$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33e552c1-7aab-3972-924b-9a4b94e54a0b.roa File: 33e552c1-7aab-3972-924b-9a4b94e54a0b.roa (raw, json) Hash identifier: JLvcYM2yX8Ysqg4w6rABRKDxdY5fD4864/O+aoqUDqs= Subject key identifier: 5C:33:59:EC:5D:92:00:C6:0E:9B:C9:7D:74:C8:8A:0C:F6:52:D2:B7 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584F0ED23845BD6652A9F080A400 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33e552c1-7aab-3972-924b-9a4b94e54a0b.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 13768 IP address blocks: 64.34.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:38:45:bd:66:52:a9:f0:80:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=b1cc8163-545c-4ed0-a57f-9e6872af41c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:cf:df:ff:f1:dc:ff:87:e3:2c:f3:aa:ad:2d: 59:47:aa:d3:1e:04:86:2e:38:e1:74:a3:d9:67:a9: d9:4a:f4:7a:15:83:94:8f:e6:55:a4:08:85:21:e2: 97:b8:47:34:d3:83:eb:97:17:c0:d4:dc:c1:e5:29: 79:d2:cd:9e:ac:e5:32:bb:b1:6a:25:eb:70:d5:66: 71:35:6c:56:39:bf:c6:19:cb:44:bd:2d:40:a2:42: b1:97:ca:2f:3d:ad:21:28:e0:c1:0d:5a:78:d4:af: 9b:70:0f:b5:29:fe:6d:97:26:5b:d5:95:82:2d:b4: 23:36:f9:a5:0f:57:3e:bc:23:54:12:9d:9b:66:f1: 88:9a:b5:c1:15:c9:a9:2d:3f:a1:e4:fa:0a:e9:8d: 2b:4a:be:e2:3a:39:df:5e:48:50:c0:ec:6e:8d:0d: 82:3a:ae:2f:a4:e5:31:11:aa:0e:04:ca:cb:c3:b0: 6b:84:9e:76:28:ce:9e:22:0a:65:78:11:d5:ec:a6: de:05:36:5d:53:c2:d1:79:85:0e:83:d7:ea:93:aa: 9c:84:f9:40:0a:da:2b:d6:fb:a2:8d:31:3e:e2:c8: 21:2d:c6:5f:27:4b:40:f3:6c:7d:7e:de:ae:19:d7: ae:e6:56:11:5c:76:6e:62:d7:b2:4f:e8:10:42:23: 13:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:33:59:EC:5D:92:00:C6:0E:9B:C9:7D:74:C8:8A:0C:F6:52:D2:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33e552c1-7aab-3972-924b-9a4b94e54a0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:06:cb:a2:c4:8e:46:5b:08:95:db:67:55:0a:74:32:b3:db: 74:ab:44:85:43:e9:5c:13:20:3d:70:ad:fb:a2:c4:22:6c:5f: c3:2c:8f:dd:33:2e:62:5e:e7:86:8e:ed:c4:dc:b8:a8:42:8a: bb:b8:4b:34:f0:87:27:5f:a8:4f:1f:bd:03:d5:85:77:c0:fb: 61:f9:32:ff:80:60:43:f9:b5:01:80:a0:8c:40:8c:07:d6:02: 22:76:7a:37:09:13:ca:76:e1:51:8e:10:ee:6d:e3:15:b0:1c: da:2f:7d:a7:43:7b:20:cb:7b:45:48:00:d0:08:a2:b6:bd:3f: ec:2a:88:05:0e:3a:da:12:cd:2c:b9:86:e8:99:f8:73:ff:3a: 6a:57:55:e0:d8:a4:eb:76:5c:7b:b0:7f:5d:f3:d4:bd:7b:03: dd:1e:9a:33:02:48:c4:86:1d:57:6d:5b:22:d9:a7:bf:b4:27: 5f:39:f5:ce:d5:6d:9c:14:ff:de:9d:b5:38:26:de:82:b7:87: 69:5f:c1:4e:19:17:b1:df:90:77:05:2c:e1:f4:7a:b0:3d:3c: d6:1f:e7:47:94:bb:48:36:a1:82:c4:0f:13:34:9b:6b:33:e3: ec:cc:35:0a:e1:61:73:ae:7e:8b:b3:a7:6a:f0:79:af:a1:56: 11:ab:5b:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0jhFvWZSqfCApAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk YjFjYzgxNjMtNTQ1Yy00ZWQwLWE1N2YtOWU2ODcyYWY0MWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM/f//Hc/4fjLPOqrS1ZR6rTHgSGLjjhdKPZ Z6nZSvR6FYOUj+ZVpAiFIeKXuEc004PrlxfA1NzB5Sl50s2erOUyu7FqJetw1WZx NWxWOb/GGctEvS1AokKxl8ovPa0hKODBDVp41K+bcA+1Kf5tlyZb1ZWCLbQjNvml D1c+vCNUEp2bZvGImrXBFcmpLT+h5PoK6Y0rSr7iOjnfXkhQwOxujQ2COq4vpOUx EaoOBMrLw7BrhJ52KM6eIgpleBHV7KbeBTZdU8LReYUOg9fqk6qchPlACtor1vui jTE+4sghLcZfJ0tA82x9ft6uGdeu5lYRXHZuYteyT+gQQiMTsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwzWexdkgDGDpvJfXTIigz2UtK3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMzNlNTUyYzEtN2FhYi0z OTcyLTkyNGItOWE0Yjk0ZTU0YTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQCJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4Gy6LEjkZbCJXbZ1UKdDKz23SrRIVD6VwTID1wrfuixCJsX8Msj90z LmJe54aO7cTcuKhCiru4SzTwhydfqE8fvQPVhXfA+2H5Mv+AYEP5tQGAoIxAjAfW AiJ2ejcJE8p24VGOEO5t4xWwHNovfadDeyDLe0VIANAIora9P+wqiAUOOtoSzSy5 huiZ+HP/OmpXVeDYpOt2XHuwf13z1L17A90emjMCSMSGHVdtWyLZp7+0J1859c7V bZwU/96dtTgm3oK3h2lfwU4ZF7HfkHcFLOH0erA9PNYf50eUu0g2oYLEDxM0m2sz 4+zMNQrhYXOufouzp2rwea+hVhGrW6I= -----END CERTIFICATE-----Generated at Mon Sep 21 13:32:22 2026 by rpki-client