$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/89982af9-8441-3ebd-9cfc-47eec1e67e3b.roa File: 89982af9-8441-3ebd-9cfc-47eec1e67e3b.roa (raw, json) Hash identifier: y+q+vsqV2Wcun7pGj6VZC7mb6YiGl6VCCyB0wtYArVg= Subject key identifier: DD:62:65:86:34:7B:E2:DF:FA:75:90:F8:73:D4:9D:29:B0:C9:33:00 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584F473EF0542A04541181BD3780 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/89982af9-8441-3ebd-9cfc-47eec1e67e3b.roa Signing time: Thu 24 Sep 2026 06:04:39 +0000 ROA not before: Thu 24 Sep 2026 06:04:39 +0000 ROA not after: Wed 23 Dec 2026 07:04:39 +0000 asID: 7270 IP address blocks: 66.33.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:47:3e:f0:54:2a:04:54:11:81:bd:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Sep 24 06:04:39 2026 GMT Not After : Dec 23 07:04:39 2026 GMT Subject: CN=0b9793e0-64c9-4e0d-842a-e5428c9b7eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:83:07:6a:1d:62:d9:ed:bf:12:2c:04:92:16: 72:7b:d7:46:6c:42:bd:bb:b4:88:3d:6b:7f:29:3a: df:1a:c3:a7:9b:4a:43:05:b3:95:39:e0:9c:7e:8d: ab:c7:c1:02:84:3b:33:ec:27:da:6b:03:02:12:a3: 62:df:55:d7:a2:08:26:38:06:28:cf:a9:2d:9a:2d: 23:99:d7:ae:21:61:01:46:0a:51:f6:c2:9b:fc:35: 96:0c:39:05:63:43:e9:8e:72:6b:07:cb:3f:e3:64: 80:29:1e:f9:d7:a9:94:06:97:5c:c5:93:cf:2f:e9: bf:10:89:db:28:99:77:c3:13:da:95:ac:b9:03:3a: e9:e6:3a:a2:78:b2:2e:ff:09:4c:3d:1b:cd:14:4d: a0:59:5b:34:f2:57:6d:00:d5:69:e4:43:04:7b:12: 29:8c:93:e1:fa:a7:e5:72:35:4a:55:6e:6f:f6:f3: d6:9f:57:a7:a4:87:c4:87:23:b2:2d:e7:34:bf:cf: a2:e6:05:9f:4f:c6:2a:fb:38:20:e2:e9:63:1c:08: e7:3d:35:79:91:2f:b9:fe:0b:e7:ff:ce:66:d6:06: 14:9e:84:d2:c3:30:0c:cb:8e:74:6c:24:6c:a2:f8: 6b:39:04:b6:4f:fc:0c:05:e7:68:26:f4:bf:e9:53: 14:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:62:65:86:34:7B:E2:DF:FA:75:90:F8:73:D4:9D:29:B0:C9:33:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/89982af9-8441-3ebd-9cfc-47eec1e67e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 66.33.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:24:5a:af:da:c3:da:13:4b:15:4a:32:e6:ec:63:1b:0f:f9: 36:fd:e6:5a:03:77:a3:29:6d:72:85:11:d2:f7:67:de:b0:17: 72:ca:9f:a6:95:73:62:4c:47:f9:38:d3:3d:48:49:d8:0c:92: e6:76:00:5b:32:fe:07:ec:31:d4:05:a7:53:4b:76:b3:93:4b: ca:9e:f1:b2:f2:a3:65:08:d9:66:bd:dd:9e:69:b8:2c:20:47: 4f:21:63:6b:47:f9:85:10:96:79:33:49:14:65:58:b2:3e:0b: 3b:7f:33:8f:8e:c4:4e:68:6a:da:47:65:eb:46:ff:97:2a:71: 45:22:99:56:13:f2:45:9b:5a:21:7e:a9:3b:de:02:5e:21:9f: ee:d7:89:6a:3c:1a:39:ac:ef:92:16:36:5a:35:30:a4:32:a6: f5:dd:16:6d:ed:2c:76:e5:77:b2:d3:14:aa:a0:3c:81:3b:2a: 9f:14:c0:64:9e:94:39:dc:31:4f:72:cb:5d:70:b5:74:c5:bc: e7:5b:79:66:ee:95:82:4b:d9:0a:5a:b9:fc:54:d4:bd:bc:0b: 8f:c0:7d:6a:21:67:27:a3:aa:09:4b:99:83:fc:8e:62:ee:a0: 2a:8e:a3:e8:ff:42:de:a3:47:9f:f3:80:cc:d5:61:b7:b3:f7: da:31:a5:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9HPvBUKgRUEYG9N4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDkyNDA2MDQzOVoXDTI2MTIyMzA3MDQzOVowLzEtMCsGA1UEAxMk MGI5NzkzZTAtNjRjOS00ZTBkLTg0MmEtZTU0MjhjOWI3ZWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoMHah1i2e2/EiwEkhZye9dGbEK9u7SIPWt/ KTrfGsOnm0pDBbOVOeCcfo2rx8EChDsz7CfaawMCEqNi31XXoggmOAYoz6ktmi0j mdeuIWEBRgpR9sKb/DWWDDkFY0PpjnJrB8s/42SAKR7516mUBpdcxZPPL+m/EInb KJl3wxPalay5Azrp5jqieLIu/wlMPRvNFE2gWVs08ldtANVp5EMEexIpjJPh+qfl cjVKVW5v9vPWn1enpIfEhyOyLec0v8+i5gWfT8Yq+zgg4uljHAjnPTV5kS+5/gvn /85m1gYUnoTSwzAMy450bCRsovhrOQS2T/wMBedoJvS/6VMUgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1iZYY0e+Lf+nWQ+HPUnSmwyTMAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvODk5ODJhZjktODQ0MS0z ZWJkLTljZmMtNDdlZWMxZTY3ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiGDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIkWq/aw9oTSxVKMubsYxsP+Tb95loDd6MpbXKFEdL3Z96wF3LKn6aV c2JMR/k40z1ISdgMkuZ2AFsy/gfsMdQFp1NLdrOTS8qe8bLyo2UI2Wa93Z5puCwg R08hY2tH+YUQlnkzSRRlWLI+Czt/M4+OxE5oatpHZetG/5cqcUUimVYT8kWbWiF+ qTveAl4hn+7XiWo8Gjms75IWNlo1MKQypvXdFm3tLHbld7LTFKqgPIE7Kp8UwGSe lDncMU9yy11wtXTFvOdbeWbulYJL2QpaufxU1L28C4/AfWohZyejqglLmYP8jmLu oCqOo+j/Qt6jR5/zgMzVYbez99oxpfM= -----END CERTIFICATE-----Generated at Tue Sep 29 00:45:38 2026 by rpki-client