$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa File: 2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa (raw, json) Hash identifier: VupDFCNpf8vIybXXQnK7eKs0EandHrtKZs52xk6V54I= Subject key identifier: 09:3F:3A:29:33:01:47:5E:24:BD:06:87:A1:6A:43:CC:F7:D4:E7:81 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AFC1C08A8BCB190D1E63147C0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 15204 IP address blocks: 64.33.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:08:a8:bc:b1:90:d1:e6:31:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=9e10b1fb-26ef-43c8-8bae-7e1df1f7bc92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5c:87:7f:21:6d:d7:52:66:ac:eb:4f:cd:74: 07:bf:08:3c:f0:3f:f8:41:bf:98:a5:7e:48:55:80: 62:b4:de:f8:28:18:5b:ad:8d:8e:83:40:d0:e9:f5: 53:29:be:82:95:4f:3f:ae:aa:66:a7:1b:58:d2:05: 44:e1:29:75:8f:b6:0b:e1:80:74:69:9c:ac:a1:c3: f9:c8:3f:df:08:a5:07:b5:4a:01:62:d9:bf:5c:8b: 84:24:42:fc:c8:0a:01:4e:8c:7b:44:be:0a:ce:11: 6b:86:0d:5c:22:e8:1f:b3:e4:21:4b:0e:c1:a6:74: 95:01:da:52:4e:72:4b:93:46:3e:d2:cb:52:11:fb: 92:cf:9c:87:fe:c6:01:8f:94:ee:d2:06:94:19:3c: b4:ab:a0:4e:5c:60:e1:f4:90:76:66:81:be:8b:4e: 53:c2:9f:bc:0d:d6:f3:7b:eb:9d:fe:e6:a6:8c:e9: b6:25:64:9d:5a:ca:33:ca:8d:58:92:a6:d2:5b:de: 26:76:33:33:20:dc:4c:d0:d2:a4:82:b6:47:90:75: fb:96:47:a5:74:3c:81:f5:68:85:77:86:64:8d:df: 18:b2:2a:a1:18:b9:a6:29:74:f9:78:f7:13:37:d6: 4b:5e:7c:98:be:ad:ec:86:91:76:0e:9c:77:ed:de: 27:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3F:3A:29:33:01:47:5E:24:BD:06:87:A1:6A:43:CC:F7:D4:E7:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:cf:09:99:81:48:61:23:b6:ac:30:3a:e9:ef:21:82:8b:c6: d9:d2:88:0a:11:75:b9:4c:5a:34:ad:d7:54:ab:84:2d:02:f5: df:d0:11:43:47:d4:7a:19:d6:e9:34:ac:7d:d1:fa:e3:af:a8: ea:36:40:7a:b0:8f:6b:31:e1:c4:34:14:f6:ee:19:6b:2c:a0: 1d:c4:60:9b:6d:ed:be:a9:bb:6d:c1:3f:b1:da:a8:1d:42:84: 39:a3:07:71:6c:04:3b:f7:f1:3e:45:31:e9:f6:54:2b:f2:ac: 8b:94:ab:5c:53:64:f9:77:44:76:9c:58:ac:87:d7:48:2d:41: 7a:49:d5:83:1f:29:1e:29:a7:e8:71:4a:30:3f:70:d8:2f:99: 27:bb:f5:c6:36:c6:8e:5e:46:8b:c4:dc:16:28:96:a0:d5:3a: d4:f2:bb:00:32:ec:0e:1a:40:fa:c6:7c:b4:f0:e1:80:db:9b: 51:e8:b4:87:3a:3b:e7:15:ca:e7:97:f4:49:99:7b:df:0e:48: 05:c3:44:ed:57:a7:ea:2d:55:80:a5:84:fb:71:77:2f:56:a4: 1f:23:de:1e:10:00:f5:3a:4b:cb:1a:68:b8:36:e6:bd:be:f5: 08:c6:6a:ba:86:73:02:c8:53:a3:c2:12:ea:52:ea:c2:27:83: 68:fe:f0:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAiovLGQ0eYxR8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk OWUxMGIxZmItMjZlZi00M2M4LThiYWUtN2UxZGYxZjdiYzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1yHfyFt11JmrOtPzXQHvwg88D/4Qb+YpX5I VYBitN74KBhbrY2Og0DQ6fVTKb6ClU8/rqpmpxtY0gVE4Sl1j7YL4YB0aZysocP5 yD/fCKUHtUoBYtm/XIuEJEL8yAoBTox7RL4KzhFrhg1cIugfs+QhSw7BpnSVAdpS TnJLk0Y+0stSEfuSz5yH/sYBj5Tu0gaUGTy0q6BOXGDh9JB2ZoG+i05Twp+8Ddbz e+ud/uamjOm2JWSdWsozyo1YkqbSW94mdjMzINxM0NKkgrZHkHX7lkeldDyB9WiF d4Zkjd8YsiqhGLmmKXT5ePcTN9ZLXnyYvq3shpF2Dpx37d4nUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAk/OikzAUdeJL0Gh6FqQ8z31OeBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMmRjODY0NGYtODhhOC0z ZDdkLTlhNGUtMWIxYWJiNDdmNzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQCHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALrPCZmBSGEjtqwwOunvIYKLxtnSiAoRdblMWjSt11SrhC0C9d/QEUNH 1HoZ1uk0rH3R+uOvqOo2QHqwj2sx4cQ0FPbuGWssoB3EYJtt7b6pu23BP7HaqB1C hDmjB3FsBDv38T5FMen2VCvyrIuUq1xTZPl3RHacWKyH10gtQXpJ1YMfKR4pp+hx SjA/cNgvmSe79cY2xo5eRovE3BYolqDVOtTyuwAy7A4aQPrGfLTw4YDbm1HotIc6 O+cVyueX9EmZe98OSAXDRO1Xp+otVYClhPtxdy9WpB8j3h4QAPU6S8saaLg25r2+ 9QjGarqGcwLIU6PCEupS6sIng2j+8Po= -----END CERTIFICATE-----Generated at Fri Oct 10 14:06:21 2025 by rpki-client