$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b8f183e4-f412-3ba4-9750-0056fa1fe08f.roa File: b8f183e4-f412-3ba4-9750-0056fa1fe08f.roa (raw, json) Hash identifier: YjlBSjsaK0c9rJ+wSrzRkKcuQsw3FPmPzqFZ3SuBShU= Subject key identifier: DF:10:4C:2D:18:C6:C9:99:39:4C:7A:C3:93:A7:AD:75:57:42:C7:B2 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584F498B3B0C986773F3139E2420 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b8f183e4-f412-3ba4-9750-0056fa1fe08f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 18785 IP address blocks: 64.33.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:3b:0c:98:67:73:f3:13:9e:24:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9c2bbb2c-243e-49e7-b909-b57f8ce1f0a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5b:54:4e:8b:55:08:b5:60:b3:e3:bf:8e:d9: 77:a3:0c:2d:14:b0:1d:c2:01:87:be:a9:d7:7c:73: 84:b2:94:b7:7f:9f:85:06:bf:93:91:53:e9:a1:2e: 08:c5:a7:50:15:9f:b3:80:b5:f7:79:af:b3:85:88: 7a:34:71:b3:df:0f:35:b8:20:cb:4f:c8:dc:0b:e2: cd:a6:c8:27:77:98:cd:e0:f1:58:ac:23:ff:95:be: 6f:68:c5:26:55:c4:7d:96:1d:d1:72:f5:a2:81:da: e7:8f:90:b1:91:3b:70:25:6c:7f:c1:60:77:92:a6: 94:e1:78:c6:68:df:e1:e5:67:d0:fc:80:c4:fc:30: 9d:b7:8c:87:10:f4:ff:f2:78:15:7b:5e:d0:f5:34: 9a:d9:5d:1f:c5:7a:cf:a5:ef:01:aa:3e:17:b7:96: ea:7a:e7:eb:90:84:ca:95:07:d8:9c:44:86:9c:53: 23:09:aa:92:f3:9d:d8:fc:12:27:37:a2:cb:dc:22: bb:f2:f4:f5:40:8c:ff:e1:08:2a:85:fa:f2:91:b5: ca:1d:10:70:74:ec:4e:03:ec:33:13:00:f6:f6:72: ac:ef:a6:ea:1c:65:b9:24:fb:1d:37:f9:7d:28:13: 61:8e:a4:fb:31:3d:37:2b:a9:28:78:fc:5b:c7:91: 81:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:10:4C:2D:18:C6:C9:99:39:4C:7A:C3:93:A7:AD:75:57:42:C7:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b8f183e4-f412-3ba4-9750-0056fa1fe08f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:f2:7c:6d:a9:ef:0a:1b:65:77:65:19:05:a3:00:f7:a6:a1: 20:38:96:43:e4:7a:3f:16:f1:f6:9e:a2:98:1a:a1:24:95:24: 64:87:e4:aa:8f:4b:d6:ea:d5:4b:c0:8c:87:cb:07:63:e8:cf: 57:27:2e:9a:e5:c8:42:0e:77:5e:a8:a4:f6:2a:4b:d2:3b:65: 8b:7f:ab:6f:50:a4:bf:f7:8c:3a:bd:54:44:ef:ec:6d:c3:e4: 99:37:43:63:af:ff:5a:71:6d:e6:d4:53:07:68:6b:b0:30:a3: 62:90:29:d0:cb:f4:ca:ec:87:54:da:13:0e:d0:d3:e2:19:06: d3:a7:f3:86:fe:82:52:f8:ba:44:1f:fc:1f:65:b0:1e:28:0a: b4:46:75:63:b9:fc:ba:9f:87:c9:52:79:58:1a:16:0d:58:1a: b2:b8:af:20:a7:c1:6b:b3:d1:bd:97:1d:ae:57:bd:9c:32:43: 8b:3f:e7:f6:01:8c:ae:00:31:c6:35:d4:76:ab:f8:2d:88:6d: 32:78:04:c8:82:e2:3a:90:34:4b:3b:65:e5:2b:82:4b:d8:f6: d0:0a:a2:b4:e9:b9:f6:4d:49:7d:1b:d3:12:60:f8:94:e6:52: db:3f:ba:4f:d5:18:f8:38:2a:c5:16:fe:bc:55:19:c3:90:6e: 5b:5a:db:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JizsMmGdz8xOeJCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWMyYmJiMmMtMjQzZS00OWU3LWI5MDktYjU3ZjhjZTFmMGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ltUTotVCLVgs+O/jtl3owwtFLAdwgGHvqnX fHOEspS3f5+FBr+TkVPpoS4IxadQFZ+zgLX3ea+zhYh6NHGz3w81uCDLT8jcC+LN psgnd5jN4PFYrCP/lb5vaMUmVcR9lh3RcvWigdrnj5CxkTtwJWx/wWB3kqaU4XjG aN/h5WfQ/IDE/DCdt4yHEPT/8ngVe17Q9TSa2V0fxXrPpe8Bqj4Xt5bqeufrkITK lQfYnESGnFMjCaqS853Y/BInN6LL3CK78vT1QIz/4QgqhfrykbXKHRBwdOxOA+wz EwD29nKs76bqHGW5JPsdN/l9KBNhjqT7MT03K6koePxbx5GBowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8QTC0YxsmZOUx6w5OnrXVXQseyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYjhmMTgzZTQtZjQxMi0z YmE0LTk3NTAtMDA1NmZhMWZlMDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADyfG2p7wobZXdlGQWjAPemoSA4lkPkej8W8faeopgaoSSVJGSH5KqP S9bq1UvAjIfLB2Poz1cnLprlyEIOd16opPYqS9I7ZYt/q29QpL/3jDq9VETv7G3D 5Jk3Q2Ov/1pxbebUUwdoa7Awo2KQKdDL9Mrsh1TaEw7Q0+IZBtOn84b+glL4ukQf /B9lsB4oCrRGdWO5/Lqfh8lSeVgaFg1YGrK4ryCnwWuz0b2XHa5XvZwyQ4s/5/YB jK4AMcY11Har+C2IbTJ4BMiC4jqQNEs7ZeUrgkvY9tAKorTpufZNSX0b0xJg+JTm Uts/uk/VGPg4KsUW/rxVGcOQblta2xE= -----END CERTIFICATE-----Generated at Thu Oct 8 20:42:22 2026 by rpki-client