$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/094db3f4-fa7d-36d6-a7cf-6ee8f7ac0cfe.roa File: 094db3f4-fa7d-36d6-a7cf-6ee8f7ac0cfe.roa (raw, json) Hash identifier: j1nkYduYE/ugrD9AFoHL9L0E8m6c7q9b5oT8rWYIOvg= Subject key identifier: 52:A2:FC:2B:06:42:DC:FD:37:2D:EF:CC:F2:B4:9F:88:F9:A2:FA:8B Certificate issuer: /CN=fcbf2352-8296-41fd-bfd5-576c02b9d483 Certificate serial: 010D0C9F4328584E640F6580AD47EC0579C6AB80 Authority key identifier: 90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/094db3f4-fa7d-36d6-a7cf-6ee8f7ac0cfe.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 20283 IP address blocks: 64.90.64.0/19 maxlen: 24 68.170.112.0/20 maxlen: 20 69.168.240.0/20 maxlen: 24 161.199.130.0/24 maxlen: 24 167.94.42.0/23 maxlen: 23 167.94.52.0/23 maxlen: 23 167.94.62.0/23 maxlen: 23 167.94.76.0/23 maxlen: 23 172.87.0.0/20 maxlen: 21 199.59.116.0/22 maxlen: 22 205.214.160.0/20 maxlen: 20 209.212.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:65:80:ad:47:ec:05:79:c6:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcbf2352-8296-41fd-bfd5-576c02b9d483 Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=d16449d5-eaaf-4fa3-9def-3b322b1cbf74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2f:de:56:c0:21:f3:c5:23:8e:2d:5d:ec:fc: 1a:2f:53:62:0f:43:b9:33:2b:67:d8:69:fd:e6:32: ce:29:b5:58:c8:8a:55:be:4f:1c:f8:2f:f1:51:d7: 75:91:ff:0f:cb:7d:ea:cf:d8:82:82:98:55:6b:2c: 0d:5e:53:a5:b0:f9:13:25:85:84:d4:0c:32:0a:9e: f3:1e:ce:56:71:df:c5:24:f5:8b:d2:5f:ff:a6:9d: b0:b4:c9:23:b8:6f:b0:f7:da:1e:2c:66:66:62:ac: 70:00:46:d8:16:e4:f2:ea:4a:bd:ba:97:89:18:ad: 62:41:c9:12:c8:a9:24:ad:e5:ef:d1:49:63:d8:c7: b9:32:a1:a3:dd:74:3c:81:2a:95:17:d9:c4:16:39: ff:6f:c3:56:99:06:1e:04:0b:a7:57:b9:4c:c6:42: 1d:94:6a:e2:b9:59:5a:ce:63:b4:23:48:9d:17:c0: c3:bd:f4:91:bf:0c:19:92:c5:05:d0:bf:d6:39:43: 19:b4:07:ab:86:14:39:e9:06:33:d3:dc:15:f3:41: 55:7c:76:46:9d:47:05:96:42:08:1c:66:4b:19:ed: fc:02:fe:eb:11:d9:4a:06:cf:89:63:2a:9d:64:de: f3:67:3e:51:25:b1:a4:bd:bc:fc:8f:9f:ac:0f:a0: c9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A2:FC:2B:06:42:DC:FD:37:2D:EF:CC:F2:B4:9F:88:F9:A2:FA:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/094db3f4-fa7d-36d6-a7cf-6ee8f7ac0cfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.crl X509v3 Authority Key Identifier: keyid:90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer sbgp-ipAddrBlock: critical IPv4: 64.90.64.0/19 68.170.112.0/20 69.168.240.0/20 161.199.130.0/24 167.94.42.0/23 167.94.52.0/23 167.94.62.0/23 167.94.76.0/23 172.87.0.0/20 199.59.116.0/22 205.214.160.0/20 209.212.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:e7:96:a0:86:d5:a4:58:48:7b:96:42:7a:eb:23:ba:5f:16: 0e:dc:58:95:57:b1:0b:4c:b7:cd:2a:ad:70:20:11:0a:99:27: 44:11:8c:c7:f3:03:33:d1:f4:dd:b6:89:65:69:b8:a9:2f:2a: 36:af:97:e7:3a:66:5b:ba:f9:b8:1b:bd:87:8f:64:cf:cd:62: 29:61:e8:b5:8b:e2:43:06:d6:5b:98:db:94:7d:88:fa:63:ab: 43:bc:57:9d:a0:d8:6b:43:f4:34:94:5a:32:1b:b4:40:00:f2: dc:33:1d:9c:ba:0c:99:e9:8a:7a:23:28:95:36:0c:a8:b0:25: fb:6a:69:92:19:87:d2:cd:88:ae:36:ed:8e:83:fc:cb:4e:ec: 9c:76:38:87:e6:1a:43:a2:fb:52:88:9b:ec:b1:7f:9a:1c:74: a3:d7:8c:26:57:82:b8:c5:e9:c4:49:58:a1:85:17:3c:43:21: e1:85:38:fc:4a:bf:1d:f3:d3:7e:c5:4d:35:ee:ee:96:b8:81: f8:c6:11:69:f6:74:47:ce:c8:b5:1f:7d:85:fe:1c:eb:6a:60: 9c:78:3a:e5:65:4e:43:f1:37:ac:f3:08:5f:93:13:16:cd:b1: c4:7e:1e:be:96:8c:a4:eb:b7:1e:9e:87:ac:de:3d:57:38:70: 5e:83:c8:91 -----BEGIN CERTIFICATE----- MIIGhTCCBW2gAwIBAgIUAQ0Mn0MoWE5kD2WArUfsBXnGq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmNiZjIzNTItODI5Ni00MWZkLWJmZDUtNTc2YzAyYjlk NDgzMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk ZDE2NDQ5ZDUtZWFhZi00ZmEzLTlkZWYtM2IzMjJiMWNiZjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgy/eVsAh88Ujji1d7PwaL1NiD0O5Mytn2Gn9 5jLOKbVYyIpVvk8c+C/xUdd1kf8Py33qz9iCgphVaywNXlOlsPkTJYWE1AwyCp7z Hs5Wcd/FJPWL0l//pp2wtMkjuG+w99oeLGZmYqxwAEbYFuTy6kq9upeJGK1iQckS yKkkreXv0Ulj2Me5MqGj3XQ8gSqVF9nEFjn/b8NWmQYeBAunV7lMxkIdlGriuVla zmO0I0idF8DDvfSRvwwZksUF0L/WOUMZtAerhhQ56QYz09wV80FVfHZGnUcFlkII HGZLGe38Av7rEdlKBs+JYyqdZN7zZz5RJbGkvbz8j5+sD6DJJQIDAQABo4IDlzCC A5MwHQYDVR0OBBYEFFKi/CsGQtz9Ny3vzPK0n4j5ovqLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mY2Jm MjM1Mi04Mjk2LTQxZmQtYmZkNS01NzZjMDJiOWQ0ODMvMDk0ZGIzZjQtZmE3ZC0z NmQ2LWE3Y2YtNmVlOGY3YWMwY2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmNiZjIzNTItODI5Ni00MWZkLWJm ZDUtNTc2YzAyYjlkNDgzL2ZjYmYyMzUyLTgyOTYtNDFmZC1iZmQ1LTU3NmMwMmI5 ZDQ4My5jcmwwHwYDVR0jBBgwFoAUkPsuPGKbkYBkeb/u3LL9c2psWWwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mY2JmMjM1Mi04Mjk2LTQxZmQtYmZkNS01NzZj MDJiOWQ0ODMuY2VyMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQFQFpAAwQE RKpwAwQERajwAwQAoceCAwQBp14qAwQBp140AwQBp14+AwQBp15MAwQErFcAAwQC xzt0AwQEzdagAwQE0dQgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAATnlqCG1aRYSHuWQnrrI7pfFg7cWJVX sQtMt80qrXAgEQqZJ0QRjMfzAzPR9N22iWVpuKkvKjavl+c6Zlu6+bgbvYePZM/N Yilh6LWL4kMG1luY25R9iPpjq0O8V52g2GtD9DSUWjIbtEAA8twzHZy6DJnpinoj KJU2DKiwJftqaZIZh9LNiK427Y6D/MtO7Jx2OIfmGkOi+1KIm+yxf5ocdKPXjCZX grjF6cRJWKGFFzxDIeGFOPxKvx3z037FTTXu7pa4gfjGEWn2dEfOyLUffYX+HOtq YJx4OuVlTkPxN6zzCF+TExbNscR+Hr6WjKTrtx6eh6zePVc4cF6DyJE= -----END CERTIFICATE-----Generated at Fri Jul 24 17:28:17 2026 by rpki-client