$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa File: 2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa (raw, json) Hash identifier: WcctFfj44lhIO0CrTfIRqoXpMqhOG+ngSnHP1kxFpGE= Subject key identifier: 49:6B:E2:A3:05:15:5D:23:BA:1F:BA:42:A2:32:B3:D1:FF:D5:43:3E Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584F20F7BE44A80D91F55368CA30 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 15204 IP address blocks: 64.33.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:be:44:a8:0d:91:f5:53:68:ca:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=8acf8ce8-ec93-4ab4-aec2-3bb8417f0072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:46:cd:7b:94:ad:ad:0f:fb:19:46:10:4e:94: 87:57:52:1c:b4:f8:7b:ad:68:3d:f0:3f:b7:68:47: 70:30:47:82:be:8c:60:6b:3e:df:c0:36:5a:5f:a9: b9:13:0f:8c:d0:75:3b:42:1e:e8:b8:0f:b1:e2:87: 88:34:69:80:10:a0:e5:ba:f7:1d:9b:38:db:4c:a7: 32:e6:a7:36:03:41:be:1f:44:07:8e:00:25:72:8c: 76:e7:38:c6:ee:bd:6b:63:eb:fa:4e:b6:f1:f3:c9: ed:eb:76:84:20:da:26:4b:78:df:35:4c:e4:f8:d3: 82:34:bc:ca:49:ef:b9:a0:6f:fd:34:12:73:0c:cb: fc:7a:1c:a5:ff:08:14:af:c5:f3:10:b0:bc:c3:2a: d1:3d:f0:c0:58:5f:f2:22:8d:ed:c3:27:28:0f:e9: 09:ef:96:23:b1:c7:8f:c7:5a:ff:e1:2f:52:eb:e4: e8:03:74:b0:a2:80:0c:c5:f3:46:f0:1e:68:c3:83: 70:de:27:05:54:95:3d:5c:60:03:54:7e:ad:d2:c2: e2:d9:4d:cc:a5:95:c9:ca:ae:96:bf:6b:a9:1d:f3: be:6d:35:01:f2:29:e4:b0:3f:22:d1:ef:76:8e:3d: e6:e5:5d:b1:dc:b8:31:7f:37:bf:08:86:14:40:56: dc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6B:E2:A3:05:15:5D:23:BA:1F:BA:42:A2:32:B3:D1:FF:D5:43:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:57:c2:9b:5d:f1:68:6b:d4:20:c9:11:d1:83:c7:41:6a:f5: e6:56:c4:ea:a7:59:fd:54:9d:fe:b6:84:93:af:15:06:a3:5d: 8e:1a:a0:1d:45:f9:4b:40:4e:42:39:8d:bd:21:cd:64:fc:5d: 99:7b:cb:d9:20:e8:9b:29:36:2b:7a:a2:e5:40:58:5c:43:09: 7e:e2:67:66:04:b3:e6:92:e1:7b:2a:e0:40:42:cb:5b:e6:d5: 17:7d:4a:58:f3:dd:0b:eb:3f:84:ac:57:d9:df:e2:8c:41:5d: 70:af:ca:c0:ff:91:5c:c7:55:f9:0a:93:5c:a8:8f:f7:26:af: 09:b7:04:fb:59:2d:10:a6:e3:ca:e5:6c:fa:e6:3c:b0:8b:77: 74:2a:55:24:63:39:41:4a:59:c3:14:c5:fc:79:ef:0e:98:96: 1e:bc:e2:8d:c7:6d:ee:cd:19:87:cf:df:7b:04:40:22:e4:8e: e5:07:0d:2f:84:2e:8e:67:6f:81:9b:01:96:6c:5a:2c:1e:98: a7:a6:9f:be:b0:c6:28:9f:2a:71:70:11:32:71:f9:29:95:1e: 79:d0:e5:5f:99:e5:0e:99:08:3e:ab:00:08:97:36:da:d3:90: 76:1e:e8:1b:94:64:bd:9a:56:15:36:bc:74:1d:04:48:1e:36: d5:69:46:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g975EqA2R9VNoyjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk OGFjZjhjZTgtZWM5My00YWI0LWFlYzItM2JiODQxN2YwMDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0bNe5StrQ/7GUYQTpSHV1IctPh7rWg98D+3 aEdwMEeCvoxgaz7fwDZaX6m5Ew+M0HU7Qh7ouA+x4oeINGmAEKDluvcdmzjbTKcy 5qc2A0G+H0QHjgAlcox25zjG7r1rY+v6Trbx88nt63aEINomS3jfNUzk+NOCNLzK Se+5oG/9NBJzDMv8ehyl/wgUr8XzELC8wyrRPfDAWF/yIo3twycoD+kJ75YjsceP x1r/4S9S6+ToA3SwooAMxfNG8B5ow4Nw3icFVJU9XGADVH6t0sLi2U3MpZXJyq6W v2upHfO+bTUB8inksD8i0e92jj3m5V2x3Lgxfze/CIYUQFbcpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElr4qMFFV0juh+6QqIys9H/1UM+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMmRjODY0NGYtODhhOC0z ZDdkLTlhNGUtMWIxYWJiNDdmNzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQCHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJXwptd8Whr1CDJEdGDx0Fq9eZWxOqnWf1Unf62hJOvFQajXY4aoB1F +UtATkI5jb0hzWT8XZl7y9kg6JspNit6ouVAWFxDCX7iZ2YEs+aS4Xsq4EBCy1vm 1Rd9Sljz3QvrP4SsV9nf4oxBXXCvysD/kVzHVfkKk1yoj/cmrwm3BPtZLRCm48rl bPrmPLCLd3QqVSRjOUFKWcMUxfx57w6Ylh684o3Hbe7NGYfP33sEQCLkjuUHDS+E Lo5nb4GbAZZsWiwemKemn76wxiifKnFwETJx+SmVHnnQ5V+Z5Q6ZCD6rAAiXNtrT kHYe6BuUZL2aVhU2vHQdBEgeNtVpRtc= -----END CERTIFICATE-----Generated at Wed Sep 23 20:32:57 2026 by rpki-client