$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/2de13f6e-ba53-3029-9dbc-cc6728951529.roa File: 2de13f6e-ba53-3029-9dbc-cc6728951529.roa (raw, json) Hash identifier: z6VtKQt0AlOBCfQsdS0JnPSzDKofNpXnHato6ulHknI= Subject key identifier: 40:DA:98:03:58:41:AE:E8:3A:F0:01:28:65:0E:53:54:F8:AF:D4:C8 Certificate issuer: /CN=a062a219-9ee8-48a3-897a-8410b6da94a1 Certificate serial: 010D0C9F4328584DAAE02404420472DCB8561E00 Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/2de13f6e-ba53-3029-9dbc-cc6728951529.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 803 IP address blocks: 104.152.28.0/22 maxlen: 22 104.219.8.0/22 maxlen: 22 104.255.48.0/22 maxlen: 22 108.60.160.0/19 maxlen: 19 108.160.16.0/20 maxlen: 20 108.174.160.0/20 maxlen: 20 162.253.8.0/22 maxlen: 22 192.34.224.0/21 maxlen: 21 198.245.112.0/20 maxlen: 20 199.26.190.0/23 maxlen: 23 199.189.88.0/21 maxlen: 21 206.163.224.0/19 maxlen: 19 207.47.128.0/17 maxlen: 17 216.126.200.0/22 maxlen: 22 216.174.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:24:04:42:04:72:dc:b8:56:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1 Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=439c7b4e-6dc2-4952-a096-2a58948d0c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8b:a8:fc:0e:fb:fb:cf:7b:b2:4c:e4:c5:31: 75:c8:d5:ee:0f:bc:42:20:8b:43:78:c6:8b:68:b4: 04:0a:8d:cb:9c:cc:6c:a3:a4:66:4b:fc:af:dd:9a: d2:9e:b8:95:88:7f:62:0a:65:d7:b0:a0:ec:a3:c7: 13:50:ff:11:e2:11:73:68:d3:63:ba:b2:8e:5b:22: 36:53:29:a1:6c:f4:92:75:7e:f3:84:5e:1d:45:e5: 66:2b:63:81:5c:24:07:1f:70:7d:87:22:ac:d7:b5: ab:f9:d4:94:96:42:cc:66:15:30:db:07:c9:67:92: 35:25:4d:b6:1e:c8:05:cd:08:18:6b:92:d3:ae:25: a6:a8:c6:ec:48:56:f8:0e:1f:54:42:7a:82:57:9d: 98:bd:b7:7d:67:c7:88:9a:37:15:6a:7f:e3:5c:71: 3c:aa:1b:1a:23:c7:d2:7c:df:60:f6:e5:a6:ff:35: 42:9c:c4:31:e7:e8:8a:54:21:c5:6b:13:f5:0a:10: fa:44:b7:d0:be:f1:ef:4d:e8:8a:ec:1b:40:d3:7f: b9:d5:e1:c6:94:5c:23:47:df:37:66:90:b0:ff:06: 95:49:89:6f:37:87:d2:0a:90:71:f0:28:88:7b:e9: b5:9b:59:90:e8:8b:2b:72:13:21:72:2a:07:44:b0: 45:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DA:98:03:58:41:AE:E8:3A:F0:01:28:65:0E:53:54:F8:AF:D4:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/2de13f6e-ba53-3029-9dbc-cc6728951529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl X509v3 Authority Key Identifier: keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer sbgp-ipAddrBlock: critical IPv4: 104.152.28.0/22 104.219.8.0/22 104.255.48.0/22 108.60.160.0/19 108.160.16.0/20 108.174.160.0/20 162.253.8.0/22 192.34.224.0/21 198.245.112.0/20 199.26.190.0/23 199.189.88.0/21 206.163.224.0/19 207.47.128.0/17 216.126.200.0/22 216.174.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:ce:51:74:8a:16:1c:26:f7:26:15:a5:3f:ed:0c:d5:ca:91: 36:8e:66:8b:8b:3e:33:98:25:f3:73:b4:ef:78:41:d7:5c:86: df:76:5d:65:b7:11:f9:29:b5:89:b8:7f:26:fc:4b:aa:8d:3b: 1b:e4:98:68:01:ba:41:bd:49:d3:35:fd:e9:9e:42:9a:bd:00: 9a:86:9c:02:d9:62:13:9d:e3:5e:73:f5:84:3e:83:8f:78:51: e3:ba:9e:c2:c3:7f:59:42:f6:c1:ac:d1:72:9d:65:79:0f:16: 3d:dd:11:9b:cf:83:05:0d:5e:d1:57:b9:80:49:b2:53:05:cd: 78:f1:d0:aa:4f:3e:cc:3d:fd:ca:b1:01:83:06:f0:76:90:e3: b5:49:7a:b4:ea:bf:49:97:1a:23:21:20:85:36:e4:61:bc:a3: 42:61:2b:c2:e1:ef:33:00:b8:42:3a:2a:c3:aa:69:36:0e:1e: 68:40:a2:65:1b:29:c6:d2:be:bd:f1:a0:5e:ba:85:50:4d:e3: cc:40:af:fb:3a:ec:7c:05:99:f8:78:6d:44:ee:53:fe:8b:f4: d8:d3:26:d3:34:e0:55:be:1b:bf:1e:32:c2:be:bd:1a:3a:f8: 93:a7:a6:15:c5:fb:3f:09:49:d2:52:8b:3b:45:b9:59:0b:3f: 17:3f:b3:fc -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUAQ0Mn0MoWE2q4CQEQgRy3LhWHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA2MmEyMTktOWVlOC00OGEzLTg5N2EtODQxMGI2ZGE5 NGExMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk NDM5YzdiNGUtNmRjMi00OTUyLWEwOTYtMmE1ODk0OGQwYzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhouo/A77+897skzkxTF1yNXuD7xCIItDeMaL aLQECo3LnMxso6RmS/yv3ZrSnriViH9iCmXXsKDso8cTUP8R4hFzaNNjurKOWyI2 UymhbPSSdX7zhF4dReVmK2OBXCQHH3B9hyKs17Wr+dSUlkLMZhUw2wfJZ5I1JU22 HsgFzQgYa5LTriWmqMbsSFb4Dh9UQnqCV52Yvbd9Z8eImjcVan/jXHE8qhsaI8fS fN9g9uWm/zVCnMQx5+iKVCHFaxP1ChD6RLfQvvHvTeiK7BtA03+51eHGlFwjR983 ZpCw/waVSYlvN4fSCpBx8CiIe+m1m1mQ6IsrchMhcioHRLBFUwIDAQABo4IDqTCC A6UwHQYDVR0OBBYEFEDamANYQa7oOvABKGUOU1T4r9TIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYy YTIxOS05ZWU4LTQ4YTMtODk3YS04NDEwYjZkYTk0YTEvMmRlMTNmNmUtYmE1My0z MDI5LTlkYmMtY2M2NzI4OTUxNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTA2MmEyMTktOWVlOC00OGEzLTg5 N2EtODQxMGI2ZGE5NGExL2EwNjJhMjE5LTllZTgtNDhhMy04OTdhLTg0MTBiNmRh OTRhMS5jcmwwHwYDVR0jBBgwFoAUFCgnZgWdJKC08ogP76ns4OluhhgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYyYTIxOS05ZWU4LTQ4YTMtODk3YS04NDEw YjZkYTk0YTEuY2VyMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQCaJgcAwQC aNsIAwQCaP8wAwQFbDygAwQEbKAQAwQEbK6gAwQCov0IAwQDwCLgAwQExvVwAwQB xxq+AwQDx71YAwQFzqPgAwQHzy+AAwQC2H7IAwQF2K6AMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKvOUXSK Fhwm9yYVpT/tDNXKkTaOZouLPjOYJfNztO94Qddcht92XWW3EfkptYm4fyb8S6qN OxvkmGgBukG9SdM1/emeQpq9AJqGnALZYhOd415z9YQ+g494UeO6nsLDf1lC9sGs 0XKdZXkPFj3dEZvPgwUNXtFXuYBJslMFzXjx0KpPPsw9/cqxAYMG8HaQ47VJerTq v0mXGiMhIIU25GG8o0JhK8Lh7zMAuEI6KsOqaTYOHmhAomUbKcbSvr3xoF66hVBN 48xAr/s67HwFmfh4bUTuU/6L9NjTJtM04FW+G78eMsK+vRo6+JOnphXF+z8JSdJS iztFuVkLPxc/s/w= -----END CERTIFICATE-----Generated at Wed May 13 11:56:56 2026 by rpki-client