$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa File: 2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa (raw, json) Hash identifier: zn+X1hndH4qXmtd3We8lFwmDZvFZnc4TKTiGBDQD41Y= Subject key identifier: 9D:A3:BF:00:2B:A8:16:8E:A8:8C:73:F6:64:DB:CB:88:F2:3E:06:5A Certificate issuer: /CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e Certificate serial: 010D0C9F4328584D8EF566E736F01A88B00AE180 Authority key identifier: 22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 26223 IP address blocks: 162.248.128.0/23 maxlen: 24 192.64.2.0/23 maxlen: 24 192.187.62.0/23 maxlen: 24 192.243.36.0/24 maxlen: 24 199.19.112.0/21 maxlen: 24 199.66.104.0/22 maxlen: 24 199.192.124.0/22 maxlen: 24 204.8.60.0/22 maxlen: 24 204.8.68.0/22 maxlen: 24 207.183.160.0/19 maxlen: 24 216.21.208.0/22 maxlen: 24 216.128.224.0/20 maxlen: 24 217.147.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:66:e7:36:f0:1a:88:b0:0a:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=57f6c2cb-d56b-4201-b96a-46284cc64bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7d:78:a1:0d:61:a6:bd:7b:d2:09:b6:ac:5e: 68:b2:61:c1:70:ef:9f:e8:3f:54:1f:df:a2:08:8d: 51:a4:76:d6:8b:71:74:fc:ec:06:b0:06:8a:27:0b: ee:3e:e9:3d:8e:a1:42:d5:1a:3e:8b:25:8f:cf:6e: 2a:76:5d:2a:4f:5c:0b:48:42:46:1d:f6:b5:0e:7b: 79:ae:68:61:b9:45:d0:34:91:9c:b4:ed:18:b0:6e: 33:00:34:df:37:78:7f:82:94:75:59:9f:38:75:09: 91:9f:26:3f:ba:18:c4:fc:f5:17:4e:c7:2c:c8:35: b8:4d:2f:3a:59:67:73:bb:1d:00:02:3e:d9:c6:a3: 8f:b7:11:76:cb:9f:74:e1:ca:9d:bc:f5:a0:c6:00: 99:32:dd:d5:9b:18:e0:1c:20:bd:db:75:fc:d6:03: df:e0:e8:de:35:ef:9a:c8:c8:11:97:a1:f1:f1:70: 2e:e1:53:40:c5:a9:db:62:cc:ed:0e:02:cf:9c:3f: 32:e3:85:c2:12:72:51:ab:dc:15:f4:b7:56:45:ff: c0:b3:cd:1b:95:96:7c:b5:30:3a:2f:4d:00:ac:38: ff:5a:bd:ef:07:f7:f1:42:69:0e:9e:6f:76:09:ad: 6b:a3:90:6b:ea:e6:d2:c4:a1:b0:b8:12:6e:b6:12: 61:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A3:BF:00:2B:A8:16:8E:A8:8C:73:F6:64:DB:CB:88:F2:3E:06:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl X509v3 Authority Key Identifier: keyid:22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer sbgp-ipAddrBlock: critical IPv4: 162.248.128.0/23 192.64.2.0/23 192.187.62.0/23 192.243.36.0/24 199.19.112.0/21 199.66.104.0/22 199.192.124.0/22 204.8.60.0/22 204.8.68.0/22 207.183.160.0/19 216.21.208.0/22 216.128.224.0/20 217.147.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:f9:c3:ce:32:f0:e1:0e:81:48:e6:c4:8f:49:67:5b:69:07: 98:dd:cd:ea:30:ae:47:83:82:de:67:51:fd:ba:43:1e:26:43: db:7e:98:3d:10:b5:c0:c0:5c:93:e1:82:30:74:c4:dd:09:b6: e2:a6:94:ca:2a:b2:d8:04:36:6a:26:98:c7:c7:5c:d3:78:d7: 22:c9:cf:a4:5b:83:4c:92:4c:4c:ef:82:05:e3:80:24:ff:f3: 97:4c:3e:c2:5d:1e:de:9f:18:7f:f4:5d:a7:7f:4c:f1:63:47: 74:03:d8:9f:95:d0:c2:58:a6:01:11:b0:a8:f3:f8:4a:02:a1: c2:e1:52:a8:80:c0:7e:89:b2:d6:a3:16:b7:36:bb:98:cd:f6: 5a:e4:f3:cf:ed:10:09:1d:c1:cf:37:5b:b9:3e:79:f5:89:15: 0c:73:c1:2c:f9:da:77:7c:39:ca:78:26:ae:a8:ab:db:16:05: c7:e0:a1:8c:44:1f:61:85:ea:da:db:15:8f:d7:ef:0e:7c:a6: dd:fb:aa:f6:5b:9c:fd:71:1d:41:04:71:17:09:0f:9d:71:bd: 14:e8:5d:96:18:43:e1:27:84:80:ef:b1:92:de:d3:5c:15:ed: 34:8c:f4:cf:d8:e3:eb:fb:ee:88:36:61:3d:dd:30:c0:8d:17: cb:12:e6:a6 -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWE2O9WbnNvAaiLAK4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y2YmMwNmEtMGE0Mi00NzU4LTg2MjktOGM5MGVjZjJm ODJlMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NTdmNmMyY2ItZDU2Yi00MjAxLWI5NmEtNDYyODRjYzY0YmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn14oQ1hpr170gm2rF5osmHBcO+f6D9UH9+i CI1RpHbWi3F0/OwGsAaKJwvuPuk9jqFC1Ro+iyWPz24qdl0qT1wLSEJGHfa1Dnt5 rmhhuUXQNJGctO0YsG4zADTfN3h/gpR1WZ84dQmRnyY/uhjE/PUXTscsyDW4TS86 WWdzux0AAj7ZxqOPtxF2y5904cqdvPWgxgCZMt3VmxjgHCC923X81gPf4OjeNe+a yMgRl6Hx8XAu4VNAxanbYsztDgLPnD8y44XCEnJRq9wV9LdWRf/As80blZZ8tTA6 L00ArDj/Wr3vB/fxQmkOnm92Ca1ro5Br6ubSxKGwuBJuthJhgQIDAQABo4IDnTCC A5kwHQYDVR0OBBYEFJ2jvwArqBaOqIxz9mTby4jyPgZaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZjZi YzA2YS0wYTQyLTQ3NTgtODYyOS04YzkwZWNmMmY4MmUvMmFmZGQyYzgtZDYwOS0z YzYzLTk4ZjgtMGNmZGQwZDFkNWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y2YmMwNmEtMGE0Mi00NzU4LTg2 MjktOGM5MGVjZjJmODJlLzdmNmJjMDZhLTBhNDItNDc1OC04NjI5LThjOTBlY2Yy ZjgyZS5jcmwwHwYDVR0jBBgwFoAUIo7n+g4AQMW6PyBnd/o8Bb1vWs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjZiYzA2YS0wYTQyLTQ3NTgtODYyOS04Yzkw ZWNmMmY4MmUuY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQBoviAAwQB wEACAwQBwLs+AwQAwPMkAwQDxxNwAwQCx0JoAwQCx8B8AwQCzAg8AwQCzAhEAwQF z7egAwQC2BXQAwQE2IDgAwQD2ZO4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABb5w84y8OEOgUjmxI9JZ1tp B5jdzeowrkeDgt5nUf26Qx4mQ9t+mD0QtcDAXJPhgjB0xN0JtuKmlMoqstgENmom mMfHXNN41yLJz6Rbg0ySTEzvggXjgCT/85dMPsJdHt6fGH/0Xad/TPFjR3QD2J+V 0MJYpgERsKjz+EoCocLhUqiAwH6JstajFrc2u5jN9lrk88/tEAkdwc83W7k+efWJ FQxzwSz52nd8Ocp4Jq6oq9sWBcfgoYxEH2GF6trbFY/X7w58pt37qvZbnP1xHUEE cRcJD51xvRToXZYYQ+EnhIDvsZLe01wV7TSM9M/Y4+v77og2YT3dMMCNF8sS5qY= -----END CERTIFICATE-----Generated at Mon Apr 27 11:19:33 2026 by rpki-client