$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f590e03b-2ef1-38c0-a232-e14e41e07ad5.roa File: f590e03b-2ef1-38c0-a232-e14e41e07ad5.roa (raw, json) Hash identifier: UALdD8+xgr9NZMqelxRDQHSoAleuGWd1lUlJC8zTpbU= Subject key identifier: 83:3E:16:EC:92:84:6B:70:2A:D1:B8:E3:1C:A9:43:2C:35:A4:68:2F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D0A77C2A7572724D61D92A680 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f590e03b-2ef1-38c0-a232-e14e41e07ad5.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 7459 IP address blocks: 64.144.96.0/20 maxlen: 24 64.144.144.0/20 maxlen: 24 64.144.240.0/20 maxlen: 24 66.134.96.0/19 maxlen: 24 67.102.192.0/19 maxlen: 24 68.165.112.0/20 maxlen: 24 68.167.80.0/20 maxlen: 24 68.167.96.0/19 maxlen: 24 68.167.160.0/20 maxlen: 24 68.167.208.0/20 maxlen: 24 68.167.224.0/20 maxlen: 24 207.145.16.0/20 maxlen: 24 207.145.112.0/20 maxlen: 24 207.145.128.0/20 maxlen: 24 207.145.160.0/20 maxlen: 24 216.254.32.0/19 maxlen: 24 216.254.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:c2:a7:57:27:24:d6:1d:92:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=3391ffa4-e61e-4226-bf53-8dc97c178c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:52:c4:95:5c:89:29:1b:4e:cc:79:1f:30:19: 02:d7:ff:04:1b:e5:be:da:e7:72:8d:90:0f:f4:e3: ef:2f:9a:0f:6d:34:2e:48:b1:d7:46:a8:47:82:f5: ab:41:d7:ed:4a:cf:82:60:d0:53:1b:ec:c0:01:10: 80:0c:24:a8:f8:f6:13:84:aa:b9:d4:35:7f:45:16: 8b:e0:3c:aa:13:b0:91:bd:86:e9:83:c9:52:7f:a0: c3:a7:08:5c:c5:a5:c9:e3:a3:1f:d5:b0:a3:d2:61: 3b:1e:30:10:88:51:af:eb:39:85:e7:f8:5f:de:3f: 6d:f5:cc:f1:3b:68:08:02:6e:cf:09:e2:b7:6c:69: 21:70:9d:a9:3b:f4:3d:f7:c2:80:ce:48:4b:49:f6: cd:9c:86:ed:13:86:f6:70:66:66:b4:16:39:a4:14: be:14:7b:f0:22:1b:0f:5b:90:ff:10:1a:b5:b2:d7: 6c:8f:62:a9:0e:03:0b:5d:80:09:cb:da:22:80:47: ab:c2:44:c1:cf:00:15:12:7d:96:58:2d:33:55:8b: bd:3f:1e:aa:bc:3a:a1:05:f0:98:89:69:e8:03:b5: 4f:64:e1:a8:56:47:e4:8f:67:13:f8:b9:9d:60:62: 80:82:e9:f7:cd:fd:b7:17:88:4d:bf:0f:50:a2:e9: 79:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3E:16:EC:92:84:6B:70:2A:D1:B8:E3:1C:A9:43:2C:35:A4:68:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f590e03b-2ef1-38c0-a232-e14e41e07ad5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.144.96.0/20 64.144.144.0/20 64.144.240.0/20 66.134.96.0/19 67.102.192.0/19 68.165.112.0/20 68.167.80.0-68.167.127.255 68.167.160.0/20 68.167.208.0-68.167.239.255 207.145.16.0/20 207.145.112.0-207.145.143.255 207.145.160.0/20 216.254.32.0/19 216.254.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:6d:f0:fc:ad:2a:0d:d4:d1:51:05:bf:a1:4a:90:13:dc:36: 2d:f2:a5:4e:a1:6f:6c:59:8c:0a:2a:e6:71:12:30:82:6d:89: 90:92:b0:ec:2f:eb:38:03:d3:d2:07:5b:ba:20:bc:22:72:0f: 45:16:b9:23:9f:b0:19:a7:5d:93:d2:d7:79:27:a8:cd:ac:e4: 64:22:51:61:f7:e3:d6:d9:5b:df:4f:f6:9c:2c:40:26:6a:7f: c9:96:4e:f2:b5:e1:cc:e1:41:2a:ed:0f:f1:4a:13:24:50:86: 93:79:7f:31:32:a1:e5:2a:e2:25:95:b1:97:a0:56:3b:37:96: 3a:a3:6e:9b:e2:72:fc:11:6f:c3:67:6c:73:c8:00:7c:c7:38: 9b:a4:8c:57:0a:94:f8:27:87:94:0e:16:18:54:ac:c3:d1:bd: 5d:41:07:f9:88:41:98:bf:ef:18:eb:c9:c5:eb:37:9d:8a:c4: 29:40:e0:f5:09:64:70:3c:8e:ff:5c:39:c0:08:79:3a:e4:4e: f7:64:7d:8f:19:eb:ea:48:49:80:c2:da:e2:71:f3:94:be:b5: e5:1f:5f:01:22:e3:38:19:3c:6d:01:d9:79:77:97:63:1e:fb: 4c:64:eb:c8:a8:ff:07:18:33:65:32:48:f8:d8:dd:c1:9c:ed: 98:d0:df:f2 -----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgIUAQ0Mn0MoWE0Kd8KnVyck1h2SpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk MzM5MWZmYTQtZTYxZS00MjI2LWJmNTMtOGRjOTdjMTc4YzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFLElVyJKRtOzHkfMBkC1/8EG+W+2udyjZAP 9OPvL5oPbTQuSLHXRqhHgvWrQdftSs+CYNBTG+zAARCADCSo+PYThKq51DV/RRaL 4DyqE7CRvYbpg8lSf6DDpwhcxaXJ46Mf1bCj0mE7HjAQiFGv6zmF5/hf3j9t9czx O2gIAm7PCeK3bGkhcJ2pO/Q998KAzkhLSfbNnIbtE4b2cGZmtBY5pBS+FHvwIhsP W5D/EBq1stdsj2KpDgMLXYAJy9oigEerwkTBzwAVEn2WWC0zVYu9Px6qvDqhBfCY iWnoA7VPZOGoVkfkj2cT+LmdYGKAgun3zf23F4hNvw9Qoul5jwIDAQABo4IDvDCC A7gwHQYDVR0OBBYEFIM+FuyShGtwKtG44xypQyw1pGgvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZjU5MGUwM2ItMmVmMS0z OGMwLWEyMzItZTE0ZTQxZTA3YWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEBECQYAME BECQkAMEBECQ8AMEBUKGYAMEBUNmwAMEBESlcDAMAwQERKdQAwQHRKcAAwQERKeg MAwDBAREp9ADBAREp+ADBATPkRAwDAMEBM+RcAMEBM+RgAMEBM+RoAMEBdj+IAME Bdj+YDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQCobfD8rSoN1NFRBb+hSpAT3DYt8qVOoW9sWYwKKuZxEjCC bYmQkrDsL+s4A9PSB1u6ILwicg9FFrkjn7AZp12T0td5J6jNrORkIlFh9+PW2Vvf T/acLEAman/Jlk7yteHM4UEq7Q/xShMkUIaTeX8xMqHlKuIllbGXoFY7N5Y6o26b 4nL8EW/DZ2xzyAB8xzibpIxXCpT4J4eUDhYYVKzD0b1dQQf5iEGYv+8Y68nF6zed isQpQOD1CWRwPI7/XDnACHk65E73ZH2PGevqSEmAwtricfOUvrXlH18BIuM4GTxt Adl5d5djHvtMZOvIqP8HGDNlMkj42N3BnO2Y0N/y -----END CERTIFICATE-----Generated at Thu Mar 5 22:05:44 2026 by rpki-client