$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/828c35a4-d70a-329b-afc8-43f0c6744f3e.roa File: 828c35a4-d70a-329b-afc8-43f0c6744f3e.roa (raw, json) Hash identifier: yR0TW0HjQGbhdcnzHM8Z8FTZ+9HCpA5wa4OrcqSONOs= Subject key identifier: 06:B4:9C:CE:5C:4D:BE:B4:90:86:AE:01:39:3D:7E:6C:04:A9:BA:ED Certificate issuer: /CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Certificate serial: 010D0C9F4328584E4AEF5143EA0B58DD9450A980 Authority key identifier: D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/828c35a4-d70a-329b-afc8-43f0c6744f3e.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 27589 IP address blocks: 64.59.64.0/18 maxlen: 24 66.244.144.0/20 maxlen: 24 74.206.160.0/19 maxlen: 24 99.192.128.0/17 maxlen: 24 104.193.120.0/22 maxlen: 24 162.250.76.0/22 maxlen: 24 184.94.144.0/20 maxlen: 24 199.19.200.0/21 maxlen: 24 199.59.88.0/21 maxlen: 24 199.182.104.0/21 maxlen: 24 199.241.96.0/21 maxlen: 24 208.74.148.0/22 maxlen: 24 208.122.192.0/19 maxlen: 24 2607:f5a8::/32 maxlen: 48 2607:ffb8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:51:43:ea:0b:58:dd:94:50:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=14b577e3-1bb1-4611-8557-4430bf6f0ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4c:84:82:de:bb:0e:c7:4b:b7:dc:80:1a:af: cc:f1:7d:94:73:2c:5c:21:be:b0:f3:e1:fd:52:c7: 0a:a5:09:6c:31:5c:ee:ae:77:9e:8f:27:36:ad:20: 99:d2:52:eb:86:82:a4:61:03:08:73:c9:ec:35:1a: 1d:73:3e:2f:8f:71:98:58:47:15:41:dd:6d:9e:7c: 47:2a:e4:59:a2:32:fb:22:a1:f3:af:8d:6b:df:36: c4:f5:d3:df:2b:8b:71:c3:8a:51:ce:69:1b:a1:64: 50:b6:ee:96:21:c1:81:a1:f0:14:fc:87:e3:b8:6d: 7e:ab:9a:43:61:82:b6:b6:57:b5:6d:e9:39:69:cd: 69:91:53:1a:6f:60:c0:6b:61:9e:22:5d:83:77:38: 68:9b:70:23:8f:4b:b2:de:6a:dd:07:15:c3:89:95: 7c:b0:3a:7a:bc:70:24:b7:9c:bb:cd:2d:38:f9:73: 0e:cb:e5:ec:bd:70:f9:96:38:81:b5:c3:b3:62:ab: 08:d9:53:68:2c:f4:20:59:9b:1d:93:8e:18:dc:a7: 76:9e:f2:e2:78:4d:e4:c6:3b:5b:97:66:b3:6d:fb: a5:98:a6:d6:74:9d:24:b0:ef:d4:d7:28:71:fe:af: 13:fe:65:93:8f:c6:5a:f7:5f:c5:7c:0a:5c:71:e3: bd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B4:9C:CE:5C:4D:BE:B4:90:86:AE:01:39:3D:7E:6C:04:A9:BA:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/828c35a4-d70a-329b-afc8-43f0c6744f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl X509v3 Authority Key Identifier: keyid:D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer sbgp-ipAddrBlock: critical IPv4: 64.59.64.0/18 66.244.144.0/20 74.206.160.0/19 99.192.128.0/17 104.193.120.0/22 162.250.76.0/22 184.94.144.0/20 199.19.200.0/21 199.59.88.0/21 199.182.104.0/21 199.241.96.0/21 208.74.148.0/22 208.122.192.0/19 IPv6: 2607:f5a8::/32 2607:ffb8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ed:57:54:74:87:87:7c:da:5b:97:b7:50:de:49:ac:4e:af: eb:89:fb:c5:cb:d5:01:52:ed:07:3a:69:57:b2:3d:b6:e4:d3: 31:37:1e:30:fa:11:d6:a4:0b:a0:53:14:1e:e0:2a:41:a5:a3: aa:65:b1:64:dc:a6:93:b5:fa:b5:67:30:c0:58:aa:d7:a1:8d: c7:06:6c:1c:4b:69:f5:0d:f0:0d:8f:ff:a9:4c:2c:7f:ca:53: 53:b4:6a:f5:a8:ee:8f:e6:d9:9c:80:b2:d3:94:51:cc:de:d3: 28:ab:aa:cc:e0:5d:d0:ba:c7:9a:af:b7:bf:de:eb:b3:f1:f4: 25:b9:ba:71:28:f3:91:d7:5a:88:4c:3b:24:20:9f:85:9a:5c: 7e:cb:a4:c8:8a:a1:eb:30:c6:d7:ed:33:f2:45:3d:36:a0:45: b8:7a:7c:be:7c:10:5f:fc:1c:63:9f:b8:d0:fc:ee:c3:e0:af: 48:8d:ad:b8:de:31:a3:d4:09:1b:e0:6d:69:e4:d7:43:19:67: d2:9b:59:6d:60:44:de:1e:c7:6b:dc:c5:24:84:47:6c:28:b6: f4:7d:e3:0c:a4:2f:44:dc:c3:38:01:6b:34:c2:ba:63:50:d5: f0:92:e9:97:65:22:f3:f6:49:16:97:3f:5b:f2:1d:00:9c:57: 9b:cf:b8:66 -----BEGIN CERTIFICATE----- MIIGoTCCBYmgAwIBAgIUAQ0Mn0MoWE5K71FD6gtY3ZRQqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I3MmM5NjgtZDY3My00YTdhLWJmZWMtNDA3MWE3YmU1 MzE3MB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk MTRiNTc3ZTMtMWJiMS00NjExLTg1NTctNDQzMGJmNmYwYWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUyEgt67DsdLt9yAGq/M8X2UcyxcIb6w8+H9 UscKpQlsMVzurneejyc2rSCZ0lLrhoKkYQMIc8nsNRodcz4vj3GYWEcVQd1tnnxH KuRZojL7IqHzr41r3zbE9dPfK4txw4pRzmkboWRQtu6WIcGBofAU/IfjuG1+q5pD YYK2tle1bek5ac1pkVMab2DAa2GeIl2Ddzhom3Ajj0uy3mrdBxXDiZV8sDp6vHAk t5y7zS04+XMOy+XsvXD5ljiBtcOzYqsI2VNoLPQgWZsdk44Y3Kd2nvLieE3kxjtb l2azbfulmKbWdJ0ksO/U1yhx/q8T/mWTj8Za91/FfApcceO9FQIDAQABo4IDszCC A68wHQYDVR0OBBYEFAa0nM5cTb60kIauATk9fmwEqbrtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcy Yzk2OC1kNjczLTRhN2EtYmZlYy00MDcxYTdiZTUzMTcvODI4YzM1YTQtZDcwYS0z MjliLWFmYzgtNDNmMGM2NzQ0ZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2I3MmM5NjgtZDY3My00YTdhLWJm ZWMtNDA3MWE3YmU1MzE3LzNiNzJjOTY4LWQ2NzMtNGE3YS1iZmVjLTQwNzFhN2Jl NTMxNy5jcmwwHwYDVR0jBBgwFoAU1NBs4Y/5cx1TIiNtNj849oEDtW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcyYzk2OC1kNjczLTRhN2EtYmZlYy00MDcx YTdiZTUzMTcuY2VyMH0GCCsGAQUFBwEHAQH/BG4wbDBUBAIAATBOAwQGQDtAAwQE QvSQAwQFSs6gAwQHY8CAAwQCaMF4AwQCovpMAwQEuF6QAwQDxxPIAwQDxztYAwQD x7ZoAwQDx/FgAwQC0EqUAwQF0HrAMBQEAgACMA4DBQAmB/WoAwUAJgf/uDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQAc7VdUdIeHfNpbl7dQ3kmsTq/rifvFy9UBUu0HOmlXsj225NMxNx4w+hHW pAugUxQe4CpBpaOqZbFk3KaTtfq1ZzDAWKrXoY3HBmwcS2n1DfANj/+pTCx/ylNT tGr1qO6P5tmcgLLTlFHM3tMoq6rM4F3Qusear7e/3uuz8fQlubpxKPOR11qITDsk IJ+Fmlx+y6TIiqHrMMbX7TPyRT02oEW4eny+fBBf/Bxjn7jQ/O7D4K9Ija243jGj 1Akb4G1p5NdDGWfSm1ltYETeHsdr3MUkhEdsKLb0feMMpC9E3MM4AWs0wrpjUNXw kumXZSLz9kkWlz9b8h0AnFebz7hm -----END CERTIFICATE-----Generated at Fri Jul 24 12:49:11 2026 by rpki-client