$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/cfdfaa13-a571-3f8c-a5de-d1b06a7549a9.roa File: cfdfaa13-a571-3f8c-a5de-d1b06a7549a9.roa (raw, json) Hash identifier: o10i7ySjDlTLEEpZjPL6i4H5uOfQORrvKX4ONvoZwn0= Subject key identifier: E6:3F:E4:29:80:82:AB:80:19:C3:06:9F:D8:D4:E7:9B:0E:08:D5:E2 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584F474266308CE6EDF4B6AB8600 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/cfdfaa13-a571-3f8c-a5de-d1b06a7549a9.roa Signing time: Thu 24 Sep 2026 06:11:38 +0000 ROA not before: Thu 24 Sep 2026 06:11:38 +0000 ROA not after: Wed 23 Dec 2026 07:11:38 +0000 asID: 7270 IP address blocks: 66.33.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:47:42:66:30:8c:e6:ed:f4:b6:ab:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Sep 24 06:11:38 2026 GMT Not After : Dec 23 07:11:38 2026 GMT Subject: CN=de18e599-88ed-4bee-9976-119d049ab605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:39:82:04:62:0d:70:91:40:31:b9:1d:52:c5: ee:fa:22:9c:bb:6a:f7:dd:f1:6c:83:1c:85:1e:48: 57:98:e2:49:1f:cc:92:07:86:05:63:4f:6a:2d:48: ac:e3:7c:d6:4d:9e:e4:48:89:be:94:fd:68:07:30: 65:2a:17:5d:b5:6f:10:82:f1:fe:6a:50:bb:91:7a: 1f:30:09:35:08:26:d7:0f:78:2d:e3:4e:08:40:46: 18:90:b9:3f:f6:18:04:c1:b0:bf:d3:24:94:8c:c0: 62:72:11:ff:8b:55:c8:75:d3:50:3a:ee:31:83:66: 95:89:f4:a6:89:3c:d7:a1:89:2c:8f:eb:d1:04:fd: ea:5a:0e:44:0b:c0:b5:2c:f2:9d:0b:a7:91:a5:3d: 20:ef:7d:c4:de:7c:e7:77:fb:eb:a8:6f:c7:11:93: 7d:27:db:7b:a9:a3:44:87:41:9e:b6:1b:b4:25:82: 6e:10:08:8f:b2:8f:63:e3:78:cb:7a:ff:ce:2c:17: db:0a:86:7e:10:cf:c4:26:78:4f:a2:ce:24:76:6f: 7a:dd:dc:f6:f5:e7:44:8c:7b:66:f4:cc:8e:c9:53: 61:51:28:7d:1b:7b:f9:32:15:0c:7a:0d:b1:78:31: 6f:a9:d1:43:62:55:ce:a8:83:bb:cb:c1:d9:96:df: f4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3F:E4:29:80:82:AB:80:19:C3:06:9F:D8:D4:E7:9B:0E:08:D5:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/cfdfaa13-a571-3f8c-a5de-d1b06a7549a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 66.33.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:96:73:ee:3e:ad:88:1d:c7:91:5f:ca:d1:22:f9:18:f8:70: c3:88:15:8b:cd:d6:83:02:ab:a1:35:eb:74:ec:51:85:ad:d4: 6d:f0:78:b9:9b:8f:b1:6f:e5:97:c9:a5:d7:f1:30:ef:fa:bd: 04:85:b0:a7:e9:dd:21:c2:b3:f7:50:27:89:ce:46:11:9c:7a: 29:dd:da:2d:80:6b:f9:f2:02:fe:e6:cc:2c:56:1a:58:61:8d: 82:f5:82:72:57:c9:42:d5:a9:16:16:86:b6:a5:8b:a6:33:96: b3:bd:84:1e:75:90:0d:fe:2a:29:61:df:0c:31:80:85:63:31: 9a:d6:74:f8:9c:89:46:fa:47:3e:94:16:22:bc:a1:36:34:c4: 38:69:fa:56:6f:7c:b3:bc:b0:14:06:91:c2:b5:66:65:57:7e: 45:1c:3e:40:39:f1:3c:fe:13:3f:ff:09:d9:90:e8:b2:cf:73: e8:01:46:ce:87:83:4f:be:16:0e:ba:b4:b1:24:c8:17:4b:3e: 7c:bb:66:e5:dd:e7:91:ec:5d:bc:a4:e0:b9:77:07:a0:36:04: 57:0f:9c:a1:25:a4:e6:6b:a7:97:c0:2e:a4:2e:2c:7c:c2:3e: 7b:df:66:b4:3f:4a:50:f9:8b:c2:92:08:ab:88:1c:21:50:46: 31:74:75:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9HQmYwjObt9LarhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDkyNDA2MTEzOFoXDTI2MTIyMzA3MTEzOFowLzEtMCsGA1UEAxMk ZGUxOGU1OTktODhlZC00YmVlLTk5NzYtMTE5ZDA0OWFiNjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTmCBGINcJFAMbkdUsXu+iKcu2r33fFsgxyF HkhXmOJJH8ySB4YFY09qLUis43zWTZ7kSIm+lP1oBzBlKhddtW8QgvH+alC7kXof MAk1CCbXD3gt404IQEYYkLk/9hgEwbC/0ySUjMBichH/i1XIddNQOu4xg2aVifSm iTzXoYksj+vRBP3qWg5EC8C1LPKdC6eRpT0g733E3nznd/vrqG/HEZN9J9t7qaNE h0Gethu0JYJuEAiPso9j43jLev/OLBfbCoZ+EM/EJnhPos4kdm963dz29edEjHtm 9MyOyVNhUSh9G3v5MhUMeg2xeDFvqdFDYlXOqIO7y8HZlt/0cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOY/5CmAgquAGcMGn9jU55sOCNXiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvY2ZkZmFhMTMtYTU3MS0z ZjhjLWE1ZGUtZDFiMDZhNzU0OWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiGdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICWc+4+rYgdx5FfytEi+Rj4cMOIFYvN1oMCq6E163TsUYWt1G3weLmb j7Fv5ZfJpdfxMO/6vQSFsKfp3SHCs/dQJ4nORhGceind2i2Aa/nyAv7mzCxWGlhh jYL1gnJXyULVqRYWhrali6YzlrO9hB51kA3+Kilh3wwxgIVjMZrWdPiciUb6Rz6U FiK8oTY0xDhp+lZvfLO8sBQGkcK1ZmVXfkUcPkA58Tz+Ez//CdmQ6LLPc+gBRs6H g0++Fg66tLEkyBdLPny7ZuXd55HsXbyk4Ll3B6A2BFcPnKElpOZrp5fALqQuLHzC PnvfZrQ/SlD5i8KSCKuIHCFQRjF0dfc= -----END CERTIFICATE-----Generated at Tue Sep 29 13:19:47 2026 by rpki-client