$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa File: e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa (raw, json) Hash identifier: xfsu8Jv2t3mwumerD5h6Ufvh9U8zhi30uG5Xna9GfGA= Subject key identifier: 2D:D9:B7:4D:98:B7:B8:55:32:E5:3E:0F:B9:7C:C9:35:D5:6B:2E:19 Certificate issuer: /CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4 Certificate serial: 010D0C9F4328584B9E07C15EA8F0BC8E036F9980 Authority key identifier: F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 66.33.34.0/24 maxlen: 24 66.33.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c1:5e:a8:f0:bc:8e:03:6f:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=24aeb88f-eb76-4260-acd6-24981b8fb19e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:76:7c:93:0f:3c:49:6a:04:ae:cb:50:c6:fe: 53:ff:cf:88:ba:16:4d:e5:13:53:9c:39:47:e3:29: f7:d5:98:77:13:37:0e:c9:d6:6c:4d:4d:9d:2f:7c: c7:f5:a7:e2:90:f3:5b:9e:87:f0:b8:24:17:8f:96: 4b:1e:58:d6:41:7b:eb:69:59:2d:2c:d5:66:6d:88: ba:55:9e:e0:7a:ab:62:23:43:61:c9:9a:5d:62:13: f4:ce:df:20:d0:e9:7f:dc:f6:a6:30:77:2b:1b:46: c1:5d:c3:11:7f:46:12:4a:e9:f6:7b:1d:c8:69:41: 8a:9f:36:03:34:99:fb:3e:11:4a:cb:de:25:3c:42: f6:f2:7e:0d:52:4a:e3:a7:a1:44:5a:1d:8f:47:76: bb:c6:d1:38:68:07:e6:f4:da:d2:43:6e:0d:bd:09: 3c:5d:f0:9d:2c:1d:0e:17:39:bb:6c:43:34:39:ae: af:c7:77:00:7e:74:53:3b:87:75:1b:72:b4:32:69: ee:18:48:0b:3a:88:cd:ad:53:df:e4:f1:00:ee:8f: 56:9d:ce:b7:d9:ef:ce:b2:c3:57:a6:14:0b:9d:55: 80:52:97:f7:5a:80:ed:25:8d:e0:42:91:11:58:31: 71:5a:c2:91:b3:17:e5:e1:03:63:8e:2a:14:08:ab: 4a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D9:B7:4D:98:B7:B8:55:32:E5:3E:0F:B9:7C:C9:35:D5:6B:2E:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl X509v3 Authority Key Identifier: keyid:F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer sbgp-ipAddrBlock: critical IPv4: 66.33.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:61:f1:e6:52:cc:bd:ea:14:23:c1:a1:30:75:bf:cc:a8:41: e7:f8:1a:e5:d7:2e:b0:b3:a6:9e:a5:83:01:c5:34:b8:03:ff: a8:69:96:e6:c8:fc:24:94:ba:be:db:ad:b3:91:94:52:9d:aa: c0:61:cd:7c:2d:31:05:86:4d:0a:0e:36:fc:d0:58:b3:c3:41: f0:98:bd:51:84:81:52:a6:f3:8b:8e:b3:e4:ed:73:a2:bf:e2: 17:17:6a:c3:85:61:0d:04:de:9d:91:19:db:88:9e:4e:4d:08: 84:21:99:1b:0c:cc:3f:9e:50:65:d3:7c:32:7b:1e:a9:97:a3: a8:d5:41:58:aa:93:56:3c:d6:36:86:7e:28:b0:ba:a2:79:72: 56:af:70:38:57:90:c8:49:e3:91:5e:16:d0:87:91:eb:c9:a3: cc:71:4f:86:9b:f5:aa:7d:7d:a5:87:a5:e0:b1:35:00:f2:46: b1:1c:1d:b2:0d:99:8c:a3:f8:05:ae:a2:a2:3f:a9:fd:7d:48: 59:b8:db:9a:7d:58:17:dd:a8:47:88:0c:e1:68:ee:f6:64:54: ab:af:fa:e0:21:d4:35:b3:1d:bb:7a:8c:12:4a:2a:4b:e7:79: 6b:41:d6:8c:90:e2:90:40:83:af:92:96:35:82:db:3f:6f:e8: c7:3c:44:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8FeqPC8jgNvmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdhNmZiYzQtNTllMi00OWI0LWEzNDUtM2VkZGU4MWYy NmE0MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MjRhZWI4OGYtZWI3Ni00MjYwLWFjZDYtMjQ5ODFiOGZiMTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXZ8kw88SWoErstQxv5T/8+IuhZN5RNTnDlH 4yn31Zh3EzcOydZsTU2dL3zH9afikPNbnofwuCQXj5ZLHljWQXvraVktLNVmbYi6 VZ7geqtiI0NhyZpdYhP0zt8g0Ol/3PamMHcrG0bBXcMRf0YSSun2ex3IaUGKnzYD NJn7PhFKy94lPEL28n4NUkrjp6FEWh2PR3a7xtE4aAfm9NrSQ24NvQk8XfCdLB0O Fzm7bEM0Oa6vx3cAfnRTO4d1G3K0MmnuGEgLOojNrVPf5PEA7o9Wnc632e/OssNX phQLnVWAUpf3WoDtJY3gQpERWDFxWsKRsxfl4QNjjioUCKtKDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3Zt02Yt7hVMuU+D7l8yTXVay4ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80N2E2 ZmJjNC01OWUyLTQ5YjQtYTM0NS0zZWRkZTgxZjI2YTQvZTk3YjNlZWEtMGM4MC0z MWZlLTgyMWUtNWE1MWIxMDUxY2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDdhNmZiYzQtNTllMi00OWI0LWEz NDUtM2VkZGU4MWYyNmE0LzQ3YTZmYmM0LTU5ZTItNDliNC1hMzQ1LTNlZGRlODFm MjZhNC5jcmwwHwYDVR0jBBgwFoAU8A3+W3wnOkCARHzodZuLMa3LV1wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80N2E2ZmJjNC01OWUyLTQ5YjQtYTM0NS0zZWRk ZTgxZjI2YTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQiEiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9h8eZSzL3qFCPBoTB1v8yoQef4GuXXLrCzpp6lgwHFNLgD/6hplubI /CSUur7brbORlFKdqsBhzXwtMQWGTQoONvzQWLPDQfCYvVGEgVKm84uOs+Ttc6K/ 4hcXasOFYQ0E3p2RGduInk5NCIQhmRsMzD+eUGXTfDJ7HqmXo6jVQViqk1Y81jaG fiiwuqJ5clavcDhXkMhJ45FeFtCHkevJo8xxT4ab9ap9faWHpeCxNQDyRrEcHbIN mYyj+AWuoqI/qf19SFm425p9WBfdqEeIDOFo7vZkVKuv+uAh1DWzHbt6jBJKKkvn eWtB1oyQ4pBAg6+SljWC2z9v6Mc8RMQ= -----END CERTIFICATE-----Generated at Tue Nov 4 23:36:08 2025 by rpki-client