$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa File: e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa (raw, json) Hash identifier: JRKSVGLcbZbpg2tcWJdAzGBKoYvcTTEMGzK3MDIxePo= Subject key identifier: 01:B6:1C:3D:AB:14:48:A9:E5:4C:0B:2D:D4:CF:09:6D:A3:82:CC:E0 Certificate issuer: /CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4 Certificate serial: 010D0C9F4328584D5E1A6EC9BD84634656911A30 Authority key identifier: F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 16509 IP address blocks: 66.33.34.0/24 maxlen: 24 66.33.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:6e:c9:bd:84:63:46:56:91:1a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=7c1d6b34-eccb-4f57-80d3-8ba5588ebad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:48:1e:4e:3e:80:5d:f7:f3:b7:07:9a:97:5d: 4a:ce:d2:31:5a:90:08:21:30:ac:0a:4c:d0:84:09: 5f:69:13:05:51:bb:fe:6d:95:38:0a:77:b7:2c:13: 0b:cd:51:db:b3:20:80:5b:6b:e0:32:13:07:ca:5f: a3:3b:52:ef:52:cc:49:68:e6:ce:72:84:30:27:cd: fe:13:1a:93:06:b9:5f:bb:7d:e1:73:29:4d:ce:d5: a8:c9:e4:0a:4e:3b:54:16:7b:ba:85:35:56:8f:d4: a6:ee:ca:db:97:55:03:8f:13:62:5f:5a:c4:5f:e6: fb:71:3a:cd:1e:57:9a:e5:cc:6c:74:df:8d:d1:86: 53:54:96:3a:a7:f3:96:05:72:e8:25:0b:d2:d4:88: f2:57:71:eb:79:82:b6:f3:72:c6:42:b7:af:b7:77: 96:3b:79:fe:7d:d3:3f:25:c3:66:d3:7e:55:b9:35: c4:24:77:36:a1:47:29:39:e3:bf:da:fb:e3:7f:3e: d9:97:34:e7:88:dd:84:0b:1a:f1:b9:aa:23:59:8b: aa:63:3b:38:51:f0:30:1d:f2:ec:30:01:cb:08:6a: 51:3e:58:05:0a:04:d9:ef:5f:45:0f:37:c0:dc:c2: a2:94:ba:af:b4:e5:a2:fc:64:87:10:1a:d5:88:fa: 91:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B6:1C:3D:AB:14:48:A9:E5:4C:0B:2D:D4:CF:09:6D:A3:82:CC:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl X509v3 Authority Key Identifier: keyid:F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer sbgp-ipAddrBlock: critical IPv4: 66.33.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:fb:f1:2d:99:39:45:62:b6:89:fe:0b:25:8d:d7:9f:8d:16: 76:98:3f:0b:49:86:11:b6:01:ed:bc:01:f6:7b:68:11:fa:2f: c2:8a:ed:ea:c6:12:92:25:07:19:8a:5b:93:ad:35:ca:d0:23: 5d:3d:c1:8d:52:c6:96:b1:16:8f:13:2b:bd:90:9c:95:d2:a9: bc:7c:c6:d6:fb:1b:0d:be:a3:f6:23:72:db:9d:5f:4d:a6:7c: d9:9d:44:8c:7a:2b:2f:89:bb:1b:a3:c8:bb:22:1e:11:9c:96: b3:ef:92:b0:12:00:8e:49:42:6a:c2:b5:c6:ec:40:ec:18:17: 0a:08:14:d0:6b:75:01:43:8b:30:72:86:87:a6:0e:d6:d5:4a: 06:bf:8c:3f:5a:0c:55:88:71:95:0d:d4:74:52:65:bc:43:87: a2:67:e6:5b:da:57:b5:8d:cf:d2:e9:22:4b:6d:1e:de:1d:54: fe:93:ed:b9:45:75:c5:11:a0:b1:6e:4e:5d:40:ca:41:ae:fd: 73:6c:4f:9e:b7:06:8f:d1:2f:df:72:17:0c:33:99:51:cb:dd: 52:43:43:60:47:77:b6:90:ea:10:a1:5b:1b:05:89:03:b0:d1: 5f:84:fd:02:d1:c6:03:9e:23:ca:f7:55:1f:4d:0c:19:cc:d6: 55:43:87:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGm7JvYRjRlaRGjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdhNmZiYzQtNTllMi00OWI0LWEzNDUtM2VkZGU4MWYy NmE0MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk N2MxZDZiMzQtZWNjYi00ZjU3LTgwZDMtOGJhNTU4OGViYWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0geTj6AXffztweal11KztIxWpAIITCsCkzQ hAlfaRMFUbv+bZU4Cne3LBMLzVHbsyCAW2vgMhMHyl+jO1LvUsxJaObOcoQwJ83+ ExqTBrlfu33hcylNztWoyeQKTjtUFnu6hTVWj9Sm7srbl1UDjxNiX1rEX+b7cTrN Hlea5cxsdN+N0YZTVJY6p/OWBXLoJQvS1IjyV3HreYK283LGQrevt3eWO3n+fdM/ JcNm035VuTXEJHc2oUcpOeO/2vvjfz7ZlzTniN2ECxrxuaojWYuqYzs4UfAwHfLs MAHLCGpRPlgFCgTZ719FDzfA3MKilLqvtOWi/GSHEBrViPqRFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAG2HD2rFEip5UwLLdTPCW2jgszgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80N2E2 ZmJjNC01OWUyLTQ5YjQtYTM0NS0zZWRkZTgxZjI2YTQvZTk3YjNlZWEtMGM4MC0z MWZlLTgyMWUtNWE1MWIxMDUxY2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDdhNmZiYzQtNTllMi00OWI0LWEz NDUtM2VkZGU4MWYyNmE0LzQ3YTZmYmM0LTU5ZTItNDliNC1hMzQ1LTNlZGRlODFm MjZhNC5jcmwwHwYDVR0jBBgwFoAU8A3+W3wnOkCARHzodZuLMa3LV1wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80N2E2ZmJjNC01OWUyLTQ5YjQtYTM0NS0zZWRk ZTgxZjI2YTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQiEiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHX78S2ZOUViton+CyWN15+NFnaYPwtJhhG2Ae28AfZ7aBH6L8KK7erG EpIlBxmKW5OtNcrQI109wY1SxpaxFo8TK72QnJXSqbx8xtb7Gw2+o/YjctudX02m fNmdRIx6Ky+JuxujyLsiHhGclrPvkrASAI5JQmrCtcbsQOwYFwoIFNBrdQFDizBy hoemDtbVSga/jD9aDFWIcZUN1HRSZbxDh6Jn5lvaV7WNz9LpIkttHt4dVP6T7blF dcURoLFuTl1AykGu/XNsT563Bo/RL99yFwwzmVHL3VJDQ2BHd7aQ6hChWxsFiQOw 0V+E/QLRxgOeI8r3VR9NDBnM1lVDh74= -----END CERTIFICATE-----Generated at Fri Apr 17 10:45:29 2026 by rpki-client