$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/2a0fdcd7-ea7e-3f1d-b579-0ad82af4861a.roa File: 2a0fdcd7-ea7e-3f1d-b579-0ad82af4861a.roa (raw, json) Hash identifier: 4/13ph4xre4LM1HUpnzpiJarPJVr9LKUdpLhhpe0y7U= Subject key identifier: CB:53:DC:8C:9F:AE:43:D1:2E:D5:F5:D9:2A:82:CC:7E:05:0F:7A:F5 Certificate issuer: /CN=19d9b9bc-a20d-4235-acc5-045fb91a3837 Certificate serial: 010D0C9F4328584D3E001F34466AB24008D820C0 Authority key identifier: DF:87:E8:77:7F:A4:94:62:D4:68:F4:AE:CB:7B:EE:AA:CE:46:0D:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/2a0fdcd7-ea7e-3f1d-b579-0ad82af4861a.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 32354 IP address blocks: 162.244.56.0/21 maxlen: 24 173.239.64.0/20 maxlen: 24 204.11.104.0/22 maxlen: 24 208.64.184.0/22 maxlen: 24 208.71.156.0/22 maxlen: 24 208.76.28.0/22 maxlen: 24 208.80.116.0/22 maxlen: 24 208.87.216.0/21 maxlen: 24 2607:f640::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/19d9b9bc-a20d-4235-acc5-045fb91a3837.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/19d9b9bc-a20d-4235-acc5-045fb91a3837.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:1f:34:46:6a:b2:40:08:d8:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19d9b9bc-a20d-4235-acc5-045fb91a3837 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=652a187b-b82d-4143-a32c-aac1992e3b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:be:25:80:c3:f0:e8:06:0c:ae:9b:49:e9:2d: 8a:e7:12:7f:bd:b2:a1:ff:a9:d1:88:2e:0e:32:b1: b9:8f:c9:df:23:bb:a4:7f:48:1c:23:12:81:12:fd: 7b:65:20:42:3c:90:01:ab:1b:6a:67:9c:41:4c:c8: ee:60:67:83:2a:8e:5c:b9:dd:cd:3e:e2:92:93:a9: b0:12:6e:78:38:c0:32:26:66:b9:72:23:65:52:63: 63:21:ed:3b:ea:d1:d4:c0:3c:85:c2:93:38:bb:a2: 4c:bf:b7:ce:74:ff:ea:5f:8b:4b:6a:98:74:ee:19: c5:ab:83:cc:ef:38:7f:58:42:b1:8a:c9:83:ce:1f: 97:2c:7c:92:5d:f8:3d:c2:36:71:a5:4b:14:9e:81: e9:68:31:0a:70:30:37:fa:13:df:af:ea:95:7a:cc: 9e:86:d6:ff:03:02:27:78:25:e2:71:58:90:04:b4: bd:c9:6c:70:c4:64:5a:67:5e:9e:fe:b4:ae:10:91: 86:f1:92:4e:bd:c7:c3:9c:0b:d9:7c:e7:d4:4b:ad: 73:35:2b:8f:1f:aa:fb:94:d1:ef:da:d8:b7:2e:fd: f4:66:20:ec:30:c5:dc:38:44:24:4b:01:f7:1e:03: a0:db:46:a6:4b:dd:f7:54:02:87:58:44:08:f8:1b: ee:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:53:DC:8C:9F:AE:43:D1:2E:D5:F5:D9:2A:82:CC:7E:05:0F:7A:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/2a0fdcd7-ea7e-3f1d-b579-0ad82af4861a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/19d9b9bc-a20d-4235-acc5-045fb91a3837.crl X509v3 Authority Key Identifier: keyid:DF:87:E8:77:7F:A4:94:62:D4:68:F4:AE:CB:7B:EE:AA:CE:46:0D:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837.cer sbgp-ipAddrBlock: critical IPv4: 162.244.56.0/21 173.239.64.0/20 204.11.104.0/22 208.64.184.0/22 208.71.156.0/22 208.76.28.0/22 208.80.116.0/22 208.87.216.0/21 IPv6: 2607:f640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:ef:0f:77:73:ba:7e:be:e9:f6:9a:32:65:77:ba:8d:6c:32: 8e:e2:00:3e:93:c2:26:dc:b1:82:04:d2:69:ba:dc:16:56:32: f3:f4:f7:eb:5b:cb:14:61:63:b5:a5:0b:7f:9a:58:0d:9c:69: 22:89:2e:d1:ba:44:15:b5:df:39:56:7f:da:88:c6:05:be:c6: bb:56:85:3e:16:c6:4d:01:3f:49:aa:7a:ed:86:fa:f3:1b:f9: a0:fe:4a:ba:11:09:08:32:57:3e:bc:67:69:26:06:3d:83:50: a5:77:83:c3:61:f6:2a:13:bd:d8:04:8c:f6:0a:38:b2:52:a9: f0:c9:2e:a4:44:a7:5d:f8:d4:88:70:b6:01:b8:5d:1d:e3:8b: 00:91:50:ab:16:b6:c6:cc:6a:22:98:00:2b:aa:66:fe:6f:6a: 10:ed:bd:eb:29:7a:d3:a0:13:60:80:cc:0f:c6:f0:c6:b5:53: 82:fa:58:4f:f7:a1:e6:39:f8:bc:f7:2f:15:fb:93:88:15:02: 03:2f:8d:16:ad:b5:a9:2b:1a:68:ae:1d:b6:db:3b:62:1b:e3: af:63:51:e5:55:a2:b7:bf:9b:cd:43:35:62:35:c9:91:87:20: b7:ed:8e:d1:96:2c:7f:e8:74:8e:5b:8b:db:89:9f:da:7e:71: 62:8a:3b:f9 -----BEGIN CERTIFICATE----- MIIGfDCCBWSgAwIBAgIUAQ0Mn0MoWE0+AB80RmqyQAjYIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTlkOWI5YmMtYTIwZC00MjM1LWFjYzUtMDQ1ZmI5MWEz ODM3MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NjUyYTE4N2ItYjgyZC00MTQzLWEzMmMtYWFjMTk5MmUzYjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5L4lgMPw6AYMrptJ6S2K5xJ/vbKh/6nRiC4O MrG5j8nfI7ukf0gcIxKBEv17ZSBCPJABqxtqZ5xBTMjuYGeDKo5cud3NPuKSk6mw Em54OMAyJma5ciNlUmNjIe076tHUwDyFwpM4u6JMv7fOdP/qX4tLaph07hnFq4PM 7zh/WEKxismDzh+XLHySXfg9wjZxpUsUnoHpaDEKcDA3+hPfr+qVesyehtb/AwIn eCXicViQBLS9yWxwxGRaZ16e/rSuEJGG8ZJOvcfDnAvZfOfUS61zNSuPH6r7lNHv 2ti3Lv30ZiDsMMXcOEQkSwH3HgOg20amS933VAKHWEQI+BvuDwIDAQABo4IDjjCC A4owHQYDVR0OBBYEFMtT3IyfrkPRLtX12SqCzH4FD3r1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xOWQ5 YjliYy1hMjBkLTQyMzUtYWNjNS0wNDVmYjkxYTM4MzcvMmEwZmRjZDctZWE3ZS0z ZjFkLWI1NzktMGFkODJhZjQ4NjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTlkOWI5YmMtYTIwZC00MjM1LWFj YzUtMDQ1ZmI5MWEzODM3LzE5ZDliOWJjLWEyMGQtNDIzNS1hY2M1LTA0NWZiOTFh MzgzNy5jcmwwHwYDVR0jBBgwFoAU34fod3+klGLUaPSuy3vuqs5GDdEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xOWQ5YjliYy1hMjBkLTQyMzUtYWNjNS0wNDVm YjkxYTM4MzcuY2VyMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQDovQ4AwQE re9AAwQCzAtoAwQC0EC4AwQC0EecAwQC0EwcAwQC0FB0AwQD0FfYMA0EAgACMAcD BQAmB/ZAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAL3vD3dzun6+6faaMmV3uo1sMo7iAD6TwibcsYIE0mm6 3BZWMvP09+tbyxRhY7WlC3+aWA2caSKJLtG6RBW13zlWf9qIxgW+xrtWhT4Wxk0B P0mqeu2G+vMb+aD+SroRCQgyVz68Z2kmBj2DUKV3g8Nh9ioTvdgEjPYKOLJSqfDJ LqREp1341IhwtgG4XR3jiwCRUKsWtsbMaiKYACuqZv5vahDtvespetOgE2CAzA/G 8Ma1U4L6WE/3oeY5+Lz3LxX7k4gVAgMvjRattakrGmiuHbbbO2Ib469jUeVVore/ m81DNWI1yZGHILftjtGWLH/odI5bi9uJn9p+cWKKO/k= -----END CERTIFICATE-----Generated at Sat Mar 21 23:31:01 2026 by rpki-client