$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/b470368c-8f5a-3c76-a909-c98cd3caf801.roa File: b470368c-8f5a-3c76-a909-c98cd3caf801.roa (raw, json) Hash identifier: wTjPvQYVfwlDcorA5zrogSY7j+XQwjnZkAWIGZDUVBY= Subject key identifier: 07:62:34:18:18:F7:01:5D:1C:02:7D:9A:53:F5:46:34:01:3C:90:ED Certificate issuer: /CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f Certificate serial: 010D0C9F4328584F3CE297B7038E134E2B4153A0 Authority key identifier: E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/b470368c-8f5a-3c76-a909-c98cd3caf801.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 400427 IP address blocks: 66.33.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:97:b7:03:8e:13:4e:2b:41:53:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=fd552ba2-19dc-4700-a8f7-387341c53266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:34:5d:76:d2:71:6d:ff:6d:56:af:a2:e6:87: f9:76:a2:06:40:25:40:df:99:93:20:b7:c4:a7:4d: 87:23:ed:e8:99:cb:d4:7f:a4:d3:a9:30:07:99:81: 3a:c4:fc:df:77:68:e5:8e:bb:68:28:39:4b:03:3d: 57:23:9a:63:f3:5f:72:6a:9f:c1:3b:df:3c:de:d5: e3:cf:70:e3:5a:e7:12:0c:34:92:5e:55:2f:3f:4b: fe:47:64:97:69:db:cc:e2:3b:b9:f8:9b:6f:95:6a: c7:0a:92:fa:0c:83:05:6b:53:db:c9:c9:1b:7e:d2: 83:fb:86:d9:89:36:fe:ec:e3:d9:1a:80:52:4e:87: da:24:52:85:79:f2:21:5b:b6:d7:61:66:84:ba:49: fd:f3:bf:5a:c4:47:60:a0:8e:75:4b:f5:18:74:8e: c6:2c:a9:64:af:ef:30:a1:7e:11:59:ec:35:90:f8: ac:36:3f:25:56:77:69:4c:05:ba:d1:73:25:96:94: 8f:34:a2:47:47:b6:ed:fa:d2:4f:ea:6d:94:c9:07: 8c:8a:8d:70:66:9d:ac:54:9a:6e:19:91:03:1f:87: 26:fc:ad:ff:28:07:54:02:8d:ef:3b:b7:48:5d:b4: f7:98:c5:7e:53:be:0a:2c:5b:8f:19:bc:f7:d5:67: ee:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:62:34:18:18:F7:01:5D:1C:02:7D:9A:53:F5:46:34:01:3C:90:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/b470368c-8f5a-3c76-a909-c98cd3caf801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.crl X509v3 Authority Key Identifier: keyid:E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer sbgp-ipAddrBlock: critical IPv4: 66.33.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:1f:e9:89:5a:95:53:d0:d3:96:98:87:3d:a5:95:0d:a2:4f: b3:70:70:1f:25:c1:a1:c8:a2:64:04:af:fb:30:5c:12:e3:85: d4:cf:15:a7:97:a8:50:21:c7:ee:d6:8b:00:7b:b7:8f:ad:0d: 41:3e:e4:69:ef:89:25:a3:98:21:78:ab:b2:95:b2:89:22:8a: dc:5e:43:ed:a6:d6:76:fc:f0:39:a9:ad:a2:0f:ca:b9:7d:c6: 7f:3f:d5:27:ed:cb:b6:e1:78:63:13:47:a8:d6:08:33:45:4b: 60:d2:b3:9a:1d:eb:7f:0b:a1:9c:9b:00:9e:d1:06:bc:c3:7d: 33:bd:67:46:16:4a:1d:67:03:17:46:58:9f:d3:64:33:5a:2e: 20:f7:f6:c7:e3:3f:07:bd:1e:7f:de:b1:48:6f:a8:44:32:96: 7d:c7:dc:46:23:6d:b8:10:d5:ad:eb:62:f9:04:b6:f8:eb:15: 5b:29:49:3a:38:1c:40:d3:e8:26:dd:62:c0:66:f6:93:07:14: 7b:fb:cd:7f:6c:cc:44:f6:e1:27:3d:06:1d:3a:74:92:73:16: c9:07:05:c5:03:f5:42:90:b1:ff:e5:c1:ef:c8:a2:57:11:60: 3b:6a:cb:6e:a7:bc:74:d2:dd:d8:a8:9d:7f:f1:3f:73:48:f7: 46:63:cc:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884pe3A44TTitBU6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2N2EzNzQtZGJkMy00YmZhLWI4MmMtNmRiZmQ2NGU1 NzhmMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk ZmQ1NTJiYTItMTlkYy00NzAwLWE4ZjctMzg3MzQxYzUzMjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zRddtJxbf9tVq+i5of5dqIGQCVA35mTILfE p02HI+3omcvUf6TTqTAHmYE6xPzfd2jljrtoKDlLAz1XI5pj819yap/BO9883tXj z3DjWucSDDSSXlUvP0v+R2SXadvM4ju5+JtvlWrHCpL6DIMFa1PbyckbftKD+4bZ iTb+7OPZGoBSTofaJFKFefIhW7bXYWaEukn9879axEdgoI51S/UYdI7GLKlkr+8w oX4RWew1kPisNj8lVndpTAW60XMllpSPNKJHR7bt+tJP6m2UyQeMio1wZp2sVJpu GZEDH4cm/K3/KAdUAo3vO7dIXbT3mMV+U74KLFuPGbz31WfuiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdiNBgY9wFdHAJ9mlP1RjQBPJDtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZTY3 YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJmZDY0ZTU3OGYvYjQ3MDM2OGMtOGY1YS0z Yzc2LWE5MDktYzk4Y2QzY2FmODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmU2N2EzNzQtZGJkMy00YmZhLWI4 MmMtNmRiZmQ2NGU1NzhmLzJlNjdhMzc0LWRiZDMtNGJmYS1iODJjLTZkYmZkNjRl NTc4Zi5jcmwwHwYDVR0jBBgwFoAU4EaVkSgTL9WOY7iPKkNSxMOhOY4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZTY3YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJm ZDY0ZTU3OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiFPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0f6YlalVPQ05aYhz2llQ2iT7NwcB8lwaHIomQEr/swXBLjhdTPFaeX qFAhx+7WiwB7t4+tDUE+5GnviSWjmCF4q7KVsokiitxeQ+2m1nb88DmpraIPyrl9 xn8/1Sfty7bheGMTR6jWCDNFS2DSs5od638LoZybAJ7RBrzDfTO9Z0YWSh1nAxdG WJ/TZDNaLiD39sfjPwe9Hn/esUhvqEQyln3H3EYjbbgQ1a3rYvkEtvjrFVspSTo4 HEDT6CbdYsBm9pMHFHv7zX9szET24Sc9Bh06dJJzFskHBcUD9UKQsf/lwe/IolcR YDtqy26nvHTS3dionX/xP3NI90ZjzLc= -----END CERTIFICATE-----Generated at Thu Sep 24 06:49:08 2026 by rpki-client