$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/aaf36ef3-323d-3ef3-ac8f-e756d1eed2e0.roa File: aaf36ef3-323d-3ef3-ac8f-e756d1eed2e0.roa (raw, json) Hash identifier: 7+tyKfLdKEhDNm4FnwpL9HLRpolPAfS4eWLm4vb+cPI= Subject key identifier: D5:C1:47:30:71:92:84:F7:88:56:F8:C8:6F:69:46:EB:AD:19:14:51 Certificate issuer: /CN=a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3 Certificate serial: 010D0C9F4328584B153C21C2B2D49CE5A339FA00 Authority key identifier: 99:A5:47:B0:4B:E2:1A:51:D0:C3:31:B0:5C:47:4D:9A:10:8A:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/aaf36ef3-323d-3ef3-ac8f-e756d1eed2e0.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 30247 IP address blocks: 66.33.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:21:c2:b2:d4:9c:e5:a3:39:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=f35b014e-2c36-4e99-b743-98f46f30252a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:80:7f:b6:4b:c7:2c:3d:45:ff:9c:f4:81:59: a6:15:d6:3c:e3:fa:38:aa:40:1e:fd:04:bd:bf:53: a0:e1:2b:26:f2:ab:bf:de:fd:c4:78:ec:aa:93:43: 52:3b:f6:01:49:b1:a4:d9:85:38:51:e5:d6:0f:af: ad:f6:e8:93:8c:8c:1b:07:60:a6:b9:b5:79:de:78: c1:d3:c2:fb:e1:94:58:93:b6:fd:d9:f1:b5:a3:da: 2d:f9:81:71:a7:57:82:1d:b6:fb:3e:70:23:01:20: 76:55:e8:8e:ca:45:f2:9e:6f:0e:a7:75:a9:9b:37: dc:9c:10:86:ae:92:8c:13:d7:db:a5:4f:7d:1f:6f: 09:df:a8:d0:25:3f:f0:8a:92:8f:35:15:cf:14:4e: 77:3c:c3:f0:81:27:8d:00:05:c1:ea:06:fe:99:20: 8c:cb:83:43:d7:22:88:b9:10:4e:a8:14:c7:72:a9: 73:1b:e7:b6:86:81:4a:ba:f7:88:f3:00:c1:12:d3: 22:ed:2b:ec:b7:52:6c:79:1e:95:b8:c5:1f:21:ab: fd:23:15:23:5f:c3:01:fe:92:0e:1d:e6:40:49:b1: 00:c5:60:8c:6b:d9:2f:8a:8a:b7:10:48:95:46:07: 7a:29:40:1e:55:60:3e:39:da:de:84:c8:25:ce:c3: 85:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C1:47:30:71:92:84:F7:88:56:F8:C8:6F:69:46:EB:AD:19:14:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/aaf36ef3-323d-3ef3-ac8f-e756d1eed2e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.crl X509v3 Authority Key Identifier: keyid:99:A5:47:B0:4B:E2:1A:51:D0:C3:31:B0:5C:47:4D:9A:10:8A:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.cer sbgp-ipAddrBlock: critical IPv4: 66.33.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:d6:76:f0:70:25:99:c9:20:7f:b1:f3:65:64:dc:93:0a:37: 68:02:a8:1d:ce:d6:f1:32:f3:a5:5c:c4:94:c1:33:37:0d:d9: 10:34:91:06:78:45:02:7b:5e:2a:bb:d9:a1:d3:e9:1f:64:4f: 97:55:ca:bd:8b:69:49:f4:c0:d9:ba:86:e8:26:1a:31:44:d4: 43:c8:c4:af:98:61:56:3a:fb:d1:d3:49:85:d7:17:dd:8e:73: 04:f8:67:4d:f2:7f:84:65:2c:c7:6d:70:65:3d:57:54:0e:78: a0:ed:c4:52:72:a3:96:ca:9a:1a:20:58:85:f4:95:dd:7c:45: 99:1d:be:0c:c9:f8:a1:6b:ae:44:93:0c:98:ad:58:d3:a9:1d: 0c:7b:f8:31:25:ae:4f:19:ef:df:9c:14:0a:05:d8:0a:97:1e: dd:b3:d5:6e:ed:a7:5f:43:98:78:9f:e2:9e:d1:8d:55:d4:1a: 88:22:80:d4:db:b1:3a:9b:6b:75:bb:04:f7:5e:b3:b5:f5:4f: 3f:8a:1c:27:60:37:e2:8d:52:6e:8b:b3:e7:ca:5c:99:a6:42: 9a:a3:73:f9:bc:ee:d8:48:6c:99:13:11:d6:ba:b2:04:b0:24: fd:78:0e:4a:dc:09:a8:08:66:e4:bb:6b:62:b5:7b:39:9b:d2: b4:ab:f6:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPCHCstSc5aM5+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVlMGQ1OWItYzAyZi00OWNiLThmMTktY2MxMGYwN2Zj NWQzMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk ZjM1YjAxNGUtMmMzNi00ZTk5LWI3NDMtOThmNDZmMzAyNTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYB/tkvHLD1F/5z0gVmmFdY84/o4qkAe/QS9 v1Og4Ssm8qu/3v3EeOyqk0NSO/YBSbGk2YU4UeXWD6+t9uiTjIwbB2CmubV53njB 08L74ZRYk7b92fG1o9ot+YFxp1eCHbb7PnAjASB2VeiOykXynm8Op3WpmzfcnBCG rpKME9fbpU99H28J36jQJT/wipKPNRXPFE53PMPwgSeNAAXB6gb+mSCMy4ND1yKI uRBOqBTHcqlzG+e2hoFKuveI8wDBEtMi7Svst1JseR6VuMUfIav9IxUjX8MB/pIO HeZASbEAxWCMa9kvioq3EEiVRgd6KUAeVWA+OdrehMglzsOFTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXBRzBxkoT3iFb4yG9pRuutGRRRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNWUw ZDU5Yi1jMDJmLTQ5Y2ItOGYxOS1jYzEwZjA3ZmM1ZDMvYWFmMzZlZjMtMzIzZC0z ZWYzLWFjOGYtZTc1NmQxZWVkMmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTVlMGQ1OWItYzAyZi00OWNiLThm MTktY2MxMGYwN2ZjNWQzL2E1ZTBkNTliLWMwMmYtNDljYi04ZjE5LWNjMTBmMDdm YzVkMy5jcmwwHwYDVR0jBBgwFoAUmaVHsEviGlHQwzGwXEdNmhCKcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNWUwZDU5Yi1jMDJmLTQ5Y2ItOGYxOS1jYzEw ZjA3ZmM1ZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQiEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzWdvBwJZnJIH+x82Vk3JMKN2gCqB3O1vEy86VcxJTBMzcN2RA0kQZ4 RQJ7Xiq72aHT6R9kT5dVyr2LaUn0wNm6hugmGjFE1EPIxK+YYVY6+9HTSYXXF92O cwT4Z03yf4RlLMdtcGU9V1QOeKDtxFJyo5bKmhogWIX0ld18RZkdvgzJ+KFrrkST DJitWNOpHQx7+DElrk8Z79+cFAoF2AqXHt2z1W7tp19DmHif4p7RjVXUGogigNTb sTqba3W7BPdes7X1Tz+KHCdgN+KNUm6Ls+fKXJmmQpqjc/m87thIbJkTEda6sgSw JP14DkrcCagIZuS7a2K1ezmb0rSr9u8= -----END CERTIFICATE-----Generated at Wed Nov 5 10:46:09 2025 by rpki-client