$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/abf7b840-fd84-31f9-a0f2-6ad264acf865.roa File: abf7b840-fd84-31f9-a0f2-6ad264acf865.roa (raw, json) Hash identifier: LUkbRGf4gP63Dmole8myhonkGx3lok1uTQVC+Z5Y7XQ= Subject key identifier: BA:62:C7:DC:DF:00:36:1C:9D:CF:E1:B9:3F:E5:48:38:A2:75:21:BB Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584EE38CA658A4CB013BFB0BE300 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/abf7b840-fd84-31f9-a0f2-6ad264acf865.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 20014 IP address blocks: 64.33.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:a6:58:a4:cb:01:3b:fb:0b:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=928416a7-ca28-46ae-a434-4424d63b3499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:60:b7:53:a5:a0:a1:b5:80:47:26:8a:f7:92: 4d:a1:d7:de:90:d0:b3:93:6d:45:57:77:79:ac:cd: 50:35:f1:77:85:58:40:84:88:17:33:a6:6f:ce:e5: 75:86:2a:a7:bd:01:00:bd:ed:39:32:41:1d:58:d1: 65:a2:3d:5a:96:8f:1e:25:88:4b:b1:dd:d3:31:2b: fe:16:24:d3:61:f0:f3:f7:2d:76:67:91:59:93:d8: 87:80:64:0c:f2:d0:06:40:35:76:4a:d2:7b:ae:e9: 55:27:11:0f:c7:40:30:71:22:e7:5d:e1:34:3f:08: e7:27:63:75:cf:a8:9e:cf:86:42:1c:eb:bb:06:07: a8:08:be:00:fe:16:53:64:c3:9b:e8:9f:7e:88:2c: d2:8b:e9:0c:37:d4:d3:5f:13:31:77:e9:22:d5:ef: f0:c3:32:ce:9d:9d:a3:3d:7e:f4:f2:49:b3:64:65: ef:7d:2a:ac:4f:5b:f1:0d:69:02:24:a2:20:c8:d9: 5b:2a:33:a2:99:90:82:6c:fb:82:0b:b9:fd:09:10: 0e:3b:3a:64:76:f2:f5:b5:d1:e7:3a:4f:a3:2f:e4: 87:27:47:e5:2d:48:c6:2a:25:80:ed:d8:e1:6e:c6: a3:3d:eb:11:a2:b7:87:39:13:a4:1b:1c:db:82:bf: 59:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:62:C7:DC:DF:00:36:1C:9D:CF:E1:B9:3F:E5:48:38:A2:75:21:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/abf7b840-fd84-31f9-a0f2-6ad264acf865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:14:33:f4:9b:c3:93:40:80:31:08:a6:55:62:d9:7d:ea:cf: eb:4e:89:50:02:08:7e:74:22:67:2a:ee:f9:69:e2:e9:56:9c: 9b:7d:fd:3e:49:d6:96:8a:a8:21:aa:60:cd:32:4c:3e:da:4a: 36:dd:2a:ba:08:46:9a:81:5e:b6:2f:d0:84:a5:cd:14:fc:af: ad:8e:05:f7:1e:5e:3b:e4:e7:09:17:92:4a:ac:cb:ec:ef:9e: 92:ed:30:69:72:93:ba:9a:f8:6b:02:cd:16:3a:eb:32:71:73: 0d:ad:7e:de:27:97:d3:0d:a2:1a:e2:0c:9d:51:3f:67:1a:3e: dc:c8:1f:15:ab:0b:2c:d3:e9:58:e5:44:e3:90:23:7f:92:ce: f6:4f:c6:0c:ea:c8:ff:4c:f8:95:dd:4a:20:b2:75:5d:86:4c: bb:25:bc:98:dd:c1:8f:2b:4b:98:69:4e:5e:80:2a:20:5c:12: a9:99:9f:ce:bc:04:f1:dd:cc:55:4b:66:89:47:c9:c1:f9:38: cb:06:12:1e:6b:5b:f2:63:8c:57:a6:86:99:5f:d8:88:64:30: 41:76:35:86:1e:14:84:50:9f:32:50:b4:a0:c5:8a:e9:11:4c: 91:f5:6c:c3:be:85:1f:8b:65:31:d9:f7:6d:fa:eb:e5:03:7f: 98:f2:26:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjKZYpMsBO/sL4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk OTI4NDE2YTctY2EyOC00NmFlLWE0MzQtNDQyNGQ2M2IzNDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2C3U6WgobWARyaK95JNodfekNCzk21FV3d5 rM1QNfF3hVhAhIgXM6ZvzuV1hiqnvQEAve05MkEdWNFloj1alo8eJYhLsd3TMSv+ FiTTYfDz9y12Z5FZk9iHgGQM8tAGQDV2StJ7rulVJxEPx0AwcSLnXeE0PwjnJ2N1 z6iez4ZCHOu7BgeoCL4A/hZTZMOb6J9+iCzSi+kMN9TTXxMxd+ki1e/wwzLOnZ2j PX708kmzZGXvfSqsT1vxDWkCJKIgyNlbKjOimZCCbPuCC7n9CRAOOzpkdvL1tdHn Ok+jL+SHJ0flLUjGKiWA7djhbsajPesRoreHOROkGxzbgr9ZEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpix9zfADYcnc/huT/lSDiidSG7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYWJmN2I4NDAtZmQ4NC0z MWY5LWEwZjItNmFkMjY0YWNmODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCHyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUUM/Sbw5NAgDEIplVi2X3qz+tOiVACCH50Imcq7vlp4ulWnJt9/T5J 1paKqCGqYM0yTD7aSjbdKroIRpqBXrYv0ISlzRT8r62OBfceXjvk5wkXkkqsy+zv npLtMGlyk7qa+GsCzRY66zJxcw2tft4nl9MNohriDJ1RP2caPtzIHxWrCyzT6Vjl ROOQI3+SzvZPxgzqyP9M+JXdSiCydV2GTLslvJjdwY8rS5hpTl6AKiBcEqmZn868 BPHdzFVLZolHycH5OMsGEh5rW/JjjFemhplf2IhkMEF2NYYeFIRQnzJQtKDFiukR TJH1bMO+hR+LZTHZ92366+UDf5jyJjY= -----END CERTIFICATE-----Generated at Sat Sep 5 04:13:21 2026 by rpki-client