$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/cd9eef01-ff5f-3461-982d-ae650cfc798a.roa File: cd9eef01-ff5f-3461-982d-ae650cfc798a.roa (raw, json) Hash identifier: xWjDzEc0i4gBGQL79psr7RBwnjuOLIpWsBbuB4YLMj0= Subject key identifier: AA:DC:B5:E0:5D:00:0A:8A:F7:C8:8B:E2:24:A8:D8:FA:BB:90:EF:8D Certificate issuer: /CN=063abcef-47ff-4267-9198-eb628aba7842 Certificate serial: 010D0C9F4328584E4129DA59F367AFB26DFDEEE0 Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/cd9eef01-ff5f-3461-982d-ae650cfc798a.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 46455 IP address blocks: 74.214.0.0/20 maxlen: 24 143.223.224.0/20 maxlen: 24 146.12.128.0/19 maxlen: 24 146.12.192.0/20 maxlen: 24 158.247.32.0/20 maxlen: 24 163.245.0.0/19 maxlen: 24 167.150.64.0/21 maxlen: 24 195.85.64.0/23 maxlen: 24 195.85.118.0/23 maxlen: 24 206.82.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:da:59:f3:67:af:b2:6d:fd:ee:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842 Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=c3ea9bf1-c2af-4f26-96be-2fd27be86b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0f:35:c2:af:50:bb:80:d5:2f:f5:95:90:a3: af:71:6f:58:b0:06:41:6c:65:fc:98:37:26:45:89: f5:52:24:b8:58:19:e2:2c:fb:18:ba:89:56:5a:e9: b6:55:d4:2f:06:35:a4:0b:3d:0d:b5:57:6b:03:0d: 32:ce:0b:87:63:24:a4:ba:17:bc:b3:63:03:dc:2b: 4c:f8:38:18:75:a2:47:6a:0f:ce:21:b0:bf:1a:d8: 11:53:d1:fc:53:c7:de:1f:3d:cc:c9:54:eb:a2:d8: 7b:4e:91:33:d8:a1:32:9a:6d:ae:d5:79:a1:f1:cd: fa:f8:52:69:fc:be:c2:de:fb:8a:29:21:13:0b:ad: dd:64:06:11:70:06:93:07:58:1f:d7:68:59:54:24: 3d:c1:50:e9:f6:38:e7:40:79:4a:66:e8:f3:4c:71: c7:8b:08:c7:d8:7d:8f:28:fe:59:a4:bb:3f:1f:e7: ec:10:8e:f9:0b:f9:95:ac:30:95:29:f8:3b:7a:7d: 7f:dd:87:9d:b1:55:ab:45:27:a1:65:06:05:d9:76: 9b:8d:b0:27:27:38:b7:3b:a3:75:9f:2d:c1:e7:27: a2:de:dd:2f:32:64:b2:84:9d:9c:e7:89:5b:00:f5: 44:48:d2:13:f3:8a:4b:fc:05:80:24:2d:21:2f:06: ff:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DC:B5:E0:5D:00:0A:8A:F7:C8:8B:E2:24:A8:D8:FA:BB:90:EF:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/cd9eef01-ff5f-3461-982d-ae650cfc798a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl X509v3 Authority Key Identifier: keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer sbgp-ipAddrBlock: critical IPv4: 74.214.0.0/20 143.223.224.0/20 146.12.128.0/19 146.12.192.0/20 158.247.32.0/20 163.245.0.0/19 167.150.64.0/21 195.85.64.0/23 195.85.118.0/23 206.82.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:6c:50:5e:c0:37:0b:6c:0c:91:e3:4a:f2:3c:1f:9a:6a:d6: a8:45:3b:b7:2a:58:2e:b6:fc:10:66:12:f5:dd:d8:a1:e1:6f: 57:58:75:75:0b:20:67:ba:73:02:b8:0a:03:06:60:b1:2e:2b: 68:a3:5c:39:7a:cd:c5:8d:6c:80:69:d9:27:77:ac:36:a4:68: 9b:f6:12:21:2b:71:25:47:58:8f:6e:ca:97:ff:f7:43:09:f1: 90:fe:e2:85:a3:7d:eb:8a:76:8f:f1:ea:7f:59:56:d7:22:2c: de:60:b7:78:ef:b5:51:8a:2f:8f:c6:3a:f6:ed:a2:82:1b:e1: cd:20:e6:b1:71:a2:80:a3:ca:fe:88:f2:71:19:4a:7d:c9:5d: e3:8c:2f:b4:ab:a8:38:a0:8d:61:4e:4d:63:48:9b:ae:68:c5: 3f:39:49:23:7a:8c:a1:41:eb:8d:15:c3:ad:a9:92:5e:0a:3e: c6:1b:4d:5a:e5:12:85:71:ff:dc:d3:9e:13:d7:17:4b:5c:11: cf:2e:14:6a:81:52:62:92:52:dd:54:bf:6a:db:cd:a4:e7:9b: 73:f8:8c:3b:11:38:16:41:73:86:97:ea:44:b3:76:eb:d2:da: d6:bd:38:29:54:31:36:94:ff:2f:e8:67:0e:6e:4a:5e:07:9b: 84:7c:47:65 -----BEGIN CERTIFICATE----- MIIGeTCCBWGgAwIBAgIUAQ0Mn0MoWE5BKdpZ82evsm397uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYzYWJjZWYtNDdmZi00MjY3LTkxOTgtZWI2MjhhYmE3 ODQyMB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk YzNlYTliZjEtYzJhZi00ZjI2LTk2YmUtMmZkMjdiZTg2YjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ81wq9Qu4DVL/WVkKOvcW9YsAZBbGX8mDcm RYn1UiS4WBniLPsYuolWWum2VdQvBjWkCz0NtVdrAw0yzguHYySkuhe8s2MD3CtM +DgYdaJHag/OIbC/GtgRU9H8U8feHz3MyVTroth7TpEz2KEymm2u1Xmh8c36+FJp /L7C3vuKKSETC63dZAYRcAaTB1gf12hZVCQ9wVDp9jjnQHlKZujzTHHHiwjH2H2P KP5ZpLs/H+fsEI75C/mVrDCVKfg7en1/3YedsVWrRSehZQYF2XabjbAnJzi3O6N1 ny3B5yei3t0vMmSyhJ2c54lbAPVESNIT84pL/AWAJC0hLwb/5QIDAQABo4IDizCC A4cwHQYDVR0OBBYEFKrcteBdAAqK98iL4iSo2Pq7kO+NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNh YmNlZi00N2ZmLTQyNjctOTE5OC1lYjYyOGFiYTc4NDIvY2Q5ZWVmMDEtZmY1Zi0z NDYxLTk4MmQtYWU2NTBjZmM3OThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDYzYWJjZWYtNDdmZi00MjY3LTkx OTgtZWI2MjhhYmE3ODQyLzA2M2FiY2VmLTQ3ZmYtNDI2Ny05MTk4LWViNjI4YWJh Nzg0Mi5jcmwwHwYDVR0jBBgwFoAULT+tbVsf5f5/PtsiKw72zM1ofcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNhYmNlZi00N2ZmLTQyNjctOTE5OC1lYjYy OGFiYTc4NDIuY2VyMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQEStYAAwQE j9/gAwQFkgyAAwQEkgzAAwQEnvcgAwQFo/UAAwQDp5ZAAwQBw1VAAwQBw1V2AwQD zlJgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAxsUF7ANwtsDJHjSvI8H5pq1qhFO7cqWC62/BBmEvXd2KHh b1dYdXULIGe6cwK4CgMGYLEuK2ijXDl6zcWNbIBp2Sd3rDakaJv2EiErcSVHWI9u ypf/90MJ8ZD+4oWjfeuKdo/x6n9ZVtciLN5gt3jvtVGKL4/GOvbtooIb4c0g5rFx ooCjyv6I8nEZSn3JXeOML7SrqDigjWFOTWNIm65oxT85SSN6jKFB640Vw62pkl4K PsYbTVrlEoVx/9zTnhPXF0tcEc8uFGqBUmKSUt1Uv2rbzaTnm3P4jDsROBZBc4aX 6kSzduvS2ta9OClUMTaU/y/oZw5uSl4Hm4R8R2U= -----END CERTIFICATE-----Generated at Thu Jul 16 22:44:12 2026 by rpki-client