$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db9c9431-bdc9-398e-a3a7-400be9b10fa7.roa File: db9c9431-bdc9-398e-a3a7-400be9b10fa7.roa (raw, json) Hash identifier: rLs0D+RL3S/DkH8qtaL5xy2lOe5Kdjo2eZPfHMr15Yc= Subject key identifier: 24:2E:B6:D5:DC:FD:14:98:F3:1D:20:3D:2F:C6:11:2F:85:0A:7E:CC Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F3CE2978EF0EABCF3D554A180 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db9c9431-bdc9-398e-a3a7-400be9b10fa7.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 398465 IP address blocks: 64.32.152.0/21 maxlen: 24 64.50.136.0/21 maxlen: 24 64.145.128.0/18 maxlen: 24 64.145.192.0/18 maxlen: 24 64.248.0.0/18 maxlen: 24 64.248.64.0/18 maxlen: 24 64.248.128.0/18 maxlen: 24 64.248.192.0/18 maxlen: 24 64.249.0.0/18 maxlen: 24 64.249.64.0/18 maxlen: 24 64.249.128.0/18 maxlen: 24 64.249.192.0/18 maxlen: 24 66.17.72.0/21 maxlen: 24 66.200.0.0/18 maxlen: 24 66.200.64.0/18 maxlen: 24 66.200.128.0/18 maxlen: 24 66.200.192.0/18 maxlen: 24 74.3.0.0/18 maxlen: 24 74.3.64.0/18 maxlen: 24 205.214.32.0/20 maxlen: 24 206.40.192.0/20 maxlen: 24 206.253.0.0/20 maxlen: 24 208.41.0.0/18 maxlen: 24 208.41.64.0/18 maxlen: 24 208.41.128.0/18 maxlen: 24 208.41.192.0/18 maxlen: 24 216.151.224.0/20 maxlen: 24 216.184.128.0/18 maxlen: 24 216.184.192.0/18 maxlen: 24 216.224.0.0/19 maxlen: 24 216.224.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:97:8e:f0:ea:bc:f3:d5:54:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=440394cf-0142-4223-81ae-93c99596a326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2c:09:2f:8d:9e:79:5b:8d:89:17:c8:b6:3c: c8:7c:3c:2b:0d:47:f3:37:27:07:e7:50:79:35:5c: 48:48:06:e9:d6:ff:d0:dc:c3:d8:66:22:e4:1f:ae: 4c:29:36:38:bc:51:3a:50:f7:2a:05:f8:7c:8e:08: 60:d6:c8:bf:95:cd:39:60:21:01:91:d3:4e:8c:48: 23:1f:b6:87:c4:34:6f:21:5f:3b:9b:a3:72:2d:fc: bb:53:95:5c:6a:32:e8:22:cc:1e:46:00:7d:ff:d4: c4:fb:a9:ff:43:be:e2:a5:7e:15:6a:3d:70:d5:1d: f1:31:82:c5:5e:5a:5d:ba:4f:f8:b4:a9:a4:84:65: 90:2a:48:5b:66:cf:e4:1f:5f:c3:0f:7f:68:f4:08: 67:a8:ef:34:fd:25:d0:33:d6:6e:b4:33:cd:f8:bd: 98:2f:d1:99:2a:fb:d4:72:f3:ed:66:2e:3d:31:2e: 14:c1:fd:bd:68:3b:0c:19:23:ac:2f:a6:86:05:b6: 30:b1:a2:c4:32:c9:a7:50:ea:58:a3:cc:ba:69:69: e2:7d:1a:13:e2:e3:86:64:0c:ec:09:d0:3b:f1:e1: 02:6e:ce:97:af:fd:f0:0e:c6:f5:de:2e:a2:ce:68: 0a:cb:2b:66:50:cc:75:6e:3e:97:ee:ed:c6:1d:fa: 3c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2E:B6:D5:DC:FD:14:98:F3:1D:20:3D:2F:C6:11:2F:85:0A:7E:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db9c9431-bdc9-398e-a3a7-400be9b10fa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.32.152.0/21 64.50.136.0/21 64.145.128.0/17 64.248.0.0/15 66.17.72.0/21 66.200.0.0/16 74.3.0.0/17 205.214.32.0/20 206.40.192.0/20 206.253.0.0/20 208.41.0.0/16 216.151.224.0/20 216.184.128.0/17 216.224.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:5e:5d:94:7d:02:eb:70:c4:b2:4e:9a:13:a9:6d:b8:b3:be: 7e:d6:f7:fd:53:2b:47:bc:69:47:78:50:1c:20:b6:68:6f:f8: 44:0f:38:23:4e:c7:7c:cb:df:9e:22:70:98:4c:b5:06:21:c4: fb:73:65:48:49:62:d1:32:74:65:99:ec:f0:0f:82:56:11:9c: 8b:36:d3:3f:b3:e8:ce:ce:cd:3a:03:0d:2b:2a:50:9d:19:c3: ee:32:3e:db:44:5c:a0:b0:cf:6f:27:d9:65:0f:17:7a:2d:7d: 95:ef:84:fd:a4:5b:2b:22:ea:a1:70:f1:d0:f4:f9:2f:96:f5: 86:7b:b2:23:1b:be:ce:10:e8:de:d7:15:81:63:85:17:4c:65: 41:23:fa:9b:c7:94:d2:52:ea:3c:5f:d0:e5:e5:83:09:93:3e: 69:e8:86:54:d6:34:ae:68:4f:da:9e:1b:80:53:74:ce:4e:03: 38:13:b1:89:bb:3e:9c:aa:14:8b:df:cc:03:52:2a:03:fd:ce: 9a:aa:47:38:64:da:ef:b2:5c:22:a8:02:e7:78:c2:f1:78:50: 60:cd:e4:2d:2f:ec:fa:18:1a:f8:41:2a:d1:fa:09:dc:0a:4e: b7:f4:7e:a9:ca:6e:da:50:bf:d9:30:52:09:82:93:91:47:e5: 5c:8c:1f:ab -----BEGIN CERTIFICATE----- MIIGjjCCBXagAwIBAgIUAQ0Mn0MoWE884peO8Oq889VUoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk NDQwMzk0Y2YtMDE0Mi00MjIzLTgxYWUtOTNjOTk1OTZhMzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjywJL42eeVuNiRfItjzIfDwrDUfzNycH51B5 NVxISAbp1v/Q3MPYZiLkH65MKTY4vFE6UPcqBfh8jghg1si/lc05YCEBkdNOjEgj H7aHxDRvIV87m6NyLfy7U5VcajLoIsweRgB9/9TE+6n/Q77ipX4Vaj1w1R3xMYLF Xlpduk/4tKmkhGWQKkhbZs/kH1/DD39o9AhnqO80/SXQM9ZutDPN+L2YL9GZKvvU cvPtZi49MS4Uwf29aDsMGSOsL6aGBbYwsaLEMsmnUOpYo8y6aWnifRoT4uOGZAzs CdA78eECbs6Xr/3wDsb13i6izmgKyytmUMx1bj6X7u3GHfo89QIDAQABo4IDoDCC A5wwHQYDVR0OBBYEFCQuttXc/RSY8x0gPS/GES+FCn7MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGI5Yzk0MzEtYmRjOS0z OThlLWEzYTctNDAwYmU5YjEwZmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMGoGCCsGAQUFBwEHAQH/BFswWTBXBAIAATBRAwQDQCCYAwQD QDKIAwQHQJGAAwMBQPgDBANCEUgDAwBCyAMEB0oDAAMEBM3WIAMEBM4owAMEBM79 AAMDANApAwQE2JfgAwQH2LiAAwQG2OAAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAK9eXZR9AutwxLJOmhOp bbizvn7W9/1TK0e8aUd4UBwgtmhv+EQPOCNOx3zL354icJhMtQYhxPtzZUhJYtEy dGWZ7PAPglYRnIs20z+z6M7OzToDDSsqUJ0Zw+4yPttEXKCwz28n2WUPF3otfZXv hP2kWysi6qFw8dD0+S+W9YZ7siMbvs4Q6N7XFYFjhRdMZUEj+pvHlNJS6jxf0OXl gwmTPmnohlTWNK5oT9qeG4BTdM5OAzgTsYm7PpyqFIvfzANSKgP9zpqqRzhk2u+y XCKoAud4wvF4UGDN5C0v7PoYGvhBKtH6CdwKTrf0fqnKbtpQv9kwUgmCk5FH5VyM H6s= -----END CERTIFICATE-----Generated at Sat Sep 26 11:44:36 2026 by rpki-client