$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e02ae7eb-5a71-33d5-b889-2d1853ac5b08.roa File: e02ae7eb-5a71-33d5-b889-2d1853ac5b08.roa (raw, json) Hash identifier: wzTsoKuU3HxSB5YaUBMb4uBjQJed+IFaupcox+vQFOs= Subject key identifier: 72:67:9E:DE:EE:D8:0E:C5:19:8C:0B:43:43:B8:27:2D:80:83:6F:53 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584D7EEA67F6DF64419038042C00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e02ae7eb-5a71-33d5-b889-2d1853ac5b08.roa Signing time: Mon 13 Apr 2026 19:05:44 +0000 ROA not before: Mon 13 Apr 2026 19:05:44 +0000 ROA not after: Sun 12 Jul 2026 19:05:44 +0000 asID: 63172 IP address blocks: 64.33.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7e:ea:67:f6:df:64:41:90:38:04:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Apr 13 19:05:44 2026 GMT Not After : Jul 12 19:05:44 2026 GMT Subject: CN=af41df11-ec38-40a4-a0da-2a2280d5af4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b0:64:3b:78:a6:16:76:63:d8:ed:54:6c:8d: a5:f4:a9:91:d4:ba:7a:a4:02:5d:1b:47:e3:a4:bd: d3:5b:e5:55:67:d9:75:35:c0:5d:15:e1:1d:61:a6: 1c:9c:41:95:42:df:db:92:34:12:83:7c:77:fb:9b: b1:59:43:56:01:2a:88:33:e2:35:8e:a4:33:10:4b: dc:e7:de:3e:4d:4b:5e:d5:f7:0e:78:06:12:55:dd: 7d:40:ca:31:45:6e:79:8b:3e:51:6c:ea:02:46:23: 30:d9:dc:7c:ae:d6:fe:92:c7:05:63:22:59:63:85: 52:08:f5:d5:38:13:57:3e:03:cf:3d:e6:08:41:27: 95:6a:a2:45:b9:00:1c:eb:c9:c4:2b:69:a6:14:b1: fe:a2:68:09:aa:c5:94:04:23:59:66:79:00:fa:b5: 34:72:97:1b:3a:e8:08:76:aa:38:2e:98:8a:a5:3b: fd:60:ba:aa:9f:e6:25:0c:81:97:1f:f1:f5:53:52: c0:82:2d:27:7c:23:fe:31:93:b4:8e:7a:58:a5:6c: 64:c5:72:ee:21:ba:e8:30:7b:1d:ec:68:c3:03:f2: c8:09:8d:6d:8d:67:93:fe:be:6d:32:b1:dc:1b:75: 12:db:fc:44:21:15:87:d4:ae:65:e5:e9:09:a3:08: 12:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:67:9E:DE:EE:D8:0E:C5:19:8C:0B:43:43:B8:27:2D:80:83:6F:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e02ae7eb-5a71-33d5-b889-2d1853ac5b08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:fa:df:8c:59:7e:c5:52:88:c4:43:7d:9e:7d:87:74:d5:ad: 13:c8:f0:bb:ef:80:9b:53:8c:a9:2e:2e:b4:1f:0e:0f:bf:ed: 8d:59:9d:43:b7:9b:e3:7d:75:0a:66:8e:43:38:1c:b4:38:6a: 5f:0b:b2:bd:8e:15:0e:d1:f0:8b:03:17:a8:5e:37:2d:d5:16: 2c:9d:f8:b7:b0:e2:90:e5:87:cf:6d:3a:7d:bb:5d:7f:08:28: ac:70:cd:8a:63:c2:b0:de:9d:d3:db:e2:15:f2:67:7c:d0:32: 75:6a:4e:69:26:b7:1b:5f:22:1d:d4:a3:33:b6:8f:60:20:87: a6:a7:74:f6:41:c1:12:7d:a9:18:c4:36:09:80:92:90:86:f5: 20:46:fd:2d:1b:8f:ac:64:e3:1c:0e:26:18:17:e5:0c:27:09: ea:42:9d:1a:13:19:4f:74:be:1a:eb:de:80:fc:5b:58:9d:2f: 55:39:d3:45:5f:27:ef:28:4d:c9:c6:67:81:cc:2d:7b:35:50: de:a1:c3:fa:3c:ca:ea:ae:b7:6a:41:1e:aa:d8:9c:46:96:4c: 75:e7:48:91:b6:bd:e8:74:dd:0f:77:24:a6:17:61:50:e1:d1: 1a:24:df:a6:3c:2f:b9:15:82:e9:68:53:2c:e8:72:7c:56:5b: bf:c2:0f:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1+6mf232RBkDgELAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDQxMzE5MDU0NFoXDTI2MDcxMjE5MDU0NFowLzEtMCsGA1UEAxMk YWY0MWRmMTEtZWMzOC00MGE0LWEwZGEtMmEyMjgwZDVhZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrBkO3imFnZj2O1UbI2l9KmR1Lp6pAJdG0fj pL3TW+VVZ9l1NcBdFeEdYaYcnEGVQt/bkjQSg3x3+5uxWUNWASqIM+I1jqQzEEvc 594+TUte1fcOeAYSVd19QMoxRW55iz5RbOoCRiMw2dx8rtb+kscFYyJZY4VSCPXV OBNXPgPPPeYIQSeVaqJFuQAc68nEK2mmFLH+omgJqsWUBCNZZnkA+rU0cpcbOugI dqo4LpiKpTv9YLqqn+YlDIGXH/H1U1LAgi0nfCP+MZO0jnpYpWxkxXLuIbroMHsd 7GjDA/LICY1tjWeT/r5tMrHcG3US2/xEIRWH1K5l5ekJowgSDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJnnt7u2A7FGYwLQ0O4Jy2Ag29TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZTAyYWU3ZWItNWE3MS0z M2Q1LWI4ODktMmQxODUzYWM1YjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCHzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMz634xZfsVSiMRDfZ59h3TVrRPI8LvvgJtTjKkuLrQfDg+/7Y1ZnUO3 m+N9dQpmjkM4HLQ4al8Lsr2OFQ7R8IsDF6heNy3VFiyd+Lew4pDlh89tOn27XX8I KKxwzYpjwrDendPb4hXyZ3zQMnVqTmkmtxtfIh3UozO2j2Agh6andPZBwRJ9qRjE NgmAkpCG9SBG/S0bj6xk4xwOJhgX5QwnCepCnRoTGU90vhrr3oD8W1idL1U500Vf J+8oTcnGZ4HMLXs1UN6hw/o8yuqut2pBHqrYnEaWTHXnSJG2veh03Q93JKYXYVDh 0Rok36Y8L7kVguloUyzocnxWW7/CD7g= -----END CERTIFICATE-----Generated at Fri Apr 17 14:02:10 2026 by rpki-client