$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/aa1ef16a-31d8-3a69-a070-8a6f086b417b.roa File: aa1ef16a-31d8-3a69-a070-8a6f086b417b.roa (raw, json) Hash identifier: 2cKUUuq2i9IEpIegnlPCeg2vvSJ/lbhgwsVlXT9FCwc= Subject key identifier: 21:3C:CA:4B:0E:FD:07:E0:FC:EE:73:B7:2E:B6:D8:8B:2E:83:7C:13 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584E7E94F46BA8ECC19F6B36FFC0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/aa1ef16a-31d8-3a69-a070-8a6f086b417b.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 15204 IP address blocks: 64.33.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:f4:6b:a8:ec:c1:9f:6b:36:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=4a934df2-7d8c-4454-9071-6d0cd5dc98f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c9:b0:74:95:67:2a:6c:8b:a3:c5:77:17:c1: c2:f5:61:db:a7:a4:f6:d5:f5:42:b3:65:aa:cc:f4: ad:69:56:f1:92:a2:8b:4b:5f:76:15:d5:3a:d5:8c: 96:d4:b0:1c:0c:cc:d8:ba:c5:13:98:6b:be:d7:79: 44:15:17:f9:82:c9:4b:87:5c:53:25:88:cf:9b:e0: ff:b7:22:ab:10:c7:67:01:21:81:a1:2e:53:a4:c7: 2c:11:a5:ea:4f:ff:08:cc:3c:6c:85:f3:19:81:d0: 06:08:6c:46:c1:93:79:cc:16:ec:c9:88:51:9f:5b: da:cd:14:85:4f:4c:84:ea:f6:c4:8e:e4:6b:34:4e: 35:94:f2:97:57:d4:8a:06:5b:12:7b:dd:02:fe:62: bb:fe:0b:44:d8:bf:a3:06:3b:9b:17:c2:dc:df:02: a7:99:f9:b1:96:9f:24:29:de:bb:e7:d0:f1:95:de: 98:17:40:d5:14:e5:d1:49:8e:5d:39:76:58:0b:47: 9b:c5:30:df:23:8c:a2:39:16:7d:2c:62:5c:76:2e: cb:81:95:3a:d5:2e:c4:fd:1b:3d:1f:00:83:54:0f: dc:cd:8e:e6:a3:a6:c4:c8:68:ea:69:31:62:c5:db: 65:5b:c7:2a:3c:21:8b:9b:09:be:59:d6:94:96:c0: 3d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3C:CA:4B:0E:FD:07:E0:FC:EE:73:B7:2E:B6:D8:8B:2E:83:7C:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/aa1ef16a-31d8-3a69-a070-8a6f086b417b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:12:00:5d:b9:21:63:3d:c2:1e:06:e5:6c:b6:e9:71:ad:aa: ea:5c:18:f6:64:3d:5f:88:b1:22:3d:66:5a:a7:b0:cf:16:a7: 52:ec:95:87:10:14:66:4e:70:bd:b0:79:06:94:ba:23:c0:4f: 0b:ab:0c:5e:b7:73:01:04:49:49:39:db:c8:bf:1f:a3:ed:bd: c8:7d:b8:41:7b:e1:90:2a:4e:bc:15:97:22:a8:89:e1:d5:b2: d1:2a:9e:b0:4c:8c:b8:94:f7:c1:73:dc:32:bb:6d:47:ee:31: c2:b5:ec:0e:0a:cf:de:b9:ea:39:9d:1b:eb:5a:0f:7d:79:88: e4:c3:51:82:a8:9c:42:3d:a5:da:09:c0:56:eb:ba:50:6c:b6: e5:92:e4:99:96:f4:ab:9f:ab:aa:85:19:ab:31:5a:fb:0c:ed: 7b:63:ef:fa:00:b2:91:e7:b7:bd:ed:ff:c5:0c:51:c0:ca:6c: ac:1f:7d:73:4d:f0:84:96:63:90:d2:bd:e8:b3:15:be:aa:70: 07:3c:8d:72:71:46:34:d6:0e:6e:39:04:06:6a:39:56:57:ef: f5:e8:c6:1c:c0:f2:27:93:2d:2a:29:71:6d:79:0e:6b:7e:a6: 03:d9:ec:a4:e8:43:9c:aa:b7:69:da:57:a6:42:45:ef:81:81: fe:af:ab:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lPRrqOzBn2s2/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NGE5MzRkZjItN2Q4Yy00NDU0LTkwNzEtNmQwY2Q1ZGM5OGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsmwdJVnKmyLo8V3F8HC9WHbp6T21fVCs2Wq zPStaVbxkqKLS192FdU61YyW1LAcDMzYusUTmGu+13lEFRf5gslLh1xTJYjPm+D/ tyKrEMdnASGBoS5TpMcsEaXqT/8IzDxshfMZgdAGCGxGwZN5zBbsyYhRn1vazRSF T0yE6vbEjuRrNE41lPKXV9SKBlsSe90C/mK7/gtE2L+jBjubF8Lc3wKnmfmxlp8k Kd6759Dxld6YF0DVFOXRSY5dOXZYC0ebxTDfI4yiORZ9LGJcdi7LgZU61S7E/Rs9 HwCDVA/czY7mo6bEyGjqaTFixdtlW8cqPCGLmwm+WdaUlsA9LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCE8yksO/Qfg/O5zty622Isug3wTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYWExZWYxNmEtMzFkOC0z YTY5LWEwNzAtOGE2ZjA4NmI0MTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIISAF25IWM9wh4G5Wy26XGtqupcGPZkPV+IsSI9ZlqnsM8Wp1LslYcQ FGZOcL2weQaUuiPATwurDF63cwEESUk528i/H6Ptvch9uEF74ZAqTrwVlyKoieHV stEqnrBMjLiU98Fz3DK7bUfuMcK17A4Kz9656jmdG+taD315iOTDUYKonEI9pdoJ wFbrulBstuWS5JmW9Kufq6qFGasxWvsM7Xtj7/oAspHnt73t/8UMUcDKbKwffXNN 8ISWY5DSveizFb6qcAc8jXJxRjTWDm45BAZqOVZX7/XoxhzA8ieTLSopcW15Dmt+ pgPZ7KToQ5yqt2naV6ZCRe+Bgf6vq/4= -----END CERTIFICATE-----Generated at Wed Jul 22 01:13:04 2026 by rpki-client