$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0f4e8c51-54e1-3d28-8820-21d6b6db0d73.roa File: 0f4e8c51-54e1-3d28-8820-21d6b6db0d73.roa (raw, json) Hash identifier: K7V2xAwFu/wlpodW7ExwX3qjJnjd7EmTHgxDbwRgS5w= Subject key identifier: B7:1C:6D:89:1A:3F:E6:2D:F2:E6:D2:90:55:0F:76:23:04:B0:1B:AC Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F3CE27B812B7896160D401A00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0f4e8c51-54e1-3d28-8820-21d6b6db0d73.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 211936 IP address blocks: 64.32.152.0/21 maxlen: 24 64.50.136.0/21 maxlen: 24 64.145.128.0/18 maxlen: 24 64.145.192.0/18 maxlen: 24 64.248.0.0/18 maxlen: 24 64.248.64.0/18 maxlen: 24 64.248.128.0/18 maxlen: 24 64.248.192.0/18 maxlen: 24 64.249.0.0/18 maxlen: 24 64.249.64.0/18 maxlen: 24 64.249.128.0/18 maxlen: 24 64.249.192.0/18 maxlen: 24 66.17.72.0/21 maxlen: 24 66.200.0.0/18 maxlen: 24 66.200.64.0/18 maxlen: 24 66.200.128.0/18 maxlen: 24 66.200.192.0/18 maxlen: 24 74.3.0.0/18 maxlen: 24 74.3.64.0/18 maxlen: 24 205.214.32.0/20 maxlen: 24 206.40.192.0/20 maxlen: 24 206.253.0.0/20 maxlen: 24 208.41.0.0/18 maxlen: 24 208.41.64.0/18 maxlen: 24 208.41.128.0/18 maxlen: 24 208.41.192.0/18 maxlen: 24 216.151.224.0/20 maxlen: 24 216.184.128.0/18 maxlen: 24 216.184.192.0/18 maxlen: 24 216.224.0.0/19 maxlen: 24 216.224.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:7b:81:2b:78:96:16:0d:40:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=eb337b95-16a2-4c19-8a7f-420c62e2e945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:23:45:d0:5b:d2:21:a8:b5:d0:23:ed:81:d2: f1:49:42:ef:3f:44:09:a9:38:21:34:f5:57:52:53: 4b:ac:dc:ca:98:28:f8:28:9b:19:e9:cb:0b:9c:06: 2b:1b:51:98:b5:de:97:a9:bb:ff:6d:46:77:83:12: ca:7e:5f:c4:47:e3:63:26:03:de:a5:fb:97:b9:88: 03:3b:9f:82:43:d3:2d:73:1d:66:21:8b:66:26:51: a1:cf:62:4f:07:93:17:a8:26:33:3d:88:0f:13:80: e4:ee:30:6b:09:3f:27:c1:d2:f7:3e:09:c3:ef:20: 4e:92:d7:0f:0f:0d:2f:d2:fe:0d:59:e0:2d:ad:27: d4:9c:7d:6c:d6:54:50:20:e8:f6:c8:7e:7b:5f:b1: 3a:d9:e9:b0:b1:23:98:f8:09:c1:17:90:a7:5c:61: f0:ce:29:fd:7d:1d:60:2d:2e:84:ad:ee:07:55:ea: 2a:22:8a:21:9f:02:7f:64:30:02:9d:ba:d2:0f:3a: 69:8c:f5:bb:97:ce:29:a3:4a:61:70:e7:26:a6:56: b0:cc:43:6e:60:29:1b:c2:ec:10:dc:dc:3e:19:01: 23:b9:0e:90:8f:11:95:2f:7d:fd:35:cf:3f:5d:0e: d1:e5:d3:bf:1f:a9:ee:da:da:ff:31:19:bb:34:c3: 69:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1C:6D:89:1A:3F:E6:2D:F2:E6:D2:90:55:0F:76:23:04:B0:1B:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0f4e8c51-54e1-3d28-8820-21d6b6db0d73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.32.152.0/21 64.50.136.0/21 64.145.128.0/17 64.248.0.0/15 66.17.72.0/21 66.200.0.0/16 74.3.0.0/17 205.214.32.0/20 206.40.192.0/20 206.253.0.0/20 208.41.0.0/16 216.151.224.0/20 216.184.128.0/17 216.224.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:9b:5d:ed:3b:aa:fe:9d:e9:84:1b:96:cd:46:fe:d5:7d:fc: a9:a2:6d:4e:9a:e0:71:17:9f:6a:3d:fb:38:90:91:90:82:3d: e6:9d:ce:bf:67:dd:ba:f2:04:79:db:cc:89:96:86:e5:cf:49: 60:00:22:94:de:14:ff:dd:fc:36:a8:48:ac:69:40:97:11:27: a8:bc:b3:01:50:d2:c4:ea:23:df:e7:29:55:b2:6e:13:cd:1c: 2f:bd:0a:ff:17:0c:97:34:1d:6f:cf:4e:83:4a:4b:21:63:3a: 83:5a:a8:72:4a:3d:7d:14:81:f2:0c:8a:7c:94:a3:fa:51:c7: 10:1c:6d:51:16:1c:c6:b7:e5:56:3c:d0:12:ab:35:49:23:f6: d6:83:19:56:e8:00:34:03:d4:06:24:e5:02:fa:ec:cd:21:08: 81:c3:7c:9d:0d:4c:1f:b2:33:c9:d2:f9:bd:88:5e:06:e0:d9: 80:ed:ab:b6:ba:4d:e6:e6:a9:12:71:e1:46:c3:20:ec:2d:4f: 64:6b:c1:2c:66:30:00:aa:72:cd:84:e6:2f:5c:be:ad:54:b0: a3:d4:8e:8c:64:d1:d8:03:d7:1a:3b:41:a5:8c:df:95:0d:4d: 05:1d:0c:7a:0c:43:36:5f:4e:e0:e0:52:d4:8c:36:96:dd:6b: 7b:a1:a0:0d -----BEGIN CERTIFICATE----- MIIGjjCCBXagAwIBAgIUAQ0Mn0MoWE884nuBK3iWFg1AGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk ZWIzMzdiOTUtMTZhMi00YzE5LThhN2YtNDIwYzYyZTJlOTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCNF0FvSIai10CPtgdLxSULvP0QJqTghNPVX UlNLrNzKmCj4KJsZ6csLnAYrG1GYtd6Xqbv/bUZ3gxLKfl/ER+NjJgPepfuXuYgD O5+CQ9Mtcx1mIYtmJlGhz2JPB5MXqCYzPYgPE4Dk7jBrCT8nwdL3PgnD7yBOktcP Dw0v0v4NWeAtrSfUnH1s1lRQIOj2yH57X7E62emwsSOY+AnBF5CnXGHwzin9fR1g LS6Ere4HVeoqIoohnwJ/ZDACnbrSDzppjPW7l84po0phcOcmplawzENuYCkbwuwQ 3Nw+GQEjuQ6QjxGVL339Nc8/XQ7R5dO/H6nu2tr/MRm7NMNplwIDAQABo4IDoDCC A5wwHQYDVR0OBBYEFLccbYkaP+Yt8ubSkFUPdiMEsBusMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGY0ZThjNTEtNTRlMS0z ZDI4LTg4MjAtMjFkNmI2ZGIwZDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMGoGCCsGAQUFBwEHAQH/BFswWTBXBAIAATBRAwQDQCCYAwQD QDKIAwQHQJGAAwMBQPgDBANCEUgDAwBCyAMEB0oDAAMEBM3WIAMEBM4owAMEBM79 AAMDANApAwQE2JfgAwQH2LiAAwQG2OAAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEGbXe07qv6d6YQbls1G /tV9/KmibU6a4HEXn2o9+ziQkZCCPeadzr9n3bryBHnbzImWhuXPSWAAIpTeFP/d /DaoSKxpQJcRJ6i8swFQ0sTqI9/nKVWybhPNHC+9Cv8XDJc0HW/PToNKSyFjOoNa qHJKPX0UgfIMinyUo/pRxxAcbVEWHMa35VY80BKrNUkj9taDGVboADQD1AYk5QL6 7M0hCIHDfJ0NTB+yM8nS+b2IXgbg2YDtq7a6TebmqRJx4UbDIOwtT2RrwSxmMACq cs2E5i9cvq1UsKPUjoxk0dgD1xo7QaWM35UNTQUdDHoMQzZfTuDgUtSMNpbda3uh oA0= -----END CERTIFICATE-----Generated at Mon Sep 28 21:03:10 2026 by rpki-client