$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/f5a8fcc3-bc7f-368f-b5a8-05c1c928acc1.roa File: f5a8fcc3-bc7f-368f-b5a8-05c1c928acc1.roa (raw, json) Hash identifier: aNayKwIwyc3Dhb3aBZS4U1SdY5ebCyoQYngHcYLbG3M= Subject key identifier: AF:9F:D1:C6:38:39:24:F1:9E:FB:14:E8:BD:BD:28:F1:74:5D:1A:18 Certificate issuer: /CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Certificate serial: 010D0C9F4328584EE0C21B2A3D74517D332AEC70 Authority key identifier: F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/f5a8fcc3-bc7f-368f-b5a8-05c1c928acc1.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 54309 IP address blocks: 66.33.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:1b:2a:3d:74:51:7d:33:2a:ec:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=d29b95f0-159c-4292-ab32-d21cb4cf5cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:81:79:f6:4e:b8:2f:87:66:a9:b1:2e:f7:9a: 5d:8f:b3:b3:b0:e9:e6:26:79:54:20:e6:b6:e7:06: 44:93:38:df:5c:e4:be:ff:47:83:b8:5e:b6:dc:25: 9c:98:3c:67:ba:e5:e5:10:81:3c:e6:62:c6:f0:72: a9:33:ed:99:72:5f:a3:04:f3:60:42:a8:eb:10:4f: 0f:9b:49:8c:bd:e2:88:ea:a9:b5:26:f2:b8:ca:54: c1:79:bb:85:8a:9c:cb:27:6c:26:be:ba:9a:b0:bd: 16:2a:12:ef:da:a1:2c:e8:46:90:9b:e8:af:b3:41: b5:e0:e5:24:a1:fc:15:02:ac:13:6f:40:62:f1:b6: f7:41:4e:06:95:c6:13:63:1c:fe:51:f7:d3:c0:03: 28:31:86:08:4e:1f:0f:09:24:6b:91:a8:0d:b2:61: 9c:ca:a7:77:b0:bb:9d:e2:c7:2d:b4:57:b9:5f:59: da:b5:e9:f5:fb:3a:c0:0f:21:1e:31:c5:63:c2:98: 08:90:ef:75:66:f3:a7:b8:db:f1:98:d8:25:d1:07: b5:06:74:14:f7:53:1e:66:e2:0d:d3:59:6b:9c:37: 91:83:7e:3a:96:21:1e:fb:e9:6a:c2:8c:90:20:04: ec:52:e4:c2:2a:9e:87:2e:07:39:27:14:59:73:e5: da:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9F:D1:C6:38:39:24:F1:9E:FB:14:E8:BD:BD:28:F1:74:5D:1A:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/f5a8fcc3-bc7f-368f-b5a8-05c1c928acc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl X509v3 Authority Key Identifier: keyid:F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer sbgp-ipAddrBlock: critical IPv4: 66.33.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:d6:0c:cc:15:8b:96:5a:52:22:5b:c9:bc:c5:3b:a4:85:12: 9b:e8:fb:a6:ea:63:71:07:2c:84:94:f2:2c:be:ca:c6:0b:45: f9:3d:b5:46:51:9b:55:dc:d1:27:de:58:f5:4c:0c:65:d9:55: a3:2c:c9:9d:51:29:26:5f:9d:48:a7:e2:9c:7f:87:cc:44:c6: d2:8f:92:d8:dd:fd:1e:db:58:f4:bf:fc:7a:e4:95:c7:88:de: b5:fa:c4:f8:bb:9b:16:9e:bf:b1:27:72:9b:49:07:21:39:58: 05:89:5f:99:98:44:28:3c:e9:15:9d:da:4f:15:b2:55:8e:7f: be:71:42:5a:bb:e2:f8:95:8f:16:30:01:65:95:0e:ad:cf:bb: d5:76:a1:90:b0:cc:67:b3:8f:4b:49:75:c8:d8:f5:61:82:67: 1b:93:9f:d2:c4:93:1f:4d:98:dd:47:c1:80:8d:c0:31:62:ee: 21:c1:bb:ba:cd:6c:56:4b:d0:49:cb:1a:b4:5d:68:53:bd:c7: 63:5e:39:d9:eb:fb:ba:eb:ac:06:a5:76:fb:39:e7:d4:8e:b0: e3:08:60:66:c7:c1:d9:71:8b:ce:3a:c2:5d:a1:50:7d:11:e4: a6:53:43:e1:17:7b:3b:c4:42:ac:76:be:ab:f7:02:1c:3b:2d: 63:8a:99:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwhsqPXRRfTMq7HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE4OWQ2MmMtYTA4ZS00YzRlLTlmNDctYTQwZDE2Mjlm MDkxMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk ZDI5Yjk1ZjAtMTU5Yy00MjkyLWFiMzItZDIxY2I0Y2Y1Y2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4F59k64L4dmqbEu95pdj7OzsOnmJnlUIOa2 5wZEkzjfXOS+/0eDuF623CWcmDxnuuXlEIE85mLG8HKpM+2Zcl+jBPNgQqjrEE8P m0mMveKI6qm1JvK4ylTBebuFipzLJ2wmvrqasL0WKhLv2qEs6EaQm+ivs0G14OUk ofwVAqwTb0Bi8bb3QU4GlcYTYxz+UffTwAMoMYYITh8PCSRrkagNsmGcyqd3sLud 4scttFe5X1naten1+zrADyEeMcVjwpgIkO91ZvOnuNvxmNgl0Qe1BnQU91MeZuIN 01lrnDeRg346liEe++lqwoyQIATsUuTCKp6HLgc5JxRZc+XaJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+f0cY4OSTxnvsU6L29KPF0XRoYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5 ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBkMTYyOWYwOTEvZjVhOGZjYzMtYmM3Zi0z NjhmLWI1YTgtMDVjMWM5MjhhY2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWE4OWQ2MmMtYTA4ZS00YzRlLTlm NDctYTQwZDE2MjlmMDkxLzVhODlkNjJjLWEwOGUtNGM0ZS05ZjQ3LWE0MGQxNjI5 ZjA5MS5jcmwwHwYDVR0jBBgwFoAU8FWyS0Mw1eDX0obNoZJEPF1KgJowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBk MTYyOWYwOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiEEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrWDMwVi5ZaUiJbybzFO6SFEpvo+6bqY3EHLISU8iy+ysYLRfk9tUZR m1Xc0SfeWPVMDGXZVaMsyZ1RKSZfnUin4px/h8xExtKPktjd/R7bWPS//HrklceI 3rX6xPi7mxaev7EncptJByE5WAWJX5mYRCg86RWd2k8VslWOf75xQlq74viVjxYw AWWVDq3Pu9V2oZCwzGezj0tJdcjY9WGCZxuTn9LEkx9NmN1HwYCNwDFi7iHBu7rN bFZL0EnLGrRdaFO9x2NeOdnr+7rrrAaldvs559SOsOMIYGbHwdlxi846wl2hUH0R 5KZTQ+EXezvEQqx2vqv3Ahw7LWOKmYQ= -----END CERTIFICATE-----Generated at Tue Aug 25 10:13:55 2026 by rpki-client