$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/33ac0faa-5d21-3f30-9cb4-3005d0e6f51a.roa File: 33ac0faa-5d21-3f30-9cb4-3005d0e6f51a.roa (raw, json) Hash identifier: Ywb8/19e0WCAp/zLqO1eW70UzDgIgx4UK8A5CL1TRsQ= Subject key identifier: 59:D3:4D:8D:85:1B:21:79:D6:B7:C3:DE:9E:8D:F8:C1:23:B2:53:14 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584DAE4FCC79B55BC84FCF35EF40 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/33ac0faa-5d21-3f30-9cb4-3005d0e6f51a.roa Signing time: Thu 30 Apr 2026 18:33:01 +0000 ROA not before: Thu 30 Apr 2026 18:33:01 +0000 ROA not after: Wed 29 Jul 2026 18:33:01 +0000 asID: 44559 IP address blocks: 166.1.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ae:4f:cc:79:b5:5b:c8:4f:cf:35:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 30 18:33:01 2026 GMT Not After : Jul 29 18:33:01 2026 GMT Subject: CN=f4e368c4-3eb4-4ae1-8ba3-614a754fd2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:48:18:92:ee:d2:e2:c0:4e:68:25:10:ea:56: f5:f9:7a:1e:1f:b4:4d:c5:ff:13:98:14:0f:13:56: 01:35:6a:1c:67:8e:ba:c1:b2:8e:25:27:ca:41:78: 69:44:2f:72:5f:11:b1:57:4d:ee:b1:90:96:25:e5: a7:44:65:42:28:78:51:12:56:76:ec:31:6b:38:cf: 82:4a:ef:bb:29:8b:c5:e8:1b:ab:bc:e7:b3:fb:a8: 6e:e1:c1:84:d8:ba:98:9c:b6:76:30:07:84:90:c6: df:4e:7f:58:6e:88:2c:e4:b1:27:17:01:13:a8:79: a0:7c:7d:8b:28:e5:4b:20:37:e8:a6:5e:98:d8:3d: 55:09:05:f4:e8:a9:cb:16:b2:39:26:2d:45:b2:35: 8c:ac:0a:a9:50:c7:85:dc:0d:21:84:44:af:cb:39: 7b:9c:72:26:89:99:48:0d:1b:e3:98:61:63:99:7f: c7:cc:ca:78:5a:79:a5:e3:cc:b7:a4:b3:54:0f:4e: 97:a1:65:d5:ae:db:68:e8:86:7c:3b:cd:03:1b:08: 08:61:85:55:1d:12:97:01:ba:5f:5a:62:0c:75:80: 72:99:bf:bf:c0:e8:79:e2:5e:99:6f:57:df:99:b6: 8c:78:c3:96:89:aa:24:a7:99:08:4b:4a:81:10:5a: a7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D3:4D:8D:85:1B:21:79:D6:B7:C3:DE:9E:8D:F8:C1:23:B2:53:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/33ac0faa-5d21-3f30-9cb4-3005d0e6f51a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:25:b7:16:4a:29:e0:e5:f8:2f:ff:25:e3:09:cd:65:95:18: 4f:e4:9a:0e:3a:ce:3f:59:72:a8:81:77:8a:b2:14:2e:be:d6: 52:e8:48:ce:ce:07:c4:6f:c1:96:0c:ff:c5:35:86:a5:fe:b3: ef:d2:72:bd:2c:60:13:69:08:6a:d0:65:51:67:5a:36:ad:ef: eb:6c:6d:43:11:d8:e0:a7:9e:f9:e8:42:17:a9:35:4c:77:5d: c5:e5:3c:04:11:89:cc:7d:39:49:62:1c:94:37:46:f8:31:98: c5:78:2e:65:b3:7e:67:ed:5a:38:c5:78:5b:43:bb:e4:2e:28: 34:e8:3f:1a:49:e5:76:fa:38:42:43:37:70:f9:e7:d6:ba:80: 07:11:f9:5e:1a:8f:69:b7:c8:be:85:29:e8:1e:58:95:ea:82: ec:7e:90:2c:47:02:cd:77:5b:7c:85:94:5d:76:a1:29:83:1f: 7a:d7:6f:8b:e1:d0:6c:ed:63:47:e4:01:a0:16:69:db:c4:18: 17:39:55:8c:4d:05:77:f9:94:37:e6:aa:bc:97:04:4a:35:39: de:fb:a5:65:01:c8:c7:18:dc:8a:f9:be:68:7d:fb:60:b0:05: e6:74:27:0e:df:91:70:35:77:66:6c:3b:ed:09:08:31:3a:3b: 06:41:82:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2uT8x5tVvIT88170AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDQzMDE4MzMwMVoXDTI2MDcyOTE4MzMwMVowLzEtMCsGA1UEAxMk ZjRlMzY4YzQtM2ViNC00YWUxLThiYTMtNjE0YTc1NGZkMmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkgYku7S4sBOaCUQ6lb1+XoeH7RNxf8TmBQP E1YBNWocZ466wbKOJSfKQXhpRC9yXxGxV03usZCWJeWnRGVCKHhRElZ27DFrOM+C Su+7KYvF6BurvOez+6hu4cGE2LqYnLZ2MAeEkMbfTn9Ybogs5LEnFwETqHmgfH2L KOVLIDfopl6Y2D1VCQX06KnLFrI5Ji1FsjWMrAqpUMeF3A0hhESvyzl7nHImiZlI DRvjmGFjmX/HzMp4Wnml48y3pLNUD06XoWXVrtto6IZ8O80DGwgIYYVVHRKXAbpf WmIMdYBymb+/wOh54l6Zb1ffmbaMeMOWiaokp5kIS0qBEFqnxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnTTY2FGyF51rfD3p6N+MEjslMUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzNhYzBmYWEtNWQyMS0z ZjMwLTljYjQtMzAwNWQwZTZmNTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgFxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIltxZKKeDl+C//JeMJzWWVGE/kmg46zj9ZcqiBd4qyFC6+1lLoSM7O B8RvwZYM/8U1hqX+s+/Scr0sYBNpCGrQZVFnWjat7+tsbUMR2OCnnvnoQhepNUx3 XcXlPAQRicx9OUliHJQ3RvgxmMV4LmWzfmftWjjFeFtDu+QuKDToPxpJ5Xb6OEJD N3D559a6gAcR+V4aj2m3yL6FKegeWJXqgux+kCxHAs13W3yFlF12oSmDH3rXb4vh 0GztY0fkAaAWadvEGBc5VYxNBXf5lDfmqryXBEo1Od77pWUByMcY3Ir5vmh9+2Cw BeZ0Jw7fkXA1d2ZsO+0JCDE6OwZBgkU= -----END CERTIFICATE-----Generated at Sat May 2 23:09:12 2026 by rpki-client