$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa File: 2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa (raw, json) Hash identifier: +qYfeR994d4WwghDy7y/AWl2dHeFQKZlKMp2fS2Q3ys= Subject key identifier: B1:F3:C1:F5:D1:7D:8A:08:85:06:54:F4:55:73:15:5C:9A:64:C9:0F Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584CBDB1FD4F7B80507E615F0080 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 15204 IP address blocks: 64.33.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b1:fd:4f:7b:80:50:7e:61:5f:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=4fc3b8da-2144-4498-880f-f63ba5e3e943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7e:78:38:df:40:7e:01:24:d2:70:1b:75:b2: aa:5f:a5:5d:fb:bc:d6:86:c3:b9:6e:39:3a:0e:29: 31:60:e7:94:5f:7e:60:03:7a:02:cf:88:41:84:8a: 40:11:c5:be:87:63:71:55:9b:01:b6:f1:02:99:b6: bd:49:1f:74:68:39:ff:64:10:63:32:0d:11:c4:9d: 7f:8a:d0:c3:15:86:94:60:88:e4:d8:0f:f2:03:5c: d2:6f:49:55:ac:4b:87:d5:18:9b:52:36:d0:78:03: 8f:a3:fa:8a:ca:11:0c:56:a9:eb:8b:45:91:fa:dd: c2:59:76:0a:4f:79:ba:04:d3:43:8c:31:4d:2b:54: 3b:64:83:5a:32:51:ab:f9:66:ce:53:58:ee:cf:39: 78:c5:e4:7b:ae:9a:22:df:1a:2d:da:d6:77:9a:7d: 5e:26:51:ba:58:87:ea:45:fb:93:4c:93:b7:be:ee: 66:d0:97:eb:3e:d1:1e:f4:27:a1:04:b4:f6:1b:d4: 20:8b:e2:b0:4c:45:5e:2c:00:51:e3:e8:02:e3:64: eb:19:9d:96:7e:d7:d8:e7:e2:a4:b7:25:41:6a:8f: a6:ee:05:f6:df:96:04:a2:2b:0d:65:d7:c8:3e:57: f8:06:f4:72:0e:11:f9:4e:92:d1:e3:d7:c4:42:fe: 0f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F3:C1:F5:D1:7D:8A:08:85:06:54:F4:55:73:15:5C:9A:64:C9:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:5b:60:79:a1:88:0e:05:41:6c:dc:ad:32:85:f2:f0:1d:a8: fa:20:e2:10:30:ce:b3:b3:87:0d:1b:13:e3:48:c3:52:83:5e: 9f:00:53:79:02:9a:fd:83:29:73:45:7c:22:6d:08:3f:40:a1: 89:9b:f2:a7:f4:b2:17:93:d8:c5:be:41:03:4d:14:66:17:44: 49:fb:cb:e5:8d:9b:45:c5:cc:98:55:da:8a:20:30:64:bd:34: ae:88:08:1d:11:46:70:2f:40:3d:d0:43:ef:6a:18:b7:c2:2d: bd:9a:cb:9d:4d:00:48:f2:53:d1:f4:0b:98:3e:3e:22:35:fe: c6:e5:f2:59:72:fe:f0:c5:eb:a1:fb:fc:12:b3:db:c1:8e:6b: e4:82:08:36:33:a8:b3:cd:b4:7e:00:85:5b:20:f2:5e:c6:37: fa:ae:49:e5:8b:2d:3f:0c:d0:88:1f:ce:87:c4:cd:22:29:28: 3c:9a:94:1c:0c:24:b6:2e:ec:5d:7d:da:67:d2:49:dd:7e:58: 61:bc:8d:08:bd:85:90:4c:8e:7d:7a:99:ac:a1:05:cc:7e:97: 45:a5:31:86:01:be:a1:41:32:62:61:f7:84:9f:d0:ed:31:a5: fc:31:da:36:10:f2:f0:c6:70:6c:2b:bc:cf:32:3c:9f:e2:9d: da:47:9b:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9sf1Pe4BQfmFfAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk NGZjM2I4ZGEtMjE0NC00NDk4LTg4MGYtZjYzYmE1ZTNlOTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8X54ON9AfgEk0nAbdbKqX6Vd+7zWhsO5bjk6 DikxYOeUX35gA3oCz4hBhIpAEcW+h2NxVZsBtvECmba9SR90aDn/ZBBjMg0RxJ1/ itDDFYaUYIjk2A/yA1zSb0lVrEuH1RibUjbQeAOPo/qKyhEMVqnri0WR+t3CWXYK T3m6BNNDjDFNK1Q7ZINaMlGr+WbOU1juzzl4xeR7rpoi3xot2tZ3mn1eJlG6WIfq RfuTTJO3vu5m0JfrPtEe9CehBLT2G9Qgi+KwTEVeLABR4+gC42TrGZ2WftfY5+Kk tyVBao+m7gX235YEoisNZdfIPlf4BvRyDhH5TpLR49fEQv4P2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHzwfXRfYoIhQZU9FVzFVyaZMkPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMmRjODY0NGYtODhhOC0z ZDdkLTlhNGUtMWIxYWJiNDdmNzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQCHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxbYHmhiA4FQWzcrTKF8vAdqPog4hAwzrOzhw0bE+NIw1KDXp8AU3kC mv2DKXNFfCJtCD9AoYmb8qf0sheT2MW+QQNNFGYXREn7y+WNm0XFzJhV2oogMGS9 NK6ICB0RRnAvQD3QQ+9qGLfCLb2ay51NAEjyU9H0C5g+PiI1/sbl8lly/vDF66H7 /BKz28GOa+SCCDYzqLPNtH4AhVsg8l7GN/quSeWLLT8M0IgfzofEzSIpKDyalBwM JLYu7F192mfSSd1+WGG8jQi9hZBMjn16mayhBcx+l0WlMYYBvqFBMmJh94Sf0O0x pfwx2jYQ8vDGcGwrvM8yPJ/indpHm/A= -----END CERTIFICATE-----Generated at Mon Mar 2 15:51:26 2026 by rpki-client