$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/abf7b840-fd84-31f9-a0f2-6ad264acf865.roa File: abf7b840-fd84-31f9-a0f2-6ad264acf865.roa (raw, json) Hash identifier: AfCHw7z8y+TfUrGnRiolxfM3WiI5lMspwtFe/kabLgc= Subject key identifier: 23:64:4D:31:DE:AD:AD:3E:5C:0E:13:39:96:7F:5C:F5:73:C0:7D:91 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584F85786FE2A0273B03D31F6040 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/abf7b840-fd84-31f9-a0f2-6ad264acf865.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 20014 IP address blocks: 64.33.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:6f:e2:a0:27:3b:03:d3:1f:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=b7824842-6eb4-43d9-a729-25870e68c859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b4:41:06:0c:da:28:86:1d:0b:04:4c:71:a0: 26:58:53:f4:17:7d:ca:df:e1:d2:0f:71:36:a8:3b: 93:d7:34:75:58:b9:16:77:8a:8a:45:79:e5:49:88: eb:10:60:37:16:f4:96:49:84:f3:43:3c:58:2e:46: 39:b6:49:b5:42:b2:e4:3e:03:e5:fb:45:52:2f:a9: 19:2d:5c:be:9c:df:8f:8c:a0:b3:26:22:28:c0:41: c5:10:b2:73:e2:b5:3b:97:9a:36:99:2f:8d:75:98: d9:4f:73:71:71:aa:56:b6:15:94:3e:ef:dd:80:bf: f0:84:93:cb:4e:b3:b3:f6:df:ad:0f:04:0a:9c:54: 4c:b4:71:1f:f4:1a:22:ac:36:ce:55:f1:fb:71:33: 67:52:ff:68:86:66:41:f7:52:35:0e:e0:27:55:7e: ea:7e:3c:0f:8d:ec:9a:84:9a:38:08:04:67:06:91: c6:ac:f1:f7:b5:4b:95:14:11:ed:c0:25:44:56:25: 0a:50:d5:3b:fe:6c:dc:dc:42:93:b9:61:e1:6d:35: 28:5c:13:33:2a:19:a1:50:49:33:3a:67:2c:92:67: c7:54:e7:a6:a4:b5:30:49:b0:cb:dc:1f:ee:e3:30: e3:89:93:3a:ed:60:cb:5b:c3:8b:93:83:9d:57:94: 59:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:64:4D:31:DE:AD:AD:3E:5C:0E:13:39:96:7F:5C:F5:73:C0:7D:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/abf7b840-fd84-31f9-a0f2-6ad264acf865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:34:26:ce:42:e1:12:f4:ba:ed:df:d3:76:a9:aa:3d:5c:2b: 7d:68:ef:d9:45:e3:c4:c5:fd:0f:0c:62:36:d3:2f:71:34:88: f1:66:44:d1:8d:29:7b:dc:21:70:e9:33:18:f1:c7:86:75:21: 6c:93:fa:f6:76:84:43:4f:f5:b2:ce:19:bf:86:e2:4d:63:4e: 5a:00:4e:61:87:da:12:2f:7b:1a:44:79:4a:9b:12:5c:b0:4b: af:16:1c:ec:7f:c8:1c:b6:ee:fd:2f:b2:d9:bf:a3:c0:b1:15: ed:dc:6e:6e:1a:a5:6e:50:ce:5d:b6:6c:db:73:67:13:0c:50: 7b:c8:67:09:6c:2f:f2:f4:73:b8:65:33:33:d5:d5:23:04:a5: 29:1b:2a:49:0a:38:74:68:ab:6a:98:5c:37:75:f2:7e:1c:d9: df:0d:23:1b:5a:fe:bd:5d:9f:4d:5c:8f:63:bc:80:f3:e7:ec: 28:79:e7:a3:5f:74:54:9e:3e:94:5d:4a:5b:18:c8:c3:73:fb: 02:10:2b:48:70:14:a5:0a:fc:72:f9:fc:37:3f:39:c1:01:2a: f9:95:17:31:84:f9:94:54:fd:31:a2:a4:b2:1c:c1:49:c4:07: 4c:37:66:fd:ae:4f:b2:a9:86:26:55:1c:89:c3:98:b8:9b:b8: 10:bc:2c:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeG/ioCc7A9MfYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk Yjc4MjQ4NDItNmViNC00M2Q5LWE3MjktMjU4NzBlNjhjODU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbRBBgzaKIYdCwRMcaAmWFP0F33K3+HSD3E2 qDuT1zR1WLkWd4qKRXnlSYjrEGA3FvSWSYTzQzxYLkY5tkm1QrLkPgPl+0VSL6kZ LVy+nN+PjKCzJiIowEHFELJz4rU7l5o2mS+NdZjZT3NxcapWthWUPu/dgL/whJPL TrOz9t+tDwQKnFRMtHEf9BoirDbOVfH7cTNnUv9ohmZB91I1DuAnVX7qfjwPjeya hJo4CARnBpHGrPH3tUuVFBHtwCVEViUKUNU7/mzc3EKTuWHhbTUoXBMzKhmhUEkz OmcskmfHVOempLUwSbDL3B/u4zDjiZM67WDLW8OLk4OdV5RZgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNkTTHera0+XA4TOZZ/XPVzwH2RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYWJmN2I4NDAtZmQ4NC0z MWY5LWEwZjItNmFkMjY0YWNmODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCHyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE40Js5C4RL0uu3f03apqj1cK31o79lF48TF/Q8MYjbTL3E0iPFmRNGN KXvcIXDpMxjxx4Z1IWyT+vZ2hENP9bLOGb+G4k1jTloATmGH2hIvexpEeUqbElyw S68WHOx/yBy27v0vstm/o8CxFe3cbm4apW5Qzl22bNtzZxMMUHvIZwlsL/L0c7hl MzPV1SMEpSkbKkkKOHRoq2qYXDd18n4c2d8NIxta/r1dn01cj2O8gPPn7Ch556Nf dFSePpRdSlsYyMNz+wIQK0hwFKUK/HL5/Dc/OcEBKvmVFzGE+ZRU/TGipLIcwUnE B0w3Zv2uT7KphiZVHInDmLibuBC8LK0= -----END CERTIFICATE-----Generated at Mon Oct 26 23:40:18 2026 by rpki-client