$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33b02d00-feaf-3e3c-af0d-590e48b8c766.roa File: 33b02d00-feaf-3e3c-af0d-590e48b8c766.roa (raw, json) Hash identifier: CfXxjlPG1qK6IeHVKBVTcUKkpHzZI8p4XzSMchIVx34= Subject key identifier: 58:D8:FE:C9:A8:AF:E9:30:A4:4A:69:C2:B0:36:90:35:13:8F:01:39 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DB341943FF72A5B489C4CEB80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33b02d00-feaf-3e3c-af0d-590e48b8c766.roa Signing time: Sat 02 May 2026 13:03:24 +0000 ROA not before: Sat 02 May 2026 13:03:24 +0000 ROA not after: Fri 31 Jul 2026 13:03:24 +0000 asID: 834 IP address blocks: 64.204.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b3:41:94:3f:f7:2a:5b:48:9c:4c:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 2 13:03:24 2026 GMT Not After : Jul 31 13:03:24 2026 GMT Subject: CN=039c6a32-f84b-44ae-98e2-02c823f8bc2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ac:7b:20:4e:fc:a0:b4:60:cc:41:d9:9e:66: a9:fb:6a:8d:c3:87:5f:7b:b3:ea:02:d8:18:cb:d9: 29:d2:02:06:c0:98:5a:55:d9:ed:9e:27:15:f9:3b: 3f:ad:65:57:1c:0f:7e:db:2f:21:2a:11:96:3c:6b: 9e:27:8a:04:45:58:b4:3d:33:c3:48:1f:66:a9:c1: 87:a0:4d:ca:2b:ae:85:7d:e9:4e:75:2b:53:6e:47: 1c:c7:cd:bc:f1:d0:2b:37:56:bf:d1:ab:04:5f:73: bd:03:31:c4:97:41:86:b8:38:4d:f6:57:08:1f:64: 57:14:a8:1d:4e:bd:90:a5:cf:34:a0:9f:e3:03:62: cb:87:ea:67:06:5e:4c:c3:d2:66:44:d7:f5:80:2b: 79:94:45:ca:55:ec:78:89:38:10:6a:f8:71:25:28: a6:52:0e:5a:9d:b7:af:34:12:6a:6d:f1:b4:05:c0: 91:53:91:bf:a1:bf:42:95:0a:99:28:70:90:83:fb: 16:15:d7:54:79:5d:98:89:a0:92:41:a0:33:de:fd: 15:16:ac:a2:4b:09:9e:a8:22:cc:d8:95:af:d1:f0: 42:52:0d:89:9e:da:bd:48:7d:20:ce:bd:91:e3:d1: 43:df:50:2e:86:d0:fc:44:91:e7:ed:c6:7d:58:15: 99:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D8:FE:C9:A8:AF:E9:30:A4:4A:69:C2:B0:36:90:35:13:8F:01:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33b02d00-feaf-3e3c-af0d-590e48b8c766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b2:81:00:9b:96:77:d1:d1:ef:22:62:bc:a7:24:10:e2:a7: 7e:d8:bf:2c:fe:65:a2:f8:55:8b:9b:02:8b:78:36:01:fa:2b: 21:be:de:21:70:6d:50:6c:38:23:62:2f:20:82:59:b2:89:a6: 0e:20:09:ee:e0:7d:33:6b:7b:c7:5b:af:b6:79:d1:40:1a:32: 91:54:19:9f:0b:87:c4:79:fa:54:d1:a7:57:66:dd:fd:28:91: 3e:55:69:ad:66:8e:d2:31:d4:b8:cc:73:65:70:ee:5e:2f:4c: 44:8b:d9:5f:52:9e:ac:77:66:34:77:b4:bf:4c:43:03:16:66: a8:23:02:ee:77:4a:55:0c:33:e9:1e:7c:77:38:18:24:07:18: 97:bc:64:c4:73:81:e7:db:57:09:b5:bd:b3:08:d4:49:82:0a: dd:1c:11:e2:19:27:2b:8f:7b:56:78:82:63:7a:81:a8:45:4f: ee:66:85:9b:1f:9c:61:ed:c8:a9:85:c0:f4:8d:53:c9:d7:7a: b4:8b:3b:82:29:32:1c:bd:c1:b2:e6:08:2d:ba:90:28:19:19: bd:7b:4f:58:57:ab:50:cf:da:52:c0:1d:a3:f2:41:a3:83:aa: e1:a6:f5:4f:85:ba:e2:2e:22:92:46:73:d0:ea:d6:37:9f:66: e2:4f:c6:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2zQZQ/9ypbSJxM64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUwMjEzMDMyNFoXDTI2MDczMTEzMDMyNFowLzEtMCsGA1UEAxMk MDM5YzZhMzItZjg0Yi00NGFlLTk4ZTItMDJjODIzZjhiYzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6x7IE78oLRgzEHZnmap+2qNw4dfe7PqAtgY y9kp0gIGwJhaVdntnicV+Ts/rWVXHA9+2y8hKhGWPGueJ4oERVi0PTPDSB9mqcGH oE3KK66FfelOdStTbkccx8288dArN1a/0asEX3O9AzHEl0GGuDhN9lcIH2RXFKgd Tr2Qpc80oJ/jA2LLh+pnBl5Mw9JmRNf1gCt5lEXKVex4iTgQavhxJSimUg5anbev NBJqbfG0BcCRU5G/ob9ClQqZKHCQg/sWFddUeV2YiaCSQaAz3v0VFqyiSwmeqCLM 2JWv0fBCUg2Jntq9SH0gzr2R49FD31AuhtD8RJHn7cZ9WBWZIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjY/smor+kwpEppwrA2kDUTjwE5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzNiMDJkMDAtZmVhZi0z ZTNjLWFmMGQtNTkwZTQ4YjhjNzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMwLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaygQCblnfR0e8iYrynJBDip37Yvyz+ZaL4VYubAot4NgH6KyG+3iFw bVBsOCNiLyCCWbKJpg4gCe7gfTNre8dbr7Z50UAaMpFUGZ8Lh8R5+lTRp1dm3f0o kT5Vaa1mjtIx1LjMc2Vw7l4vTESL2V9Snqx3ZjR3tL9MQwMWZqgjAu53SlUMM+ke fHc4GCQHGJe8ZMRzgefbVwm1vbMI1EmCCt0cEeIZJyuPe1Z4gmN6gahFT+5mhZsf nGHtyKmFwPSNU8nXerSLO4IpMhy9wbLmCC26kCgZGb17T1hXq1DP2lLAHaPyQaOD quGm9U+FuuIuIpJGc9Dq1jefZuJPxgY= -----END CERTIFICATE-----Generated at Wed May 13 14:03:47 2026 by rpki-client