$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3becc9af-9630-3ef3-91f4-e75f4fa4a2d4.roa File: 3becc9af-9630-3ef3-91f4-e75f4fa4a2d4.roa (raw, json) Hash identifier: xNocU+xxlgg+I+ycQDuqxeStdY8EblnAjGzbZ1UyWMs= Subject key identifier: 8F:C5:BC:A2:5A:00:53:73:CB:6E:40:CC:4E:47:AB:1D:F7:9A:CC:21 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DBBA06BC6BA28957459396900 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3becc9af-9630-3ef3-91f4-e75f4fa4a2d4.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 3320 IP address blocks: 64.32.152.0/21 maxlen: 24 64.50.136.0/21 maxlen: 24 64.145.128.0/18 maxlen: 24 64.145.192.0/18 maxlen: 24 64.248.0.0/18 maxlen: 24 64.248.64.0/18 maxlen: 24 64.248.128.0/18 maxlen: 24 64.248.192.0/18 maxlen: 24 64.249.0.0/18 maxlen: 24 64.249.64.0/18 maxlen: 24 64.249.128.0/18 maxlen: 24 64.249.192.0/18 maxlen: 24 66.17.72.0/21 maxlen: 24 66.200.0.0/18 maxlen: 24 66.200.64.0/18 maxlen: 24 66.200.128.0/18 maxlen: 24 66.200.192.0/18 maxlen: 24 74.3.0.0/18 maxlen: 24 74.3.64.0/18 maxlen: 24 205.214.32.0/20 maxlen: 24 206.40.192.0/20 maxlen: 24 206.253.0.0/20 maxlen: 24 208.41.0.0/18 maxlen: 24 208.41.64.0/18 maxlen: 24 208.41.128.0/18 maxlen: 24 208.41.192.0/18 maxlen: 24 216.151.224.0/20 maxlen: 24 216.184.128.0/18 maxlen: 24 216.184.192.0/18 maxlen: 24 216.224.0.0/19 maxlen: 24 216.224.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:6b:c6:ba:28:95:74:59:39:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=9b6fb92b-dca3-4429-9714-b2e9f37d93ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:31:3b:a9:09:f5:a5:d6:f8:e6:e3:16:74:13: b6:00:d2:75:6b:ed:1e:13:22:97:a8:a0:1b:54:52: bc:0e:78:c2:8d:d1:81:26:4f:8d:b2:dc:03:0b:88: 83:0f:a4:63:5e:d2:bb:46:07:be:72:c5:b6:6e:ad: 79:8a:c0:0b:2a:d1:d5:ea:25:9b:c4:fa:75:f9:a4: 87:3b:88:37:6f:2b:5e:09:d5:a6:2e:97:26:05:16: c2:c9:54:72:a5:79:54:c5:78:63:3c:d7:46:64:a9: 4a:d5:f0:37:b1:33:ba:60:75:f4:7e:ab:2b:2b:07: 7f:7c:04:ac:c1:76:ef:42:f4:99:cd:a8:f4:b9:e0: d7:b6:d7:9c:14:a3:ab:9c:83:af:ce:9b:ac:09:a4: 89:f5:96:50:98:1c:18:20:8d:5b:44:13:98:3f:3b: 49:77:30:c3:96:93:bc:51:6d:94:91:48:2f:26:34: 73:2a:fc:79:1a:db:a9:52:52:56:d1:9f:89:3c:bc: df:14:8e:16:b2:f5:4a:e1:d7:4f:ec:27:58:d2:04: 9d:4a:77:cd:c4:b5:27:a1:62:60:70:26:b2:e6:c8: 87:57:98:7f:c9:b4:06:df:f4:2a:09:4f:d5:b2:d3: 5b:80:77:da:40:f5:b5:8e:24:60:2f:a7:91:e8:da: 44:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C5:BC:A2:5A:00:53:73:CB:6E:40:CC:4E:47:AB:1D:F7:9A:CC:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3becc9af-9630-3ef3-91f4-e75f4fa4a2d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.32.152.0/21 64.50.136.0/21 64.145.128.0/17 64.248.0.0/15 66.17.72.0/21 66.200.0.0/16 74.3.0.0/17 205.214.32.0/20 206.40.192.0/20 206.253.0.0/20 208.41.0.0/16 216.151.224.0/20 216.184.128.0/17 216.224.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:be:cb:f3:aa:52:3d:54:97:d0:c3:63:ef:9c:6e:0d:bd:97: de:7e:f1:33:e5:a2:e8:3b:27:c7:f3:e2:c1:4d:0d:fc:3f:70: c3:5d:89:35:87:b6:1d:1c:30:5f:bc:ed:c0:96:c6:b5:37:11: 4d:48:dd:ee:f7:bc:53:3f:f4:f0:3c:87:c9:54:e1:e7:94:b0: e8:97:d0:c0:c4:c8:5f:f1:a5:f0:c0:e8:1e:52:86:86:68:bc: 99:db:84:a9:9a:60:9e:94:b9:88:88:29:9d:ef:a6:a7:2f:fa: 14:75:d4:94:5b:44:ca:86:12:5b:50:54:02:77:5a:c2:1e:53: 1a:a1:67:04:12:9a:55:81:f6:15:20:e4:ab:03:08:97:5e:26: 2c:89:96:a2:0d:3b:21:4d:8a:b4:af:4a:79:ba:44:4d:d5:12: 95:98:e7:0c:d5:ae:9c:79:96:b7:6d:f9:79:57:97:05:cf:3c: 54:f5:1a:3f:d2:fd:7b:55:10:b2:0d:2c:64:fe:76:29:83:6b: 79:ed:f6:7f:e7:02:49:b0:a9:38:6e:4a:53:78:05:b4:4f:80: dd:26:e0:15:02:b5:86:b6:37:55:c9:dd:96:f5:c2:d4:f1:4f: 1a:34:ab:e3:57:d4:77:1f:05:70:45:01:67:83:3b:38:b6:9f: d7:74:0f:cf -----BEGIN CERTIFICATE----- MIIGjjCCBXagAwIBAgIUAQ0Mn0MoWE27oGvGuiiVdFk5aQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk OWI2ZmI5MmItZGNhMy00NDI5LTk3MTQtYjJlOWYzN2Q5M2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzE7qQn1pdb45uMWdBO2ANJ1a+0eEyKXqKAb VFK8DnjCjdGBJk+NstwDC4iDD6RjXtK7Rge+csW2bq15isALKtHV6iWbxPp1+aSH O4g3byteCdWmLpcmBRbCyVRypXlUxXhjPNdGZKlK1fA3sTO6YHX0fqsrKwd/fASs wXbvQvSZzaj0ueDXttecFKOrnIOvzpusCaSJ9ZZQmBwYII1bRBOYPztJdzDDlpO8 UW2UkUgvJjRzKvx5GtupUlJW0Z+JPLzfFI4WsvVK4ddP7CdY0gSdSnfNxLUnoWJg cCay5siHV5h/ybQG3/QqCU/VstNbgHfaQPW1jiRgL6eR6NpEMwIDAQABo4IDoDCC A5wwHQYDVR0OBBYEFI/FvKJaAFNzy25AzE5Hqx33mswhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2JlY2M5YWYtOTYzMC0z ZWYzLTkxZjQtZTc1ZjRmYTRhMmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMGoGCCsGAQUFBwEHAQH/BFswWTBXBAIAATBRAwQDQCCYAwQD QDKIAwQHQJGAAwMBQPgDBANCEUgDAwBCyAMEB0oDAAMEBM3WIAMEBM4owAMEBM79 AAMDANApAwQE2JfgAwQH2LiAAwQG2OAAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIS+y/OqUj1Ul9DDY++c bg29l95+8TPloug7J8fz4sFNDfw/cMNdiTWHth0cMF+87cCWxrU3EU1I3e73vFM/ 9PA8h8lU4eeUsOiX0MDEyF/xpfDA6B5ShoZovJnbhKmaYJ6UuYiIKZ3vpqcv+hR1 1JRbRMqGEltQVAJ3WsIeUxqhZwQSmlWB9hUg5KsDCJdeJiyJlqINOyFNirSvSnm6 RE3VEpWY5wzVrpx5lrdt+XlXlwXPPFT1Gj/S/XtVELINLGT+dimDa3nt9n/nAkmw qThuSlN4BbRPgN0m4BUCtYa2N1XJ3Zb1wtTxTxo0q+NX1HcfBXBFAWeDOzi2n9d0 D88= -----END CERTIFICATE-----Generated at Wed May 13 06:46:52 2026 by rpki-client