$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33b02d00-feaf-3e3c-af0d-590e48b8c766.roa File: 33b02d00-feaf-3e3c-af0d-590e48b8c766.roa (raw, json) Hash identifier: 0TNbWPkIQIFBN70LfQ0MZBGFM8mL8oZrNPKSkkgVhV4= Subject key identifier: 3B:33:4C:CB:A9:69:92:93:10:B1:33:16:85:57:E4:D0:EB:95:F5:BD Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E9384FCD99AE165780150B680 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33b02d00-feaf-3e3c-af0d-590e48b8c766.roa Signing time: Tue 21 Jul 2026 21:00:12 +0000 ROA not before: Tue 21 Jul 2026 21:00:12 +0000 ROA not after: Mon 19 Oct 2026 21:00:12 +0000 asID: 834 IP address blocks: 64.204.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:93:84:fc:d9:9a:e1:65:78:01:50:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 21 21:00:12 2026 GMT Not After : Oct 19 21:00:12 2026 GMT Subject: CN=2b05e1d2-436e-4ae9-9239-6951dfd1ee6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0a:f9:a5:94:22:e8:a3:fc:72:ff:b4:22:fb: c6:3c:1d:14:af:15:0f:ad:20:dc:6e:76:1c:a2:ec: a9:7d:63:ae:52:94:e9:f0:6e:5a:b6:e4:96:7f:b2: 0e:35:63:8d:34:8d:4b:26:67:05:12:38:b0:d5:6c: 04:a1:95:21:cc:69:bf:4b:4b:61:61:1a:fe:c3:fb: 17:56:dc:73:79:1b:14:5b:61:12:ac:70:06:cd:3e: f9:3e:18:dd:cf:30:8b:44:4a:0a:f3:82:90:5b:2a: 18:98:6e:c2:22:e2:e9:40:1e:cb:ef:76:fd:f0:ba: e8:a1:2a:89:68:55:a5:bc:62:dd:c5:62:30:8e:82: f3:40:f4:60:b9:4d:d9:ea:06:69:79:1b:21:57:bc: ce:c5:b8:39:84:d0:2e:50:23:7e:b0:a1:af:8e:cc: cf:2e:95:d0:30:9f:bd:3d:66:be:31:fa:4b:e2:86: 3a:16:d2:3a:34:a0:43:a8:5c:f2:f9:1f:0a:7d:5b: 06:41:bf:7a:f4:94:a8:4f:e7:49:6c:6c:7b:e7:4a: 57:0d:c1:56:88:22:50:4e:78:3e:84:19:86:89:83: f9:da:aa:0e:92:cc:3e:6d:d7:4c:f9:13:90:fb:7b: 54:9c:ef:60:e0:90:cd:9c:1a:33:88:52:77:a9:79: a9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:33:4C:CB:A9:69:92:93:10:B1:33:16:85:57:E4:D0:EB:95:F5:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33b02d00-feaf-3e3c-af0d-590e48b8c766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:03:c5:cb:b2:0a:89:39:4e:6e:c6:67:30:aa:aa:82:7b:38: 15:a2:55:76:6d:cf:e2:78:d0:18:53:55:42:14:8f:f9:be:44: a8:2b:26:df:f4:dd:cd:78:f6:ce:b4:65:01:dd:69:5d:59:d8: 05:50:ca:3e:95:7f:1f:ab:67:33:6f:9e:4b:3b:79:ce:66:77: 35:24:8e:cf:5e:61:b1:80:78:f4:14:ca:45:77:fb:7f:47:91: 76:df:63:22:b6:67:91:ee:ca:6e:33:67:4e:1f:07:23:5a:93: 42:13:4e:eb:79:a2:22:0b:cf:fc:1d:03:33:5f:52:93:ad:8e: c2:87:46:c8:84:b0:3b:60:58:05:fa:aa:9e:71:27:d0:74:0e: e2:e1:44:2c:31:28:11:ea:d5:6d:3a:6b:43:01:73:24:d6:b8: d8:8d:d7:a1:6f:b4:59:58:43:ba:f7:83:f6:f1:98:80:9f:64: 3f:e9:fd:93:73:6a:9e:e1:33:a2:2e:93:a7:87:fb:f7:71:10: 26:9c:c0:c5:8a:a4:6a:a6:a0:d1:c9:6f:01:77:a2:e1:45:3f: c0:3a:54:ba:ca:be:d8:46:1c:40:3a:c5:fa:ed:45:c8:a2:2b: f8:33:cc:47:5c:a3:1b:c0:ad:a3:ac:db:37:27:e8:8e:6e:7f: fb:42:0c:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ThPzZmuFleAFQtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyMTIxMDAxMloXDTI2MTAxOTIxMDAxMlowLzEtMCsGA1UEAxMk MmIwNWUxZDItNDM2ZS00YWU5LTkyMzktNjk1MWRmZDFlZTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQr5pZQi6KP8cv+0IvvGPB0UrxUPrSDcbnYc ouypfWOuUpTp8G5atuSWf7IONWONNI1LJmcFEjiw1WwEoZUhzGm/S0thYRr+w/sX VtxzeRsUW2ESrHAGzT75PhjdzzCLREoK84KQWyoYmG7CIuLpQB7L73b98LrooSqJ aFWlvGLdxWIwjoLzQPRguU3Z6gZpeRshV7zOxbg5hNAuUCN+sKGvjszPLpXQMJ+9 PWa+MfpL4oY6FtI6NKBDqFzy+R8KfVsGQb969JSoT+dJbGx750pXDcFWiCJQTng+ hBmGiYP52qoOksw+bddM+ROQ+3tUnO9g4JDNnBoziFJ3qXmp4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDszTMupaZKTELEzFoVX5NDrlfW9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzNiMDJkMDAtZmVhZi0z ZTNjLWFmMGQtNTkwZTQ4YjhjNzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMwLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgDxcuyCok5Tm7GZzCqqoJ7OBWiVXZtz+J40BhTVUIUj/m+RKgrJt/0 3c149s60ZQHdaV1Z2AVQyj6Vfx+rZzNvnks7ec5mdzUkjs9eYbGAePQUykV3+39H kXbfYyK2Z5Huym4zZ04fByNak0ITTut5oiILz/wdAzNfUpOtjsKHRsiEsDtgWAX6 qp5xJ9B0DuLhRCwxKBHq1W06a0MBcyTWuNiN16FvtFlYQ7r3g/bxmICfZD/p/ZNz ap7hM6Iuk6eH+/dxECacwMWKpGqmoNHJbwF3ouFFP8A6VLrKvthGHEA6xfrtRcii K/gzzEdcoxvAraOs2zcn6I5uf/tCDIA= -----END CERTIFICATE-----Generated at Fri Jul 24 14:02:06 2026 by rpki-client