$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa File: c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa (raw, json) Hash identifier: 4Q3lWdMkIpAtsO2aHnvTMmj4LrJUcIW2KKSYgZpo3hI= Subject key identifier: 98:4A:1E:3C:15:8B:26:37:53:DA:8A:5C:5A:E5:71:E1:29:C8:71:58 Certificate issuer: /CN=3bb72fa3-359e-464d-be35-978a12d62998 Certificate serial: 010D0C9F4328584E842A3B516F55649CFB152580 Authority key identifier: E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa Signing time: Thu 16 Jul 2026 09:00:12 +0000 ROA not before: Thu 16 Jul 2026 09:00:12 +0000 ROA not after: Wed 14 Oct 2026 09:00:12 +0000 asID: 5009 IP address blocks: 64.56.0.0/19 maxlen: 24 64.237.64.0/19 maxlen: 24 66.186.224.0/19 maxlen: 24 108.179.160.0/19 maxlen: 24 159.48.192.0/19 maxlen: 24 160.223.208.0/20 maxlen: 24 165.217.192.0/18 maxlen: 24 205.233.40.0/22 maxlen: 24 206.124.192.0/19 maxlen: 24 206.204.112.0/20 maxlen: 24 208.97.32.0/20 maxlen: 24 209.62.192.0/19 maxlen: 24 209.124.192.0/19 maxlen: 24 209.124.224.0/19 maxlen: 24 216.115.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:2a:3b:51:6f:55:64:9c:fb:15:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb72fa3-359e-464d-be35-978a12d62998 Validity Not Before: Jul 16 09:00:12 2026 GMT Not After : Oct 14 09:00:12 2026 GMT Subject: CN=67dff724-dac1-41d8-aadb-da2c434124e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:55:a8:ce:71:d1:31:c8:7d:7f:76:cc:20:77: 16:12:03:d0:32:c0:3c:91:5d:16:c9:46:8c:4f:02: 41:82:9e:c7:f0:05:35:49:d1:72:e3:e4:76:c9:e2: 0a:df:7b:3b:d2:ab:80:6e:59:5f:65:5c:03:3e:e8: 89:d1:b4:4c:24:36:03:f1:f5:7f:ce:18:3b:c9:e7: 66:d0:6b:9f:a4:1e:a9:35:95:59:65:6a:b2:14:05: 86:05:98:8f:07:e3:83:8d:5c:9a:6f:f3:cc:56:9e: a2:65:e9:4e:2c:36:9e:a7:5b:6f:94:45:70:01:a5: 12:04:cd:8e:2c:24:cb:6c:86:a0:8b:18:22:16:b9: 9d:6b:c1:8b:ed:0e:64:ee:0c:db:65:f7:89:55:cd: 4d:71:ce:a4:e0:3d:42:a1:11:4f:09:46:8b:7e:68: 9d:d0:e4:fc:ad:f0:4c:a9:73:fe:e2:82:95:7b:d2: 18:55:c3:41:81:8d:9e:9e:51:37:dd:3c:64:46:ea: 22:33:4b:92:30:2c:b2:24:fe:51:38:b5:7d:87:21: 5f:c6:50:8f:42:23:df:4d:5c:84:f5:95:3b:9f:2a: ab:a8:1f:7b:c2:a9:a2:9d:49:92:57:4c:bd:ec:26: 00:b6:3e:15:2e:bb:4c:ea:88:88:88:3c:70:6c:c7: f8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4A:1E:3C:15:8B:26:37:53:DA:8A:5C:5A:E5:71:E1:29:C8:71:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl X509v3 Authority Key Identifier: keyid:E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer sbgp-ipAddrBlock: critical IPv4: 64.56.0.0/19 64.237.64.0/19 66.186.224.0/19 108.179.160.0/19 159.48.192.0/19 160.223.208.0/20 165.217.192.0/18 205.233.40.0/22 206.124.192.0/19 206.204.112.0/20 208.97.32.0/20 209.62.192.0/19 209.124.192.0/18 216.115.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:14:a6:df:23:aa:f0:4d:de:c6:f6:33:af:b0:cc:1e:3d:e4: 6a:02:1f:10:77:46:a9:a2:62:bc:38:b8:a7:88:9f:08:6c:b6: 2b:6a:d0:2c:75:3b:2e:62:90:76:d0:dd:16:f5:4b:60:bd:68: e6:9b:e4:5f:28:9d:2d:ec:4f:62:e1:59:16:62:0f:11:ba:86: ff:5b:50:1f:22:f4:33:8a:a6:1a:10:08:e8:27:b1:f2:0a:71: 26:5a:16:ee:a0:86:9a:7c:9d:33:5f:d9:5c:9c:7d:19:e3:ab: fb:00:21:79:52:96:77:56:14:91:dc:33:46:b7:69:e0:a8:b5: 50:63:18:e4:3c:78:8c:bb:2c:b6:bb:5b:1a:80:27:4b:a7:0c: da:4b:b1:f5:f9:82:68:c7:c8:af:05:10:a7:21:01:16:4c:24: 53:a3:5b:35:43:a1:f3:4a:cd:ca:31:7d:03:be:f0:51:1c:a9: 34:7e:cc:f3:23:37:6b:8a:18:ac:d4:03:d7:29:85:1c:6e:d7: b4:15:82:ee:68:09:f0:f0:61:08:6b:fc:d7:2f:fb:d6:d2:3a: 53:6d:f6:f0:c7:62:b3:ce:28:4d:6d:73:3a:7d:bc:98:0f:6e: 3a:ae:d3:18:34:1f:c2:d4:fa:38:e9:61:bb:a2:07:66:c6:74: 80:0f:5d:27 -----BEGIN CERTIFICATE----- MIIGkTCCBXmgAwIBAgIUAQ0Mn0MoWE6EKjtRb1VknPsVJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNzJmYTMtMzU5ZS00NjRkLWJlMzUtOTc4YTEyZDYy OTk4MB4XDTI2MDcxNjA5MDAxMloXDTI2MTAxNDA5MDAxMlowLzEtMCsGA1UEAxMk NjdkZmY3MjQtZGFjMS00MWQ4LWFhZGItZGEyYzQzNDEyNGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplWoznHRMch9f3bMIHcWEgPQMsA8kV0WyUaM TwJBgp7H8AU1SdFy4+R2yeIK33s70quAbllfZVwDPuiJ0bRMJDYD8fV/zhg7yedm 0GufpB6pNZVZZWqyFAWGBZiPB+ODjVyab/PMVp6iZelOLDaep1tvlEVwAaUSBM2O LCTLbIagixgiFrmda8GL7Q5k7gzbZfeJVc1Ncc6k4D1CoRFPCUaLfmid0OT8rfBM qXP+4oKVe9IYVcNBgY2enlE33TxkRuoiM0uSMCyyJP5ROLV9hyFfxlCPQiPfTVyE 9ZU7nyqrqB97wqminUmSV0y97CYAtj4VLrtM6oiIiDxwbMf4yQIDAQABo4IDozCC A58wHQYDVR0OBBYEFJhKHjwViyY3U9qKXFrlceEpyHFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3 MmZhMy0zNTllLTQ2NGQtYmUzNS05NzhhMTJkNjI5OTgvYzVjMWFiOWEtZjk5ZC0z Yjc1LWI3ZjQtOThmYmVmMzE1ODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2JiNzJmYTMtMzU5ZS00NjRkLWJl MzUtOTc4YTEyZDYyOTk4LzNiYjcyZmEzLTM1OWUtNDY0ZC1iZTM1LTk3OGExMmQ2 Mjk5OC5jcmwwHwYDVR0jBBgwFoAU6KpNDavZkpnzD6D/MKvaA2ZFkPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3MmZhMy0zNTllLTQ2NGQtYmUzNS05Nzhh MTJkNjI5OTguY2VyMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQFQDgAAwQF QO1AAwQFQrrgAwQFbLOgAwQFnzDAAwQEoN/QAwQGpdnAAwQCzekoAwQFznzAAwQE zsxwAwQE0GEgAwQF0T7AAwQG0XzAAwQF2HOAMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIgUpt8jqvBN3sb2 M6+wzB495GoCHxB3RqmiYrw4uKeInwhstitq0Cx1Oy5ikHbQ3Rb1S2C9aOab5F8o nS3sT2LhWRZiDxG6hv9bUB8i9DOKphoQCOgnsfIKcSZaFu6ghpp8nTNf2VycfRnj q/sAIXlSlndWFJHcM0a3aeCotVBjGOQ8eIy7LLa7WxqAJ0unDNpLsfX5gmjHyK8F EKchARZMJFOjWzVDofNKzcoxfQO+8FEcqTR+zPMjN2uKGKzUA9cphRxu17QVgu5o CfDwYQhr/Ncv+9bSOlNt9vDHYrPOKE1tczp9vJgPbjqu0xg0H8LU+jjpYbuiB2bG dIAPXSc= -----END CERTIFICATE-----Generated at Fri Jul 24 13:15:07 2026 by rpki-client