FB81FRpCH3SXz4IfKE7 /vX/k/qmL4HdpX5uYdt6JXuzjn+rjB1vMFmLGoIDywmqHAKMitvGMaLKAPgH3t5U WqaqWIoLZvV1qk+eg0kAZ7EAnj8MkM3mWcxOXK8GKdmzmn9TO18JSlk9vMYivx2N KvimatLeoWLTfaB8YHRkqeX2AnTCuCYABsIk0SspHqRMIgrth1jkelv2OkN1CFT8 ScsPV4xwxoSMQ7mzPHKTRYagOZVuHdawOEasazOYv080bOcVBzhqGI5hzqW3RSqp uYvoq8RLaZm33xtMv4pfpfreUklRBPw= -----END CERTIFICATE-----Generated at Tue Sep 29 13:19:25 2026 by rpki-client