$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa File: 04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa (raw, json) Hash identifier: KGeD68FQnWRKbnGwtMVvEJlscBWG5RYtTIMA9Wr6lFo= Subject key identifier: 9A:D3:BC:5D:45:CA:DE:4C:02:71:0A:54:9E:0F:FF:C2:8B:06:27:E5 Certificate issuer: /CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Certificate serial: 010D0C9F4328584ABBE635B1BAA3BE169F5B453A Authority key identifier: F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 54309 IP address blocks: 66.33.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:35:b1:ba:a3:be:16:9f:5b:45:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=8d5288bb-de5d-4c0f-a4bb-df9de38f638c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:92:ef:6d:fa:0d:85:db:96:02:25:44:fd:b2: 64:e6:02:fa:25:f9:04:76:28:30:57:85:85:21:ee: 39:65:fc:74:d3:a4:5b:14:cd:2a:ff:54:44:66:a4: 9e:0f:67:d3:2b:62:8f:dd:a8:6f:88:2f:cb:53:a2: 69:df:93:85:76:79:c5:4d:06:6d:79:23:a8:68:19: 49:31:90:83:2b:e2:24:90:9e:57:81:6c:d9:b3:83: 1b:f4:4e:5d:d1:9b:a6:70:80:f2:c5:03:be:48:85: cd:21:c5:90:e2:2e:75:a3:e1:92:6e:58:cd:ce:14: 8a:7e:52:dd:65:08:d4:50:bf:52:e3:70:1e:7a:35: 9a:6e:a4:81:45:e4:65:9d:6e:88:82:de:b9:f5:96: 27:bb:80:72:16:9b:2b:4a:6d:12:1e:74:48:2c:fa: a4:c6:77:1b:df:6c:36:89:7b:ab:9c:30:de:f4:84: 9e:fe:35:8b:80:1a:09:6c:4c:6a:3b:f7:f6:c1:e8: f4:b6:8e:f8:f1:48:62:ab:c8:10:0e:61:6b:ac:d1: bf:28:ec:7a:83:32:65:76:b6:33:7c:0e:9d:85:1c: 72:bd:f1:2e:f5:a2:4d:3a:dc:be:44:80:ea:2c:04: ae:da:b9:72:6b:ab:56:b2:b0:da:50:47:88:bf:27: 57:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D3:BC:5D:45:CA:DE:4C:02:71:0A:54:9E:0F:FF:C2:8B:06:27:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/04f4a3fb-442e-3314-90b9-b11d93cbca8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl X509v3 Authority Key Identifier: keyid:F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer sbgp-ipAddrBlock: critical IPv4: 66.33.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:f0:62:3d:cc:58:ef:d8:c0:93:9b:11:e9:67:10:4c:78:64: b5:74:37:92:d4:0b:2f:08:e5:ca:e7:70:18:d2:b4:63:dc:73: e3:3d:e2:a9:11:30:70:3c:e9:79:f0:da:da:59:0d:7d:41:7f: ac:d3:4a:ca:01:97:5e:39:40:8c:c2:19:bb:e8:78:af:c1:f0: bb:a4:47:44:05:0c:cb:8a:cd:1d:59:4e:32:8d:2c:67:08:cf: ce:3b:35:dc:42:61:86:8c:28:a4:b1:45:8a:bd:86:1a:7b:f2: 2c:92:6b:be:5f:fb:a2:de:a4:0f:18:f2:d6:ed:77:23:83:10: 8a:84:44:f4:2d:06:f9:82:1e:60:13:b7:2e:bd:f8:72:c5:b6: 5e:80:26:91:f2:18:0a:09:89:3d:aa:f2:22:e9:7d:8b:ea:23: a1:7d:fc:8b:c8:4a:48:34:c5:e0:43:cd:c2:47:6e:92:20:84: b0:aa:89:26:ed:f1:bd:37:a2:d2:8e:2a:cc:a5:d2:7d:61:78: e2:d8:7f:01:c4:04:c2:cf:db:a8:8f:5b:a8:73:71:7d:04:20: 96:bc:9b:33:4c:14:af:d1:4c:d2:43:bf:eb:08:a5:8a:87:b3: 96:71:f1:8c:8f:8a:73:62:87:42:c9:3e:88:22:18:fe:d0:84: a0:b0:d4:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq75jWxuqO+Fp9bRTowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE4OWQ2MmMtYTA4ZS00YzRlLTlmNDctYTQwZDE2Mjlm MDkxMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk OGQ1Mjg4YmItZGU1ZC00YzBmLWE0YmItZGY5ZGUzOGY2MzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZLvbfoNhduWAiVE/bJk5gL6JfkEdigwV4WF Ie45Zfx006RbFM0q/1REZqSeD2fTK2KP3ahviC/LU6Jp35OFdnnFTQZteSOoaBlJ MZCDK+IkkJ5XgWzZs4Mb9E5d0ZumcIDyxQO+SIXNIcWQ4i51o+GSbljNzhSKflLd ZQjUUL9S43AeejWabqSBReRlnW6Igt659ZYnu4ByFpsrSm0SHnRILPqkxncb32w2 iXurnDDe9ISe/jWLgBoJbExqO/f2wej0to748Uhiq8gQDmFrrNG/KOx6gzJldrYz fA6dhRxyvfEu9aJNOty+RIDqLASu2rlya6tWsrDaUEeIvydXlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrTvF1Fyt5MAnEKVJ4P/8KLBiflMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5 ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBkMTYyOWYwOTEvMDRmNGEzZmItNDQyZS0z MzE0LTkwYjktYjExZDkzY2JjYThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWE4OWQ2MmMtYTA4ZS00YzRlLTlm NDctYTQwZDE2MjlmMDkxLzVhODlkNjJjLWEwOGUtNGM0ZS05ZjQ3LWE0MGQxNjI5 ZjA5MS5jcmwwHwYDVR0jBBgwFoAU8FWyS0Mw1eDX0obNoZJEPF1KgJowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBk MTYyOWYwOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiEFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTwYj3MWO/YwJObEelnEEx4ZLV0N5LUCy8I5crncBjStGPcc+M94qkR MHA86Xnw2tpZDX1Bf6zTSsoBl145QIzCGbvoeK/B8LukR0QFDMuKzR1ZTjKNLGcI z847NdxCYYaMKKSxRYq9hhp78iySa75f+6LepA8Y8tbtdyODEIqERPQtBvmCHmAT ty69+HLFtl6AJpHyGAoJiT2q8iLpfYvqI6F9/IvISkg0xeBDzcJHbpIghLCqiSbt 8b03otKOKsyl0n1heOLYfwHEBMLP26iPW6hzcX0EIJa8mzNMFK/RTNJDv+sIpYqH s5Zx8YyPinNih0LJPogiGP7QhKCw1Bk= -----END CERTIFICATE-----Generated at Mon Aug 4 13:58:55 2025 by rpki-client