$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ca9a3434-f72e-3e09-be08-44aac685811b.roa File: ca9a3434-f72e-3e09-be08-44aac685811b.roa (raw, json) Hash identifier: sg0XaJW4TDVqGYGZqGkLpZFqgdL6tVnCTjCqyJHvJZo= Subject key identifier: 83:01:A0:56:54:B5:6F:D8:D8:41:FF:CB:45:9F:9E:13:3C:70:DD:D1 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F0AA2240B80F5621F4FAA3E80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ca9a3434-f72e-3e09-be08-44aac685811b.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 2914 IP address blocks: 64.32.149.0/24 maxlen: 24 64.32.163.0/24 maxlen: 24 64.32.179.0/24 maxlen: 24 64.32.191.0/24 maxlen: 24 207.168.26.0/24 maxlen: 24 207.168.53.0/24 maxlen: 24 207.168.54.0/24 maxlen: 24 207.168.55.0/24 maxlen: 24 207.168.60.0/24 maxlen: 24 207.168.91.0/24 maxlen: 24 209.166.40.0/24 maxlen: 24 209.166.41.0/24 maxlen: 24 209.166.42.0/24 maxlen: 24 209.166.43.0/24 maxlen: 24 209.166.44.0/24 maxlen: 24 209.166.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:24:0b:80:f5:62:1f:4f:aa:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=2b949e52-f9f5-478d-8b66-3fbead1ebca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a8:48:1c:76:a9:f9:a7:51:0e:d0:9e:a3:c1: 57:7e:ea:d0:73:ee:4b:95:66:5f:4f:a4:4d:47:52: d5:a9:32:8a:aa:b6:83:c8:2b:c1:ab:53:c3:a6:63: ce:47:a9:63:06:6a:ba:2d:1f:75:6a:6a:13:ea:3c: 7c:23:ba:ee:00:a3:d0:17:07:08:33:78:0d:6f:82: 6b:cc:0d:c0:78:91:db:fd:79:e3:65:2b:f3:d1:5e: 2f:9d:df:14:06:c1:3c:74:c7:77:af:37:45:89:cf: a6:ff:97:95:42:a8:9d:17:13:5b:e6:ca:32:18:28: 20:cb:57:13:68:43:ba:1f:1f:fb:15:4d:4d:c5:6b: 16:3b:5e:46:f0:17:b8:4c:8f:72:45:78:10:f4:53: 5e:5f:5e:d2:63:32:5c:b8:58:6e:e9:21:53:97:7b: e2:bd:17:b2:6a:be:d0:8c:c7:ae:0f:76:d8:b7:14: 6d:27:fa:70:55:84:06:91:a7:27:c5:a6:b5:25:9c: 58:86:12:fd:99:15:18:74:db:57:b4:c9:55:9a:b3: 54:da:51:0f:6d:da:8b:d5:fc:94:3b:e1:34:cb:de: 61:fa:d2:e9:11:e7:7a:0b:bc:36:a5:23:6f:14:aa: 75:7d:f1:23:09:78:81:f0:7e:37:f4:88:79:98:ae: 7c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:01:A0:56:54:B5:6F:D8:D8:41:FF:CB:45:9F:9E:13:3C:70:DD:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ca9a3434-f72e-3e09-be08-44aac685811b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.32.149.0/24 64.32.163.0/24 64.32.179.0/24 64.32.191.0/24 207.168.26.0/24 207.168.53.0-207.168.55.255 207.168.60.0/24 207.168.91.0/24 209.166.40.0-209.166.45.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:91:f1:43:c4:c8:4a:d9:a5:16:40:20:67:6d:e3:79:1f:3c: 72:1a:b0:53:c7:e7:e3:23:4a:05:45:61:77:09:27:79:90:32: 6c:de:db:8a:02:c1:75:e2:f1:f3:00:2c:5d:43:33:be:79:e0: 98:21:e3:3e:0d:e9:8c:b4:3b:fe:0c:78:bb:91:b9:12:4a:56: a9:39:08:af:74:15:36:ca:82:d3:db:37:16:c0:af:ef:88:4f: a7:24:4a:90:91:5a:89:d1:40:6c:67:81:2f:53:33:15:34:09: 93:09:d1:9b:98:e9:3a:5e:93:2c:aa:9e:94:d8:05:61:4c:22: 21:d8:a1:89:22:e5:be:66:7e:2d:be:97:fd:c1:d7:48:74:fc: 0b:02:61:25:31:29:a1:37:6d:b8:34:1c:2e:7a:88:3c:c8:32: 09:b4:7a:7f:b7:03:ef:b0:09:4d:21:49:48:4e:f0:12:ee:9d: fd:2f:f1:8e:27:bd:61:f6:a6:f4:47:29:6b:d0:c3:76:d3:6c: 42:e4:29:48:62:c7:e8:c6:a5:12:aa:4d:ed:c1:64:d7:58:4e: 42:ec:9f:28:73:a2:88:17:cb:6f:24:46:3e:25:ea:12:96:25: ae:5c:4f:19:ec:a6:88:dc:f7:dd:f4:b8:5d:6f:ff:8c:39:17: d3:9b:35:43 -----BEGIN CERTIFICATE----- MIIGgzCCBWugAwIBAgIUAQ0Mn0MoWE8KoiQLgPViH0+qPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk MmI5NDllNTItZjlmNS00NzhkLThiNjYtM2ZiZWFkMWViY2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqhIHHap+adRDtCeo8FXfurQc+5LlWZfT6RN R1LVqTKKqraDyCvBq1PDpmPOR6ljBmq6LR91amoT6jx8I7ruAKPQFwcIM3gNb4Jr zA3AeJHb/XnjZSvz0V4vnd8UBsE8dMd3rzdFic+m/5eVQqidFxNb5soyGCggy1cT aEO6Hx/7FU1NxWsWO15G8Be4TI9yRXgQ9FNeX17SYzJcuFhu6SFTl3vivReyar7Q jMeuD3bYtxRtJ/pwVYQGkacnxaa1JZxYhhL9mRUYdNtXtMlVmrNU2lEPbdqL1fyU O+E0y95h+tLpEed6C7w2pSNvFKp1ffEjCXiB8H439Ih5mK584wIDAQABo4IDlTCC A5EwHQYDVR0OBBYEFIMBoFZUtW/Y2EH/y0WfnhM8cN3RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2E5YTM0MzQtZjcyZS0z ZTA5LWJlMDgtNDRhYWM2ODU4MTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQAQCCVAwQA QCCjAwQAQCCzAwQAQCC/AwQAz6gaMAwDBADPqDUDBAPPqDADBADPqDwDBADPqFsw DAMEA9GmKAMEAdGmLDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCEkfFDxMhK2aUWQCBnbeN5HzxyGrBTx+fj I0oFRWF3CSd5kDJs3tuKAsF14vHzACxdQzO+eeCYIeM+DemMtDv+DHi7kbkSSlap OQivdBU2yoLT2zcWwK/viE+nJEqQkVqJ0UBsZ4EvUzMVNAmTCdGbmOk6XpMsqp6U 2AVhTCIh2KGJIuW+Zn4tvpf9wddIdPwLAmElMSmhN224NBwueog8yDIJtHp/twPv sAlNIUlITvAS7p39L/GOJ71h9qb0Rylr0MN202xC5ClIYsfoxqUSqk3twWTXWE5C 7J8oc6KIF8tvJEY+JeoSliWuXE8Z7KaI3Pfd9Lhdb/+MORfTmzVD -----END CERTIFICATE-----Generated at Sat Oct 10 16:17:54 2026 by rpki-client