$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33e552c1-7aab-3972-924b-9a4b94e54a0b.roa File: 33e552c1-7aab-3972-924b-9a4b94e54a0b.roa (raw, json) Hash identifier: 4I9gecw1HH/GaZnM12cd8wQUJXFh/xUr5Vbmas5oayg= Subject key identifier: BF:A1:B8:3A:3E:0F:BE:D4:81:CE:17:24:1B:AE:47:83:A1:67:40:C1 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584D8C2AA19FBDD3568FD4D74480 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33e552c1-7aab-3972-924b-9a4b94e54a0b.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 13768 IP address blocks: 64.34.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:a1:9f:bd:d3:56:8f:d4:d7:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=afccf353-0f73-4e8b-9e90-6e3f5c496190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a7:89:dc:2f:38:f4:4d:47:f1:8d:eb:de:de: 78:e6:ae:54:8f:27:88:26:29:5b:2f:d7:a5:90:e7: 42:07:a0:ec:b5:20:3e:d5:2e:6f:ad:98:08:ee:8f: eb:58:46:43:8d:50:26:c7:44:f3:4e:0e:a3:5a:31: 78:11:b6:7d:72:3f:cf:3f:e4:85:35:58:76:86:3c: 3a:ed:db:11:67:5a:59:fa:15:a4:c5:7c:8b:a1:46: 16:2b:66:b8:d0:a8:07:48:4e:8e:99:eb:ab:d1:ba: 5b:9f:a8:3e:e2:5e:3d:05:0f:74:7c:8f:3a:b4:9a: fb:f9:c9:a5:f3:d6:46:d3:c6:e2:84:ad:68:24:3e: 8b:e8:81:73:a9:da:73:91:ff:fe:17:54:76:c1:b0: 96:14:f9:33:a1:cd:60:e4:d8:7f:88:80:f9:ec:4e: f3:45:13:28:55:d1:52:3e:67:15:41:94:1e:cd:ce: be:d8:6d:f6:e3:37:39:b7:6a:97:85:65:14:64:86: 9e:56:cf:10:3f:f4:07:6d:4c:c4:d1:e1:ba:22:de: c6:cb:40:cb:fd:cc:77:4f:d0:b6:1b:fd:f7:26:31: 8b:44:62:cd:de:5b:54:d0:4b:3c:89:39:64:49:fb: 8c:71:4d:e6:b5:76:57:69:9d:1f:84:05:67:63:01: 5d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A1:B8:3A:3E:0F:BE:D4:81:CE:17:24:1B:AE:47:83:A1:67:40:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33e552c1-7aab-3972-924b-9a4b94e54a0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:18:ee:6c:b4:e3:44:ed:a5:e7:8a:67:f5:2c:b0:e5:d1:48: 81:76:24:92:e2:74:e7:51:1b:31:69:bb:ab:f7:5e:72:13:ea: 25:f8:30:a5:a1:c2:1e:63:ec:d5:1f:21:40:ce:7e:da:cd:14: 6f:fb:63:69:ad:f3:da:4e:ff:80:ab:13:3c:1e:fb:15:6c:c9: 3e:1f:66:9e:46:9c:d0:2f:94:f9:ca:30:96:e8:d7:23:79:2c: 88:92:39:f9:d2:25:e2:41:b2:b3:fa:8a:a8:65:fe:a9:55:76: e6:11:4c:7b:aa:1b:eb:2b:2f:55:a0:b2:40:9c:4f:1b:4a:37: cc:18:95:c4:1a:ce:e7:9c:3c:61:af:de:71:b4:46:b7:b2:a5: f6:14:2d:f3:b0:4a:5d:3b:ef:8a:0d:6b:0f:e4:18:cf:07:49: 61:df:97:4f:cd:4c:a6:d0:74:df:52:56:a3:f9:28:0d:10:7f: 10:8a:c0:48:71:d5:92:f5:31:39:f6:33:f2:42:59:16:08:73: 8b:60:48:91:50:60:a8:5b:f5:d4:01:26:8b:d8:bb:9b:a5:5f: ea:b3:fe:27:cb:3c:24:18:f7:02:62:d3:c2:52:74:c7:d8:24: 46:2f:7b:0d:31:76:ae:4b:2b:73:08:12:8f:b6:84:61:6a:79: ab:50:e4:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKqGfvdNWj9TXRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk YWZjY2YzNTMtMGY3My00ZThiLTllOTAtNmUzZjVjNDk2MTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36eJ3C849E1H8Y3r3t545q5UjyeIJilbL9el kOdCB6DstSA+1S5vrZgI7o/rWEZDjVAmx0TzTg6jWjF4EbZ9cj/PP+SFNVh2hjw6 7dsRZ1pZ+hWkxXyLoUYWK2a40KgHSE6Omeur0bpbn6g+4l49BQ90fI86tJr7+cml 89ZG08bihK1oJD6L6IFzqdpzkf/+F1R2wbCWFPkzoc1g5Nh/iID57E7zRRMoVdFS PmcVQZQezc6+2G324zc5t2qXhWUUZIaeVs8QP/QHbUzE0eG6It7Gy0DL/cx3T9C2 G/33JjGLRGLN3ltU0Es8iTlkSfuMcU3mtXZXaZ0fhAVnYwFdjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+huDo+D77Ugc4XJBuuR4OhZ0DBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMzNlNTUyYzEtN2FhYi0z OTcyLTkyNGItOWE0Yjk0ZTU0YTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQCJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoY7my040TtpeeKZ/UssOXRSIF2JJLidOdRGzFpu6v3XnIT6iX4MKWh wh5j7NUfIUDOftrNFG/7Y2mt89pO/4CrEzwe+xVsyT4fZp5GnNAvlPnKMJbo1yN5 LIiSOfnSJeJBsrP6iqhl/qlVduYRTHuqG+srL1WgskCcTxtKN8wYlcQazuecPGGv 3nG0RreypfYULfOwSl0774oNaw/kGM8HSWHfl0/NTKbQdN9SVqP5KA0QfxCKwEhx 1ZL1MTn2M/JCWRYIc4tgSJFQYKhb9dQBJovYu5ulX+qz/ifLPCQY9wJi08JSdMfY JEYvew0xdq5LK3MIEo+2hGFqeatQ5DE= -----END CERTIFICATE-----Generated at Sun May 3 00:52:13 2026 by rpki-client