$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa File: 2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa (raw, json) Hash identifier: nUFNI30HcCd38wHpQzdK7PKa3lnL84lRmXmkv8Fj0uU= Subject key identifier: 3F:55:A6:74:F7:11:0E:58:AB:8F:48:4C:16:40:A2:EE:55:ED:F1:B6 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584D9E50183771F02B439B36B000 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 15204 IP address blocks: 64.33.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:18:37:71:f0:2b:43:9b:36:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=05f2f621-753d-4b8b-adce-f1d0968429bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:93:19:c1:bf:72:22:24:59:a0:b4:b7:ce:65: 23:56:90:9c:46:9b:55:64:09:a0:67:97:69:26:d1: 8e:56:89:bc:8d:ba:09:42:4f:e9:60:28:1b:24:ce: bc:bc:82:eb:67:c7:9a:1c:3f:57:2d:87:42:bb:0c: 4e:d4:03:f1:3e:c4:83:cc:60:ab:3e:87:48:66:0c: 37:ca:4f:a5:bd:39:55:16:e8:7c:48:60:28:a5:66: 1b:bc:73:09:ea:51:80:f8:80:ca:55:ef:b4:f8:56: 80:f5:63:f8:b3:f5:35:47:14:0e:01:48:d3:7c:17: d7:99:7a:7c:80:91:07:9f:29:52:92:7f:ff:92:c4: f4:ad:52:05:3c:b7:b9:0f:49:67:63:6a:15:3a:d7: 80:2d:fe:45:bd:06:54:b8:1c:c5:9a:37:ed:d6:4b: c3:f8:8f:b0:19:34:ba:b6:a1:e9:08:f9:13:25:44: fe:49:c4:c1:61:58:c7:ea:99:af:67:48:89:5e:ca: f8:a0:5a:75:e5:4f:4f:1b:0e:11:3b:aa:02:e6:e1: 66:88:db:fa:a6:0e:25:8b:1d:6f:6c:d0:1c:6d:fd: 1e:c1:57:5b:db:83:7e:bc:d3:32:f5:d1:4e:64:b0: b6:d0:58:e4:9d:2e:fd:51:1a:83:c5:8f:ad:97:18: bb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:55:A6:74:F7:11:0E:58:AB:8F:48:4C:16:40:A2:EE:55:ED:F1:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:17:8a:b2:ce:64:f0:07:bb:2b:1d:ad:a4:8e:33:b6:73:60: 4b:bb:0a:e9:a1:a4:59:9a:45:13:fc:45:ed:3e:ed:2c:d3:26: af:5f:c8:e7:5c:ae:5e:2c:4d:12:dc:b2:d0:86:d0:33:fb:53: a9:08:29:c2:81:22:dd:8f:ab:5e:89:df:8d:31:42:bc:29:23: 97:23:a0:9b:b4:e5:28:83:77:09:ff:92:ad:ab:bd:9c:13:c2: 4e:3f:1a:c4:3c:cf:d9:44:70:d2:62:68:0d:af:43:f3:7c:a9: e7:57:41:10:d9:8f:54:b0:0e:cd:98:3a:22:22:2b:f4:6a:01: cf:e7:31:71:6f:aa:b3:14:ae:b0:56:56:20:b2:11:fc:27:13: 0c:45:c4:a6:bc:41:81:98:d4:07:e7:de:4e:c5:74:f7:fa:5d: 49:57:57:92:89:26:a2:6b:06:56:05:d8:3d:99:06:a7:f0:95: 0b:ff:2e:6d:87:ea:6e:12:29:3e:18:99:7a:d0:57:2b:82:ee: 7b:8a:5d:5f:fb:6d:10:87:c8:3c:cf:8a:bb:3d:27:6a:ab:0a: c9:7c:a2:e6:e3:56:44:a2:43:df:e0:5b:cb:47:26:16:fa:e4: 21:75:e3:c7:ca:2e:69:68:cd:5e:1c:45:85:bc:49:ab:e8:2f: 5d:2c:04:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUBg3cfArQ5s2sAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk MDVmMmY2MjEtNzUzZC00YjhiLWFkY2UtZjFkMDk2ODQyOWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypMZwb9yIiRZoLS3zmUjVpCcRptVZAmgZ5dp JtGOVom8jboJQk/pYCgbJM68vILrZ8eaHD9XLYdCuwxO1APxPsSDzGCrPodIZgw3 yk+lvTlVFuh8SGAopWYbvHMJ6lGA+IDKVe+0+FaA9WP4s/U1RxQOAUjTfBfXmXp8 gJEHnylSkn//ksT0rVIFPLe5D0lnY2oVOteALf5FvQZUuBzFmjft1kvD+I+wGTS6 tqHpCPkTJUT+ScTBYVjH6pmvZ0iJXsr4oFp15U9PGw4RO6oC5uFmiNv6pg4lix1v bNAcbf0ewVdb24N+vNMy9dFOZLC20FjknS79URqDxY+tlxi7IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9VpnT3EQ5Yq49ITBZAou5V7fG2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMmRjODY0NGYtODhhOC0z ZDdkLTlhNGUtMWIxYWJiNDdmNzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQCHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcXirLOZPAHuysdraSOM7ZzYEu7CumhpFmaRRP8Re0+7SzTJq9fyOdc rl4sTRLcstCG0DP7U6kIKcKBIt2Pq16J340xQrwpI5cjoJu05SiDdwn/kq2rvZwT wk4/GsQ8z9lEcNJiaA2vQ/N8qedXQRDZj1SwDs2YOiIiK/RqAc/nMXFvqrMUrrBW ViCyEfwnEwxFxKa8QYGY1Afn3k7FdPf6XUlXV5KJJqJrBlYF2D2ZBqfwlQv/Lm2H 6m4SKT4YmXrQVyuC7nuKXV/7bRCHyDzPirs9J2qrCsl8oubjVkSiQ9/gW8tHJhb6 5CF148fKLmlozV4cRYW8SavoL10sBLU= -----END CERTIFICATE-----Generated at Wed May 13 08:48:30 2026 by rpki-client