$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6d99cd54-71d5-3019-9c9b-65e3534462e3.roa File: 6d99cd54-71d5-3019-9c9b-65e3534462e3.roa (raw, json) Hash identifier: Ikm5flQ/72Vly3NL1H4/o7N10abCKAboI8m3S3jNv4M= Subject key identifier: BC:BB:46:44:38:6E:2D:90:C1:AB:9A:7D:2A:5C:C2:8D:0F:7C:B4:99 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584DAC457E0BC75E61B0429EA040 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6d99cd54-71d5-3019-9c9b-65e3534462e3.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 13576 IP address blocks: 64.33.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:7e:0b:c7:5e:61:b0:42:9e:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=d9f899c8-2e6a-4d83-a4f4-75088ba470c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2a:8b:cd:b4:2d:63:34:31:a5:a4:40:cb:a2: e7:5a:19:e9:3a:7d:19:4c:20:bd:6d:a2:e2:3a:03: 2c:c7:82:ee:86:09:6b:bc:f0:fb:01:04:33:e5:ff: 7e:17:70:01:31:e3:f6:84:f8:16:6b:f0:b2:6d:1a: 2e:db:0c:f2:3c:d5:c0:d0:d5:7b:d6:a8:65:84:71: 1a:f0:1d:2d:74:49:7a:ed:bb:6e:3d:2e:4c:51:f6: 5b:eb:86:f8:dc:5a:ff:33:0a:64:18:06:9b:f1:aa: 89:7b:97:79:f1:d4:0d:6f:7c:8f:3e:75:c7:8e:f8: 2f:77:ee:73:56:ab:e5:ed:fa:3f:db:29:03:ff:9b: 3e:13:f0:d8:fa:ae:79:36:df:f8:ca:10:4b:c7:f3: ef:cd:10:71:ea:01:da:0d:4c:1f:c1:99:96:ea:68: a2:c8:a1:51:4d:43:fe:ac:f9:7f:41:7f:f6:0c:9b: 3f:85:40:6a:59:f3:d7:9a:c7:4b:c5:dc:b6:0c:06: b0:58:05:75:9c:40:8b:99:ac:bf:e2:f4:b9:49:92: a8:92:36:49:57:a1:9c:48:99:af:48:72:8a:1b:9d: 89:40:77:c1:0e:aa:9f:7d:3e:77:48:1f:76:82:0f: 6a:41:8b:4e:b1:a6:ba:7d:01:4c:4e:01:33:a5:f3: 77:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:BB:46:44:38:6E:2D:90:C1:AB:9A:7D:2A:5C:C2:8D:0F:7C:B4:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6d99cd54-71d5-3019-9c9b-65e3534462e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:9e:f4:df:16:dd:e5:9e:ea:2e:9f:bf:89:7e:0a:20:a9:cb: fe:4a:8a:af:48:df:71:8a:4e:af:b1:f6:b3:19:cf:a4:c7:79: 45:ec:fb:7e:82:32:39:ab:98:1e:aa:6a:d0:51:b8:6c:6d:a6: a5:c4:da:97:05:b6:81:45:53:58:96:f0:2d:c0:b5:b1:73:18: f4:28:32:49:e5:bf:8c:e6:92:8f:7f:ea:5e:b1:ef:af:35:2d: bb:88:b0:50:12:fc:00:bb:b5:ad:d5:45:75:c7:39:9c:1b:1c: a6:5a:b2:2a:ed:c5:15:8a:25:eb:7a:ca:99:ff:46:5d:16:67: 75:c0:16:ea:b1:61:3e:2b:80:eb:fa:6e:0f:a3:29:91:e9:64: 85:9c:08:0f:1e:78:cb:f9:1f:d1:3a:76:38:d4:e5:b6:3f:c8: fa:15:6e:99:95:81:6c:45:a3:06:b1:3d:e8:c6:f1:0c:ab:18: 8d:74:08:98:24:eb:71:66:ed:bc:49:d7:d2:a5:05:90:ac:25: bb:7d:20:40:e9:17:e3:16:9c:cc:b8:0d:9d:75:55:0d:40:3f: f2:7a:d8:57:ae:91:91:36:16:96:cd:d1:1c:e7:75:40:99:05: 03:74:24:48:f5:ba:98:ae:66:fb:ec:50:1a:5e:4b:d9:3c:2d: 39:55:4e:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRX4Lx15hsEKeoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk ZDlmODk5YzgtMmU2YS00ZDgzLWE0ZjQtNzUwODhiYTQ3MGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCqLzbQtYzQxpaRAy6LnWhnpOn0ZTCC9baLi OgMsx4LuhglrvPD7AQQz5f9+F3ABMeP2hPgWa/CybRou2wzyPNXA0NV71qhlhHEa 8B0tdEl67btuPS5MUfZb64b43Fr/MwpkGAab8aqJe5d58dQNb3yPPnXHjvgvd+5z Vqvl7fo/2ykD/5s+E/DY+q55Nt/4yhBLx/PvzRBx6gHaDUwfwZmW6miiyKFRTUP+ rPl/QX/2DJs/hUBqWfPXmsdLxdy2DAawWAV1nECLmay/4vS5SZKokjZJV6GcSJmv SHKKG52JQHfBDqqffT53SB92gg9qQYtOsaa6fQFMTgEzpfN3MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLy7RkQ4bi2QwauafSpcwo0PfLSZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNmQ5OWNkNTQtNzFkNS0z MDE5LTljOWItNjVlMzUzNDQ2MmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEye9N8W3eWe6i6fv4l+CiCpy/5Kiq9I33GKTq+x9rMZz6THeUXs+36C MjmrmB6qatBRuGxtpqXE2pcFtoFFU1iW8C3AtbFzGPQoMknlv4zmko9/6l6x7681 LbuIsFAS/AC7ta3VRXXHOZwbHKZasirtxRWKJet6ypn/Rl0WZ3XAFuqxYT4rgOv6 bg+jKZHpZIWcCA8eeMv5H9E6djjU5bY/yPoVbpmVgWxFowaxPejG8QyrGI10CJgk 63Fm7bxJ19KlBZCsJbt9IEDpF+MWnMy4DZ11VQ1AP/J62FeukZE2FpbN0RzndUCZ BQN0JEj1upiuZvvsUBpeS9k8LTlVTh0= -----END CERTIFICATE-----Generated at Wed May 13 12:15:26 2026 by rpki-client