$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3e233b44-911d-3c32-9600-9580640a3557.roa File: 3e233b44-911d-3c32-9600-9580640a3557.roa (raw, json) Hash identifier: Ptim97DzarK5I0ghU+6s18djc6+QPCyDsJ8L4pwePS8= Subject key identifier: 85:AC:59:9A:2D:5C:AD:BA:E4:B0:60:D5:8D:BC:84:98:1A:59:CF:6D Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584F0D6CED1A100BD66EEE613640 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3e233b44-911d-3c32-9600-9580640a3557.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 17378 IP address blocks: 72.29.96.0/19 maxlen: 24 72.249.0.0/17 maxlen: 24 72.249.128.0/18 maxlen: 24 74.112.92.0/22 maxlen: 24 74.114.180.0/22 maxlen: 24 74.118.40.0/22 maxlen: 24 74.120.208.0/22 maxlen: 24 74.213.128.0/19 maxlen: 24 96.31.160.0/20 maxlen: 24 98.142.80.0/20 maxlen: 24 104.37.108.0/22 maxlen: 24 144.202.128.0/17 maxlen: 24 162.216.52.0/22 maxlen: 24 162.220.104.0/22 maxlen: 24 162.222.96.0/22 maxlen: 24 162.248.248.0/21 maxlen: 24 173.237.128.0/18 maxlen: 24 173.240.48.0/20 maxlen: 24 174.136.0.0/18 maxlen: 24 192.197.58.0/23 maxlen: 24 198.35.116.0/22 maxlen: 24 199.21.64.0/21 maxlen: 24 199.87.60.0/22 maxlen: 24 199.96.248.0/21 maxlen: 24 199.188.208.0/22 maxlen: 24 199.193.140.0/22 maxlen: 24 199.193.176.0/22 maxlen: 24 199.233.224.0/22 maxlen: 24 204.11.208.0/22 maxlen: 24 204.15.100.0/22 maxlen: 24 204.16.108.0/22 maxlen: 24 205.147.202.0/24 maxlen: 24 205.147.208.0/24 maxlen: 24 205.147.218.0/24 maxlen: 24 205.147.235.0/24 maxlen: 24 206.123.64.0/18 maxlen: 24 206.245.164.0/24 maxlen: 24 207.8.244.0/22 maxlen: 24 207.45.160.0/20 maxlen: 24 207.154.0.0/18 maxlen: 24 207.210.192.0/18 maxlen: 24 207.254.208.0/20 maxlen: 24 208.67.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:ed:1a:10:0b:d6:6e:ee:61:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=b889c52a-cf81-433c-a283-2c9f542de7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4a:fe:4e:21:56:ab:70:48:98:12:b7:54:1e: 99:73:1b:cb:9a:80:9a:55:31:73:e4:68:e4:88:5b: 18:f8:64:32:cf:3d:5e:49:12:c2:b0:fe:d2:89:fe: 9f:d6:b7:c2:36:f9:62:c1:b0:2d:e9:8f:17:4f:70: 3a:c5:8e:ff:eb:17:bc:4a:b5:63:67:98:e3:53:e5: ee:c2:77:d8:fd:1d:81:90:b0:45:a4:c7:8d:bb:ed: ff:f6:1e:8b:59:de:4e:25:f0:ab:e5:48:db:71:44: 92:17:9b:4b:13:43:68:d1:ea:a9:d9:09:bf:c5:81: 1d:5f:68:ff:1b:b6:dd:17:85:b3:dc:00:f4:99:04: 57:14:c0:50:ce:c5:c9:7b:69:88:ef:0c:e5:46:d5: f5:36:5c:d7:69:51:4b:a2:5c:d2:30:e6:66:6b:cc: 11:ec:ab:d9:ac:51:de:2a:a3:e8:fc:64:62:b0:0d: dd:0d:d5:fb:4b:aa:a5:8e:3e:66:79:e7:bb:27:d3: f6:fe:f6:2e:e7:f7:cc:ee:a9:58:e9:c5:32:f1:d8: 6e:71:b8:12:49:f5:08:0e:c2:bd:b3:4b:63:19:47: e5:aa:34:7a:ce:89:b8:41:d6:37:7c:8d:e7:72:0d: 3c:e0:7e:65:59:d1:1a:a2:6a:d9:eb:df:45:1f:68: 39:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AC:59:9A:2D:5C:AD:BA:E4:B0:60:D5:8D:BC:84:98:1A:59:CF:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3e233b44-911d-3c32-9600-9580640a3557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 72.29.96.0/19 72.249.0.0-72.249.191.255 74.112.92.0/22 74.114.180.0/22 74.118.40.0/22 74.120.208.0/22 74.213.128.0/19 96.31.160.0/20 98.142.80.0/20 104.37.108.0/22 144.202.128.0/17 162.216.52.0/22 162.220.104.0/22 162.222.96.0/22 162.248.248.0/21 173.237.128.0/18 173.240.48.0/20 174.136.0.0/18 192.197.58.0/23 198.35.116.0/22 199.21.64.0/21 199.87.60.0/22 199.96.248.0/21 199.188.208.0/22 199.193.140.0/22 199.193.176.0/22 199.233.224.0/22 204.11.208.0/22 204.15.100.0/22 204.16.108.0/22 205.147.202.0/24 205.147.208.0/24 205.147.218.0/24 205.147.235.0/24 206.123.64.0/18 206.245.164.0/24 207.8.244.0/22 207.45.160.0/20 207.154.0.0/18 207.210.192.0/18 207.254.208.0/20 208.67.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:e9:08:e9:3b:2e:4f:66:ee:b5:99:43:00:c0:4d:c8:f3:0d: ba:54:c1:a9:66:66:d8:f7:41:a9:36:aa:98:03:24:91:79:27: 13:2e:f9:1a:33:4d:6b:ab:cd:36:6f:1a:da:16:a6:cc:70:6a: 59:f7:59:48:80:c5:62:b8:06:ab:c9:49:e0:c3:45:86:f4:0a: 54:36:55:12:fa:47:17:97:2f:a3:e9:61:ed:f0:4d:0f:82:6e: 41:f1:c7:49:22:3f:ff:65:9b:ee:b9:15:3f:f9:4e:e9:d8:18: dd:66:23:0b:83:52:86:96:ce:bd:15:b3:59:df:87:63:32:dd: 89:1f:8a:49:59:49:21:c4:61:df:5e:ef:fc:2f:be:8d:71:4a: 1c:50:8d:c7:b5:05:ea:9e:e3:09:94:a8:40:3e:90:4f:19:67: 96:78:d1:1a:a0:15:aa:32:d4:f2:0f:15:a8:3c:55:7b:28:08: 0d:6d:f0:2c:cc:47:07:a7:70:30:6c:d3:55:98:78:a3:e1:56: 27:1b:49:ff:1b:5e:c8:d8:8f:61:b7:74:68:26:b9:94:ab:f0: b1:4e:b1:99:27:7b:0e:c1:bf:37:51:11:a3:ab:65:de:e5:b9: e3:25:b2:0d:28:4e:7e:92:e7:46:03:98:c4:03:ce:1e:15:fe: 8a:43:82:28 -----BEGIN CERTIFICATE----- MIIHSjCCBjKgAwIBAgIUAQ0Mn0MoWE8NbO0aEAvWbu5hNkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk Yjg4OWM1MmEtY2Y4MS00MzNjLWEyODMtMmM5ZjU0MmRlN2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUr+TiFWq3BImBK3VB6ZcxvLmoCaVTFz5Gjk iFsY+GQyzz1eSRLCsP7Sif6f1rfCNvliwbAt6Y8XT3A6xY7/6xe8SrVjZ5jjU+Xu wnfY/R2BkLBFpMeNu+3/9h6LWd5OJfCr5UjbcUSSF5tLE0No0eqp2Qm/xYEdX2j/ G7bdF4Wz3AD0mQRXFMBQzsXJe2mI7wzlRtX1NlzXaVFLolzSMOZma8wR7KvZrFHe KqPo/GRisA3dDdX7S6qljj5meee7J9P2/vYu5/fM7qlY6cUy8dhucbgSSfUIDsK9 s0tjGUflqjR6zom4QdY3fI3ncg084H5lWdEaomrZ699FH2g5tQIDAQABo4IEXDCC BFgwHQYDVR0OBBYEFIWsWZotXK265LBg1Y28hJgaWc9tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvM2UyMzNiNDQtOTExZC0z YzMyLTk2MDAtOTU4MDY0MGEzNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMIIBJAYIKwYBBQUHAQcBAf8EggETMIIBDzCCAQsEAgABMIIB AwMEBUgdYDALAwMASPkDBAZI+YADBAJKcFwDBAJKcrQDBAJKdigDBAJKeNADBAVK 1YADBARgH6ADBARijlADBAJoJWwDBAeQyoADBAKi2DQDBAKi3GgDBAKi3mADBAOi +PgDBAat7YADBASt8DADBAauiAADBAHAxToDBALGI3QDBAPHFUADBALHVzwDBAPH YPgDBALHvNADBALHwYwDBALHwbADBALH6eADBALMC9ADBALMD2QDBALMEGwDBADN k8oDBADNk9ADBADNk9oDBADNk+sDBAbOe0ADBADO9aQDBALPCPQDBATPLaADBAbP mgADBAbP0sADBATP/tADBAPQQ3gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAf+kI6TsuT2butZlDAMBNyPMN ulTBqWZm2PdBqTaqmAMkkXknEy75GjNNa6vNNm8a2hamzHBqWfdZSIDFYrgGq8lJ 4MNFhvQKVDZVEvpHF5cvo+lh7fBND4JuQfHHSSI//2Wb7rkVP/lO6dgY3WYjC4NS hpbOvRWzWd+HYzLdiR+KSVlJIcRh317v/C++jXFKHFCNx7UF6p7jCZSoQD6QTxln lnjRGqAVqjLU8g8VqDxVeygIDW3wLMxHB6dwMGzTVZh4o+FWJxtJ/xteyNiPYbd0 aCa5lKvwsU6xmSd7DsG/N1ERo6tl3uW54yWyDShOfpLnRgOYxAPOHhX+ikOCKA== -----END CERTIFICATE-----Generated at Sat Sep 5 08:05:06 2026 by rpki-client