$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/f5a8fcc3-bc7f-368f-b5a8-05c1c928acc1.roa File: f5a8fcc3-bc7f-368f-b5a8-05c1c928acc1.roa (raw, json) Hash identifier: 38+uHtgwckP5wro4+RnNaiuIOt57jQV1pPV6BqO7BIA= Subject key identifier: B8:EA:08:4D:6B:42:48:82:FE:A1:E5:A9:2B:7A:D6:A3:C5:01:4B:1C Certificate issuer: /CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Certificate serial: 010D0C9F4328584B9CA23A55D56573A6B1F5ED80 Authority key identifier: F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/f5a8fcc3-bc7f-368f-b5a8-05c1c928acc1.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 54309 IP address blocks: 66.33.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:3a:55:d5:65:73:a6:b1:f5:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=3e7e9d98-cd2c-4fea-b901-e86b91656645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:24:a5:a5:35:6a:b4:b5:ea:9b:c4:84:67:e1: d0:22:7f:23:46:d4:f8:c1:4b:35:d4:51:10:f5:dd: 2e:07:6e:59:7f:a9:e2:63:cc:1e:5f:12:b3:95:df: 6a:42:48:39:61:d3:61:72:ff:d1:6b:6a:34:98:af: cc:57:e3:42:5f:09:55:5b:24:8e:c3:a6:86:6a:6e: 19:65:76:22:f1:12:5c:3e:78:8c:a6:ef:d9:ed:bd: 02:3a:35:d2:49:45:46:46:3c:61:38:88:d9:4f:ff: a4:1a:15:a6:d6:fd:9f:48:01:1a:9b:43:c6:58:27: b6:b5:bb:f7:55:09:e5:1b:86:9e:4c:d1:3b:6e:e5: 18:c5:32:50:ff:4b:8c:e3:27:8b:95:7c:c9:8a:a0: ff:0c:a3:5c:f8:a3:e8:35:41:1e:7d:83:41:ff:cc: d4:c4:a4:9d:3e:ad:01:b4:41:1c:3f:f9:2a:8b:1d: e8:a7:86:9a:8c:4f:16:18:b9:6c:17:d6:98:f9:48: 2c:5d:91:fd:f4:5c:6f:36:62:26:9e:03:6e:2a:43: c9:10:1b:fa:b3:00:d6:f8:94:fc:a7:99:aa:93:e9: 4e:23:47:f1:06:74:87:fe:62:da:d3:73:80:2f:f3: 1a:2a:6a:24:8f:4a:6c:ad:35:42:7a:33:5d:12:e7: 6a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EA:08:4D:6B:42:48:82:FE:A1:E5:A9:2B:7A:D6:A3:C5:01:4B:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/f5a8fcc3-bc7f-368f-b5a8-05c1c928acc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl X509v3 Authority Key Identifier: keyid:F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer sbgp-ipAddrBlock: critical IPv4: 66.33.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:d9:3a:ca:ec:e5:6c:a6:df:44:43:23:b2:3e:20:95:65:65: 41:a5:9b:18:9e:0b:74:df:3c:5c:9f:a7:c3:82:32:37:5a:87: 47:ad:bc:52:04:69:e4:d4:bf:ca:50:98:3a:3e:de:1e:94:07: f0:4b:f9:75:6b:76:d3:a5:52:8f:62:da:1a:82:9e:37:f6:77: 3c:53:68:4e:7b:12:1a:b4:ee:44:bb:db:4d:2d:61:f4:de:b4: c5:f4:35:c0:e0:9f:ed:59:bd:a8:44:f3:b9:5a:e6:f3:d8:63: 64:4f:e8:f1:09:64:84:2e:7c:14:b4:24:44:3d:26:28:ad:fb: d2:f3:45:a8:02:40:94:e7:88:fa:e9:99:b3:b4:7e:57:56:68: 63:04:93:20:29:b0:ce:70:31:79:c4:5f:ec:c6:5b:17:a2:0a: 74:45:61:df:6e:d0:32:e7:91:25:50:e5:4f:04:d4:b7:e2:cb: b7:da:35:b1:9f:b3:a5:56:a5:4a:fb:d1:84:17:d5:e0:de:23: 56:7f:24:39:29:6e:9d:30:66:d2:23:fd:a9:b6:f7:84:7e:a6: 7b:48:5e:8e:3d:9a:3b:da:66:21:76:d7:f4:08:e1:00:50:21: 11:40:7e:8a:46:ab:3e:60:dd:a9:00:04:53:e3:5e:a3:bc:62: 9f:d7:fd:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucojpV1WVzprH17YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE4OWQ2MmMtYTA4ZS00YzRlLTlmNDctYTQwZDE2Mjlm MDkxMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk M2U3ZTlkOTgtY2QyYy00ZmVhLWI5MDEtZTg2YjkxNjU2NjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtySlpTVqtLXqm8SEZ+HQIn8jRtT4wUs11FEQ 9d0uB25Zf6niY8weXxKzld9qQkg5YdNhcv/Ra2o0mK/MV+NCXwlVWySOw6aGam4Z ZXYi8RJcPniMpu/Z7b0COjXSSUVGRjxhOIjZT/+kGhWm1v2fSAEam0PGWCe2tbv3 VQnlG4aeTNE7buUYxTJQ/0uM4yeLlXzJiqD/DKNc+KPoNUEefYNB/8zUxKSdPq0B tEEcP/kqix3op4aajE8WGLlsF9aY+UgsXZH99FxvNmImngNuKkPJEBv6swDW+JT8 p5mqk+lOI0fxBnSH/mLa03OAL/MaKmokj0psrTVCejNdEudqrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjqCE1rQkiC/qHlqSt61qPFAUscMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5 ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBkMTYyOWYwOTEvZjVhOGZjYzMtYmM3Zi0z NjhmLWI1YTgtMDVjMWM5MjhhY2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWE4OWQ2MmMtYTA4ZS00YzRlLTlm NDctYTQwZDE2MjlmMDkxLzVhODlkNjJjLWEwOGUtNGM0ZS05ZjQ3LWE0MGQxNjI5 ZjA5MS5jcmwwHwYDVR0jBBgwFoAU8FWyS0Mw1eDX0obNoZJEPF1KgJowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBk MTYyOWYwOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiEEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETZOsrs5Wym30RDI7I+IJVlZUGlmxieC3TfPFyfp8OCMjdah0etvFIE aeTUv8pQmDo+3h6UB/BL+XVrdtOlUo9i2hqCnjf2dzxTaE57Ehq07kS7200tYfTe tMX0NcDgn+1ZvahE87la5vPYY2RP6PEJZIQufBS0JEQ9Jiit+9LzRagCQJTniPrp mbO0fldWaGMEkyApsM5wMXnEX+zGWxeiCnRFYd9u0DLnkSVQ5U8E1Lfiy7faNbGf s6VWpUr70YQX1eDeI1Z/JDkpbp0wZtIj/am294R+pntIXo49mjvaZiF21/QI4QBQ IRFAfopGqz5g3akABFPjXqO8Yp/X/dI= -----END CERTIFICATE-----Generated at Mon Nov 3 11:18:48 2025 by rpki-client