$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa File: 04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa (raw, json) Hash identifier: Cxg5OzXHrOzkPisf+RswzLSmG3G2YRIZO/oQzj7GHRY= Subject key identifier: 49:23:0C:5D:A3:8A:B5:C8:A4:52:9D:83:B0:FA:67:E2:E4:4F:55:D8 Certificate issuer: /CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Certificate serial: 010D0C9F4328584D5E1A85F82BB5E9D314193C80 Authority key identifier: F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 54309 IP address blocks: 66.33.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:85:f8:2b:b5:e9:d3:14:19:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=57af6ba8-6675-4303-b37b-115b4114c0de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b7:c3:01:5d:0d:36:a2:3c:f1:d6:62:5a:4c: 66:ab:92:f6:5b:8c:a8:e0:65:7b:ac:f5:6b:6d:a7: aa:9f:49:e9:fd:92:15:4f:4f:fc:79:22:aa:5f:ec: 46:8b:91:20:96:ea:76:b8:ae:6c:d1:26:6a:41:8d: 8d:34:e3:11:18:34:74:3a:a8:1e:e4:9e:5f:2e:40: e0:32:0c:7a:a9:cf:66:ee:1d:3e:44:4a:7e:0a:9c: 48:71:bb:84:aa:08:ca:e6:f2:60:a8:c3:cf:37:03: 62:8f:aa:04:3c:ed:00:a5:b3:85:9b:bf:13:ca:c6: 9b:55:0d:b0:89:6a:9d:62:be:7d:45:4a:02:58:d4: 46:8f:fa:4b:2f:74:83:03:be:91:21:79:a1:83:24: 30:31:9b:5d:fb:f1:61:c5:4d:f7:42:04:e9:86:5e: dc:d2:cb:c8:05:b4:0c:83:c0:63:3b:3a:b6:3a:d2: 16:7d:1a:00:1c:97:88:33:a4:80:b6:69:5a:c9:5f: 40:14:18:1d:38:e3:ba:13:fc:da:ee:87:73:89:98: f7:44:d9:cb:05:0e:4f:1f:c7:9f:ff:24:62:dc:67: 41:c9:db:67:6a:43:cf:d6:cf:15:43:a3:15:85:e8: cd:60:b0:6f:7f:39:a3:75:0b:bb:3f:ca:45:26:5e: a4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:23:0C:5D:A3:8A:B5:C8:A4:52:9D:83:B0:FA:67:E2:E4:4F:55:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl X509v3 Authority Key Identifier: keyid:F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer sbgp-ipAddrBlock: critical IPv4: 66.33.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:19:a2:c3:d2:6f:77:76:66:0f:94:a4:d7:26:ec:a0:28:39: 67:83:95:85:a1:92:bd:36:50:ae:69:c8:eb:4f:f5:c8:c8:dc: 0d:f8:41:bd:d7:c8:b1:5f:c7:19:cc:8a:50:56:f0:4c:f1:71: cd:e8:d4:0a:5c:7e:e0:a9:f3:3b:d9:13:24:e2:b1:89:c4:24: de:9c:b6:71:7a:ae:c2:17:60:e2:2e:44:8b:62:72:04:71:6a: 0e:77:db:85:9d:17:33:7d:b6:e6:17:6a:c9:5e:43:d2:bc:53: cb:74:60:c7:34:4f:9c:cf:52:f8:56:54:97:94:d0:d4:a7:26: e7:bc:13:6e:36:6a:f4:31:15:64:5e:37:c9:f0:db:56:1e:ed: 9b:ed:4d:2c:34:6c:76:c2:64:05:a8:a7:05:17:b2:dc:69:34: 50:20:52:1e:46:69:3a:b8:47:53:74:ea:e5:f5:9d:25:66:36: aa:3c:3a:fc:82:ff:95:04:fc:4d:87:a4:04:b5:6b:0d:42:54: f5:79:df:cc:99:72:3b:54:b4:ef:d4:ac:31:29:2b:93:20:dc: 63:de:2a:c1:7d:b5:8c:8a:27:39:43:78:cd:d7:04:ae:26:3a: fd:42:38:f4:67:07:35:e8:56:11:ab:e9:be:4f:93:62:de:9f: 96:1b:b2:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGoX4K7Xp0xQZPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE4OWQ2MmMtYTA4ZS00YzRlLTlmNDctYTQwZDE2Mjlm MDkxMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NTdhZjZiYTgtNjY3NS00MzAzLWIzN2ItMTE1YjQxMTRjMGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrfDAV0NNqI88dZiWkxmq5L2W4yo4GV7rPVr baeqn0np/ZIVT0/8eSKqX+xGi5Eglup2uK5s0SZqQY2NNOMRGDR0Oqge5J5fLkDg Mgx6qc9m7h0+REp+CpxIcbuEqgjK5vJgqMPPNwNij6oEPO0ApbOFm78TysabVQ2w iWqdYr59RUoCWNRGj/pLL3SDA76RIXmhgyQwMZtd+/FhxU33QgTphl7c0svIBbQM g8BjOzq2OtIWfRoAHJeIM6SAtmlayV9AFBgdOOO6E/za7odziZj3RNnLBQ5PH8ef /yRi3GdBydtnakPP1s8VQ6MVhejNYLBvfzmjdQu7P8pFJl6kGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkjDF2jirXIpFKdg7D6Z+LkT1XYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5 ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBkMTYyOWYwOTEvMDRmNGEzZmItNDQyZS0z MzE0LTkwYjktYjExZDkzY2JjYThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWE4OWQ2MmMtYTA4ZS00YzRlLTlm NDctYTQwZDE2MjlmMDkxLzVhODlkNjJjLWEwOGUtNGM0ZS05ZjQ3LWE0MGQxNjI5 ZjA5MS5jcmwwHwYDVR0jBBgwFoAU8FWyS0Mw1eDX0obNoZJEPF1KgJowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBk MTYyOWYwOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiEFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0ZosPSb3d2Zg+UpNcm7KAoOWeDlYWhkr02UK5pyOtP9cjI3A34Qb3X yLFfxxnMilBW8Ezxcc3o1ApcfuCp8zvZEyTisYnEJN6ctnF6rsIXYOIuRIticgRx ag5324WdFzN9tuYXasleQ9K8U8t0YMc0T5zPUvhWVJeU0NSnJue8E242avQxFWRe N8nw21Ye7ZvtTSw0bHbCZAWopwUXstxpNFAgUh5GaTq4R1N06uX1nSVmNqo8OvyC /5UE/E2HpAS1aw1CVPV538yZcjtUtO/UrDEpK5Mg3GPeKsF9tYyKJzlDeM3XBK4m Ov1COPRnBzXoVhGr6b5Pk2Len5YbsuE= -----END CERTIFICATE-----Generated at Fri Apr 3 17:39:17 2026 by rpki-client