$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/209f05b0-1628-31e9-a192-0c7be9aca1b5.roa File: 209f05b0-1628-31e9-a192-0c7be9aca1b5.roa (raw, json) Hash identifier: fDf8F/wtcUVDtxX75q7PjUld3xy4gZ6RCQJROUtSa8Y= Subject key identifier: C8:A0:61:64:2A:AC:B4:EF:6C:3C:0B:56:6D:DC:C8:D0:BD:4E:45:C7 Certificate issuer: /CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4 Certificate serial: 010D0C9F4328584D037D07D76AEA48D10E959E80 Authority key identifier: F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/209f05b0-1628-31e9-a192-0c7be9aca1b5.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 16509 IP address blocks: 66.33.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:07:d7:6a:ea:48:d1:0e:95:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=5f88eef4-cded-4059-9f0e-15cdd1bc85a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d0:31:eb:0e:57:14:0c:ec:b3:66:2c:74:bb: 43:19:fa:74:fc:81:89:15:a6:b1:b9:e8:d5:c0:d4: 93:03:6b:c7:be:76:bf:f0:07:63:ce:56:75:d7:1f: 98:57:34:04:f8:18:f6:62:d9:e3:24:02:69:5f:45: 2b:79:48:e5:ef:5c:f6:ae:7c:90:ed:dd:f0:b5:4e: 05:1d:f5:45:ff:8c:32:15:e0:41:2e:9a:0f:d9:2e: 63:a4:e8:47:b6:b9:92:26:c0:8a:59:41:f8:11:a1: 33:bb:71:99:f4:cf:8c:1f:12:8d:2d:d0:b3:b4:59: cd:2a:5b:17:ea:8b:0e:1b:d1:8a:f5:ad:a3:2c:37: 39:62:c6:74:20:1c:23:49:aa:76:4a:c4:91:0e:f3: 3f:66:ab:dd:23:3f:d5:00:43:fb:12:9e:0b:9b:09: 32:89:65:85:5b:24:36:3c:68:30:2c:9f:4c:bb:2b: a2:a2:46:83:60:1c:9d:c3:f3:44:7d:cc:f1:ab:f3: ba:bb:70:04:f0:f7:94:fd:c4:ff:5d:0e:c6:2f:3e: f1:50:73:72:9d:e2:8d:1b:22:eb:ab:34:8d:b5:c2: c6:f9:d9:c8:63:1d:62:dd:dd:3d:bc:b7:96:30:92: 3f:0d:91:f1:44:be:2e:4d:43:a5:04:b3:76:a4:55: 33:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A0:61:64:2A:AC:B4:EF:6C:3C:0B:56:6D:DC:C8:D0:BD:4E:45:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/209f05b0-1628-31e9-a192-0c7be9aca1b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl X509v3 Authority Key Identifier: keyid:F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer sbgp-ipAddrBlock: critical IPv4: 66.33.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:fc:e4:d4:a0:06:07:99:df:6b:66:05:89:45:ec:9c:68:bc: a4:a8:b1:37:10:b9:41:2a:02:0e:17:49:98:f1:a7:a5:3b:7a: ed:86:25:27:8a:6e:27:5c:e5:9f:21:af:1a:7a:8f:44:a1:bd: 2a:7c:13:43:66:31:ca:19:4a:90:53:30:54:2d:8b:c8:12:ad: ed:d1:2f:12:78:53:b3:f1:ff:7d:5a:36:23:66:76:c0:b5:65: 16:b0:28:b1:9a:5f:b7:11:4a:0e:2b:dd:97:ab:2f:f6:9e:38: 32:e3:f5:8a:94:a2:d9:9c:a7:61:0c:fa:3a:57:03:87:c2:e0: 56:cb:64:0f:8c:8a:91:a5:33:40:cd:9b:be:1d:1b:57:e2:9f: 51:78:e6:61:61:41:e1:68:0a:a7:15:50:89:62:d9:67:db:02: 60:94:35:e5:84:ab:9c:7f:f9:e0:e0:f5:e8:56:c3:12:49:0e: 49:22:6a:30:9f:26:ad:7d:58:9e:e0:38:26:dc:fa:cd:bd:6f: d0:ba:73:db:ab:f2:1e:05:33:95:d1:6d:d6:62:f2:f7:27:20: 72:41:88:e3:a8:5a:e6:d3:21:76:1c:aa:3e:30:91:14:f3:82: ae:c1:a5:3e:c2:b1:be:e3:b6:04:47:4f:1e:d8:71:e0:c9:f5: b4:55:54:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfQfXaupI0Q6VnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdhNmZiYzQtNTllMi00OWI0LWEzNDUtM2VkZGU4MWYy NmE0MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk NWY4OGVlZjQtY2RlZC00MDU5LTlmMGUtMTVjZGQxYmM4NWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNAx6w5XFAzss2YsdLtDGfp0/IGJFaaxuejV wNSTA2vHvna/8AdjzlZ11x+YVzQE+Bj2YtnjJAJpX0UreUjl71z2rnyQ7d3wtU4F HfVF/4wyFeBBLpoP2S5jpOhHtrmSJsCKWUH4EaEzu3GZ9M+MHxKNLdCztFnNKlsX 6osOG9GK9a2jLDc5YsZ0IBwjSap2SsSRDvM/ZqvdIz/VAEP7Ep4LmwkyiWWFWyQ2 PGgwLJ9MuyuiokaDYBydw/NEfczxq/O6u3AE8PeU/cT/XQ7GLz7xUHNyneKNGyLr qzSNtcLG+dnIYx1i3d09vLeWMJI/DZHxRL4uTUOlBLN2pFUz3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMigYWQqrLTvbDwLVm3cyNC9TkXHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80N2E2 ZmJjNC01OWUyLTQ5YjQtYTM0NS0zZWRkZTgxZjI2YTQvMjA5ZjA1YjAtMTYyOC0z MWU5LWExOTItMGM3YmU5YWNhMWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDdhNmZiYzQtNTllMi00OWI0LWEz NDUtM2VkZGU4MWYyNmE0LzQ3YTZmYmM0LTU5ZTItNDliNC1hMzQ1LTNlZGRlODFm MjZhNC5jcmwwHwYDVR0jBBgwFoAU8A3+W3wnOkCARHzodZuLMa3LV1wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80N2E2ZmJjNC01OWUyLTQ5YjQtYTM0NS0zZWRk ZTgxZjI2YTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGb85NSgBgeZ32tmBYlF7JxovKSosTcQuUEqAg4XSZjxp6U7eu2GJSeK bidc5Z8hrxp6j0ShvSp8E0NmMcoZSpBTMFQti8gSre3RLxJ4U7Px/31aNiNmdsC1 ZRawKLGaX7cRSg4r3ZerL/aeODLj9YqUotmcp2EM+jpXA4fC4FbLZA+MipGlM0DN m74dG1fin1F45mFhQeFoCqcVUIli2WfbAmCUNeWEq5x/+eDg9ehWwxJJDkkiajCf Jq19WJ7gOCbc+s29b9C6c9ur8h4FM5XRbdZi8vcnIHJBiOOoWubTIXYcqj4wkRTz gq7BpT7Csb7jtgRHTx7YceDJ9bRVVJ0= -----END CERTIFICATE-----Generated at Mon Mar 2 08:38:39 2026 by rpki-client