$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/963d3839-4015-35a7-b38b-b1c31b4a4e68.roa File: 963d3839-4015-35a7-b38b-b1c31b4a4e68.roa (raw, json) Hash identifier: 7ehaHEGTV+3rbQFq3KqFDg8G5srpgqw4UV6CGUgWv5g= Subject key identifier: 30:91:97:14:B7:38:49:C4:18:5E:29:EA:33:BE:A4:3E:8B:D0:01:F8 Certificate issuer: /CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Certificate serial: 010D0C9F4328584DB4A5874668735B07E62CE000 Authority key identifier: 88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/963d3839-4015-35a7-b38b-b1c31b4a4e68.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 16509 IP address blocks: 64.57.33.0/24 maxlen: 24 64.57.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:87:46:68:73:5b:07:e6:2c:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=4cd57c17-d93f-4cf3-8913-774032590c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:84:e8:57:7f:f4:18:5a:6d:92:cf:b4:bd:1f: 45:e7:c9:d5:58:d1:c6:61:0a:aa:72:6d:2c:3d:70: e1:8b:9d:f8:dd:7b:d2:27:da:2a:1b:4b:88:3f:9c: 40:f9:a3:24:ad:c1:91:54:73:38:58:cf:a0:fb:00: 28:16:43:b0:ad:73:0f:6d:1a:51:41:8d:4c:ef:e8: a9:65:36:b4:bf:ad:c6:05:6b:5a:87:c0:c6:78:0b: fe:51:14:53:8a:15:7c:7f:96:f7:45:41:bf:71:0a: 78:fe:38:fa:7b:d7:ef:2f:2b:b8:60:9c:72:de:ef: d0:7a:0a:6d:52:b0:f2:2b:ae:23:c0:86:e8:d1:58: 52:12:73:8f:1b:ec:78:ee:09:9e:c8:e6:5d:84:7e: 57:68:e6:77:55:d2:ee:d0:17:e2:51:7d:85:08:43: 50:ce:91:41:35:4c:57:46:24:2c:ce:c1:d4:19:c8: 57:71:6a:c9:51:7f:24:1d:bd:c5:fd:fd:92:89:c8: e1:a8:a3:c1:52:5c:e0:be:f9:1d:3d:5a:19:fa:38: 19:f1:f4:ff:ce:92:93:3b:c8:fb:49:e8:ee:96:30: 26:f7:30:37:38:a8:07:44:32:70:64:31:ee:bb:9d: 81:93:d3:52:bd:3b:9f:45:28:31:87:9b:aa:fe:5c: 8f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:91:97:14:B7:38:49:C4:18:5E:29:EA:33:BE:A4:3E:8B:D0:01:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/963d3839-4015-35a7-b38b-b1c31b4a4e68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl X509v3 Authority Key Identifier: keyid:88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer sbgp-ipAddrBlock: critical IPv4: 64.57.33.0-64.57.34.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:8f:b7:e6:24:9f:21:04:c9:56:46:f9:d1:1f:e8:63:6f:ac: ba:82:8a:4c:11:9d:49:eb:97:2b:56:10:fa:10:b3:14:d1:e8: 6b:52:c8:84:d7:94:fb:40:63:24:80:26:c6:7a:b2:cc:7f:fa: c6:ac:24:ae:4f:80:c2:58:33:4b:a5:18:5e:d7:77:af:e2:49: 5f:07:d3:09:ee:e1:8d:60:1b:12:49:cd:54:2d:6f:1f:60:af: ac:a8:e8:30:3b:e5:2d:a1:ce:b0:fd:33:22:bd:18:ef:72:54: 28:d8:bf:0f:4b:05:a8:e1:ec:1f:50:d9:c8:a5:f5:82:cc:80: 2b:0e:75:99:57:96:62:ac:00:c6:6d:83:a4:97:de:39:26:d0: bd:aa:f7:f8:3e:af:48:99:49:ac:5c:39:05:1f:4a:85:f9:c3: ab:9f:d3:f0:31:54:8d:c9:50:37:5f:79:df:b6:d8:6c:43:62: 7e:05:a9:ad:69:b5:3d:34:49:97:72:3e:38:1d:f2:42:87:8f: bc:38:d8:55:18:c8:28:12:a8:59:cd:eb:7b:80:32:95:58:05: 67:29:3b:b3:8d:a3:ce:60:e7:dd:72:38:f2:cc:c8:42:ec:7d: 8d:d4:20:5f:e7:7e:6d:9d:4a:ea:7a:a7:5d:bf:d3:43:6b:ea: 61:00:49:6a -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE20pYdGaHNbB+Ys4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQzZjY2MjAtMDU3Ni00NmQ4LWIwNWQtM2UyY2RkMDZh ZmEzMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk NGNkNTdjMTctZDkzZi00Y2YzLTg5MTMtNzc0MDMyNTkwYzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIToV3/0GFptks+0vR9F58nVWNHGYQqqcm0s PXDhi5343XvSJ9oqG0uIP5xA+aMkrcGRVHM4WM+g+wAoFkOwrXMPbRpRQY1M7+ip ZTa0v63GBWtah8DGeAv+URRTihV8f5b3RUG/cQp4/jj6e9fvLyu4YJxy3u/Qegpt UrDyK64jwIbo0VhSEnOPG+x47gmeyOZdhH5XaOZ3VdLu0BfiUX2FCENQzpFBNUxX RiQszsHUGchXcWrJUX8kHb3F/f2SicjhqKPBUlzgvvkdPVoZ+jgZ8fT/zpKTO8j7 SejuljAm9zA3OKgHRDJwZDHuu52Bk9NSvTufRSgxh5uq/lyPxQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFDCRlxS3OEnEGF4p6jO+pD6L0AH4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNm NjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJjZGQwNmFmYTMvOTYzZDM4MzktNDAxNS0z NWE3LWIzOGItYjFjMzFiNGE0ZTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWQzZjY2MjAtMDU3Ni00NmQ4LWIw NWQtM2UyY2RkMDZhZmEzL2FkM2Y2NjIwLTA1NzYtNDZkOC1iMDVkLTNlMmNkZDA2 YWZhMy5jcmwwHwYDVR0jBBgwFoAUiN/bmDDB0UzVtzGE7Kf8YPRf8tMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNmNjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJj ZGQwNmFmYTMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABAOSED BABAOSIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAkI+35iSfIQTJVkb50R/oY2+suoKKTBGdSeuXK1YQ+hCz FNHoa1LIhNeU+0BjJIAmxnqyzH/6xqwkrk+AwlgzS6UYXtd3r+JJXwfTCe7hjWAb EknNVC1vH2CvrKjoMDvlLaHOsP0zIr0Y73JUKNi/D0sFqOHsH1DZyKX1gsyAKw51 mVeWYqwAxm2DpJfeOSbQvar3+D6vSJlJrFw5BR9KhfnDq5/T8DFUjclQN19537bY bENifgWprWm1PTRJl3I+OB3yQoePvDjYVRjIKBKoWc3re4AylVgFZyk7s42jzmDn 3XI48szIQux9jdQgX+d+bZ1K6nqnXb/TQ2vqYQBJag== -----END CERTIFICATE-----Generated at Sun May 3 15:32:43 2026 by rpki-client