$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa File: 2f73330e-1532-3517-a51f-dc46cb11c22c.roa (raw, json) Hash identifier: MIFegQJANVHqoePT2iiTk2HxVFkEEzh0a7QIrWnQ25k= Subject key identifier: FE:C2:E4:A5:B4:E1:66:07:30:8F:5B:00:87:AC:A2:9F:C6:92:45:4D Certificate issuer: /CN=028c0596-c3dd-44df-9761-677e68794c69 Certificate serial: 010D0C9F4328584E2AD4557702C23942D6844280 Authority key identifier: D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa Signing time: Sun 14 Jun 2026 09:00:11 +0000 ROA not before: Sun 14 Jun 2026 09:00:11 +0000 ROA not after: Sat 12 Sep 2026 09:00:11 +0000 asID: 14371 IP address blocks: 65.18.204.0/22 maxlen: 24 66.171.40.0/21 maxlen: 24 68.235.64.0/18 maxlen: 24 104.219.196.0/22 maxlen: 24 162.254.64.0/22 maxlen: 24 205.149.144.0/20 maxlen: 24 206.223.125.0/24 maxlen: 24 208.77.24.0/22 maxlen: 24 209.191.192.0/19 maxlen: 24 2001:504:29::/48 maxlen: 48 2600:6400::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2a:d4:55:77:02:c2:39:42:d6:84:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028c0596-c3dd-44df-9761-677e68794c69 Validity Not Before: Jun 14 09:00:11 2026 GMT Not After : Sep 12 09:00:11 2026 GMT Subject: CN=8a1b47e9-6452-4ff2-a0fb-394b436182a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:20:42:22:bc:cc:54:6f:49:83:d6:10:9f:93: 5a:51:64:6f:15:04:c9:ed:55:6a:ca:53:13:46:d4: 05:e9:3d:a1:f4:ae:58:06:b3:ea:3d:17:61:20:39: 5e:c7:65:5b:ac:2d:08:50:9d:c3:2f:ed:79:34:f3: a2:8c:80:50:58:a0:66:1f:f9:b4:ab:11:b8:8f:53: ff:93:d8:b9:30:47:12:9c:2d:32:92:4d:68:cf:53: b2:ab:32:28:b6:d6:25:98:f5:b6:fe:39:21:48:33: 99:d2:bf:0b:f6:3d:de:af:bc:11:fc:cc:3b:d1:8a: 95:2c:db:1e:4a:07:8d:f9:d6:fa:55:5e:1d:e4:70: fe:84:a0:8f:86:12:0c:07:79:a1:7b:94:2d:13:52: 2b:c6:23:1e:7f:82:bb:f3:3d:7a:95:88:08:86:25: c0:7e:18:42:35:25:4e:ea:4e:f1:c8:07:14:d4:19: d5:9c:cc:b0:ba:dc:c4:4f:9c:99:06:c3:17:7e:5e: 7b:ef:9f:ee:77:12:97:e4:3b:25:a1:18:e2:a6:35: 66:d3:3c:db:b7:03:68:05:29:1d:d2:13:43:53:26: fa:db:50:d7:5f:fd:14:16:26:e0:9e:fa:5b:42:ce: 18:bc:8b:e8:12:f6:f7:9a:8a:27:30:d2:1b:33:0e: 10:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C2:E4:A5:B4:E1:66:07:30:8F:5B:00:87:AC:A2:9F:C6:92:45:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.crl X509v3 Authority Key Identifier: keyid:D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer sbgp-ipAddrBlock: critical IPv4: 65.18.204.0/22 66.171.40.0/21 68.235.64.0/18 104.219.196.0/22 162.254.64.0/22 205.149.144.0/20 206.223.125.0/24 208.77.24.0/22 209.191.192.0/19 IPv6: 2001:504:29::/48 2600:6400::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:e4:de:bf:52:9b:f2:f0:85:db:2a:3d:50:3a:67:ee:d8:6c: 4e:d8:28:3b:b4:74:32:f6:f1:5b:1e:8d:a2:cf:9e:4a:20:c1: 4a:e0:53:51:fd:41:f6:6f:bb:12:92:d9:1a:a6:6d:13:37:c9: 36:ec:01:a2:1a:a7:57:b0:bd:a1:f3:7d:33:94:5c:18:f7:a9: 6e:79:82:65:97:13:a6:35:d8:02:09:ea:1d:ad:dd:55:bb:2e: 8d:fd:dc:42:12:12:55:26:40:4d:d0:70:2a:6f:73:e4:70:5e: be:3c:76:df:14:fc:9f:ba:1f:bf:02:2c:c1:1d:33:d3:4f:67: 83:1c:11:04:eb:17:2e:9e:0f:7b:ca:95:fa:ac:73:e5:01:ae: 86:a4:46:f2:e3:45:11:09:a3:4e:eb:39:ef:3e:e3:e2:9e:a4: aa:af:91:34:a3:53:2a:e5:98:fa:6c:ce:98:4b:2e:54:89:a2: 4e:3a:64:21:51:8c:d4:34:de:70:64:05:89:2d:10:5d:a6:6b: 3e:b9:bf:85:82:56:79:14:54:bb:b7:02:95:b7:ee:4c:51:f1: da:e5:11:99:8d:c6:b7:1c:ab:3c:d0:a3:f2:0e:48:f9:03:08: e8:78:d7:7d:81:7c:81:71:71:17:9e:88:8a:40:68:c1:b9:a1: 2d:8d:d7:45 -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWE4q1FV3AsI5QtaEQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI4YzA1OTYtYzNkZC00NGRmLTk3NjEtNjc3ZTY4Nzk0 YzY5MB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk OGExYjQ3ZTktNjQ1Mi00ZmYyLWEwZmItMzk0YjQzNjE4MmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iBCIrzMVG9Jg9YQn5NaUWRvFQTJ7VVqylMT RtQF6T2h9K5YBrPqPRdhIDlex2VbrC0IUJ3DL+15NPOijIBQWKBmH/m0qxG4j1P/ k9i5MEcSnC0ykk1oz1OyqzIottYlmPW2/jkhSDOZ0r8L9j3er7wR/Mw70YqVLNse SgeN+db6VV4d5HD+hKCPhhIMB3mhe5QtE1IrxiMef4K78z16lYgIhiXAfhhCNSVO 6k7xyAcU1BnVnMywutzET5yZBsMXfl5775/udxKX5DsloRjipjVm0zzbtwNoBSkd 0hNDUyb621DXX/0UFibgnvpbQs4YvIvoEvb3moonMNIbMw4QLQIDAQABo4IDnTCC A5kwHQYDVR0OBBYEFP7C5KW04WYHMI9bAIesop/GkkVNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMjhj MDU5Ni1jM2RkLTQ0ZGYtOTc2MS02NzdlNjg3OTRjNjkvMmY3MzMzMGUtMTUzMi0z NTE3LWE1MWYtZGM0NmNiMTFjMjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDI4YzA1OTYtYzNkZC00NGRmLTk3 NjEtNjc3ZTY4Nzk0YzY5LzAyOGMwNTk2LWMzZGQtNDRkZi05NzYxLTY3N2U2ODc5 NGM2OS5jcmwwHwYDVR0jBBgwFoAU13vNAHAryYoSeo0O6DqODdIIi7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMjhjMDU5Ni1jM2RkLTQ0ZGYtOTc2MS02Nzdl Njg3OTRjNjkuY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjA8BAIAATA2AwQCQRLMAwQD QqsoAwQGROtAAwQCaNvEAwQCov5AAwQEzZWQAwQAzt99AwQC0E0YAwQF0b/AMBYE AgACMBADBwAgAQUEACkDBQQmAGQAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMDk3r9Sm/LwhdsqPVA6Z+7Y bE7YKDu0dDL28VsejaLPnkogwUrgU1H9QfZvuxKS2RqmbRM3yTbsAaIap1ewvaHz fTOUXBj3qW55gmWXE6Y12AIJ6h2t3VW7Lo393EISElUmQE3QcCpvc+RwXr48dt8U /J+6H78CLMEdM9NPZ4McEQTrFy6eD3vKlfqsc+UBroakRvLjRREJo07rOe8+4+Ke pKqvkTSjUyrlmPpszphLLlSJok46ZCFRjNQ03nBkBYktEF2maz65v4WCVnkUVLu3 ApW37kxR8drlEZmNxrccqzzQo/IOSPkDCOh4132BfIFxcReeiIpAaMG5oS2N10U= -----END CERTIFICATE-----Generated at Fri Jul 24 11:46:10 2026 by rpki-client