$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/aaf36ef3-323d-3ef3-ac8f-e756d1eed2e0.roa File: aaf36ef3-323d-3ef3-ac8f-e756d1eed2e0.roa (raw, json) Hash identifier: xPTNiDlreHxJpGXMcsku6QkzvuTAEuhZwxFniyFxjNc= Subject key identifier: 42:A8:17:8A:B5:06:EA:59:78:AE:9E:ED:E3:0A:24:C3:99:27:DB:AC Certificate issuer: /CN=a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3 Certificate serial: 010D0C9F4328584F3A17D4D75B3492B2494EC330 Authority key identifier: 99:A5:47:B0:4B:E2:1A:51:D0:C3:31:B0:5C:47:4D:9A:10:8A:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/aaf36ef3-323d-3ef3-ac8f-e756d1eed2e0.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 30247 IP address blocks: 66.33.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:d4:d7:5b:34:92:b2:49:4e:c3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=c3d05eb3-5172-4ca9-af59-0f91e6753f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ab:26:d9:cf:b5:d1:b5:13:ca:c9:01:62:5a: 7b:7a:f0:f0:92:d3:d9:a7:e6:56:fb:f5:bf:f7:29: 62:03:1a:e5:d1:a1:df:8c:67:8a:8a:ec:b4:09:68: cc:2f:2a:9f:d8:0e:36:81:3c:41:a2:e3:65:57:5e: 2c:f9:a5:49:b5:8e:c2:0b:40:fb:93:c5:61:e2:95: a2:a5:9b:ad:8e:43:da:90:07:f1:fc:fd:18:ae:5f: 56:65:56:d1:35:2f:ca:6c:9d:34:67:33:77:8c:50: 6a:80:4f:bc:ee:cd:53:96:42:99:b4:c5:f8:61:d5: 12:c6:e5:51:cb:2c:b2:55:b7:78:1a:72:e4:9e:42: 70:62:b3:d8:9c:6f:d1:4f:82:5e:07:b6:6d:49:75: e5:df:72:61:61:7d:1f:c7:e6:5f:c1:10:98:d3:84: 3a:84:45:8d:0c:64:8b:af:6d:74:ab:1e:ed:77:3e: 33:cd:c8:73:83:48:9c:a5:55:99:91:4f:2b:90:9a: ee:c7:1f:73:e5:a9:9a:44:4b:58:eb:cc:8d:84:5c: 44:8d:c2:a5:a6:df:c0:10:2f:0e:25:8b:b5:ad:92: a8:ba:54:60:42:38:9c:e8:1b:51:10:4b:ae:06:ce: 5a:50:9c:ab:dd:e3:0a:7f:53:4e:8a:36:95:b5:27: cf:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A8:17:8A:B5:06:EA:59:78:AE:9E:ED:E3:0A:24:C3:99:27:DB:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/aaf36ef3-323d-3ef3-ac8f-e756d1eed2e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.crl X509v3 Authority Key Identifier: keyid:99:A5:47:B0:4B:E2:1A:51:D0:C3:31:B0:5C:47:4D:9A:10:8A:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.cer sbgp-ipAddrBlock: critical IPv4: 66.33.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:69:33:41:7e:0e:1b:70:e6:53:d3:93:44:cc:fe:05:2e:61: 59:d9:38:66:1d:ed:9a:9f:05:6e:67:01:73:cf:be:3a:a5:52: 69:f9:e0:b5:75:94:38:f6:9e:95:d6:a4:97:ba:ad:a0:68:ae: 9f:c9:11:dd:1b:e5:63:d8:9b:8f:44:20:29:30:0d:34:80:e8: 25:5a:a7:1c:40:f0:c0:ed:9d:32:49:db:8f:97:03:7b:94:c7: 47:7a:1a:14:77:14:2b:b1:e3:41:b0:8e:f7:ea:d6:3b:0b:26: 72:05:12:04:17:c2:03:a3:34:b6:85:43:b9:3e:89:54:e8:76: aa:da:cd:01:64:1d:c7:47:5a:e9:cd:55:46:44:13:a0:54:e2: db:00:b3:27:5c:83:8c:79:72:0e:07:95:8a:d4:5c:cb:5a:f6: 9c:ef:66:a7:2e:42:7e:e3:1d:c9:e6:fb:86:db:52:76:5a:05: 4f:e1:7d:62:22:37:3e:33:f8:62:97:09:0a:f6:68:0c:b5:c1: a0:1d:cb:6b:1c:ff:ef:64:18:c9:47:bb:36:17:f9:8e:0d:be: ac:ad:96:6a:68:e1:7e:bf:d3:61:d3:64:db:80:69:e8:01:28: 76:1f:ce:21:27:5d:73:bb:3c:b4:c2:a1:6d:53:31:5d:ec:df: 96:6b:f2:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9TXWzSSsklOwzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVlMGQ1OWItYzAyZi00OWNiLThmMTktY2MxMGYwN2Zj NWQzMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk YzNkMDVlYjMtNTE3Mi00Y2E5LWFmNTktMGY5MWU2NzUzZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKsm2c+10bUTyskBYlp7evDwktPZp+ZW+/W/ 9yliAxrl0aHfjGeKiuy0CWjMLyqf2A42gTxBouNlV14s+aVJtY7CC0D7k8Vh4pWi pZutjkPakAfx/P0Yrl9WZVbRNS/KbJ00ZzN3jFBqgE+87s1TlkKZtMX4YdUSxuVR yyyyVbd4GnLknkJwYrPYnG/RT4JeB7ZtSXXl33JhYX0fx+ZfwRCY04Q6hEWNDGSL r210qx7tdz4zzchzg0icpVWZkU8rkJruxx9z5amaREtY68yNhFxEjcKlpt/AEC8O JYu1rZKoulRgQjic6BtREEuuBs5aUJyr3eMKf1NOijaVtSfPbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKoF4q1BupZeK6e7eMKJMOZJ9usMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNWUw ZDU5Yi1jMDJmLTQ5Y2ItOGYxOS1jYzEwZjA3ZmM1ZDMvYWFmMzZlZjMtMzIzZC0z ZWYzLWFjOGYtZTc1NmQxZWVkMmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTVlMGQ1OWItYzAyZi00OWNiLThm MTktY2MxMGYwN2ZjNWQzL2E1ZTBkNTliLWMwMmYtNDljYi04ZjE5LWNjMTBmMDdm YzVkMy5jcmwwHwYDVR0jBBgwFoAUmaVHsEviGlHQwzGwXEdNmhCKcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNWUwZDU5Yi1jMDJmLTQ5Y2ItOGYxOS1jYzEw ZjA3ZmM1ZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQiEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRpM0F+Dhtw5lPTk0TM/gUuYVnZOGYd7ZqfBW5nAXPPvjqlUmn54LV1 lDj2npXWpJe6raBorp/JEd0b5WPYm49EICkwDTSA6CVapxxA8MDtnTJJ24+XA3uU x0d6GhR3FCux40Gwjvfq1jsLJnIFEgQXwgOjNLaFQ7k+iVTodqrazQFkHcdHWunN VUZEE6BU4tsAsydcg4x5cg4HlYrUXMta9pzvZqcuQn7jHcnm+4bbUnZaBU/hfWIi Nz4z+GKXCQr2aAy1waAdy2sc/+9kGMlHuzYX+Y4Nvqytlmpo4X6/02HTZNuAaegB KHYfziEnXXO7PLTCoW1TMV3s35Zr8vs= -----END CERTIFICATE-----Generated at Thu Sep 24 13:28:47 2026 by rpki-client