$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/69130e6d-e265-3bdc-90ad-84578af2cc98.roa File: 69130e6d-e265-3bdc-90ad-84578af2cc98.roa (raw, json) Hash identifier: Hd+nipcuAKKKrah+ODeHGLW0oir4ZTVjHPwtSh5VJUE= Subject key identifier: BE:68:B4:BF:8B:E1:BF:12:FC:0A:34:18:D3:3F:30:39:C3:70:68:58 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584F4740A4526E838F00894F0000 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/69130e6d-e265-3bdc-90ad-84578af2cc98.roa Signing time: Thu 24 Sep 2026 06:08:05 +0000 ROA not before: Thu 24 Sep 2026 06:08:05 +0000 ROA not after: Wed 23 Dec 2026 07:08:05 +0000 asID: 7270 IP address blocks: 66.33.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:47:40:a4:52:6e:83:8f:00:89:4f:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Sep 24 06:08:05 2026 GMT Not After : Dec 23 07:08:05 2026 GMT Subject: CN=85bfbb55-e492-4dd7-87f2-3a1ce62baa2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:36:19:9a:ea:bf:49:b1:28:20:bc:34:7d:c7: 1d:ae:e3:b8:90:5b:b1:08:68:05:45:fd:0c:6e:6d: 13:e9:79:11:f8:13:e5:43:99:03:79:da:05:01:da: 95:5b:30:57:4c:d1:f4:60:f0:67:35:c3:06:76:5b: 60:82:f4:b7:b6:56:54:3d:97:38:dd:11:3e:6d:fe: 9c:3a:b6:60:ef:cd:c0:33:f3:50:f8:d4:a4:e8:61: f7:da:fd:2e:af:85:05:52:2f:36:6b:23:f6:b7:93: e0:ac:0d:72:17:33:b0:10:2b:76:35:b6:1b:6e:f9: 69:8b:a6:08:b9:50:73:02:08:db:5b:95:54:11:e6: 71:a2:c1:45:c8:14:a5:5c:c6:24:0e:93:82:e0:ae: fc:c6:cc:9b:4d:51:5e:d6:94:dd:d3:ac:fe:93:f8: 85:32:9b:a8:22:1d:5a:1f:96:66:f1:4a:59:16:d6: be:6f:3d:0f:2e:d0:b4:29:64:6a:d2:c5:12:c8:2b: ef:db:74:59:1e:51:93:98:0b:bf:62:e1:b0:41:45: ce:36:a9:5b:a3:95:6d:9c:bf:fe:16:f4:94:27:c0: c4:51:79:37:ed:f0:88:26:12:42:67:8b:95:e3:a2: a3:b4:8f:28:1f:88:ce:7c:85:7f:3a:86:2f:fe:63: 5d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:68:B4:BF:8B:E1:BF:12:FC:0A:34:18:D3:3F:30:39:C3:70:68:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/69130e6d-e265-3bdc-90ad-84578af2cc98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 66.33.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:17:7d:da:a2:ba:b5:74:e8:b7:f0:48:25:f3:e5:e0:d5:55: 6d:ba:40:ef:4c:f0:a8:bc:6e:9a:fa:ab:43:f8:87:e5:1b:76: 7c:ac:b5:99:77:1f:6a:ef:a4:e3:5a:df:58:bc:97:40:b9:08: 51:e4:98:d3:90:75:fe:33:84:d1:39:d5:0e:54:31:30:9d:45: 40:b1:f2:cf:43:7b:a1:4f:3d:c7:bb:66:99:f7:2f:91:cb:21: 7a:b4:f8:1f:75:87:37:9b:4a:c3:b1:aa:6b:ed:39:81:43:2f: 0a:41:e5:d2:10:83:d2:1b:d8:02:9c:4d:b3:f0:f2:db:4e:7c: ec:7f:b3:9d:07:53:2b:84:63:b1:4f:54:0b:b2:33:f9:6b:3e: b8:fe:f1:43:b7:6a:08:13:41:26:54:7c:ff:ce:a7:8a:46:b1: 8d:d6:0f:b4:17:e3:01:46:99:3d:9c:6e:4e:f3:2a:8e:b6:a6: b3:3d:30:6a:d5:d1:cc:21:73:e4:20:0f:82:64:70:8a:5e:e9: a0:73:5b:5c:bf:ab:3a:9d:70:cb:78:0b:46:ef:5d:a0:d4:f5: ce:8a:19:80:46:36:66:c5:95:b6:23:2b:af:7e:77:53:e6:64: 4b:c6:22:6e:26:08:25:c4:f2:ab:91:bc:2b:65:f5:c6:ac:bd: 53:73:f0:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9HQKRSboOPAIlPAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDkyNDA2MDgwNVoXDTI2MTIyMzA3MDgwNVowLzEtMCsGA1UEAxMk ODViZmJiNTUtZTQ5Mi00ZGQ3LTg3ZjItM2ExY2U2MmJhYTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzYZmuq/SbEoILw0fccdruO4kFuxCGgFRf0M bm0T6XkR+BPlQ5kDedoFAdqVWzBXTNH0YPBnNcMGdltggvS3tlZUPZc43RE+bf6c OrZg783AM/NQ+NSk6GH32v0ur4UFUi82ayP2t5PgrA1yFzOwECt2NbYbbvlpi6YI uVBzAgjbW5VUEeZxosFFyBSlXMYkDpOC4K78xsybTVFe1pTd06z+k/iFMpuoIh1a H5Zm8UpZFta+bz0PLtC0KWRq0sUSyCvv23RZHlGTmAu/YuGwQUXONqlbo5VtnL/+ FvSUJ8DEUXk37fCIJhJCZ4uV46KjtI8oH4jOfIV/OoYv/mNdEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5otL+L4b8S/Ao0GNM/MDnDcGhYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvNjkxMzBlNmQtZTI2NS0z YmRjLTkwYWQtODQ1NzhhZjJjYzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYXfdqiurV06LfwSCXz5eDVVW26QO9M8Ki8bpr6q0P4h+UbdnystZl3 H2rvpONa31i8l0C5CFHkmNOQdf4zhNE51Q5UMTCdRUCx8s9De6FPPce7Zpn3L5HL IXq0+B91hzebSsOxqmvtOYFDLwpB5dIQg9Ib2AKcTbPw8ttOfOx/s50HUyuEY7FP VAuyM/lrPrj+8UO3aggTQSZUfP/Op4pGsY3WD7QX4wFGmT2cbk7zKo62prM9MGrV 0cwhc+QgD4JkcIpe6aBzW1y/qzqdcMt4C0bvXaDU9c6KGYBGNmbFlbYjK69+d1Pm ZEvGIm4mCCXE8quRvCtl9casvVNz8PY= -----END CERTIFICATE-----Generated at Tue Sep 29 13:19:53 2026 by rpki-client