$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/963d3839-4015-35a7-b38b-b1c31b4a4e68.roa File: 963d3839-4015-35a7-b38b-b1c31b4a4e68.roa (raw, json) Hash identifier: hecmn1weWQrlP5yKcrHFf75VD/ouurmoGCbH16rV7To= Subject key identifier: B8:F8:AD:17:B5:B0:20:05:D7:68:96:D2:BF:B5:11:4B:ED:CB:DD:8F Certificate issuer: /CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Certificate serial: 010D0C9F4328584CD4076E2804125B64DA82AA80 Authority key identifier: 88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/963d3839-4015-35a7-b38b-b1c31b4a4e68.roa Signing time: Wed 11 Feb 2026 14:00:41 +0000 ROA not before: Wed 11 Feb 2026 14:00:41 +0000 ROA not after: Tue 12 May 2026 13:00:41 +0000 asID: 16509 IP address blocks: 64.57.33.0/24 maxlen: 24 64.57.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:07:6e:28:04:12:5b:64:da:82:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Validity Not Before: Feb 11 14:00:41 2026 GMT Not After : May 12 13:00:41 2026 GMT Subject: CN=e1d7aa04-ddf2-4988-ab32-ceccb1dca66d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:93:55:f2:49:be:5c:9e:0a:cb:b0:d4:53:1d: 92:d8:dc:31:75:8c:44:62:00:d9:77:a5:11:74:29: 09:d9:54:2f:6d:88:de:ed:36:69:9f:df:9d:db:ff: c1:3b:5d:de:01:a4:6f:5e:05:fb:e3:7e:32:66:93: d9:b5:96:23:76:f9:dc:08:ef:85:65:a0:05:bf:f7: c5:d0:25:f6:be:d6:fe:99:8c:9f:1b:65:c7:b4:f4: 81:a9:23:e1:24:76:78:3f:d0:96:44:ba:68:52:4a: fe:73:15:1f:fe:ae:af:18:2d:dc:0e:82:03:50:81: a3:23:2a:c8:42:6d:cf:09:7d:0d:35:d2:32:dc:5e: 61:79:6c:8d:ff:0a:62:1a:8d:28:40:6b:ff:1b:68: 55:33:26:1d:9c:1a:46:99:78:b5:b3:af:a7:53:7e: 50:c2:e1:a8:d9:1c:9e:83:e3:5a:c4:3f:3c:7c:d8: 89:a5:bc:12:1e:b0:b4:7d:bf:db:71:d7:92:4c:8e: 4d:95:c6:81:39:b9:00:0e:3d:43:70:54:5f:61:4e: 02:82:0f:77:5e:2b:e1:46:27:f1:b1:bb:22:1b:15: 93:df:4d:de:ab:6d:2e:c2:52:6f:75:7c:b8:6d:a5: 6b:1f:b4:1d:de:69:e5:63:29:11:72:7d:e5:60:a8: b9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F8:AD:17:B5:B0:20:05:D7:68:96:D2:BF:B5:11:4B:ED:CB:DD:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/963d3839-4015-35a7-b38b-b1c31b4a4e68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl X509v3 Authority Key Identifier: keyid:88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer sbgp-ipAddrBlock: critical IPv4: 64.57.33.0-64.57.34.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:2e:57:7d:62:ab:47:47:9a:10:44:38:54:43:46:c9:e3:20: ec:e8:c9:48:11:09:6a:1b:53:0d:ed:ef:a8:64:ef:65:d0:a5: 69:91:4b:50:4a:8b:71:3d:e7:33:c9:68:c6:94:92:90:c0:9e: 8a:72:a5:20:ab:c1:86:b4:06:37:b3:de:1c:6f:ec:5d:7d:d4: 5c:cf:c1:aa:d3:7f:8b:a0:00:77:0b:6d:5e:8c:d4:1d:89:9e: 27:31:20:2b:72:7b:76:5e:9b:8b:8d:34:33:f3:08:8e:ef:e4: 3c:5a:cf:d9:33:17:fd:b1:d9:23:5c:5f:15:bd:29:88:91:78: 39:d5:d0:75:53:42:1e:b0:6f:fd:6a:bf:ec:b2:42:17:18:5f: e3:14:2e:20:eb:48:71:65:cc:c4:14:9f:cf:59:2d:79:83:be: 97:68:1b:27:07:89:51:9b:d6:d3:51:e1:2f:4f:5b:32:08:98: 7c:75:5b:72:17:4d:e0:bf:ce:2b:b9:56:ff:0b:31:15:86:7a: 2f:6d:78:77:ce:66:86:1e:a8:0d:2b:41:b6:2a:d9:be:e0:86: 7b:ba:16:5c:9a:39:fd:4b:1e:92:7b:d7:67:30:0c:1a:60:2e: a5:24:e0:0a:fe:3b:8e:b2:ec:78:4e:f0:57:17:e2:40:d2:6c: 1c:40:61:43 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEzUB24oBBJbZNqCqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQzZjY2MjAtMDU3Ni00NmQ4LWIwNWQtM2UyY2RkMDZh ZmEzMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk ZTFkN2FhMDQtZGRmMi00OTg4LWFiMzItY2VjY2IxZGNhNjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5NV8km+XJ4Ky7DUUx2S2NwxdYxEYgDZd6UR dCkJ2VQvbYje7TZpn9+d2//BO13eAaRvXgX7434yZpPZtZYjdvncCO+FZaAFv/fF 0CX2vtb+mYyfG2XHtPSBqSPhJHZ4P9CWRLpoUkr+cxUf/q6vGC3cDoIDUIGjIyrI Qm3PCX0NNdIy3F5heWyN/wpiGo0oQGv/G2hVMyYdnBpGmXi1s6+nU35QwuGo2Rye g+NaxD88fNiJpbwSHrC0fb/bcdeSTI5NlcaBObkADj1DcFRfYU4Cgg93XivhRifx sbsiGxWT303eq20uwlJvdXy4baVrH7Qd3mnlYykRcn3lYKi5PwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFLj4rRe1sCAF12iW0r+1EUvty92PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNm NjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJjZGQwNmFmYTMvOTYzZDM4MzktNDAxNS0z NWE3LWIzOGItYjFjMzFiNGE0ZTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWQzZjY2MjAtMDU3Ni00NmQ4LWIw NWQtM2UyY2RkMDZhZmEzL2FkM2Y2NjIwLTA1NzYtNDZkOC1iMDVkLTNlMmNkZDA2 YWZhMy5jcmwwHwYDVR0jBBgwFoAUiN/bmDDB0UzVtzGE7Kf8YPRf8tMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNmNjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJj ZGQwNmFmYTMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABAOSED BABAOSIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAMi5XfWKrR0eaEEQ4VENGyeMg7OjJSBEJahtTDe3vqGTv ZdClaZFLUEqLcT3nM8loxpSSkMCeinKlIKvBhrQGN7PeHG/sXX3UXM/BqtN/i6AA dwttXozUHYmeJzEgK3J7dl6bi400M/MIju/kPFrP2TMX/bHZI1xfFb0piJF4OdXQ dVNCHrBv/Wq/7LJCFxhf4xQuIOtIcWXMxBSfz1kteYO+l2gbJweJUZvW01HhL09b MgiYfHVbchdN4L/OK7lW/wsxFYZ6L214d85mhh6oDStBtirZvuCGe7oWXJo5/Use knvXZzAMGmAupSTgCv47jrLseE7wVxfiQNJsHEBhQw== -----END CERTIFICATE-----Generated at Mon Mar 2 06:01:48 2026 by rpki-client