$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/de58c588-4488-3729-a7e1-98130f91c66c.roa File: de58c588-4488-3729-a7e1-98130f91c66c.roa (raw, json) Hash identifier: UOXDnZ1WQtPAjPGMcIfdG69yQVm5w3tKx2aCSH1/hBw= Subject key identifier: 23:46:B1:6C:81:61:48:B7:67:FE:44:20:52:F7:02:7F:15:01:B2:1A Certificate issuer: /CN=ca2c0e73-f7f7-4070-98aa-c78ef1752849 Certificate serial: 010D0C9F4328584E8C8A4254FEF3AD9BC37A6080 Authority key identifier: 76:CE:90:F2:9A:98:0C:BD:C1:58:74:E2:1C:58:59:B7:53:0A:4E:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/de58c588-4488-3729-a7e1-98130f91c66c.roa Signing time: Sun 19 Jul 2026 09:00:11 +0000 ROA not before: Sun 19 Jul 2026 09:00:11 +0000 ROA not after: Sat 17 Oct 2026 09:00:11 +0000 asID: 32867 IP address blocks: 64.5.64.0/20 maxlen: 20 64.186.16.0/21 maxlen: 21 66.172.192.0/18 maxlen: 18 74.221.32.0/20 maxlen: 20 143.223.184.0/21 maxlen: 21 199.116.180.0/22 maxlen: 22 199.247.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/ca2c0e73-f7f7-4070-98aa-c78ef1752849.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/ca2c0e73-f7f7-4070-98aa-c78ef1752849.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:8a:42:54:fe:f3:ad:9b:c3:7a:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca2c0e73-f7f7-4070-98aa-c78ef1752849 Validity Not Before: Jul 19 09:00:11 2026 GMT Not After : Oct 17 09:00:11 2026 GMT Subject: CN=4b03a111-8501-4f78-92b1-3cec7ce37890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ed:d8:de:1f:70:38:23:2b:e2:16:1f:f3:70: cc:37:88:77:45:e1:16:8d:66:5b:3d:b2:6d:f0:c7: 07:64:0c:19:c0:e5:d1:17:aa:34:b4:56:99:45:17: 12:51:e3:24:f1:95:30:30:f1:2c:3d:c1:3a:8c:01: 23:f3:35:a9:3d:f7:5c:6e:81:30:df:fd:df:51:a9: f5:e6:4c:85:6a:42:f1:13:73:be:c6:6c:2a:81:35: a3:0f:39:37:4b:9c:8d:8a:77:e0:78:5a:4a:b4:80: be:e8:25:0f:48:36:c8:53:d7:34:d8:c5:fd:f5:5e: f1:26:97:19:50:c6:ef:c2:7b:f6:9b:a5:5a:37:ca: 87:01:29:f2:e6:1c:f9:ff:21:2e:0a:02:ea:0b:c7: 87:13:64:e5:b4:f8:9c:64:1e:b4:26:f7:45:de:42: 08:67:61:87:55:49:15:35:db:f6:bd:98:0e:1c:70: 2e:55:65:ce:9a:85:0b:d1:f5:38:d8:9a:07:82:82: 29:09:f1:bd:ed:17:cd:62:46:41:1b:9b:e1:1d:b4: f6:65:02:fb:12:1a:0a:c1:db:e8:7c:e4:8b:ee:26: 4f:d5:6e:e8:3c:cf:fc:4e:6e:a5:11:fa:17:11:cb: 2f:87:29:65:ea:96:c3:12:b9:8d:e2:92:72:71:69: 32:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:46:B1:6C:81:61:48:B7:67:FE:44:20:52:F7:02:7F:15:01:B2:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/de58c588-4488-3729-a7e1-98130f91c66c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/ca2c0e73-f7f7-4070-98aa-c78ef1752849.crl X509v3 Authority Key Identifier: keyid:76:CE:90:F2:9A:98:0C:BD:C1:58:74:E2:1C:58:59:B7:53:0A:4E:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849.cer sbgp-ipAddrBlock: critical IPv4: 64.5.64.0/20 64.186.16.0/21 66.172.192.0/18 74.221.32.0/20 143.223.184.0/21 199.116.180.0/22 199.247.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a1:2f:b1:b2:3e:72:9c:b5:23:7e:65:13:9b:c0:82:d8:c4: 9f:ec:15:ac:db:b0:5e:b8:c4:f8:33:6f:05:b6:43:7f:64:2d: ae:9e:ff:40:56:46:be:a2:41:59:34:75:ad:80:bd:80:32:d5: db:1f:25:f0:d1:79:82:35:d7:5f:a2:b2:a7:57:ae:26:69:52: cb:db:3e:f5:8d:95:6c:37:c7:a5:32:3e:5c:31:bc:5c:d9:0a: 0d:7f:44:53:9b:0f:e5:df:0a:ea:2f:f9:5a:d1:7d:d9:06:3c: d5:75:b0:bc:81:ca:e3:76:96:e2:be:58:51:9a:b8:b2:82:37: c8:8d:1f:a8:7c:9c:8d:5a:90:16:f2:35:e4:4a:08:5d:f4:5d: c3:19:0c:91:da:d5:76:6a:58:42:b1:d5:8f:fc:4d:d4:6a:a7: 97:40:41:1f:33:35:09:4a:51:ed:90:36:43:57:53:d2:ef:dc: 78:4f:20:cc:2d:93:9e:3a:d6:4a:7a:98:54:ad:00:e8:d6:17: ab:32:6e:43:71:af:23:b1:1f:a9:10:49:fc:fe:59:c5:92:8c: ce:8d:d8:1e:49:73:86:82:dd:65:fe:01:59:e8:c0:5d:60:8d: 6d:e7:cf:54:68:fb:16:a3:46:aa:e5:fb:0d:5a:51:4d:9f:e2: 10:86:69:44 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWE6MikJU/vOtm8N6YIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2EyYzBlNzMtZjdmNy00MDcwLTk4YWEtYzc4ZWYxNzUy ODQ5MB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk NGIwM2ExMTEtODUwMS00Zjc4LTkyYjEtM2NlYzdjZTM3ODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne3Y3h9wOCMr4hYf83DMN4h3ReEWjWZbPbJt 8McHZAwZwOXRF6o0tFaZRRcSUeMk8ZUwMPEsPcE6jAEj8zWpPfdcboEw3/3fUan1 5kyFakLxE3O+xmwqgTWjDzk3S5yNinfgeFpKtIC+6CUPSDbIU9c02MX99V7xJpcZ UMbvwnv2m6VaN8qHASny5hz5/yEuCgLqC8eHE2TltPicZB60JvdF3kIIZ2GHVUkV Ndv2vZgOHHAuVWXOmoUL0fU42JoHgoIpCfG97RfNYkZBG5vhHbT2ZQL7EhoKwdvo fOSL7iZP1W7oPM/8Tm6lEfoXEcsvhyll6pbDErmN4pJycWkyjQIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFCNGsWyBYUi3Z/5EIFL3An8VAbIaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYTJj MGU3My1mN2Y3LTQwNzAtOThhYS1jNzhlZjE3NTI4NDkvZGU1OGM1ODgtNDQ4OC0z NzI5LWE3ZTEtOTgxMzBmOTFjNjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2EyYzBlNzMtZjdmNy00MDcwLTk4 YWEtYzc4ZWYxNzUyODQ5L2NhMmMwZTczLWY3ZjctNDA3MC05OGFhLWM3OGVmMTc1 Mjg0OS5jcmwwHwYDVR0jBBgwFoAUds6Q8pqYDL3BWHTiHFhZt1MKTmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYTJjMGU3My1mN2Y3LTQwNzAtOThhYS1jNzhl ZjE3NTI4NDkuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQEQAVAAwQD QLoQAwQGQqzAAwQESt0gAwQDj9+4AwQCx3S0AwQEx/dAMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEahL7Gy PnKctSN+ZRObwILYxJ/sFazbsF64xPgzbwW2Q39kLa6e/0BWRr6iQVk0da2AvYAy 1dsfJfDReYI111+isqdXriZpUsvbPvWNlWw3x6UyPlwxvFzZCg1/RFObD+XfCuov +VrRfdkGPNV1sLyByuN2luK+WFGauLKCN8iNH6h8nI1akBbyNeRKCF30XcMZDJHa 1XZqWEKx1Y/8TdRqp5dAQR8zNQlKUe2QNkNXU9Lv3HhPIMwtk5461kp6mFStAOjW F6sybkNxryOxH6kQSfz+WcWSjM6N2B5Jc4aC3WX+AVnowF1gjW3nz1Ro+xajRqrl +w1aUU2f4hCGaUQ= -----END CERTIFICATE-----Generated at Fri Jul 24 22:03:28 2026 by rpki-client