$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/aaf36ef3-323d-3ef3-ac8f-e756d1eed2e0.roa File: aaf36ef3-323d-3ef3-ac8f-e756d1eed2e0.roa (raw, json) Hash identifier: 4kIe1FFkwBxHRsyCKTp6mdlKm5fN2FaUV2miJTcTIKE= Subject key identifier: C7:F6:58:32:CF:D9:C1:62:CD:75:BF:80:B8:3E:B6:F6:1D:E4:B9:5E Certificate issuer: /CN=a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3 Certificate serial: 010D0C9F4328584CD6D21309D9B76EC2B3E241D8 Authority key identifier: 99:A5:47:B0:4B:E2:1A:51:D0:C3:31:B0:5C:47:4D:9A:10:8A:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/aaf36ef3-323d-3ef3-ac8f-e756d1eed2e0.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 30247 IP address blocks: 66.33.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d2:13:09:d9:b7:6e:c2:b3:e2:41:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3 Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=0b74818b-0f2c-4b40-baba-9912dd7e2465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:19:b7:9d:f1:ee:db:e6:64:a3:9c:4f:11:a5: 8e:3a:05:68:1e:0a:32:30:73:09:2b:77:a8:c7:a3: f0:d1:c6:e1:ed:31:a7:15:78:f9:2d:29:a7:a6:2c: 37:e2:17:0a:16:cc:6c:51:ee:7c:9c:73:ba:92:26: 09:57:ff:05:5f:cb:2c:ae:23:a2:4d:95:80:8e:51: ae:de:db:60:10:36:ea:d6:64:22:0c:45:0b:47:10: d5:f0:b6:14:ff:5d:7a:4c:df:57:83:f7:17:ec:70: f5:a6:e6:ff:45:76:17:9b:b5:e8:40:4b:2b:02:8e: e4:14:5a:74:3a:e3:f1:27:b7:82:ec:9e:08:71:8b: 6b:1c:f4:67:3f:42:8f:2f:e5:b4:9f:1e:61:79:7c: a8:1b:69:94:e0:c0:f9:e3:7e:df:5c:9e:97:7c:29: 41:b0:9d:c6:76:e6:ae:b6:ad:53:58:87:57:10:14: ed:5d:23:ee:99:4e:ad:9d:19:d4:3b:c6:0d:0d:cc: 78:ce:64:38:34:6d:a9:23:02:1c:44:d7:97:42:80: c0:d0:23:6d:a8:89:08:2c:db:71:ec:3f:71:eb:2f: db:99:7f:5e:59:93:7c:02:e5:ac:af:6c:8e:13:cc: 32:39:58:d7:ed:89:e5:72:38:9a:73:06:c3:20:b1: 02:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F6:58:32:CF:D9:C1:62:CD:75:BF:80:B8:3E:B6:F6:1D:E4:B9:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/aaf36ef3-323d-3ef3-ac8f-e756d1eed2e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.crl X509v3 Authority Key Identifier: keyid:99:A5:47:B0:4B:E2:1A:51:D0:C3:31:B0:5C:47:4D:9A:10:8A:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a5e0d59b-c02f-49cb-8f19-cc10f07fc5d3.cer sbgp-ipAddrBlock: critical IPv4: 66.33.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:09:74:f4:53:02:06:f2:35:45:da:d5:d2:d8:a2:e2:1c:ce: 48:24:a2:15:ce:81:3e:85:b7:8d:ff:19:dd:42:e8:7f:37:64: ac:2f:49:73:bd:5d:84:49:3a:63:80:22:1a:97:e9:a9:02:31: 1f:35:c3:d1:8f:25:13:43:0f:57:eb:f3:8e:bb:35:d4:22:33: 94:a0:ca:7e:8c:ec:14:47:1a:55:b1:c7:e0:3b:9d:80:c2:1f: ff:73:6f:ec:0f:16:9d:3a:83:76:ed:e6:ea:c2:70:5d:ac:9a: d8:c9:ba:0b:f8:e4:0a:33:4e:34:da:a9:f3:46:f5:3f:89:10: 61:8e:10:a2:e7:38:08:4c:e7:a6:23:06:94:de:fa:45:70:be: f3:6d:94:e9:10:cc:5e:4d:48:20:95:b3:11:ba:87:ad:15:f4: d4:20:56:8a:9d:0b:71:eb:65:ae:37:0a:85:bf:e2:69:56:67: 9f:5c:16:85:8f:2b:6e:c3:6f:6a:14:ca:43:09:ea:0a:68:6e: df:9d:a2:a6:77:71:4a:9c:d2:2b:50:a3:00:9b:bf:25:92:4f: c3:b6:dd:dd:3d:62:a7:0a:c7:8d:a6:ab:14:cd:79:54:0f:94: 2a:23:b7:cd:74:47:20:fe:cf:c9:26:e6:6a:cd:ac:fa:34:9f: 9c:1f:a7:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0hMJ2bduwrPiQdgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVlMGQ1OWItYzAyZi00OWNiLThmMTktY2MxMGYwN2Zj NWQzMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk MGI3NDgxOGItMGYyYy00YjQwLWJhYmEtOTkxMmRkN2UyNDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRm3nfHu2+Zko5xPEaWOOgVoHgoyMHMJK3eo x6Pw0cbh7TGnFXj5LSmnpiw34hcKFsxsUe58nHO6kiYJV/8FX8ssriOiTZWAjlGu 3ttgEDbq1mQiDEULRxDV8LYU/116TN9Xg/cX7HD1pub/RXYXm7XoQEsrAo7kFFp0 OuPxJ7eC7J4IcYtrHPRnP0KPL+W0nx5heXyoG2mU4MD5437fXJ6XfClBsJ3Gduau tq1TWIdXEBTtXSPumU6tnRnUO8YNDcx4zmQ4NG2pIwIcRNeXQoDA0CNtqIkILNtx 7D9x6y/bmX9eWZN8AuWsr2yOE8wyOVjX7YnlcjiacwbDILECYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMf2WDLP2cFizXW/gLg+tvYd5LleMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNWUw ZDU5Yi1jMDJmLTQ5Y2ItOGYxOS1jYzEwZjA3ZmM1ZDMvYWFmMzZlZjMtMzIzZC0z ZWYzLWFjOGYtZTc1NmQxZWVkMmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTVlMGQ1OWItYzAyZi00OWNiLThm MTktY2MxMGYwN2ZjNWQzL2E1ZTBkNTliLWMwMmYtNDljYi04ZjE5LWNjMTBmMDdm YzVkMy5jcmwwHwYDVR0jBBgwFoAUmaVHsEviGlHQwzGwXEdNmhCKcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNWUwZDU5Yi1jMDJmLTQ5Y2ItOGYxOS1jYzEw ZjA3ZmM1ZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQiEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkJdPRTAgbyNUXa1dLYouIczkgkohXOgT6Ft43/Gd1C6H83ZKwvSXO9 XYRJOmOAIhqX6akCMR81w9GPJRNDD1fr8467NdQiM5Sgyn6M7BRHGlWxx+A7nYDC H/9zb+wPFp06g3bt5urCcF2smtjJugv45AozTjTaqfNG9T+JEGGOEKLnOAhM56Yj BpTe+kVwvvNtlOkQzF5NSCCVsxG6h60V9NQgVoqdC3HrZa43CoW/4mlWZ59cFoWP K27Db2oUykMJ6gpobt+doqZ3cUqc0itQowCbvyWST8O23d09YqcKx42mqxTNeVQP lCojt810RyD+z8km5mrNrPo0n5wfp0I= -----END CERTIFICATE-----Generated at Mon Mar 2 17:56:02 2026 by rpki-client