$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/5e890693-6aca-3d03-a030-fd3266100d15.roa File: 5e890693-6aca-3d03-a030-fd3266100d15.roa (raw, json) Hash identifier: FjdKnvxlocLCOrGdT+UxPQDLaM9BBZjXeiyCFG4dpM8= Subject key identifier: 57:E0:F1:73:B7:70:9A:3C:8F:84:28:30:4C:65:BA:15:22:CC:D7:3C Certificate issuer: /CN=06bf1e4f-42a6-423f-8cc1-b96d41424679 Certificate serial: 010D0C9F4328584D44FA331899A29ECA2E07A980 Authority key identifier: D6:19:A9:4B:85:78:DD:AA:32:4C:72:65:44:61:07:20:7C:21:AE:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/5e890693-6aca-3d03-a030-fd3266100d15.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 19515 IP address blocks: 64.18.160.0/19 maxlen: 19 69.4.208.0/20 maxlen: 20 69.67.0.0/20 maxlen: 20 69.173.128.0/20 maxlen: 20 108.59.64.0/20 maxlen: 20 192.247.12.0/22 maxlen: 22 199.253.10.0/23 maxlen: 23 205.237.20.0/24 maxlen: 24 206.108.60.0/24 maxlen: 24 208.111.64.0/19 maxlen: 19 2605:c500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/06bf1e4f-42a6-423f-8cc1-b96d41424679.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/06bf1e4f-42a6-423f-8cc1-b96d41424679.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:33:18:99:a2:9e:ca:2e:07:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06bf1e4f-42a6-423f-8cc1-b96d41424679 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=1b4e8b13-aa61-431c-b3e1-9a24bf6f3b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2e:6d:58:60:a2:70:c2:9c:7f:eb:64:f7:19: a7:a3:4b:03:39:64:d1:47:55:71:99:e7:7a:9e:7b: db:6d:9b:f7:13:e7:54:34:cc:a4:23:a8:73:c4:6d: f5:21:5b:21:66:34:85:37:29:0f:42:33:4a:da:51: 7b:cb:31:c9:26:9e:b3:ba:5a:0c:4f:66:89:91:15: 15:1f:02:d7:51:73:83:4f:b5:5d:ab:dc:40:bd:24: 76:05:54:79:3c:79:ec:60:75:58:16:a5:7e:0e:65: 88:95:0f:e2:57:2d:5f:e3:b7:dd:fe:2c:2e:5b:95: d1:c1:bc:c8:b8:13:9c:57:be:58:9e:53:c2:d9:7d: b8:b5:a2:3b:6f:5c:5f:42:ca:ff:e0:d0:10:7d:a3: a6:32:f3:46:82:12:a3:31:e8:55:64:f0:6d:f9:54: fd:b2:e8:e0:b8:65:ee:54:03:82:0d:42:5d:02:2b: 47:d9:d3:d5:35:4c:91:41:94:9b:f9:9b:cf:3e:25: 51:d7:79:8f:1a:55:6e:7c:a9:d6:70:3e:d0:22:69: 03:1e:2e:c9:ee:3a:fb:9e:46:87:ca:e9:d7:2e:c5: 52:c3:7c:58:1b:ba:47:11:84:49:e4:01:51:de:e1: 51:bb:32:03:af:96:cc:da:4c:7d:ba:83:ec:2f:b6: 66:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E0:F1:73:B7:70:9A:3C:8F:84:28:30:4C:65:BA:15:22:CC:D7:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/5e890693-6aca-3d03-a030-fd3266100d15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/06bf1e4f-42a6-423f-8cc1-b96d41424679.crl X509v3 Authority Key Identifier: keyid:D6:19:A9:4B:85:78:DD:AA:32:4C:72:65:44:61:07:20:7C:21:AE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679.cer sbgp-ipAddrBlock: critical IPv4: 64.18.160.0/19 69.4.208.0/20 69.67.0.0/20 69.173.128.0/20 108.59.64.0/20 192.247.12.0/22 199.253.10.0/23 205.237.20.0/24 206.108.60.0/24 208.111.64.0/19 IPv6: 2605:c500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:4a:d7:5a:b7:15:f8:3a:32:a4:c3:1e:9a:f5:d7:60:81:fb: a4:3a:58:d0:f8:df:c6:81:4d:a0:9c:79:ff:8a:8b:67:a4:f2: 0f:cc:07:47:13:7c:9f:42:1c:a4:2f:6e:ff:6d:ef:f6:71:ba: 52:aa:52:6f:1f:43:57:b0:f9:c4:41:ad:4a:7e:93:49:52:fc: 76:1b:e4:3b:85:77:f8:06:7c:85:89:30:3b:b3:bf:2b:0c:49: 2a:6c:15:e7:35:e3:fc:64:5c:73:ab:d2:31:0d:68:49:0e:09: 67:a4:19:cb:33:ed:c2:a9:bc:38:b3:20:42:4f:7d:36:55:1d: 71:65:f5:4f:9a:95:d4:d6:c8:57:e7:d4:c4:cb:21:ad:21:97: 8e:b6:3a:a8:61:ee:50:35:16:19:10:12:67:b9:05:cc:e3:c0: e1:e1:49:51:44:25:64:43:95:30:45:25:c0:67:7d:f9:6f:ef: 6b:d5:4b:43:e8:a1:7d:d4:42:82:ab:58:b3:19:cc:82:c5:1f: 41:5a:f4:4f:96:17:0c:ec:b8:fa:76:20:ff:24:0e:89:69:e4: a1:8e:eb:48:49:0c:29:c8:04:6d:e9:a2:b5:43:43:ae:03:ef: a4:2f:8d:2a:01:99:60:9c:82:6f:d1:56:9e:12:3f:9b:0e:f9: fc:d5:f4:fe -----BEGIN CERTIFICATE----- MIIGiDCCBXCgAwIBAgIUAQ0Mn0MoWE1E+jMYmaKeyi4HqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDZiZjFlNGYtNDJhNi00MjNmLThjYzEtYjk2ZDQxNDI0 Njc5MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MWI0ZThiMTMtYWE2MS00MzFjLWIzZTEtOWEyNGJmNmYzYjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC5tWGCicMKcf+tk9xmno0sDOWTRR1Vxmed6 nnvbbZv3E+dUNMykI6hzxG31IVshZjSFNykPQjNK2lF7yzHJJp6zuloMT2aJkRUV HwLXUXODT7Vdq9xAvSR2BVR5PHnsYHVYFqV+DmWIlQ/iVy1f47fd/iwuW5XRwbzI uBOcV75YnlPC2X24taI7b1xfQsr/4NAQfaOmMvNGghKjMehVZPBt+VT9sujguGXu VAOCDUJdAitH2dPVNUyRQZSb+ZvPPiVR13mPGlVufKnWcD7QImkDHi7J7jr7nkaH yunXLsVSw3xYG7pHEYRJ5AFR3uFRuzIDr5bM2kx9uoPsL7ZmywIDAQABo4IDmjCC A5YwHQYDVR0OBBYEFFfg8XO3cJo8j4QoMExluhUizNc8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNmJm MWU0Zi00MmE2LTQyM2YtOGNjMS1iOTZkNDE0MjQ2NzkvNWU4OTA2OTMtNmFjYS0z ZDAzLWEwMzAtZmQzMjY2MTAwZDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDZiZjFlNGYtNDJhNi00MjNmLThj YzEtYjk2ZDQxNDI0Njc5LzA2YmYxZTRmLTQyYTYtNDIzZi04Y2MxLWI5NmQ0MTQy NDY3OS5jcmwwHwYDVR0jBBgwFoAU1hmpS4V43aoyTHJlRGEHIHwhrrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNmJmMWU0Zi00MmE2LTQyM2YtOGNjMS1iOTZk NDE0MjQ2NzkuY2VyMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQFQBKgAwQE RQTQAwQERUMAAwQERa2AAwQEbDtAAwQCwPcMAwQBx/0KAwQAze0UAwQAzmw8AwQF 0G9AMA0EAgACMAcDBQAmBcUAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHpK11q3Ffg6MqTDHpr112CB+6Q6 WND438aBTaCcef+Ki2ek8g/MB0cTfJ9CHKQvbv9t7/ZxulKqUm8fQ1ew+cRBrUp+ k0lS/HYb5DuFd/gGfIWJMDuzvysMSSpsFec14/xkXHOr0jENaEkOCWekGcsz7cKp vDizIEJPfTZVHXFl9U+aldTWyFfn1MTLIa0hl462Oqhh7lA1FhkQEme5BczjwOHh SVFEJWRDlTBFJcBnfflv72vVS0PooX3UQoKrWLMZzILFH0Fa9E+WFwzsuPp2IP8k Dolp5KGO60hJDCnIBG3porVDQ64D76QvjSoBmWCcgm/RVp4SP5sO+fzV9P4= -----END CERTIFICATE-----Generated at Thu Mar 26 15:52:23 2026 by rpki-client