$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d930136e-3afa-3997-ac01-9aeed5e2d0b6.roa File: d930136e-3afa-3997-ac01-9aeed5e2d0b6.roa (raw, json) Hash identifier: TmyDg2Z3QQjcyj8jHrDYj2k7cc3ZATjzlWchXJ1ONjM= Subject key identifier: 1F:6E:AA:F5:EB:12:9A:B2:56:64:20:37:85:12:F6:AE:B9:F3:B2:FF Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584CEE8CC5B7E8F22547936CE140 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d930136e-3afa-3997-ac01-9aeed5e2d0b6.roa Signing time: Sat 21 Feb 2026 02:00:32 +0000 ROA not before: Sat 21 Feb 2026 02:00:32 +0000 ROA not after: Fri 22 May 2026 01:00:32 +0000 asID: 18785 IP address blocks: 64.33.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ee:8c:c5:b7:e8:f2:25:47:93:6c:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Feb 21 02:00:32 2026 GMT Not After : May 22 01:00:32 2026 GMT Subject: CN=3c394cc7-b1c6-4126-8baa-b07633c2e652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c0:b2:f7:f9:f0:ff:d5:0e:7c:9d:d7:76:2b: 51:c5:f7:9a:38:8d:1a:97:bf:14:5c:c8:d6:67:16: 96:6f:8a:d1:0a:ff:ad:a9:c1:5a:e3:d4:c7:71:be: a7:7a:4d:49:a9:a6:ce:33:18:a4:df:15:b1:bb:fc: ff:db:bd:1c:25:73:2f:97:06:a2:f2:85:dd:dc:2c: eb:a5:46:3f:04:7c:e6:e8:8c:fa:62:66:cf:ad:20: 96:e7:3d:ce:f4:02:e0:71:29:7a:ca:9c:52:ee:bd: 9f:fa:bd:24:fc:30:a6:3d:d6:62:97:fc:5c:cf:a1: ae:1b:04:37:ac:e1:47:05:d2:ec:7f:0a:5c:f4:cb: 85:f6:40:bd:ac:99:34:6b:ec:f6:45:fd:f4:7a:e6: e3:4e:94:b4:30:62:fa:7f:ff:99:6b:3f:16:88:3c: e8:34:86:a4:cc:98:5c:8c:00:66:60:dd:0b:b2:fa: a6:94:02:e2:8e:e4:c1:a1:5b:60:ed:cf:fb:6b:bf: 2e:a6:a0:a3:d9:a0:f6:10:e0:55:c4:46:6e:36:5d: 15:25:55:aa:23:1b:80:22:fd:2f:5c:32:ca:19:58: 4a:0b:51:4a:8e:de:98:59:e5:07:80:05:26:b3:25: 53:3b:a0:17:98:40:82:d4:0d:7e:32:b0:fd:28:3e: d3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6E:AA:F5:EB:12:9A:B2:56:64:20:37:85:12:F6:AE:B9:F3:B2:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d930136e-3afa-3997-ac01-9aeed5e2d0b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:eb:8f:5e:5d:10:40:07:66:32:bd:25:a4:9f:bc:59:ec:8a: a0:be:78:ea:ad:e4:da:d3:a1:96:ca:07:1a:74:c4:bc:e4:0f: 30:e8:0c:dd:97:93:1b:a7:e5:8e:5f:2a:14:1e:7c:72:e9:40: 6c:3b:87:e9:a8:7a:67:b5:ff:23:b5:76:c7:18:2b:5f:13:c1: b6:04:45:55:ad:26:d6:04:cd:b8:31:6a:28:5f:7a:91:d2:f3: 0f:b0:3d:d1:c3:ec:0a:db:12:aa:42:de:6a:19:32:61:3e:a4: 4e:1b:2c:70:a8:91:c8:0b:a7:a2:d1:b0:ea:3a:52:4d:31:0a: 15:f9:3d:dc:2f:9f:6f:8e:70:7d:cc:a5:bf:c8:86:dd:96:00: 92:f8:c4:d9:7e:44:06:2a:7e:d0:ca:9b:c6:f5:d0:29:89:37: 7e:94:af:dc:9c:7f:c2:03:c3:40:32:6a:77:a8:c5:3d:83:5f: fa:94:6f:bf:2f:94:c5:98:16:43:6e:dd:25:3f:c4:91:29:67: 0a:c0:38:b7:f1:5a:21:3d:d2:69:38:36:2b:7c:fd:92:f9:28: d8:f1:74:bc:b0:d9:5d:e9:8a:93:63:79:6a:f0:23:91:99:c4: 32:1f:4d:52:e5:6b:41:1b:a5:f4:7d:2c:9d:44:f3:c8:d8:4a: de:c2:95:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzujMW36PIlR5Ns4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDIyMTAyMDAzMloXDTI2MDUyMjAxMDAzMlowLzEtMCsGA1UEAxMk M2MzOTRjYzctYjFjNi00MTI2LThiYWEtYjA3NjMzYzJlNjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsCy9/nw/9UOfJ3XditRxfeaOI0al78UXMjW ZxaWb4rRCv+tqcFa49THcb6nek1JqabOMxik3xWxu/z/270cJXMvlwai8oXd3Czr pUY/BHzm6Iz6YmbPrSCW5z3O9ALgcSl6ypxS7r2f+r0k/DCmPdZil/xcz6GuGwQ3 rOFHBdLsfwpc9MuF9kC9rJk0a+z2Rf30eubjTpS0MGL6f/+Zaz8WiDzoNIakzJhc jABmYN0LsvqmlALijuTBoVtg7c/7a78upqCj2aD2EOBVxEZuNl0VJVWqIxuAIv0v XDLKGVhKC1FKjt6YWeUHgAUmsyVTO6AXmECC1A1+MrD9KD7TnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9uqvXrEpqyVmQgN4US9q6587L/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZDkzMDEzNmUtM2FmYS0z OTk3LWFjMDEtOWFlZWQ1ZTJkMGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCH6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHrj15dEEAHZjK9JaSfvFnsiqC+eOqt5NrToZbKBxp0xLzkDzDoDN2X kxun5Y5fKhQefHLpQGw7h+moeme1/yO1dscYK18TwbYERVWtJtYEzbgxaihfepHS 8w+wPdHD7ArbEqpC3moZMmE+pE4bLHCokcgLp6LRsOo6Uk0xChX5Pdwvn2+OcH3M pb/Iht2WAJL4xNl+RAYqftDKm8b10CmJN36Ur9ycf8IDw0AyaneoxT2DX/qUb78v lMWYFkNu3SU/xJEpZwrAOLfxWiE90mk4Nit8/ZL5KNjxdLyw2V3pipNjeWrwI5GZ xDIfTVLla0EbpfR9LJ1E88jYSt7ClQI= -----END CERTIFICATE-----Generated at Mon Mar 2 17:41:19 2026 by rpki-client