$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa File: 2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa (raw, json) Hash identifier: w3E8JEqntOAnH3dyY8HGSQLL/BChs9DAspCNi34hH6I= Subject key identifier: EA:88:45:D7:4E:A1:C5:F8:C5:DA:0C:7C:DC:92:54:2E:67:2E:59:F4 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584E7E94F45FBEC8D0408B2F4180 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 15204 IP address blocks: 64.33.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:f4:5f:be:c8:d0:40:8b:2f:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=0b8b1fbd-4464-410b-85a8-062c4026816f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2f:45:2f:77:42:26:27:3f:a8:93:6b:40:7f: a3:a3:aa:61:9a:39:73:e8:0d:6a:a5:0f:cf:dd:2b: ea:7e:fd:ef:77:cd:18:c9:dd:61:76:3a:3b:4c:d6: 34:99:21:3d:97:90:78:f8:e9:e3:54:06:eb:e1:b2: 98:58:67:e9:c6:6b:d6:33:fb:b7:cb:23:0e:32:25: e6:49:f5:80:1f:de:37:c0:4d:70:16:f5:72:0c:d2: 14:5b:a4:a4:51:79:b8:bb:33:56:ac:5c:6b:e4:a2: 83:e3:31:b1:01:ed:08:fa:0d:84:12:c2:64:e7:33: fe:18:da:39:71:34:dc:d6:e9:f0:28:ed:66:a8:89: a8:f6:e2:43:ab:8f:b6:96:1b:96:f6:c5:0e:a1:ea: a9:8a:88:c7:e2:dd:1b:83:7c:01:0b:d3:b8:b4:97: 0d:f0:96:99:dc:2a:24:09:f5:05:c3:81:a2:3c:e8: 4d:03:a0:71:73:17:3f:bd:70:e6:ee:58:cc:6d:29: c8:54:1a:ce:52:ad:b8:67:15:64:a3:e5:3b:c0:68: cb:05:d4:3a:c4:a5:9c:b8:a2:63:a2:e5:b4:13:93: a5:78:d3:7d:28:6f:2f:08:e5:eb:c8:8c:c6:e1:a5: 43:71:33:7a:8d:53:28:75:5a:8e:04:91:e6:c5:ed: b5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:88:45:D7:4E:A1:C5:F8:C5:DA:0C:7C:DC:92:54:2E:67:2E:59:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:40:84:c3:53:d7:ef:c5:46:a5:32:ac:88:85:da:29:68:8d: 4f:a4:19:f8:c5:c3:af:47:f5:e8:0b:b2:56:5d:23:f5:5b:b0: 6f:98:60:80:4b:1a:98:33:2a:93:31:7a:05:73:b1:17:a6:cc: 58:bc:66:f0:7a:b0:84:88:1e:4b:97:6d:d2:6d:73:cd:21:13: 2f:dc:20:e5:5d:ec:51:9d:aa:ae:29:fc:1c:5a:1d:a6:79:6a: 70:8f:e5:b2:9c:46:c6:d7:9b:8a:ad:2f:31:15:f9:e7:c4:45: 8c:41:60:86:19:b2:b2:d9:d8:34:3a:0b:fd:ac:6b:6a:22:62: 52:1f:74:d6:4a:d7:79:23:e3:eb:74:23:55:43:e9:4d:d0:73: 64:73:a0:20:2a:d9:af:57:bd:0d:81:e2:d4:af:b0:f9:75:8e: 42:58:32:ce:d7:38:dc:cc:14:9e:ea:b5:85:c2:e5:b3:1c:77: 25:2a:69:48:93:5a:35:be:5e:d0:45:08:87:db:1e:a6:d7:23: 45:94:69:cb:b1:55:b0:43:90:a2:3f:8a:a2:c1:d6:25:eb:66: 9a:13:75:da:38:90:db:c1:20:96:c7:19:32:1f:78:c3:2b:e3: df:97:06:4c:73:f9:db:3b:ce:fa:fc:43:0c:da:eb:c8:23:81: 7c:ea:af:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lPRfvsjQQIsvQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MGI4YjFmYmQtNDQ2NC00MTBiLTg1YTgtMDYyYzQwMjY4MTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS9FL3dCJic/qJNrQH+jo6phmjlz6A1qpQ/P 3Svqfv3vd80Yyd1hdjo7TNY0mSE9l5B4+OnjVAbr4bKYWGfpxmvWM/u3yyMOMiXm SfWAH943wE1wFvVyDNIUW6SkUXm4uzNWrFxr5KKD4zGxAe0I+g2EEsJk5zP+GNo5 cTTc1unwKO1mqImo9uJDq4+2lhuW9sUOoeqpiojH4t0bg3wBC9O4tJcN8JaZ3Cok CfUFw4GiPOhNA6Bxcxc/vXDm7ljMbSnIVBrOUq24ZxVko+U7wGjLBdQ6xKWcuKJj ouW0E5OleNN9KG8vCOXryIzG4aVDcTN6jVModVqOBJHmxe21ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqIRddOocX4xdoMfNySVC5nLln0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMmRjODY0NGYtODhhOC0z ZDdkLTlhNGUtMWIxYWJiNDdmNzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQCHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANRAhMNT1+/FRqUyrIiF2ilojU+kGfjFw69H9egLslZdI/VbsG+YYIBL GpgzKpMxegVzsRemzFi8ZvB6sISIHkuXbdJtc80hEy/cIOVd7FGdqq4p/BxaHaZ5 anCP5bKcRsbXm4qtLzEV+efERYxBYIYZsrLZ2DQ6C/2sa2oiYlIfdNZK13kj4+t0 I1VD6U3Qc2RzoCAq2a9XvQ2B4tSvsPl1jkJYMs7XONzMFJ7qtYXC5bMcdyUqaUiT WjW+XtBFCIfbHqbXI0WUacuxVbBDkKI/iqLB1iXrZpoTddo4kNvBIJbHGTIfeMMr 49+XBkxz+ds7zvr8Qwza68gjgXzqr8o= -----END CERTIFICATE-----Generated at Wed Jul 22 01:10:55 2026 by rpki-client