$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/da1da2df-066a-3f24-bf89-466b471f6925.roa File: da1da2df-066a-3f24-bf89-466b471f6925.roa (raw, json) Hash identifier: P/8NOJ123WBLzCGI2FHAtxCqp7nVPfiIw6OBXqll/no= Subject key identifier: 87:6D:52:37:47:34:1B:36:86:B9:C9:6D:D6:4A:D2:BA:C2:4F:DD:5E Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584F473D83B3BC314D6B41C92AC0 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/da1da2df-066a-3f24-bf89-466b471f6925.roa Signing time: Thu 24 Sep 2026 06:01:47 +0000 ROA not before: Thu 24 Sep 2026 06:01:47 +0000 ROA not after: Wed 23 Dec 2026 07:01:47 +0000 asID: 7270 IP address blocks: 66.33.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:47:3d:83:b3:bc:31:4d:6b:41:c9:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Sep 24 06:01:47 2026 GMT Not After : Dec 23 07:01:47 2026 GMT Subject: CN=591ef493-910a-4011-beef-fb77e7bcdf1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2d:96:32:2c:e5:82:56:41:8b:b1:63:15:6c: 2d:4c:a8:84:60:8f:f7:10:dc:21:52:1b:c5:86:fb: 18:be:4e:70:b2:41:55:de:cc:5a:f9:16:fe:67:a0: bd:ca:c7:d8:63:dd:81:61:12:ce:96:9c:f2:06:47: 04:fc:37:d6:a5:67:fc:62:f9:4e:59:8c:3b:57:83: 52:44:60:4b:a5:ec:c2:0d:bc:0c:08:1e:02:c9:cb: 5f:b5:d2:32:d1:28:d7:7b:a6:25:6a:a2:19:b1:d4: 1b:6b:6e:6e:44:73:cb:90:04:0a:dd:5d:92:95:87: 12:c0:3b:54:e5:7f:97:66:d4:f2:68:f1:e6:6e:28: 43:ee:8d:2a:15:44:fe:bb:87:f6:7c:4b:b7:3e:7f: 58:5a:84:78:4e:2b:f8:0f:24:56:d1:45:fd:ca:dd: f5:b6:bd:5a:85:95:b0:ac:b8:70:83:fa:15:7a:da: ac:f4:0b:e8:bc:7e:71:62:ab:5b:82:92:4e:11:e9: 4f:bf:e2:41:57:b1:8c:ff:2a:a2:27:29:34:16:a0: cc:b8:54:ee:27:51:1e:d5:33:93:b2:f6:64:57:5c: 3e:20:66:45:73:9c:f1:51:0b:6c:ee:04:16:30:38: 73:c8:62:e8:fe:fb:1c:e6:7d:bf:a2:f4:26:ab:e1: 81:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6D:52:37:47:34:1B:36:86:B9:C9:6D:D6:4A:D2:BA:C2:4F:DD:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/da1da2df-066a-3f24-bf89-466b471f6925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 66.33.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:90:ff:fb:aa:30:f4:b5:41:ad:a4:03:5b:39:b2:d7:c3:a6: 95:99:7c:15:e3:11:a0:71:0f:ec:d0:ea:ba:55:66:fd:ff:3e: 2d:d8:3d:1d:61:b1:08:c2:26:bd:0e:77:09:08:08:aa:83:c3: 4f:21:a3:56:eb:ef:35:dc:78:ad:0f:e5:f9:20:e9:69:d0:24: 11:45:ce:d0:ad:eb:56:50:5f:68:22:0b:a1:29:c8:8a:16:a5: 51:67:84:11:b0:f6:72:ee:83:a4:4b:be:95:21:33:9a:54:c4: bc:55:95:b7:a7:47:9d:59:cd:10:fd:66:e4:38:9e:0e:21:e3: 43:e3:c3:a5:57:2e:62:52:8f:7d:2c:25:26:c3:b6:95:a8:d2: 37:ae:0b:85:9b:bd:cf:77:97:2d:4c:95:c2:b1:7d:9f:19:7c: 68:0f:9b:f8:6e:fd:1b:a7:3d:61:78:ab:81:7b:d5:1b:a7:ca: d6:96:7b:e1:46:03:55:50:af:7a:24:26:48:0d:3b:29:a7:77: 14:27:c0:57:4e:7d:f9:7a:98:d0:b9:7b:e5:f5:8f:bb:da:db: 0c:34:36:7d:15:c3:cf:2c:9c:69:67:04:95:d4:c0:2c:c6:1a: eb:3b:f3:04:eb:43:3e:6f:dd:0b:11:dd:30:2c:93:89:36:41: e5:b3:10:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9HPYOzvDFNa0HJKsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDkyNDA2MDE0N1oXDTI2MTIyMzA3MDE0N1owLzEtMCsGA1UEAxMk NTkxZWY0OTMtOTEwYS00MDExLWJlZWYtZmI3N2U3YmNkZjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy2WMizlglZBi7FjFWwtTKiEYI/3ENwhUhvF hvsYvk5wskFV3sxa+Rb+Z6C9ysfYY92BYRLOlpzyBkcE/DfWpWf8YvlOWYw7V4NS RGBLpezCDbwMCB4CyctftdIy0SjXe6YlaqIZsdQba25uRHPLkAQK3V2SlYcSwDtU 5X+XZtTyaPHmbihD7o0qFUT+u4f2fEu3Pn9YWoR4Tiv4DyRW0UX9yt31tr1ahZWw rLhwg/oVetqs9AvovH5xYqtbgpJOEelPv+JBV7GM/yqiJyk0FqDMuFTuJ1Ee1TOT svZkV1w+IGZFc5zxUQts7gQWMDhzyGLo/vsc5n2/ovQmq+GBhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdtUjdHNBs2hrnJbdZK0rrCT91eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvZGExZGEyZGYtMDY2YS0z ZjI0LWJmODktNDY2YjQ3MWY2OTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQiGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeQ//uqMPS1Qa2kA1s5stfDppWZfBXjEaBxD+zQ6rpVZv3/Pi3YPR1h sQjCJr0OdwkICKqDw08ho1br7zXceK0P5fkg6WnQJBFFztCt61ZQX2giC6EpyIoW pVFnhBGw9nLug6RLvpUhM5pUxLxVlbenR51ZzRD9ZuQ4ng4h40Pjw6VXLmJSj30s JSbDtpWo0jeuC4Wbvc93ly1MlcKxfZ8ZfGgPm/hu/RunPWF4q4F71RunytaWe+FG A1VQr3okJkgNOymndxQnwFdOffl6mNC5e+X1j7va2ww0Nn0Vw88snGlnBJXUwCzG Gus78wTrQz5v3QsR3TAsk4k2QeWzED8= -----END CERTIFICATE-----Generated at Tue Sep 29 00:45:38 2026 by rpki-client