$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/18635cf6-ac52-3e45-a292-3f44b4080b98.roa File: 18635cf6-ac52-3e45-a292-3f44b4080b98.roa (raw, json) Hash identifier: 9RY8037z6OxdRAkJA0LMT1GVZ9z4j7mx5qlZ3vlPEdA= Subject key identifier: BA:09:61:CE:B2:2B:50:8C:51:A4:D9:B4:5A:0B:2F:13:94:B1:75:01 Certificate issuer: /CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Certificate serial: 010D0C9F4328584F3470714069405F3EA719D4C0 Authority key identifier: F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/18635cf6-ac52-3e45-a292-3f44b4080b98.roa Signing time: Thu 17 Sep 2026 12:24:02 +0000 ROA not before: Thu 17 Sep 2026 12:24:02 +0000 ROA not after: Wed 16 Dec 2026 13:24:02 +0000 asID: 54309 IP address blocks: 66.33.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:70:71:40:69:40:5f:3e:a7:19:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091 Validity Not Before: Sep 17 12:24:02 2026 GMT Not After : Dec 16 13:24:02 2026 GMT Subject: CN=6a2ec80d-d937-4f3c-ac87-73b7be16fb50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b2:4c:d5:e3:89:73:62:ad:1a:b4:87:e5:eb: d3:56:6e:e9:c3:84:3b:2d:21:1d:4a:c7:5c:91:95: 24:3f:f4:d8:a7:61:53:15:39:bc:db:f4:73:c4:15: f5:1b:51:b1:bd:95:dc:3c:45:7b:86:23:4c:e8:ac: df:04:cc:a7:f0:6b:c2:70:7b:7d:40:8b:ae:ed:33: 3f:c7:2a:d3:b9:a8:89:1b:b8:d7:69:7a:3a:46:81: ec:a8:6a:14:53:70:0b:3f:23:d0:1f:d3:2b:f4:7e: cc:4f:66:4c:19:5a:0f:49:e6:8b:a6:2c:67:0e:c6: 47:ff:a5:d3:97:84:d1:bb:4c:be:da:d8:e7:40:11: 2d:8d:f7:8b:09:0a:86:37:1b:62:7e:67:db:0a:78: d7:7b:97:25:c2:42:de:b4:ae:58:60:6a:ae:4c:b6: 25:06:51:12:c3:e7:b8:98:d4:32:9d:c3:22:b8:57: 21:a5:06:54:b8:4a:e5:df:ff:35:f6:3d:6e:db:36: d5:c9:bc:ed:b2:43:c4:8e:ba:bf:35:89:15:8d:80: 02:10:20:c9:07:37:d9:12:fa:c7:bf:ae:f5:86:80: f6:c3:4b:b2:46:40:dc:df:e4:9c:9c:9c:5a:f8:0d: 6b:a4:9f:75:4f:18:b4:28:aa:dc:55:92:91:bd:16: 33:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:09:61:CE:B2:2B:50:8C:51:A4:D9:B4:5A:0B:2F:13:94:B1:75:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/18635cf6-ac52-3e45-a292-3f44b4080b98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl X509v3 Authority Key Identifier: keyid:F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer sbgp-ipAddrBlock: critical IPv4: 66.33.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:7f:cc:9f:21:2b:ca:9b:2e:a0:f6:61:4e:6b:a9:42:dd:f9: f4:5a:2e:ef:e8:b1:9b:29:0e:31:29:f4:2d:3f:0d:82:81:38: d5:ea:99:3a:96:50:ce:eb:8c:61:88:17:37:e2:ce:6b:dc:4a: 65:d1:70:a5:7d:80:e4:1c:de:9b:99:ea:7c:dc:dc:e1:cd:6c: dd:64:ad:ef:66:a6:e3:3e:8c:39:2f:a8:93:1d:b8:e4:0a:fe: a2:7c:d1:38:c2:d2:c0:82:98:54:5f:22:dc:12:9e:c2:97:1e: c3:d9:1a:c4:90:a9:ea:4d:6f:b8:46:e2:c1:b4:89:de:6f:13: c7:fc:ea:9f:b5:9b:70:40:45:60:9c:a0:19:43:4e:17:dc:3a: dd:5e:73:1c:27:e5:7c:78:35:77:9a:9f:71:7f:48:5d:43:ce: a0:d9:77:4c:6c:a1:6f:3a:a7:be:19:61:e5:fc:f3:2e:6f:14: 68:5f:39:98:c6:16:8e:6f:7e:2c:0b:8c:45:1b:e4:a9:9b:97: a3:22:85:a8:bf:32:c1:5e:d8:9b:81:3d:af:1a:f4:23:ec:e0: 8f:aa:f2:29:4c:8f:a9:f5:9c:42:40:41:49:7e:6a:06:1c:62: 50:7e:f5:69:07:3e:59:39:52:67:c0:fe:8a:3b:d8:ca:9e:d8: c5:88:bb:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80cHFAaUBfPqcZ1MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE4OWQ2MmMtYTA4ZS00YzRlLTlmNDctYTQwZDE2Mjlm MDkxMB4XDTI2MDkxNzEyMjQwMloXDTI2MTIxNjEzMjQwMlowLzEtMCsGA1UEAxMk NmEyZWM4MGQtZDkzNy00ZjNjLWFjODctNzNiN2JlMTZmYjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7JM1eOJc2KtGrSH5evTVm7pw4Q7LSEdSsdc kZUkP/TYp2FTFTm82/RzxBX1G1GxvZXcPEV7hiNM6KzfBMyn8GvCcHt9QIuu7TM/ xyrTuaiJG7jXaXo6RoHsqGoUU3ALPyPQH9Mr9H7MT2ZMGVoPSeaLpixnDsZH/6XT l4TRu0y+2tjnQBEtjfeLCQqGNxtifmfbCnjXe5clwkLetK5YYGquTLYlBlESw+e4 mNQyncMiuFchpQZUuErl3/819j1u2zbVybztskPEjrq/NYkVjYACECDJBzfZEvrH v671hoD2w0uyRkDc3+ScnJxa+A1rpJ91Txi0KKrcVZKRvRYzowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoJYc6yK1CMUaTZtFoLLxOUsXUBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5 ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBkMTYyOWYwOTEvMTg2MzVjZjYtYWM1Mi0z ZTQ1LWEyOTItM2Y0NGI0MDgwYjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWE4OWQ2MmMtYTA4ZS00YzRlLTlm NDctYTQwZDE2MjlmMDkxLzVhODlkNjJjLWEwOGUtNGM0ZS05ZjQ3LWE0MGQxNjI5 ZjA5MS5jcmwwHwYDVR0jBBgwFoAU8FWyS0Mw1eDX0obNoZJEPF1KgJowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBk MTYyOWYwOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQiEEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJx/zJ8hK8qbLqD2YU5rqULd+fRaLu/osZspDjEp9C0/DYKBONXqmTqW UM7rjGGIFzfizmvcSmXRcKV9gOQc3puZ6nzc3OHNbN1kre9mpuM+jDkvqJMduOQK /qJ80TjC0sCCmFRfItwSnsKXHsPZGsSQqepNb7hG4sG0id5vE8f86p+1m3BARWCc oBlDThfcOt1ecxwn5Xx4NXean3F/SF1DzqDZd0xsoW86p74ZYeX88y5vFGhfOZjG Fo5vfiwLjEUb5Kmbl6Mihai/MsFe2JuBPa8a9CPs4I+q8ilMj6n1nEJAQUl+agYc YlB+9WkHPlk5UmfA/oo72Mqe2MWIu0E= -----END CERTIFICATE-----Generated at Mon Sep 21 10:52:44 2026 by rpki-client