$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3fe2a65a-7945-30f6-8525-be5e0e78cd0f.roa File: 3fe2a65a-7945-30f6-8525-be5e0e78cd0f.roa (raw, json) Hash identifier: wzOG5pZHNxXycyZoFOGXizjEbDtzD/pkY2OfoIs6Hqc= Subject key identifier: 7A:F3:98:C5:B0:8D:F6:04:57:2F:F0:12:2B:B9:47:E7:1F:C3:01:14 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D237A5CEA78947B0283AF2BC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3fe2a65a-7945-30f6-8525-be5e0e78cd0f.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 20001 IP address blocks: 74.82.112.0/20 maxlen: 24 74.211.128.0/18 maxlen: 24 74.211.192.0/19 maxlen: 24 74.211.224.0/21 maxlen: 24 74.211.240.0/20 maxlen: 24 155.229.8.0/21 maxlen: 24 155.229.24.0/21 maxlen: 24 155.229.32.0/20 maxlen: 24 155.229.56.0/21 maxlen: 24 155.229.64.0/21 maxlen: 24 155.229.104.0/21 maxlen: 24 155.229.112.0/20 maxlen: 24 155.229.224.0/20 maxlen: 24 205.179.128.0/18 maxlen: 24 205.179.192.0/20 maxlen: 24 205.179.224.0/20 maxlen: 24 206.135.128.0/20 maxlen: 24 206.135.192.0/19 maxlen: 24 206.217.104.0/21 maxlen: 24 206.217.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:5c:ea:78:94:7b:02:83:af:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=0ef10e8f-1f3a-43e6-b9bf-5838697e3338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fd:af:e4:bc:88:6e:9c:33:9c:48:e3:4d:5f: 42:e8:f0:68:f0:f4:9d:30:2b:67:c2:de:3f:94:c1: 59:cc:73:b8:20:4a:2e:dd:65:b9:c5:25:43:44:35: c0:85:ec:5a:58:ab:c3:b9:7c:27:34:e5:c4:a5:b6: 19:6c:59:83:9e:02:1b:51:98:0c:2e:fc:1b:0f:9b: 4c:85:c4:f0:68:dd:66:b4:b2:c0:69:01:93:07:36: 41:fb:83:bd:f6:d3:bf:cc:cd:51:02:e8:d6:18:c9: 9b:b9:df:a3:8d:cd:41:57:dd:c4:0a:64:44:3a:2d: 4e:c6:5b:3a:ba:3a:8d:8c:29:a6:73:7c:51:e0:f8: 33:5e:29:8e:94:f8:84:a9:65:b6:62:49:c7:3b:2a: ce:43:e9:14:dc:85:b3:3d:ea:06:84:f8:2d:57:69: 4b:0c:96:d6:18:19:95:2d:7d:20:a2:f3:c8:fe:3e: 2c:48:33:b4:41:6e:f7:65:9b:d1:69:55:55:a0:fe: 75:79:af:f3:58:7f:29:43:6c:5b:04:87:41:fb:82: d3:4e:12:46:45:c6:44:94:b7:e1:74:3c:94:e6:cb: db:26:43:81:7d:72:44:d3:eb:ed:2b:f8:b8:ad:20: ab:7d:ca:1a:ac:45:12:9c:72:e4:f6:55:8b:28:8a: ec:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F3:98:C5:B0:8D:F6:04:57:2F:F0:12:2B:B9:47:E7:1F:C3:01:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3fe2a65a-7945-30f6-8525-be5e0e78cd0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 74.82.112.0/20 74.211.128.0-74.211.231.255 74.211.240.0/20 155.229.8.0/21 155.229.24.0-155.229.47.255 155.229.56.0-155.229.71.255 155.229.104.0-155.229.127.255 155.229.224.0/20 205.179.128.0-205.179.207.255 205.179.224.0/20 206.135.128.0/20 206.135.192.0/19 206.217.104.0-206.217.127.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:01:1c:32:19:55:3e:d7:31:28:6e:07:0e:39:3a:bf:7f:55: d8:2c:c7:52:26:4d:13:36:97:b8:ba:a5:62:12:4f:ba:5d:7f: 5c:34:35:59:ec:5a:fb:57:64:fb:a5:24:d6:c2:07:19:84:b7: bd:60:d6:4c:91:c2:83:ce:63:d3:8d:43:1a:aa:4b:62:6e:c5: ee:47:b5:08:ef:9a:71:45:70:de:b2:b1:5f:52:d0:c8:de:a9: 4f:fb:23:d0:86:28:49:36:51:a6:1e:af:b7:16:ee:de:e3:7a: a8:15:f5:cf:0f:81:35:f4:0f:a9:16:53:f8:83:d6:42:ee:7d: f5:38:c3:f2:70:f8:9d:89:b6:dd:3c:aa:a7:6c:f4:56:d6:9c: 18:99:ef:cc:3a:76:a4:67:b7:3a:42:44:11:b5:6d:ea:e6:43: cb:a5:75:f6:81:ad:38:60:35:eb:07:c2:31:0d:96:1b:ea:25: e7:a6:0d:9b:c5:96:bb:48:cb:b5:1a:31:80:e4:5e:55:5b:ee: 56:42:5c:7e:b6:2d:e5:f9:b6:71:77:1d:a0:d9:2b:f5:e0:17: 96:c9:8c:24:99:f6:e7:33:b6:6f:fc:97:a0:e4:a7:10:af:e1: 61:71:b8:0c:89:a1:d1:c2:28:d3:05:5a:47:f7:72:f1:2a:e7: 50:5d:cb:22 -----BEGIN CERTIFICATE----- MIIGvzCCBaegAwIBAgIUAQ0Mn0MoWE0jelzqeJR7AoOvK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MGVmMTBlOGYtMWYzYS00M2U2LWI5YmYtNTgzODY5N2UzMzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/2v5LyIbpwznEjjTV9C6PBo8PSdMCtnwt4/ lMFZzHO4IEou3WW5xSVDRDXAhexaWKvDuXwnNOXEpbYZbFmDngIbUZgMLvwbD5tM hcTwaN1mtLLAaQGTBzZB+4O99tO/zM1RAujWGMmbud+jjc1BV93ECmREOi1Oxls6 ujqNjCmmc3xR4PgzXimOlPiEqWW2YknHOyrOQ+kU3IWzPeoGhPgtV2lLDJbWGBmV LX0govPI/j4sSDO0QW73ZZvRaVVVoP51ea/zWH8pQ2xbBIdB+4LTThJGRcZElLfh dDyU5svbJkOBfXJE0+vtK/i4rSCrfcoarEUSnHLk9lWLKIrsSQIDAQABo4ID0TCC A80wHQYDVR0OBBYEFHrzmMWwjfYEVy/wEiu5R+cfwwEUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2ZlMmE2NWEtNzk0NS0z MGY2LTg1MjUtYmU1ZTBlNzhjZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEBEpS cDAMAwQHStOAAwQDStPgAwQEStPwAwQDm+UIMAwDBAOb5RgDBASb5SAwDAMEA5vl OAMEA5vlQDAMAwQDm+VoAwQHm+UAAwQEm+XgMAwDBAfNs4ADBATNs8ADBATNs+AD BATOh4ADBAXOh8AwDAMEA87ZaAMEB87ZADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqARwyGVU+1zEobgcO OTq/f1XYLMdSJk0TNpe4uqViEk+6XX9cNDVZ7Fr7V2T7pSTWwgcZhLe9YNZMkcKD zmPTjUMaqktibsXuR7UI75pxRXDesrFfUtDI3qlP+yPQhihJNlGmHq+3Fu7e43qo FfXPD4E19A+pFlP4g9ZC7n31OMPycPidibbdPKqnbPRW1pwYme/MOnakZ7c6QkQR tW3q5kPLpXX2ga04YDXrB8IxDZYb6iXnpg2bxZa7SMu1GjGA5F5VW+5WQlx+ti3l +bZxdx2g2Sv14BeWyYwkmfbnM7Zv/Jeg5KcQr+FhcbgMiaHRwijTBVpH93LxKudQ Xcsi -----END CERTIFICATE-----Generated at Thu Mar 26 18:50:03 2026 by rpki-client