$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa File: 04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa (raw, json) Hash identifier: bpOoPGSapgoN7fK3cWBCHVKvTXuXmavX/WiU9WXKfbU= Subject key identifier: 35:12:A4:40:08:97:DA:55:7F:62:6B:E0:91:0E:13:34:24:44:15:67 Certificate issuer: /CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Certificate serial: 010D0C9F4328584B9CA23E5E8022C55A8C437B50 Authority key identifier: F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 54309 IP address blocks: 66.33.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:3e:5e:80:22:c5:5a:8c:43:7b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=9b411dd3-ee64-4ef9-aa24-9229da75308c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:df:19:77:90:5b:29:36:ef:ec:68:d0:0c:e5: 14:39:3f:09:4e:db:9a:33:ce:ea:0e:28:98:4d:d6: ca:ce:7b:64:ae:37:b2:c0:8d:29:87:23:f0:87:5c: b7:fc:3f:0d:54:c4:e3:9d:e9:28:dc:33:4f:26:f5: 72:7a:b7:dc:e1:e1:89:b6:88:93:34:23:63:d9:67: 16:61:10:37:ac:d3:f2:8b:71:bd:2a:31:fa:73:87: 77:06:46:c1:2d:b6:c0:ef:bf:60:bc:62:4c:2a:27: 7d:69:1e:ab:ef:76:a7:32:86:f0:c6:cd:ed:4a:05: 64:cc:69:4d:80:70:07:41:3c:b2:50:fb:ee:57:ed: db:86:0a:99:8c:0b:64:06:fb:a1:bf:18:8e:0a:5e: 1e:32:35:09:14:c4:01:c8:b8:91:2a:76:b0:fd:2c: f6:41:91:03:df:08:5e:36:d3:e6:1f:3c:a2:c5:0b: f6:0a:a9:68:96:29:43:28:cd:7d:38:c8:8e:45:8a: f2:8d:7c:9c:24:a1:11:34:73:51:e2:bf:e7:93:71: a3:a7:57:0e:a8:10:96:08:97:0e:92:7e:a8:d9:d3: a4:70:66:a6:05:48:01:2c:55:b6:a3:02:f5:81:93: 4b:2a:23:ad:65:6d:43:89:74:b7:94:ab:fe:cf:5c: 13:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:12:A4:40:08:97:DA:55:7F:62:6B:E0:91:0E:13:34:24:44:15:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl X509v3 Authority Key Identifier: keyid:F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer sbgp-ipAddrBlock: critical IPv4: 66.33.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:7e:f0:a6:96:1b:ad:da:5d:c8:f2:9d:d7:c7:e5:56:b7:71: 52:9f:8e:51:da:f0:ee:01:ae:93:2d:e6:15:e0:03:92:ff:a9: ac:f6:77:37:83:d3:41:2e:49:43:3d:bf:84:78:a0:fa:35:01: cb:38:9f:3f:4e:31:92:e1:02:2d:e0:11:be:81:a8:f1:7f:bd: 52:d2:ea:e7:d2:09:0b:bf:58:1b:3e:7d:ff:41:5f:ab:15:a9: fa:4f:f2:84:f9:46:77:7f:66:14:2b:9a:a7:2c:97:86:ea:67: 8d:82:73:93:80:7b:42:3d:26:2c:52:e2:4b:94:7c:28:c9:aa: b1:a7:29:67:6e:84:78:63:ec:c7:63:5e:93:1f:83:e1:a7:05: 5c:55:2e:15:9e:20:3d:69:7e:85:c7:4d:21:9a:65:5a:71:69: b3:4d:d8:90:8c:8e:87:6f:93:1a:de:d7:c2:65:0f:e3:a2:e7: 3f:9a:a2:29:24:fd:9a:88:08:86:b6:c3:00:0d:69:d5:3a:62: d0:41:04:2a:b5:c7:06:fa:b2:bc:c5:79:fc:79:ab:d8:83:d8: dc:60:a8:fd:b4:69:1e:9f:5e:3b:a4:34:15:0d:79:b4:08:fa: 5e:82:26:f6:06:7a:d4:ae:0f:c5:33:30:77:c1:2e:84:f7:0c: 2f:9e:74:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucoj5egCLFWoxDe1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE4OWQ2MmMtYTA4ZS00YzRlLTlmNDctYTQwZDE2Mjlm MDkxMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk OWI0MTFkZDMtZWU2NC00ZWY5LWFhMjQtOTIyOWRhNzUzMDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN8Zd5BbKTbv7GjQDOUUOT8JTtuaM87qDiiY TdbKzntkrjeywI0phyPwh1y3/D8NVMTjneko3DNPJvVyerfc4eGJtoiTNCNj2WcW YRA3rNPyi3G9KjH6c4d3BkbBLbbA779gvGJMKid9aR6r73anMobwxs3tSgVkzGlN gHAHQTyyUPvuV+3bhgqZjAtkBvuhvxiOCl4eMjUJFMQByLiRKnaw/Sz2QZED3whe NtPmHzyixQv2CqlolilDKM19OMiORYryjXycJKERNHNR4r/nk3Gjp1cOqBCWCJcO kn6o2dOkcGamBUgBLFW2owL1gZNLKiOtZW1DiXS3lKv+z1wTmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUSpEAIl9pVf2Jr4JEOEzQkRBVnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5 ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBkMTYyOWYwOTEvMDRmNGEzZmItNDQyZS0z MzE0LTkwYjktYjExZDkzY2JjYThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWE4OWQ2MmMtYTA4ZS00YzRlLTlm NDctYTQwZDE2MjlmMDkxLzVhODlkNjJjLWEwOGUtNGM0ZS05ZjQ3LWE0MGQxNjI5 ZjA5MS5jcmwwHwYDVR0jBBgwFoAU8FWyS0Mw1eDX0obNoZJEPF1KgJowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBk MTYyOWYwOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiEFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABR+8KaWG63aXcjyndfH5Va3cVKfjlHa8O4BrpMt5hXgA5L/qaz2dzeD 00EuSUM9v4R4oPo1Acs4nz9OMZLhAi3gEb6BqPF/vVLS6ufSCQu/WBs+ff9BX6sV qfpP8oT5Rnd/ZhQrmqcsl4bqZ42Cc5OAe0I9JixS4kuUfCjJqrGnKWduhHhj7Mdj XpMfg+GnBVxVLhWeID1pfoXHTSGaZVpxabNN2JCMjodvkxre18JlD+Oi5z+aoikk /ZqICIa2wwANadU6YtBBBCq1xwb6srzFefx5q9iD2NxgqP20aR6fXjukNBUNebQI +l6CJvYGetSuD8UzMHfBLoT3DC+edEQ= -----END CERTIFICATE-----Generated at Mon Nov 3 11:18:48 2025 by rpki-client