$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db9c9431-bdc9-398e-a3a7-400be9b10fa7.roa File: db9c9431-bdc9-398e-a3a7-400be9b10fa7.roa (raw, json) Hash identifier: qn/Ke+Kau0kWH05Chu12gaF172k2BJ+av8B/g5wKFk4= Subject key identifier: F5:7E:C3:63:C9:0A:83:89:52:EB:9C:C2:54:D3:C8:CD:FA:8C:C8:6C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584DBA3AF64C6DCC5601BE2884E0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db9c9431-bdc9-398e-a3a7-400be9b10fa7.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 398465 IP address blocks: 64.32.152.0/21 maxlen: 24 64.50.136.0/21 maxlen: 24 64.145.128.0/18 maxlen: 24 64.145.192.0/18 maxlen: 24 64.248.0.0/18 maxlen: 24 64.248.64.0/18 maxlen: 24 64.248.128.0/18 maxlen: 24 64.248.192.0/18 maxlen: 24 64.249.0.0/18 maxlen: 24 64.249.64.0/18 maxlen: 24 64.249.128.0/18 maxlen: 24 64.249.192.0/18 maxlen: 24 66.17.72.0/21 maxlen: 24 66.200.0.0/18 maxlen: 24 66.200.64.0/18 maxlen: 24 66.200.128.0/18 maxlen: 24 66.200.192.0/18 maxlen: 24 74.3.0.0/18 maxlen: 24 74.3.64.0/18 maxlen: 24 205.214.32.0/20 maxlen: 24 206.40.192.0/20 maxlen: 24 206.253.0.0/20 maxlen: 24 208.41.0.0/18 maxlen: 24 208.41.64.0/18 maxlen: 24 208.41.128.0/18 maxlen: 24 208.41.192.0/18 maxlen: 24 216.151.224.0/20 maxlen: 24 216.184.128.0/18 maxlen: 24 216.184.192.0/18 maxlen: 24 216.224.0.0/19 maxlen: 24 216.224.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3a:f6:4c:6d:cc:56:01:be:28:84:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=00d2ad9d-1d3c-45cb-bf5f-c7febbf0d6e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:40:bb:5b:d1:dc:52:70:8e:5b:39:50:49:34: e1:c4:6e:93:13:6e:5d:09:3a:e3:d5:15:87:2c:31: bf:9c:fc:ee:b7:b5:39:30:23:a6:a4:ba:63:66:02: 1f:13:89:78:24:f6:15:f5:73:71:52:5d:37:ed:49: ff:41:f2:49:58:3e:44:c7:28:59:bc:2a:85:6d:ed: 92:2a:f3:e3:7f:9d:47:9d:0e:71:9a:5e:82:72:19: e3:e4:e8:5e:c6:24:7a:27:47:78:c7:ce:25:fd:59: 6c:08:8a:d0:d9:9a:10:8e:80:e0:f9:a3:04:8d:15: 50:00:be:1b:27:e7:2b:9c:73:f6:90:94:91:bd:fd: 36:93:c0:1b:3b:b7:89:60:09:47:0a:ef:5a:e0:cf: 2e:70:2b:90:a8:70:80:a4:3a:12:c1:bb:39:86:07: af:7e:a3:61:bd:16:23:74:ec:8f:11:9f:6b:01:74: 46:61:5b:f9:24:b1:a2:93:0f:1b:8c:8f:a8:b8:7f: 45:0f:fd:ce:8f:2c:6a:23:b0:07:36:b8:34:ba:03: f9:dd:4f:fb:aa:01:6e:11:5f:cd:62:03:19:ee:63: 6e:7b:e8:a8:2e:dc:04:c0:6a:a4:e9:9d:89:10:43: ed:4d:7a:a6:9f:54:56:e1:69:29:ab:ee:78:be:6c: 07:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7E:C3:63:C9:0A:83:89:52:EB:9C:C2:54:D3:C8:CD:FA:8C:C8:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db9c9431-bdc9-398e-a3a7-400be9b10fa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.32.152.0/21 64.50.136.0/21 64.145.128.0/17 64.248.0.0/15 66.17.72.0/21 66.200.0.0/16 74.3.0.0/17 205.214.32.0/20 206.40.192.0/20 206.253.0.0/20 208.41.0.0/16 216.151.224.0/20 216.184.128.0/17 216.224.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:d7:76:a4:de:ba:af:49:75:c5:9e:4d:e3:19:94:36:e4:c2: 18:31:88:73:9c:9d:5e:f2:a1:00:f2:99:a7:0b:d5:8b:72:bd: 75:6b:c0:5f:3d:c5:45:39:6b:70:19:b8:5f:89:b4:47:6f:41: ea:d3:0c:58:cd:22:80:89:bc:80:a0:a0:49:cd:c7:5b:cc:90: aa:23:bb:9b:2b:cb:13:9d:c7:bb:6f:59:25:c8:e5:0e:ea:2b: 59:fa:e9:e4:ac:5f:1e:3b:ba:1a:e4:f3:f5:06:3e:d3:a8:f6: db:c5:5b:a6:44:98:91:15:90:e1:82:93:57:04:24:17:41:75: 55:bf:18:5e:29:ca:a4:53:ec:3a:50:fc:8e:9f:29:39:f0:e1: 39:27:94:05:10:e5:73:43:12:4b:17:d3:b5:5f:6c:46:b1:8e: 8d:f3:b4:3f:5a:3d:94:1f:4e:ae:70:c7:ae:be:82:7e:f6:be: 3b:f4:f2:bd:f7:4a:99:1c:84:d2:d4:e5:2a:ea:64:c7:f4:c7: a0:31:2f:84:a4:a7:6e:79:cf:74:7d:38:bf:54:cb:92:2e:68: 4c:cc:65:6b:5b:79:be:3a:a4:b4:59:c8:30:1e:19:3e:ff:55: d4:95:02:53:a4:9e:7a:94:c7:49:c0:44:4c:f7:8a:b4:a2:39: 96:8b:64:15 -----BEGIN CERTIFICATE----- MIIGjjCCBXagAwIBAgIUAQ0Mn0MoWE26OvZMbcxWAb4ohOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk MDBkMmFkOWQtMWQzYy00NWNiLWJmNWYtYzdmZWJiZjBkNmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0C7W9HcUnCOWzlQSTThxG6TE25dCTrj1RWH LDG/nPzut7U5MCOmpLpjZgIfE4l4JPYV9XNxUl037Un/QfJJWD5ExyhZvCqFbe2S KvPjf51HnQ5xml6Cchnj5OhexiR6J0d4x84l/VlsCIrQ2ZoQjoDg+aMEjRVQAL4b J+crnHP2kJSRvf02k8AbO7eJYAlHCu9a4M8ucCuQqHCApDoSwbs5hgevfqNhvRYj dOyPEZ9rAXRGYVv5JLGikw8bjI+ouH9FD/3OjyxqI7AHNrg0ugP53U/7qgFuEV/N YgMZ7mNue+ioLtwEwGqk6Z2JEEPtTXqmn1RW4Wkpq+54vmwHywIDAQABo4IDoDCC A5wwHQYDVR0OBBYEFPV+w2PJCoOJUuucwlTTyM36jMhsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGI5Yzk0MzEtYmRjOS0z OThlLWEzYTctNDAwYmU5YjEwZmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMGoGCCsGAQUFBwEHAQH/BFswWTBXBAIAATBRAwQDQCCYAwQD QDKIAwQHQJGAAwMBQPgDBANCEUgDAwBCyAMEB0oDAAMEBM3WIAMEBM4owAMEBM79 AAMDANApAwQE2JfgAwQH2LiAAwQG2OAAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALfXdqTeuq9JdcWeTeMZ lDbkwhgxiHOcnV7yoQDymacL1YtyvXVrwF89xUU5a3AZuF+JtEdvQerTDFjNIoCJ vICgoEnNx1vMkKoju5sryxOdx7tvWSXI5Q7qK1n66eSsXx47uhrk8/UGPtOo9tvF W6ZEmJEVkOGCk1cEJBdBdVW/GF4pyqRT7DpQ/I6fKTnw4TknlAUQ5XNDEksX07Vf bEaxjo3ztD9aPZQfTq5wx66+gn72vjv08r33SpkchNLU5SrqZMf0x6AxL4Skp255 z3R9OL9Uy5IuaEzMZWtbeb46pLRZyDAeGT7/VdSVAlOknnqUx0nAREz3irSiOZaL ZBU= -----END CERTIFICATE-----Generated at Wed May 13 12:27:11 2026 by rpki-client