$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8b0df0b8-a817-391e-9696-9579cf3f35f2.roa File: 8b0df0b8-a817-391e-9696-9579cf3f35f2.roa (raw, json) Hash identifier: sHzlGvxDbK2q/iE1xW1crQq7xpxiqGSobpNC3Iw2A/E= Subject key identifier: 32:EF:A5:61:FE:D6:EF:A2:44:41:4A:DF:A8:54:49:92:92:3D:F1:26 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E38C9B979B599A1679BEF7D80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8b0df0b8-a817-391e-9696-9579cf3f35f2.roa Signing time: Fri 19 Jun 2026 09:00:12 +0000 ROA not before: Fri 19 Jun 2026 09:00:12 +0000 ROA not after: Thu 17 Sep 2026 09:00:12 +0000 asID: 2914 IP address blocks: 64.8.248.0/24 maxlen: 24 64.8.249.0/24 maxlen: 24 64.8.250.0/24 maxlen: 24 64.8.251.0/24 maxlen: 24 64.8.252.0/24 maxlen: 24 64.8.253.0/24 maxlen: 24 74.82.110.0/24 maxlen: 24 74.82.111.0/24 maxlen: 24 155.229.74.0/24 maxlen: 24 155.229.75.0/24 maxlen: 24 155.229.76.0/24 maxlen: 24 155.229.77.0/24 maxlen: 24 206.217.75.0/24 maxlen: 24 206.217.78.0/24 maxlen: 24 206.217.91.0/24 maxlen: 24 206.217.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:38:c9:b9:79:b5:99:a1:67:9b:ef:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jun 19 09:00:12 2026 GMT Not After : Sep 17 09:00:12 2026 GMT Subject: CN=2a28c970-254a-40ec-b92f-78c216a271f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c8:c2:25:fe:97:d5:5c:63:f7:6d:e0:a0:4e: 93:79:3f:c6:df:55:e1:34:fe:5b:c4:c5:45:4f:ea: 59:6b:ae:1c:e6:0e:18:b3:2c:ab:87:b2:d9:6e:d2: 31:5a:0e:c3:8c:37:f0:97:c5:5d:05:d3:37:f1:27: f3:04:97:7d:db:4d:58:de:9a:01:7e:45:a7:1c:83: 30:31:55:b6:37:b9:98:09:a3:47:22:e6:0a:10:2f: 21:d3:50:f2:32:31:e1:5f:81:6c:61:c5:67:6a:ba: 6c:e9:18:eb:13:77:c9:de:ca:e6:a7:81:c7:6e:2a: 21:0b:c4:46:ed:b1:5b:57:45:8e:3e:b4:3b:98:05: 25:dc:ae:36:69:1b:f3:bd:34:bd:19:b1:af:b2:ba: 53:56:dc:ef:55:a7:1e:62:dc:c6:96:0a:98:45:9a: c6:73:d5:ca:63:ec:06:2f:40:52:62:66:7a:e6:f0: fc:1d:a6:00:d5:72:91:a7:08:19:e2:15:c0:a4:a1: 86:1a:5b:11:a5:56:82:57:2d:c2:48:e9:0d:88:78: 4f:a8:bb:47:6b:f2:70:c7:d7:1c:59:28:ec:11:2e: 5e:cd:5b:d2:5f:1a:50:6f:0b:5e:40:84:f5:e8:36: f5:65:39:79:3d:8d:f1:7f:45:b5:5b:ba:bd:fb:ba: d5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:EF:A5:61:FE:D6:EF:A2:44:41:4A:DF:A8:54:49:92:92:3D:F1:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8b0df0b8-a817-391e-9696-9579cf3f35f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.8.248.0-64.8.253.255 74.82.110.0/23 155.229.74.0-155.229.77.255 206.217.75.0/24 206.217.78.0/24 206.217.91.0/24 206.217.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:06:1d:57:58:86:b2:e6:d1:de:da:15:27:e6:b3:be:7b:e7: f4:7d:f8:13:31:ef:d3:15:50:96:53:7c:33:2b:b2:3d:70:ae: 95:c8:38:13:89:55:3d:f8:8b:c1:01:b2:e4:ee:30:e6:43:d1: dd:8b:6c:12:d9:09:de:30:83:cd:38:a0:cf:c8:33:14:58:ff: 11:26:6b:4e:fa:a6:25:12:67:49:a2:9f:93:8b:14:0a:c6:45: df:25:c2:45:f0:40:73:f7:2f:01:5f:a9:cb:08:91:d0:9a:b3: fb:c8:81:f3:46:f5:75:64:00:e5:52:84:aa:04:84:d8:23:9e: c6:f6:dd:0b:af:0d:2e:ed:36:01:ea:9f:ad:03:d5:32:77:c9: bd:d9:96:64:90:df:bc:de:60:00:07:a5:d7:b8:61:11:0b:94: 35:ed:db:20:14:55:a1:a1:c2:87:91:88:c7:1c:51:dc:0e:56: 1a:c4:9d:64:28:47:37:7f:33:04:c3:32:ab:67:b7:99:c9:d4: 74:ee:7e:30:88:b8:a8:d8:73:3b:09:e6:d0:68:7f:b8:d4:c4: a5:4d:ef:a4:8a:22:14:b4:78:fa:61:b6:70:8f:70:60:64:67: 93:41:4a:c1:01:ab:73:d7:21:35:01:92:a9:c5:08:75:87:ac: e4:7f:e1:e4 -----BEGIN CERTIFICATE----- MIIGdzCCBV+gAwIBAgIUAQ0Mn0MoWE44ybl5tZmhZ5vvfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDYxOTA5MDAxMloXDTI2MDkxNzA5MDAxMlowLzEtMCsGA1UEAxMk MmEyOGM5NzAtMjU0YS00MGVjLWI5MmYtNzhjMjE2YTI3MWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicjCJf6X1Vxj923goE6TeT/G31XhNP5bxMVF T+pZa64c5g4Ysyyrh7LZbtIxWg7DjDfwl8VdBdM38SfzBJd9201Y3poBfkWnHIMw MVW2N7mYCaNHIuYKEC8h01DyMjHhX4FsYcVnarps6RjrE3fJ3srmp4HHbiohC8RG 7bFbV0WOPrQ7mAUl3K42aRvzvTS9GbGvsrpTVtzvVaceYtzGlgqYRZrGc9XKY+wG L0BSYmZ65vD8HaYA1XKRpwgZ4hXApKGGGlsRpVaCVy3CSOkNiHhPqLtHa/Jwx9cc WSjsES5ezVvSXxpQbwteQIT16Db1ZTl5PY3xf0W1W7q9+7rVgwIDAQABo4IDiTCC A4UwHQYDVR0OBBYEFDLvpWH+1u+iREFK36hUSZKSPfEmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOGIwZGYwYjgtYTgxNy0z OTFlLTk2OTYtOTU3OWNmM2YzNWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6MAwDBANACPgD BAFACPwDBAFKUm4wDAMEAZvlSgMEAZvlTAMEAM7ZSwMEAM7ZTgMEAM7ZWwMEAM7Z YDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBdBh1XWIay5tHe2hUn5rO+e+f0ffgTMe/TFVCWU3wzK7I9cK6V yDgTiVU9+IvBAbLk7jDmQ9Hdi2wS2QneMIPNOKDPyDMUWP8RJmtO+qYlEmdJop+T ixQKxkXfJcJF8EBz9y8BX6nLCJHQmrP7yIHzRvV1ZADlUoSqBITYI57G9t0Lrw0u 7TYB6p+tA9Uyd8m92ZZkkN+83mAAB6XXuGERC5Q17dsgFFWhocKHkYjHHFHcDlYa xJ1kKEc3fzMEwzKrZ7eZydR07n4wiLio2HM7CebQaH+41MSlTe+kiiIUtHj6YbZw j3BgZGeTQUrBAatz1yE1AZKpxQh1h6zkf+Hk -----END CERTIFICATE-----Generated at Fri Jul 10 13:50:50 2026 by rpki-client