$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa File: 04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa (raw, json) Hash identifier: lRRBw6L0sXAdunvapLvpkKWNyd2Kbw4714sMLupzRjE= Subject key identifier: 09:02:8A:4F:62:12:22:9F:0B:6A:1B:7C:A7:A0:DD:45:FA:17:00:45 Certificate issuer: /CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Certificate serial: 010D0C9F4328584EE0C224DF4282F24FC1330180 Authority key identifier: F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 54309 IP address blocks: 66.33.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:24:df:42:82:f2:4f:c1:33:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=c2d0336e-8cac-49f4-a814-a36600e82831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b9:07:6c:e0:ed:6d:7a:8c:9d:b0:2d:f5:0a: f4:2b:6c:b4:a8:d0:3d:1c:6a:e4:7c:2c:7d:1c:a0: e8:30:56:ef:f9:d3:a1:40:6e:74:82:75:81:ff:84: a8:31:06:5b:db:11:57:c1:c5:6a:f6:14:78:ba:30: ce:71:c7:53:03:28:56:4c:03:2b:28:cc:a5:f2:0b: 94:a6:30:1b:51:45:d3:2e:68:69:04:84:4a:fa:8d: d5:0a:89:18:4c:aa:ec:fc:80:1c:ae:d2:80:77:bf: ea:da:66:1b:74:5e:5c:bc:3f:f8:59:13:ed:58:f5: b1:50:37:9f:46:07:fc:5a:e6:48:58:ec:d0:b5:f1: f9:e5:ea:97:c0:19:4e:fd:a8:63:e9:35:8f:a6:ef: f6:80:72:c5:5b:a9:08:28:5d:f7:98:f7:9d:84:ce: 54:bd:90:aa:32:96:b1:63:45:4e:e2:7c:34:fa:53: 23:af:4e:bf:50:49:9a:95:85:bb:e2:49:ed:9c:fa: 9a:96:1c:b0:9a:5a:9e:5c:2d:63:12:6c:15:61:b8: 10:a9:9c:91:f9:a6:3d:40:2e:74:40:fe:93:ab:2e: 48:ae:d3:c4:79:ec:af:64:4f:ee:aa:64:6a:64:26: 87:26:0a:d0:f4:f6:19:9d:f0:9b:ce:42:74:ab:de: bf:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:02:8A:4F:62:12:22:9F:0B:6A:1B:7C:A7:A0:DD:45:FA:17:00:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl X509v3 Authority Key Identifier: keyid:F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer sbgp-ipAddrBlock: critical IPv4: 66.33.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:fb:13:f4:7e:4b:8f:73:85:9e:ba:5d:79:13:b8:84:33:24: c2:c8:16:6e:df:fb:b7:df:2b:4f:ba:3f:bf:d9:fb:e1:d1:b3: 6c:f7:c2:ee:a7:d1:13:89:23:be:cc:ac:bf:25:9c:e9:ca:27: 0f:8b:e9:fb:90:f8:3c:be:8c:63:9b:13:5d:dd:34:5a:39:c7: 23:b1:63:31:13:1f:2b:df:04:75:a3:49:e9:83:b0:65:09:1f: 4a:78:33:de:9e:ac:a2:70:ab:89:f4:b6:73:33:ee:27:35:71: a5:8a:d1:59:67:07:cd:2c:34:2c:69:0a:58:48:8a:35:d0:6c: 2b:e5:4a:dd:31:2a:93:6d:ae:39:f6:06:aa:0e:b0:af:57:52: 36:b5:0e:09:02:21:83:1a:d5:57:f5:d9:f0:27:c8:b1:b4:ec: 63:78:60:4b:7e:8f:c9:69:12:54:50:09:40:33:a0:7b:10:da: fc:a5:07:1f:13:69:93:eb:1d:61:cd:1b:83:41:b6:b5:ec:d8: 89:c9:e4:eb:f5:84:4f:fe:a1:27:81:eb:c6:fb:7b:00:b1:5f: 7d:9c:96:40:61:37:79:f1:f2:6a:62:e7:cb:c3:88:9b:31:1a: cc:2b:24:32:fb:e4:e0:a3:37:62:c9:4f:c1:36:47:cb:25:b9: 3f:21:1c:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwiTfQoLyT8EzAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE4OWQ2MmMtYTA4ZS00YzRlLTlmNDctYTQwZDE2Mjlm MDkxMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk YzJkMDMzNmUtOGNhYy00OWY0LWE4MTQtYTM2NjAwZTgyODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7kHbODtbXqMnbAt9Qr0K2y0qNA9HGrkfCx9 HKDoMFbv+dOhQG50gnWB/4SoMQZb2xFXwcVq9hR4ujDOccdTAyhWTAMrKMyl8guU pjAbUUXTLmhpBIRK+o3VCokYTKrs/IAcrtKAd7/q2mYbdF5cvD/4WRPtWPWxUDef Rgf8WuZIWOzQtfH55eqXwBlO/ahj6TWPpu/2gHLFW6kIKF33mPedhM5UvZCqMpax Y0VO4nw0+lMjr06/UEmalYW74kntnPqalhywmlqeXC1jEmwVYbgQqZyR+aY9QC50 QP6Tqy5IrtPEeeyvZE/uqmRqZCaHJgrQ9PYZnfCbzkJ0q96/fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkCik9iEiKfC2obfKeg3UX6FwBFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5 ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBkMTYyOWYwOTEvMDRmNGEzZmItNDQyZS0z MzE0LTkwYjktYjExZDkzY2JjYThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWE4OWQ2MmMtYTA4ZS00YzRlLTlm NDctYTQwZDE2MjlmMDkxLzVhODlkNjJjLWEwOGUtNGM0ZS05ZjQ3LWE0MGQxNjI5 ZjA5MS5jcmwwHwYDVR0jBBgwFoAU8FWyS0Mw1eDX0obNoZJEPF1KgJowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBk MTYyOWYwOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiEFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADf7E/R+S49zhZ66XXkTuIQzJMLIFm7f+7ffK0+6P7/Z++HRs2z3wu6n 0ROJI77MrL8lnOnKJw+L6fuQ+Dy+jGObE13dNFo5xyOxYzETHyvfBHWjSemDsGUJ H0p4M96erKJwq4n0tnMz7ic1caWK0VlnB80sNCxpClhIijXQbCvlSt0xKpNtrjn2 BqoOsK9XUja1DgkCIYMa1Vf12fAnyLG07GN4YEt+j8lpElRQCUAzoHsQ2vylBx8T aZPrHWHNG4NBtrXs2InJ5Ov1hE/+oSeB68b7ewCxX32clkBhN3nx8mpi58vDiJsx GswrJDL75OCjN2LJT8E2R8sluT8hHDw= -----END CERTIFICATE-----Generated at Tue Aug 25 15:38:08 2026 by rpki-client