$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/f5a8fcc3-bc7f-368f-b5a8-05c1c928acc1.roa File: f5a8fcc3-bc7f-368f-b5a8-05c1c928acc1.roa (raw, json) Hash identifier: 3+sxJhervx7MPaTFNOvEkVw5Z/Krlc8jh8aSuGcZTvA= Subject key identifier: D3:B3:A3:8A:6C:44:AC:D7:89:86:28:BB:15:97:1D:46:B7:C1:EA:68 Certificate issuer: /CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Certificate serial: 010D0C9F4328584D5E1A7BEA42EF41FDAEFABC80 Authority key identifier: F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/f5a8fcc3-bc7f-368f-b5a8-05c1c928acc1.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 54309 IP address blocks: 66.33.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:7b:ea:42:ef:41:fd:ae:fa:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=5b3c6156-50ad-4708-acab-cc584e7551f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a3:d0:16:36:0c:16:c8:e3:9f:fa:37:2c:36: 7d:6b:87:36:0f:37:41:8b:65:fb:0e:c7:bd:ce:36: 8b:68:71:94:4d:86:53:ef:9d:2d:af:7c:70:07:1e: a7:ff:32:72:49:7a:29:f6:c8:6f:27:2d:53:e1:8c: c8:62:cc:0a:1c:e0:09:81:6f:df:76:37:f0:02:dc: 20:b3:10:f3:dd:16:69:24:ed:07:86:7f:fd:c6:fc: 32:1b:49:23:46:06:24:32:4d:e7:2b:33:7b:ab:ed: ad:b1:f2:37:20:d1:80:e6:7b:a9:da:23:05:db:0d: ac:76:89:11:ee:d3:d0:e9:29:9a:d4:2d:57:66:e1: 12:18:66:94:41:a9:fc:bd:f7:7d:54:31:da:74:41: 12:e0:98:23:ad:f1:3d:a6:38:65:81:d2:bc:c9:9b: c4:b4:1c:7b:3f:16:4d:60:01:96:67:75:9d:cb:90: 0b:be:39:3e:b2:54:7b:66:db:e6:29:6a:29:16:44: 69:e6:06:73:5c:19:ad:79:02:ec:70:67:64:89:d3: 80:30:06:fd:e3:fa:53:e9:a6:76:47:84:f7:40:82: 0e:0c:91:c4:db:27:57:6c:dd:56:36:67:a4:ab:e8: ea:42:30:97:cb:49:d3:26:5e:37:06:3c:93:66:c3: 37:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B3:A3:8A:6C:44:AC:D7:89:86:28:BB:15:97:1D:46:B7:C1:EA:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/f5a8fcc3-bc7f-368f-b5a8-05c1c928acc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl X509v3 Authority Key Identifier: keyid:F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer sbgp-ipAddrBlock: critical IPv4: 66.33.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:b6:40:91:79:a1:f6:e5:65:bc:3a:78:1e:cb:64:69:63:51: 89:e3:e9:93:b7:0e:0f:6a:1b:74:08:af:1a:38:11:6d:c8:48: 38:0b:6d:cc:03:06:da:85:c1:d0:41:fd:30:3e:36:6b:0c:5b: 2d:9a:3d:44:5a:e1:0c:8a:d2:75:8c:16:33:ff:be:30:ce:63: 73:ef:c5:da:08:04:6d:5e:3b:9e:ba:44:dd:d1:12:27:c0:cd: 6e:c0:d2:7a:b5:b4:1f:71:9f:8a:15:80:55:7f:91:82:b2:84: 83:8c:1b:36:f0:b0:37:04:cb:ad:94:5d:53:80:62:c0:57:af: 57:a0:6a:ef:9e:62:07:f2:d6:66:17:6f:37:91:7e:67:9b:7e: a7:d9:80:6a:98:3a:bd:7e:cc:fa:74:da:60:65:b7:42:a2:b3: 1f:23:15:a4:ce:76:fe:d5:73:18:b7:68:d6:37:b4:09:07:29: 74:47:08:e6:ed:bd:ea:4a:c4:03:b0:a1:dc:0f:f6:9e:fd:36: 54:14:5a:d1:7f:68:10:47:f7:d6:a6:fd:4e:51:51:91:66:82: 19:ab:2b:fb:8c:57:3b:a0:ae:96:e6:ab:2f:ea:aa:ea:26:74: 1f:cd:a9:5b:a5:49:c5:09:26:31:ec:2a:2d:75:1b:46:75:4c: b7:82:bf:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGnvqQu9B/a76vIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE4OWQ2MmMtYTA4ZS00YzRlLTlmNDctYTQwZDE2Mjlm MDkxMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NWIzYzYxNTYtNTBhZC00NzA4LWFjYWItY2M1ODRlNzU1MWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaPQFjYMFsjjn/o3LDZ9a4c2DzdBi2X7Dse9 zjaLaHGUTYZT750tr3xwBx6n/zJySXop9shvJy1T4YzIYswKHOAJgW/fdjfwAtwg sxDz3RZpJO0Hhn/9xvwyG0kjRgYkMk3nKzN7q+2tsfI3INGA5nup2iMF2w2sdokR 7tPQ6Sma1C1XZuESGGaUQan8vfd9VDHadEES4JgjrfE9pjhlgdK8yZvEtBx7PxZN YAGWZ3Wdy5ALvjk+slR7ZtvmKWopFkRp5gZzXBmteQLscGdkidOAMAb94/pT6aZ2 R4T3QIIODJHE2ydXbN1WNmekq+jqQjCXy0nTJl43BjyTZsM35QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOzo4psRKzXiYYouxWXHUa3wepoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5 ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBkMTYyOWYwOTEvZjVhOGZjYzMtYmM3Zi0z NjhmLWI1YTgtMDVjMWM5MjhhY2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWE4OWQ2MmMtYTA4ZS00YzRlLTlm NDctYTQwZDE2MjlmMDkxLzVhODlkNjJjLWEwOGUtNGM0ZS05ZjQ3LWE0MGQxNjI5 ZjA5MS5jcmwwHwYDVR0jBBgwFoAU8FWyS0Mw1eDX0obNoZJEPF1KgJowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBk MTYyOWYwOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiEEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB22QJF5ofblZbw6eB7LZGljUYnj6ZO3Dg9qG3QIrxo4EW3ISDgLbcwD BtqFwdBB/TA+NmsMWy2aPURa4QyK0nWMFjP/vjDOY3PvxdoIBG1eO566RN3REifA zW7A0nq1tB9xn4oVgFV/kYKyhIOMGzbwsDcEy62UXVOAYsBXr1egau+eYgfy1mYX bzeRfmebfqfZgGqYOr1+zPp02mBlt0Kisx8jFaTOdv7Vcxi3aNY3tAkHKXRHCObt vepKxAOwodwP9p79NlQUWtF/aBBH99am/U5RUZFmghmrK/uMVzugrpbmqy/qquom dB/NqVulScUJJjHsKi11G0Z1TLeCvwQ= -----END CERTIFICATE-----Generated at Fri Apr 3 17:44:44 2026 by rpki-client