$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa File: 3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa (raw, json) Hash identifier: kzOIxNLcZdwtl9ihEwIFW9Z95oIm9qLsYiKR7TsTNvk= Subject key identifier: 4D:79:3E:49:53:01:33:86:6C:4C:15:05:02:74:8A:96:A3:AD:BA:88 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584E7204D6AB795D151F0DA87D80 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 7181 IP address blocks: 40.133.32.0/21 maxlen: 24 40.138.220.0/22 maxlen: 24 40.142.8.0/22 maxlen: 24 40.142.16.0/20 maxlen: 24 40.142.32.0/19 maxlen: 24 40.142.64.0/18 maxlen: 24 40.143.0.0/18 maxlen: 24 40.143.72.0/21 maxlen: 24 40.143.80.0/20 maxlen: 24 40.143.96.0/19 maxlen: 24 40.143.128.0/17 maxlen: 24 63.131.224.0/20 maxlen: 24 63.246.0.0/19 maxlen: 24 63.254.152.0/21 maxlen: 24 65.61.96.0/19 maxlen: 24 65.99.192.0/18 maxlen: 24 66.36.16.0/20 maxlen: 24 66.45.160.0/19 maxlen: 24 66.203.64.0/19 maxlen: 24 66.206.192.0/20 maxlen: 24 67.212.128.0/20 maxlen: 24 67.216.64.0/20 maxlen: 24 67.221.224.0/20 maxlen: 24 68.168.80.0/20 maxlen: 24 68.171.128.0/19 maxlen: 24 69.7.224.0/20 maxlen: 24 69.26.96.0/19 maxlen: 24 69.40.208.0/20 maxlen: 24 69.147.160.0/19 maxlen: 24 69.166.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:d6:ab:79:5d:15:1f:0d:a8:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=a244ed04-bf9e-4533-86a2-4a8f19813a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:85:9f:ab:92:fa:35:32:2b:38:1c:2b:51:3b: af:bf:64:09:3a:e1:83:5d:90:90:99:cc:25:dc:a9: 95:bd:37:59:23:18:ba:b9:1d:a3:61:65:a5:87:1d: d6:46:0a:4e:c5:bc:69:66:d8:bb:b5:67:13:83:78: a6:34:dc:b0:b7:18:a6:88:aa:b9:fa:65:f4:b8:0e: e2:4f:1f:62:24:8b:6c:52:5c:dd:e9:38:e9:ed:dd: ce:3a:cf:4f:e1:ef:3f:10:cb:15:41:d6:71:e7:68: 54:e5:a4:d7:86:85:9f:d4:a8:d5:de:7b:da:41:a2: ea:7c:cb:6c:65:04:45:1a:26:fd:88:2b:d1:6f:2c: 9e:c9:44:f1:c0:0a:06:dd:6d:3a:0c:cd:8d:24:65: 4d:8f:d0:9a:3f:be:55:3b:94:88:5d:57:0b:1c:ef: a6:66:71:74:ed:54:80:7f:04:c6:3b:35:8a:aa:6f: 23:b7:5b:dc:09:14:b3:45:11:72:83:3f:ad:ba:cd: 83:09:96:b7:23:90:89:21:b7:04:f4:da:f7:67:0b: a1:67:49:32:31:93:c7:c5:06:ce:2a:e8:6b:f3:9c: 26:8c:47:ca:f2:7d:d9:98:09:02:29:1b:8e:fd:c2: 0b:1c:c1:93:7b:59:ba:73:e8:c7:2b:f2:6d:12:b4: 4f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:79:3E:49:53:01:33:86:6C:4C:15:05:02:74:8A:96:A3:AD:BA:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.133.32.0/21 40.138.220.0/22 40.142.8.0/22 40.142.16.0-40.142.127.255 40.143.0.0/18 40.143.72.0-40.143.255.255 63.131.224.0/20 63.246.0.0/19 63.254.152.0/21 65.61.96.0/19 65.99.192.0/18 66.36.16.0/20 66.45.160.0/19 66.203.64.0/19 66.206.192.0/20 67.212.128.0/20 67.216.64.0/20 67.221.224.0/20 68.168.80.0/20 68.171.128.0/19 69.7.224.0/20 69.26.96.0/19 69.40.208.0/20 69.147.160.0/19 69.166.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:03:35:20:08:10:b9:fd:98:e6:2f:61:8a:cf:9a:1f:67:f9: 5c:28:b6:ae:39:20:34:70:47:3d:7e:1f:9c:91:be:4d:46:43: ee:eb:72:31:9a:55:07:30:5b:53:20:25:10:5d:75:85:88:f6: 36:9f:a0:2e:26:3a:3e:95:cb:ae:5b:47:8a:35:f1:32:ba:fa: dd:5b:eb:a5:dd:7c:97:59:99:66:1f:ce:0a:f8:0f:f3:bb:1d: 08:6b:2b:07:08:78:b3:4c:61:41:b4:a1:bb:97:f4:6a:56:2e: 89:2b:c9:07:46:93:29:5a:6a:93:69:36:a6:0a:f0:4d:8f:2c: 26:0c:a4:f2:aa:3f:41:49:cb:b8:fc:bf:13:cf:11:d0:e9:e8: 2e:bb:4e:df:b3:a9:6e:f3:cc:9e:fe:0c:91:1e:57:9c:fb:6b: d3:7f:b8:40:cb:72:5a:8c:42:a0:8d:f1:63:bc:fb:ed:d7:ed: 01:b9:c8:96:0a:93:88:26:6f:00:79:73:96:2e:f8:e3:ad:06: 41:3c:30:9c:fe:cd:05:a0:e5:5f:da:00:20:bd:09:5b:3b:40: b5:4a:16:7f:5d:79:fa:06:9f:c8:06:78:12:66:38:f1:b1:96: 86:cd:4e:4d:cb:47:58:ab:ea:33:d9:a7:44:6a:60:8e:56:57: 13:ab:71:30 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE5yBNareV0VHw2ofYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk YTI0NGVkMDQtYmY5ZS00NTMzLTg2YTItNGE4ZjE5ODEzYTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYWfq5L6NTIrOBwrUTuvv2QJOuGDXZCQmcwl 3KmVvTdZIxi6uR2jYWWlhx3WRgpOxbxpZti7tWcTg3imNNywtximiKq5+mX0uA7i Tx9iJItsUlzd6Tjp7d3OOs9P4e8/EMsVQdZx52hU5aTXhoWf1KjV3nvaQaLqfMts ZQRFGib9iCvRbyyeyUTxwAoG3W06DM2NJGVNj9CaP75VO5SIXVcLHO+mZnF07VSA fwTGOzWKqm8jt1vcCRSzRRFygz+tus2DCZa3I5CJIbcE9Nr3ZwuhZ0kyMZPHxQbO Kuhr85wmjEfK8n3ZmAkCKRuO/cILHMGTe1m6c+jHK/JtErRP7wIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFE15PklTATOGbEwVBQJ0ipajrbqIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvM2RjM2U5YjUtOTg1My0z ZjVmLWIyYjYtMWVlYmVkMmI2ZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMIHCBggrBgEFBQcBBwEB/wSBsjCBrzCBrAQCAAEwgaUDBAMo hSADBAIoitwDBAIojggwDAMEBCiOEAMEByiOAAMEBiiPADALAwQDKI9IAwMEKIAD BAQ/g+ADBAU/9gADBAM//pgDBAVBPWADBAZBY8ADBARCJBADBAVCLaADBAVCy0AD BARCzsADBARD1IADBARD2EADBARD3eADBAREqFADBAVEq4ADBARFB+ADBAVFGmAD BARFKNADBAVFk6ADBAVFpoAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPQM1IAgQuf2Y5i9his+aH2f5XCi2 rjkgNHBHPX4fnJG+TUZD7utyMZpVBzBbUyAlEF11hYj2Np+gLiY6PpXLrltHijXx Mrr63Vvrpd18l1mZZh/OCvgP87sdCGsrBwh4s0xhQbShu5f0alYuiSvJB0aTKVpq k2k2pgrwTY8sJgyk8qo/QUnLuPy/E88R0OnoLrtO37OpbvPMnv4MkR5XnPtr03+4 QMtyWoxCoI3xY7z77dftAbnIlgqTiCZvAHlzli74460GQTwwnP7NBaDlX9oAIL0J WztAtUoWf115+gafyAZ4EmY48bGWhs1OTctHWKvqM9mnRGpgjlZXE6txMA== -----END CERTIFICATE-----Generated at Wed Jul 22 00:07:30 2026 by rpki-client