$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa File: e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa (raw, json) Hash identifier: QDdq4w3nvSGPshu4HwqTSB9zZZyTMIIeI68u3P0VlB0= Subject key identifier: B4:ED:04:F3:29:9F:3B:15:F9:CF:01:47:A1:A7:95:87:AE:E5:3E:12 Certificate issuer: /CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4 Certificate serial: 010D0C9F4328584EE0C20E2D03B3CFB465041140 Authority key identifier: F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 16509 IP address blocks: 66.33.34.0/24 maxlen: 24 66.33.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:0e:2d:03:b3:cf:b4:65:04:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=3bcd46fa-8739-4ac3-83cf-7e1e6b9fb0f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:33:71:ba:26:8b:f2:cd:e0:cd:fa:67:16:10: 9c:01:cf:27:33:68:24:98:81:35:bb:07:83:66:65: dd:f0:95:8c:01:99:28:e1:79:a5:8a:c0:92:89:ff: b7:df:a3:fa:27:4f:a3:90:25:31:88:65:8e:6a:e2: a1:95:e4:1b:7e:40:01:f4:a4:1c:72:38:87:b9:89: f6:b7:8b:f4:cf:5c:9f:ad:02:af:44:c4:a2:43:0a: ed:84:69:30:8f:9d:a4:1a:be:7e:25:20:e6:66:09: e2:5e:0a:5e:19:f7:93:6c:07:52:90:d2:a4:f5:07: 2d:e7:c1:37:d2:0b:d4:e2:8b:34:25:9e:69:2d:fb: 32:3b:9e:b7:ba:6a:7a:e8:9d:3c:55:97:55:cd:d5: 8a:3f:67:b5:3e:18:7b:15:1e:1d:01:2d:88:96:dd: 1c:c9:4a:84:6c:9e:93:12:47:3a:af:6c:6b:f9:0f: cd:4b:90:bd:09:bf:e5:58:4a:b1:51:01:88:aa:8d: 8f:61:b7:d8:24:7e:ed:8d:1b:5d:c9:3a:a9:09:76: c6:cc:d1:d6:31:64:6d:f3:0c:da:6f:23:16:f6:e4: 6a:ff:43:91:c7:e9:f4:8d:51:06:07:5d:a7:54:1c: 1f:18:c1:87:80:2d:4a:f9:3a:3e:9c:a3:37:74:91: 4e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:ED:04:F3:29:9F:3B:15:F9:CF:01:47:A1:A7:95:87:AE:E5:3E:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl X509v3 Authority Key Identifier: keyid:F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer sbgp-ipAddrBlock: critical IPv4: 66.33.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:a2:5f:e0:68:cb:f3:e1:c4:37:07:e9:65:6b:e6:a3:5c:0a: 43:fa:5a:de:30:f9:14:e8:9e:f5:4e:5b:63:ee:02:76:e6:c0: 1f:60:95:d1:ee:16:6a:c6:31:16:71:d8:b3:53:70:b3:d9:3f: 92:3d:ad:67:4f:8b:9c:53:61:24:b4:72:86:84:99:6c:01:d4: 71:0e:d4:31:7a:82:85:f3:82:9b:cd:98:87:49:5e:a4:17:65: de:f5:75:ee:97:90:7c:83:ff:f0:bd:8a:ca:67:68:bd:12:0c: e3:75:48:69:30:4d:10:7d:7f:58:17:87:94:1e:44:ef:fa:df: 8c:5a:b7:6e:a9:3d:7e:7c:be:83:65:bf:b6:a3:53:42:a2:3e: e4:b6:c3:14:0c:e5:0e:43:eb:9a:cd:3d:9b:80:3e:2c:d8:fa: 0d:24:02:9a:cb:ea:ae:3a:01:2c:fb:f8:d8:a7:fb:ef:c8:7c: 3b:c9:23:6a:3c:04:aa:f9:15:42:cf:88:5f:33:45:35:d5:87: 0f:dd:3c:d3:b2:ca:63:13:57:ef:89:2e:64:18:e6:83:95:b9: 4d:e0:d2:59:d7:2f:ba:36:df:f6:d5:11:22:fc:e7:cd:dc:57: 3e:1d:3c:64:d5:e4:05:c9:ac:40:37:10:f1:01:33:5a:c7:69: 8e:55:1e:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwg4tA7PPtGUEEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdhNmZiYzQtNTllMi00OWI0LWEzNDUtM2VkZGU4MWYy NmE0MB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk M2JjZDQ2ZmEtODczOS00YWMzLTgzY2YtN2UxZTZiOWZiMGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDNxuiaL8s3gzfpnFhCcAc8nM2gkmIE1uweD ZmXd8JWMAZko4XmlisCSif+336P6J0+jkCUxiGWOauKhleQbfkAB9KQccjiHuYn2 t4v0z1yfrQKvRMSiQwrthGkwj52kGr5+JSDmZgniXgpeGfeTbAdSkNKk9Qct58E3 0gvU4os0JZ5pLfsyO563ump66J08VZdVzdWKP2e1Phh7FR4dAS2Ilt0cyUqEbJ6T Ekc6r2xr+Q/NS5C9Cb/lWEqxUQGIqo2PYbfYJH7tjRtdyTqpCXbGzNHWMWRt8wza byMW9uRq/0ORx+n0jVEGB12nVBwfGMGHgC1K+To+nKM3dJFO1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTtBPMpnzsV+c8BR6GnlYeu5T4SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80N2E2 ZmJjNC01OWUyLTQ5YjQtYTM0NS0zZWRkZTgxZjI2YTQvZTk3YjNlZWEtMGM4MC0z MWZlLTgyMWUtNWE1MWIxMDUxY2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDdhNmZiYzQtNTllMi00OWI0LWEz NDUtM2VkZGU4MWYyNmE0LzQ3YTZmYmM0LTU5ZTItNDliNC1hMzQ1LTNlZGRlODFm MjZhNC5jcmwwHwYDVR0jBBgwFoAU8A3+W3wnOkCARHzodZuLMa3LV1wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80N2E2ZmJjNC01OWUyLTQ5YjQtYTM0NS0zZWRk ZTgxZjI2YTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQiEiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCiX+Boy/PhxDcH6WVr5qNcCkP6Wt4w+RTonvVOW2PuAnbmwB9gldHu FmrGMRZx2LNTcLPZP5I9rWdPi5xTYSS0coaEmWwB1HEO1DF6goXzgpvNmIdJXqQX Zd71de6XkHyD//C9ispnaL0SDON1SGkwTRB9f1gXh5QeRO/634xat26pPX58voNl v7ajU0KiPuS2wxQM5Q5D65rNPZuAPizY+g0kAprL6q46ASz7+Nin++/IfDvJI2o8 BKr5FULPiF8zRTXVhw/dPNOyymMTV++JLmQY5oOVuU3g0lnXL7o23/bVESL8583c Vz4dPGTV5AXJrEA3EPEBM1rHaY5VHv8= -----END CERTIFICATE-----Generated at Wed Sep 23 02:30:13 2026 by rpki-client