$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5bcb6e5a-327c-3d1b-9c7c-09c749af2e29.roa File: 5bcb6e5a-327c-3d1b-9c7c-09c749af2e29.roa (raw, json) Hash identifier: w6zeQS0VKP6g8kgix3xLh+zN1CiiVY4/Kg4URjV8H08= Subject key identifier: E7:3F:8D:53:C3:4E:C7:D9:DB:69:9D:8C:C5:13:70:12:43:F4:6B:6F Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584F473E84C5C01583DC0AA37580 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5bcb6e5a-327c-3d1b-9c7c-09c749af2e29.roa Signing time: Thu 24 Sep 2026 06:03:49 +0000 ROA not before: Thu 24 Sep 2026 06:03:49 +0000 ROA not after: Wed 23 Dec 2026 07:03:49 +0000 asID: 7270 IP address blocks: 66.33.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:47:3e:84:c5:c0:15:83:dc:0a:a3:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Sep 24 06:03:49 2026 GMT Not After : Dec 23 07:03:49 2026 GMT Subject: CN=227971d3-2bec-4a07-a6b9-4178a5e79c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:79:07:13:99:01:61:3a:ef:49:5d:6b:d1:8b: 6d:cd:4b:66:6d:e0:e7:da:ff:41:8e:bc:6d:b5:c4: 37:9e:8a:7c:4d:62:9d:fe:47:d2:dc:c4:b9:f5:92: 91:d8:20:0b:61:56:c9:67:88:dd:95:fa:35:6f:f0: 0f:52:23:39:a6:5c:8c:e8:4d:cf:04:d3:f4:d9:1c: 35:2a:ce:4d:02:e1:fc:3b:32:05:db:4b:5c:4f:cc: cd:21:b1:db:7f:76:46:fc:1a:5b:93:5a:ff:2f:81: 4e:8a:36:f3:70:bc:50:e8:15:6c:74:f4:fd:b2:82: 59:8b:1a:18:2b:75:41:99:f6:c9:80:c2:d3:f0:d8: f4:bf:7d:d4:dd:28:78:9c:d1:cf:a3:ec:b0:e8:61: 06:c6:7c:4a:81:d5:6b:00:60:86:bc:f8:60:ca:1f: e6:c7:5f:4e:30:27:8b:49:81:70:51:e3:47:e9:06: 4b:41:6c:eb:6c:c3:e0:62:07:93:4b:12:76:ac:0e: 29:3e:ff:4a:2c:d1:9e:58:c4:43:16:30:ba:99:0b: fa:00:20:f7:5a:9c:4b:90:f8:8f:f7:6b:b2:99:9a: fb:db:01:cd:1c:26:ef:c7:fa:b5:4d:9a:24:0f:86: 89:14:48:5f:7a:92:09:f4:bb:52:de:f8:f3:27:3e: 93:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3F:8D:53:C3:4E:C7:D9:DB:69:9D:8C:C5:13:70:12:43:F4:6B:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5bcb6e5a-327c-3d1b-9c7c-09c749af2e29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 66.33.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:56:1e:61:dd:7e:89:ea:09:3e:10:ab:8b:bb:9e:ae:9b:fb: 2b:8d:82:b2:cb:c4:ef:f3:0b:1a:52:0e:5a:37:56:b1:96:b5: 50:bf:77:18:f5:26:de:22:8f:92:45:62:d5:b0:70:99:98:6a: 53:b6:2f:0d:f9:53:6a:1d:2b:f5:1b:b0:fe:42:74:45:f2:c9: 8d:61:1d:7f:e7:e4:b8:cd:a1:10:21:c9:cc:8b:65:74:c1:7f: 1d:5e:2e:8b:0a:4c:a5:fc:ad:5e:08:d8:fe:f3:c9:2d:51:16: f1:8b:bc:20:9f:aa:6a:38:12:7c:31:82:09:9b:d9:cb:d8:a4: b4:01:05:ac:1e:2a:c1:15:4f:f5:82:15:f3:da:98:6a:aa:a8: 81:d4:4e:34:24:7c:14:86:ea:8c:16:ca:7d:0a:03:e5:50:40: 29:a1:15:71:34:99:ad:19:77:2f:8c:66:61:c8:41:38:3c:72: f3:7e:d6:c6:f1:d6:90:d3:c5:a0:8e:8b:05:48:0d:a3:19:5f: a4:09:e2:d7:df:1b:8d:31:1e:d7:3f:19:12:b8:38:35:2c:9e: 02:b8:74:49:41:c0:4b:b5:5f:fd:5d:0c:3a:dd:13:41:98:da: 90:af:ce:7f:ca:96:c0:34:b7:64:81:49:1f:76:a4:ac:e7:75: 13:b6:3a:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9HPoTFwBWD3AqjdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDkyNDA2MDM0OVoXDTI2MTIyMzA3MDM0OVowLzEtMCsGA1UEAxMk MjI3OTcxZDMtMmJlYy00YTA3LWE2YjktNDE3OGE1ZTc5Yzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnkHE5kBYTrvSV1r0YttzUtmbeDn2v9Bjrxt tcQ3nop8TWKd/kfS3MS59ZKR2CALYVbJZ4jdlfo1b/APUiM5plyM6E3PBNP02Rw1 Ks5NAuH8OzIF20tcT8zNIbHbf3ZG/Bpbk1r/L4FOijbzcLxQ6BVsdPT9soJZixoY K3VBmfbJgMLT8Nj0v33U3Sh4nNHPo+yw6GEGxnxKgdVrAGCGvPhgyh/mx19OMCeL SYFwUeNH6QZLQWzrbMPgYgeTSxJ2rA4pPv9KLNGeWMRDFjC6mQv6ACD3WpxLkPiP 92uymZr72wHNHCbvx/q1TZokD4aJFEhfepIJ9LtS3vjzJz6T7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOc/jVPDTsfZ22mdjMUTcBJD9GtvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvNWJjYjZlNWEtMzI3Yy0z ZDFiLTljN2MtMDljNzQ5YWYyZTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiGBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1WHmHdfonqCT4Qq4u7nq6b+yuNgrLLxO/zCxpSDlo3VrGWtVC/dxj1 Jt4ij5JFYtWwcJmYalO2Lw35U2odK/UbsP5CdEXyyY1hHX/n5LjNoRAhycyLZXTB fx1eLosKTKX8rV4I2P7zyS1RFvGLvCCfqmo4Enwxggmb2cvYpLQBBaweKsEVT/WC FfPamGqqqIHUTjQkfBSG6owWyn0KA+VQQCmhFXE0ma0Zdy+MZmHIQTg8cvN+1sbx 1pDTxaCOiwVIDaMZX6QJ4tffG40xHtc/GRK4ODUsngK4dElBwEu1X/1dDDrdE0GY 2pCvzn/KlsA0t2SBSR92pKzndRO2Ot8= -----END CERTIFICATE-----Generated at Tue Sep 29 00:45:40 2026 by rpki-client