$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/209f05b0-1628-31e9-a192-0c7be9aca1b5.roa File: 209f05b0-1628-31e9-a192-0c7be9aca1b5.roa (raw, json) Hash identifier: J7JS0spEBYTaCb5bM7sBI+QLio/AfHe5TbgcX7ukdDo= Subject key identifier: B8:36:EC:73:F3:91:B3:8D:BF:08:29:0A:3E:FB:86:2C:38:87:F9:F8 Certificate issuer: /CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4 Certificate serial: 010D0C9F4328584F49740D2158ED0FFCFD1CD940 Authority key identifier: F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/209f05b0-1628-31e9-a192-0c7be9aca1b5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 66.33.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:0d:21:58:ed:0f:fc:fd:1c:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dbf61c44-ea8c-4ac4-8198-1c61f26edf96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8e:fb:8c:24:db:7f:ed:c2:a9:4f:1c:b4:96: 7d:47:df:ec:54:b5:e1:31:a3:14:c9:f8:8d:81:33: 96:18:ec:72:63:dc:05:a0:0d:75:b5:1d:99:23:9a: 2d:86:9a:77:8b:75:19:42:6a:8d:de:30:31:80:79: 21:4e:04:9a:8e:95:0e:a9:ab:f8:15:9c:7d:ce:fb: c4:b0:f0:79:df:2b:02:ba:bc:a9:9a:89:0a:79:65: f2:06:e9:b0:68:ac:78:4d:46:8f:d0:61:d3:11:48: 2b:06:be:30:5d:ec:93:cf:c0:48:1a:16:24:dc:c3: c5:87:78:20:42:36:9a:99:1e:58:9d:56:21:c6:50: 19:1d:63:6a:d8:b7:a9:8b:4b:15:36:82:61:fb:3b: 65:83:74:89:e0:0f:1f:c5:b0:a9:4c:96:63:7d:84: 99:b0:31:9b:33:70:6e:3c:80:40:fa:cc:23:cc:83: 82:15:ab:4c:5d:37:c8:1d:8e:f8:57:6b:ab:3c:15: b5:6c:5f:47:e5:11:3f:aa:f4:12:77:f6:05:ca:1d: fe:0a:7c:6c:72:40:d2:39:42:f4:74:be:d0:c0:c6: fa:c6:de:ee:67:c6:19:dc:c8:de:ca:d3:78:bc:91: af:00:a2:32:ee:c6:40:9f:96:b4:19:05:6a:af:ed: cb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:36:EC:73:F3:91:B3:8D:BF:08:29:0A:3E:FB:86:2C:38:87:F9:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/209f05b0-1628-31e9-a192-0c7be9aca1b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl X509v3 Authority Key Identifier: keyid:F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer sbgp-ipAddrBlock: critical IPv4: 66.33.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:5d:f3:8f:37:c5:f8:fd:e8:8a:91:f0:cc:11:9f:41:1b:9e: 06:f6:32:59:89:b1:13:39:85:63:3a:2e:83:44:cd:15:cb:db: 5a:e2:77:ae:81:3d:84:a7:6e:7a:ad:73:80:cf:38:fc:de:fb: 19:f0:ef:c3:55:25:c4:ea:98:f4:c9:4b:36:d7:86:95:f2:85: d6:00:ef:60:3a:e1:9b:15:84:e0:57:07:fe:96:d1:97:8d:9d: d4:44:89:09:0c:18:ac:af:8e:5e:f8:9e:4e:7a:bb:b2:05:07: bc:3b:be:5c:9d:ae:bc:ce:0a:ed:81:e7:54:61:13:2f:d6:be: a6:3f:0d:c2:ae:d6:bb:f0:ac:12:a2:1e:ba:f0:9b:5d:21:f8: 0e:b2:74:73:8c:08:bc:0e:5e:32:5d:12:5b:fa:27:de:e2:4c: 7c:17:d4:7e:2d:f5:c0:d8:50:81:a1:05:27:a1:ec:5c:87:be: dd:92:98:34:96:df:07:46:cb:e3:1e:d3:15:76:eb:0c:86:cd: ec:b7:1e:e3:4f:cd:36:55:f3:67:e5:19:9d:10:a9:f9:ba:59: a9:b1:01:e5:24:45:87:72:40:4d:29:c7:e5:ea:9d:2b:9b:8b: 13:9c:4f:bd:73:99:d4:dc:d0:96:63:d0:4f:fc:dd:fc:ee:bd: 75:fb:5c:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdA0hWO0P/P0c2UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdhNmZiYzQtNTllMi00OWI0LWEzNDUtM2VkZGU4MWYy NmE0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGJmNjFjNDQtZWE4Yy00YWM0LTgxOTgtMWM2MWYyNmVkZjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl477jCTbf+3CqU8ctJZ9R9/sVLXhMaMUyfiN gTOWGOxyY9wFoA11tR2ZI5othpp3i3UZQmqN3jAxgHkhTgSajpUOqav4FZx9zvvE sPB53ysCurypmokKeWXyBumwaKx4TUaP0GHTEUgrBr4wXeyTz8BIGhYk3MPFh3gg QjaamR5YnVYhxlAZHWNq2Lepi0sVNoJh+ztlg3SJ4A8fxbCpTJZjfYSZsDGbM3Bu PIBA+swjzIOCFatMXTfIHY74V2urPBW1bF9H5RE/qvQSd/YFyh3+CnxsckDSOUL0 dL7QwMb6xt7uZ8YZ3MjeytN4vJGvAKIy7sZAn5a0GQVqr+3L9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLg27HPzkbONvwgpCj77hiw4h/n4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80N2E2 ZmJjNC01OWUyLTQ5YjQtYTM0NS0zZWRkZTgxZjI2YTQvMjA5ZjA1YjAtMTYyOC0z MWU5LWExOTItMGM3YmU5YWNhMWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDdhNmZiYzQtNTllMi00OWI0LWEz NDUtM2VkZGU4MWYyNmE0LzQ3YTZmYmM0LTU5ZTItNDliNC1hMzQ1LTNlZGRlODFm MjZhNC5jcmwwHwYDVR0jBBgwFoAU8A3+W3wnOkCARHzodZuLMa3LV1wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80N2E2ZmJjNC01OWUyLTQ5YjQtYTM0NS0zZWRk ZTgxZjI2YTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpd8483xfj96IqR8MwRn0Ebngb2MlmJsRM5hWM6LoNEzRXL21rid66B PYSnbnqtc4DPOPze+xnw78NVJcTqmPTJSzbXhpXyhdYA72A64ZsVhOBXB/6W0ZeN ndREiQkMGKyvjl74nk56u7IFB7w7vlydrrzOCu2B51RhEy/WvqY/DcKu1rvwrBKi Hrrwm10h+A6ydHOMCLwOXjJdElv6J97iTHwX1H4t9cDYUIGhBSeh7FyHvt2SmDSW 3wdGy+Me0xV26wyGzey3HuNPzTZV82flGZ0Qqfm6WamxAeUkRYdyQE0px+XqnSub ixOcT71zmdTc0JZj0E/83fzuvXX7XLs= -----END CERTIFICATE-----Generated at Mon Sep 28 17:59:32 2026 by rpki-client