$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/f842fac7-cd73-3534-92f5-b9959d9393b4.roa File: f842fac7-cd73-3534-92f5-b9959d9393b4.roa (raw, json) Hash identifier: dxEe5soG8R1SF7o8/wdB1sgVOn9kamC/lY7eEJCxKmo= Subject key identifier: A2:CC:D9:44:2D:CE:93:D1:FE:D2:35:43:85:B4:B6:B0:54:43:45:FB Certificate issuer: /CN=cbfbd197-84de-44e6-b527-b42dddca269d Certificate serial: 010D0C9F4328584E4D9D1CD67433D043AA16C0A0 Authority key identifier: 60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/f842fac7-cd73-3534-92f5-b9959d9393b4.roa Signing time: Fri 26 Jun 2026 20:02:19 +0000 ROA not before: Fri 26 Jun 2026 20:02:19 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 46414 IP address blocks: 64.135.132.0/23 maxlen: 24 64.135.134.0/23 maxlen: 24 66.252.62.0/23 maxlen: 24 68.68.225.0/24 maxlen: 24 68.68.227.0/24 maxlen: 24 68.68.228.0/24 maxlen: 24 68.68.230.0/23 maxlen: 24 68.68.235.0/24 maxlen: 24 97.107.152.0/24 maxlen: 24 97.107.155.0/24 maxlen: 24 97.107.156.0/22 maxlen: 24 2607:4a00:4000::/35 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4d:9d:1c:d6:74:33:d0:43:aa:16:c0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfbd197-84de-44e6-b527-b42dddca269d Validity Not Before: Jun 26 20:02:19 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=b5f06bad-4cc8-4d89-9795-7003bd0c8df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3c:05:36:d8:3a:bf:12:b8:f6:f5:71:a5:98: 47:c4:58:80:90:68:04:b8:97:cf:0c:88:02:df:c4: af:97:e3:87:49:0e:77:de:70:f2:ee:9b:64:64:d7: 6c:3f:d4:1f:48:4f:94:42:f0:24:64:45:c2:f9:d4: 50:0c:af:08:a7:d2:85:e5:22:6e:4b:07:05:d5:e0: c5:21:e5:11:8f:1e:30:ea:a2:62:04:52:48:11:40: ee:17:0a:82:d0:d1:66:0d:92:48:3f:fa:86:b6:70: e3:ed:cf:7d:3f:5c:e8:62:19:f2:7c:fd:f1:42:b3: 9e:08:ca:b2:bf:06:1b:82:da:d4:e8:51:05:22:4a: 38:e6:a0:85:53:44:28:71:16:fb:ad:b1:8d:a4:cc: 84:d6:77:82:66:37:d1:6c:de:e7:70:66:9a:f9:8c: 38:d1:a8:71:c2:f6:22:de:8f:d7:2a:5f:6f:c3:8e: a9:8d:d8:8a:c4:e2:dc:b4:d4:d5:a4:66:e2:4f:01: 67:fe:fc:46:78:46:dd:f3:e7:3d:ba:40:b8:1d:c0: f0:6d:c7:09:c8:f1:66:9a:66:05:0b:94:75:18:ef: 1e:b0:bd:81:1b:2b:e8:de:59:3c:8a:1f:b0:40:a2: 35:7f:d7:34:26:42:e7:9e:56:09:c6:24:58:55:a6: 98:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CC:D9:44:2D:CE:93:D1:FE:D2:35:43:85:B4:B6:B0:54:43:45:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/f842fac7-cd73-3534-92f5-b9959d9393b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl X509v3 Authority Key Identifier: keyid:60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer sbgp-ipAddrBlock: critical IPv4: 64.135.132.0/22 66.252.62.0/23 68.68.225.0/24 68.68.227.0-68.68.228.255 68.68.230.0/23 68.68.235.0/24 97.107.152.0/24 97.107.155.0-97.107.159.255 IPv6: 2607:4a00:4000::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:12:a1:93:a0:20:a7:28:0b:5c:38:83:c3:1c:db:f8:19:53: 51:11:1b:10:b5:77:ca:ad:d6:f3:7e:32:2d:ab:ca:b7:4f:f0: ab:a6:f7:b0:eb:00:c3:f5:42:c6:28:8c:af:f1:d7:93:78:fb: a1:9e:3a:a0:16:91:f1:2e:ed:76:77:83:f1:d6:d5:71:e7:e4: 22:d7:8e:e7:99:83:57:42:fd:10:c8:4a:b0:94:64:9c:2e:76: 8f:61:64:b9:9e:60:70:b2:05:14:98:ee:4f:1d:cd:6c:91:bc: 93:75:67:00:d8:1c:5b:80:38:50:35:59:2d:4f:ae:d3:01:ec: 1f:a5:96:ac:1f:18:05:74:6e:5d:8a:d1:86:6a:5d:d8:57:33: 53:8c:19:4f:14:d4:72:ed:ae:05:89:74:05:ed:80:1e:fc:53: 0b:45:8d:e7:9d:6d:39:6d:bd:03:1d:55:6e:79:14:be:dd:90: 10:7f:d3:d0:51:7d:e8:f0:3c:49:4f:14:d8:c9:8c:89:13:51: ff:e9:ab:38:ca:6b:fd:e0:bb:6e:47:a5:cb:da:1b:ae:aa:c7: d1:b7:5d:19:82:0b:e6:f8:7e:63:5f:5b:61:52:88:11:24:54: 96:08:6b:76:53:cc:e8:f8:87:bb:c5:c8:fc:38:bb:d9:57:3b: e3:37:3d:bb -----BEGIN CERTIFICATE----- MIIGjTCCBXWgAwIBAgIUAQ0Mn0MoWE5NnRzWdDPQQ6oWwKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmYmQxOTctODRkZS00NGU2LWI1MjctYjQyZGRkY2Ey NjlkMB4XDTI2MDYyNjIwMDIxOVoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk YjVmMDZiYWQtNGNjOC00ZDg5LTk3OTUtNzAwM2JkMGM4ZGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TwFNtg6vxK49vVxpZhHxFiAkGgEuJfPDIgC 38Svl+OHSQ533nDy7ptkZNdsP9QfSE+UQvAkZEXC+dRQDK8Ip9KF5SJuSwcF1eDF IeURjx4w6qJiBFJIEUDuFwqC0NFmDZJIP/qGtnDj7c99P1zoYhnyfP3xQrOeCMqy vwYbgtrU6FEFIko45qCFU0QocRb7rbGNpMyE1neCZjfRbN7ncGaa+Yw40ahxwvYi 3o/XKl9vw46pjdiKxOLctNTVpGbiTwFn/vxGeEbd8+c9ukC4HcDwbccJyPFmmmYF C5R1GO8esL2BGyvo3lk8ih+wQKI1f9c0JkLnnlYJxiRYVaaYIwIDAQABo4IDnzCC A5swHQYDVR0OBBYEFKLM2UQtzpPR/tI1Q4W0trBUQ0X7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYmZi ZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJkZGRjYTI2OWQvZjg0MmZhYzctY2Q3My0z NTM0LTkyZjUtYjk5NTlkOTM5M2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2JmYmQxOTctODRkZS00NGU2LWI1 MjctYjQyZGRkY2EyNjlkL2NiZmJkMTk3LTg0ZGUtNDRlNi1iNTI3LWI0MmRkZGNh MjY5ZC5jcmwwHwYDVR0jBBgwFoAUYA4spE9QqBKH+KqN+PXoTKVAmu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYmZiZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJk ZGRjYTI2OWQuY2VyMGkGCCsGAQUFBwEHAQH/BFowWDBGBAIAATBAAwQCQIeEAwQB Qvw+AwQAREThMAwDBABEROMDBABEROQDBAFEROYDBABEROsDBABha5gwDAMEAGFr mwMEBWFrgDAOBAIAAjAIAwYFJgdKAEAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAixKhk6AgpygLXDiDwxzb +BlTUREbELV3yq3W834yLavKt0/wq6b3sOsAw/VCxiiMr/HXk3j7oZ46oBaR8S7t dneD8dbVcefkIteO55mDV0L9EMhKsJRknC52j2FkuZ5gcLIFFJjuTx3NbJG8k3Vn ANgcW4A4UDVZLU+u0wHsH6WWrB8YBXRuXYrRhmpd2FczU4wZTxTUcu2uBYl0Be2A HvxTC0WN551tOW29Ax1VbnkUvt2QEH/T0FF96PA8SU8U2MmMiRNR/+mrOMpr/eC7 bkely9obrqrH0bddGYIL5vh+Y19bYVKIESRUlghrdlPM6PiHu8XI/Di72Vc74zc9 uw== -----END CERTIFICATE-----Generated at Sun Jun 28 00:02:50 2026 by rpki-client