$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9bef37cf-16f9-3941-8526-eafaa676e914.roa File: 9bef37cf-16f9-3941-8526-eafaa676e914.roa (raw, json) Hash identifier: cZmCCgKTp3tmJg60JFGIQoKLRsRQPrpciVo4IPiFwDM= Subject key identifier: 8A:86:D1:05:E5:56:C0:8C:1E:6A:7C:85:EB:6A:DD:E4:AA:B8:0A:89 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EF5B2025A4B5D4BCB82903C80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9bef37cf-16f9-3941-8526-eafaa676e914.roa Signing time: Wed 26 Aug 2026 01:00:12 +0000 ROA not before: Wed 26 Aug 2026 01:00:12 +0000 ROA not after: Tue 24 Nov 2026 02:00:12 +0000 asID: 209043 IP address blocks: 64.204.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f5:b2:02:5a:4b:5d:4b:cb:82:90:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 26 01:00:12 2026 GMT Not After : Nov 24 02:00:12 2026 GMT Subject: CN=4bb0a8a6-82bf-45cb-96c5-92f8e15a4e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:60:91:65:43:8b:48:32:0c:11:cd:3f:3c:7f: a5:f9:a1:fd:c1:19:90:82:6c:37:2f:09:01:a5:30: 92:ba:03:8a:bb:7e:79:2f:df:6e:45:4c:5e:3f:9d: 24:35:eb:2e:ea:69:da:83:cf:51:68:28:03:48:41: d7:46:2a:e8:dd:7b:e8:f5:d5:97:ff:82:82:b2:35: d8:78:ed:88:11:d3:79:ef:01:7d:6a:b5:c2:d3:fd: 69:7a:70:d6:21:11:57:5b:00:c3:b8:6e:23:f2:5c: df:ac:36:28:ae:64:59:27:1e:06:91:dc:34:a2:a4: bb:31:ba:80:e3:69:91:e4:b4:de:41:30:cd:30:d1: 8a:db:61:8b:5a:03:71:db:e0:4b:81:08:69:0a:89: 02:a5:a9:13:64:1b:9b:cd:c5:72:12:42:f8:54:82: 7d:c3:01:32:70:5b:9c:87:e0:4a:33:c4:c8:42:e7: 67:b7:ac:70:07:cc:5e:7a:d2:b9:52:f1:47:cf:2a: 11:94:72:3f:f9:92:06:ad:6c:c2:0d:14:87:2c:b0: cf:67:70:9f:9e:cd:a8:12:3c:47:06:da:69:c0:38: 0e:56:68:ae:76:e5:cd:ec:41:77:69:c5:1d:3a:3a: 57:47:51:26:86:15:c2:2b:5d:01:f4:ca:d8:93:01: f1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:86:D1:05:E5:56:C0:8C:1E:6A:7C:85:EB:6A:DD:E4:AA:B8:0A:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9bef37cf-16f9-3941-8526-eafaa676e914.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:53:66:12:ca:56:7e:78:b5:e6:30:2b:86:10:0d:3f:cf:08: a1:0e:ba:96:f5:f3:8c:94:5b:e7:1c:0a:38:c5:f9:77:1c:5f: ff:51:80:3a:47:3a:aa:40:c0:75:05:32:47:81:39:71:3b:a4: 3e:1b:74:6b:ae:c1:1c:9f:46:97:b8:8e:b4:da:4d:8a:48:d3: f6:e1:d6:d3:71:c7:d9:69:62:fc:36:c4:44:62:34:10:3e:c6: 0b:45:e6:4d:64:a4:11:c3:41:84:82:6e:13:5b:01:70:27:6e: fa:b6:34:b3:e5:df:7e:eb:94:8a:f1:64:54:49:ab:85:43:e8: 98:b0:e8:aa:9d:28:40:f4:f4:2e:b4:03:69:94:cc:fa:68:01: 31:16:3f:b6:a2:99:1a:b8:28:56:9e:47:d7:26:d4:c3:e1:d0: 99:82:d2:0b:65:82:9e:9e:bc:ee:ed:55:54:c2:de:87:37:1d: cc:ef:13:b1:0e:c0:0b:46:a9:9f:c5:23:7c:8d:2b:c7:5f:35: 24:a1:f1:c9:cd:ee:a0:5c:1e:24:78:6c:85:73:bb:62:8a:12: 85:ff:eb:8d:97:8b:fc:d7:d2:37:16:ec:86:79:4f:6d:c2:fb: 8b:1b:14:d2:7d:b1:4f:49:dc:43:ec:9a:75:55:ce:6d:87:08: 17:f7:c2:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE71sgJaS11Ly4KQPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGJiMGE4YTYtODJiZi00NWNiLTk2YzUtOTJmOGUxNWE0ZTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWCRZUOLSDIMEc0/PH+l+aH9wRmQgmw3LwkB pTCSugOKu355L99uRUxeP50kNesu6mnag89RaCgDSEHXRiro3Xvo9dWX/4KCsjXY eO2IEdN57wF9arXC0/1penDWIRFXWwDDuG4j8lzfrDYormRZJx4Gkdw0oqS7MbqA 42mR5LTeQTDNMNGK22GLWgNx2+BLgQhpCokCpakTZBubzcVyEkL4VIJ9wwEycFuc h+BKM8TIQudnt6xwB8xeetK5UvFHzyoRlHI/+ZIGrWzCDRSHLLDPZ3Cfns2oEjxH BtppwDgOVmiuduXN7EF3acUdOjpXR1EmhhXCK10B9MrYkwHxZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqG0QXlVsCMHmp8hetq3eSquAqJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWJlZjM3Y2YtMTZmOS0z OTQxLTg1MjYtZWFmYWE2NzZlOTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMwhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpTZhLKVn54teYwK4YQDT/PCKEOupb184yUW+ccCjjF+XccX/9RgDpH OqpAwHUFMkeBOXE7pD4bdGuuwRyfRpe4jrTaTYpI0/bh1tNxx9lpYvw2xERiNBA+ xgtF5k1kpBHDQYSCbhNbAXAnbvq2NLPl337rlIrxZFRJq4VD6Jiw6KqdKED09C60 A2mUzPpoATEWP7aimRq4KFaeR9cm1MPh0JmC0gtlgp6evO7tVVTC3oc3HczvE7EO wAtGqZ/FI3yNK8dfNSSh8cnN7qBcHiR4bIVzu2KKEoX/642Xi/zX0jcW7IZ5T23C +4sbFNJ9sU9J3EPsmnVVzm2HCBf3wmQ= -----END CERTIFICATE-----Generated at Wed Aug 26 10:39:33 2026 by rpki-client