$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/0cc982f6-b60e-35b5-b0aa-0b9f4c802a3b.roa File: 0cc982f6-b60e-35b5-b0aa-0b9f4c802a3b.roa (raw, json) Hash identifier: yzWOFpmRs5MGaA/aZDLTycfRn6EtKNrC9zqueYFqWMw= Subject key identifier: 9B:49:E6:A6:34:DC:D5:6B:C1:19:CA:62:A0:D1:81:D4:D3:1D:AB:66 Certificate issuer: /CN=418536e3-a238-4d5c-85de-f77873e419af Certificate serial: 010D0C9F4328584EA788A4BC44CB1EFDA29B4600 Authority key identifier: 86:30:08:47:96:08:91:BF:19:5C:82:DE:7F:52:59:C1:30:76:FE:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/0cc982f6-b60e-35b5-b0aa-0b9f4c802a3b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 21777 IP address blocks: 72.18.208.0/24 maxlen: 24 72.18.210.0/24 maxlen: 24 72.18.212.0/23 maxlen: 23 72.18.217.0/24 maxlen: 24 72.18.218.0/23 maxlen: 23 72.18.220.0/24 maxlen: 24 72.18.223.0/24 maxlen: 24 199.45.166.0/24 maxlen: 24 199.45.236.0/22 maxlen: 22 199.45.240.0/24 maxlen: 24 199.45.255.0/24 maxlen: 24 199.127.200.0/22 maxlen: 22 204.144.128.0/22 maxlen: 22 204.144.132.0/23 maxlen: 23 204.144.134.0/24 maxlen: 24 204.144.140.0/23 maxlen: 23 204.144.151.0/24 maxlen: 24 204.144.181.0/24 maxlen: 24 204.144.184.0/24 maxlen: 24 206.168.0.0/24 maxlen: 24 206.168.13.0/24 maxlen: 24 206.168.39.0/24 maxlen: 24 206.168.96.0/24 maxlen: 24 206.168.112.0/24 maxlen: 24 206.168.114.0/24 maxlen: 24 206.168.117.0/24 maxlen: 24 206.168.153.0/24 maxlen: 24 206.168.172.0/24 maxlen: 24 206.168.187.0/24 maxlen: 24 206.168.188.0/24 maxlen: 24 206.168.189.0/24 maxlen: 24 206.168.216.0/22 maxlen: 22 206.168.220.0/24 maxlen: 24 206.168.222.0/23 maxlen: 23 206.168.224.0/21 maxlen: 21 207.174.8.0/24 maxlen: 24 207.174.21.0/24 maxlen: 24 207.174.72.0/23 maxlen: 23 207.174.76.0/24 maxlen: 24 207.174.77.0/24 maxlen: 24 207.174.98.0/24 maxlen: 24 207.174.113.0/24 maxlen: 24 207.174.114.0/24 maxlen: 24 207.174.117.0/24 maxlen: 24 207.174.130.0/24 maxlen: 24 207.174.137.0/24 maxlen: 24 207.174.138.0/23 maxlen: 23 207.174.140.0/22 maxlen: 22 207.174.157.0/24 maxlen: 24 207.174.175.0/24 maxlen: 24 207.174.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/418536e3-a238-4d5c-85de-f77873e419af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/418536e3-a238-4d5c-85de-f77873e419af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:a4:bc:44:cb:1e:fd:a2:9b:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=418536e3-a238-4d5c-85de-f77873e419af Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=de67d817-6002-4416-8b2a-51c1fd190f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:93:d3:02:72:8e:31:d5:ce:15:f9:a8:f1:69: 2f:8e:c9:35:e5:76:56:65:4e:e2:b0:65:91:b1:d7: 06:09:5c:54:29:40:a3:84:94:c1:4a:e0:17:70:f6: d0:59:96:4a:37:a5:03:5f:3d:b4:87:61:dd:f1:fb: 05:6d:f0:f0:b7:c6:2e:4b:39:81:2a:1a:04:4f:3a: ef:bf:4f:ea:49:78:34:74:dc:6e:6e:3e:59:46:db: d6:f8:0c:5a:d8:7f:e1:33:b8:1e:80:b5:7b:1b:ba: c3:b4:f8:89:3d:83:80:eb:5c:96:f9:03:92:b1:23: 02:ce:62:01:9a:af:14:89:23:39:1e:89:0e:f2:a6: bd:4f:a5:19:63:f0:61:59:75:aa:ff:fd:25:6c:58: ac:fa:f5:d6:f3:7c:7a:ea:89:4c:40:a9:cd:aa:c0: d8:72:c0:7d:0a:0a:43:af:8d:cc:e5:2b:3b:40:52: a2:b4:2b:31:92:8a:16:1f:77:e0:c4:4b:a2:08:3a: 3c:40:5f:3a:f7:dc:e7:89:8b:d7:fa:7b:fd:6c:d5: b2:a2:d2:94:bf:98:22:09:dc:5e:53:0c:f3:f7:de: a5:1e:2e:1a:4d:93:2d:47:10:64:e7:8b:55:7e:cd: 8f:8e:2e:72:ba:62:c4:40:9e:b6:79:7e:00:ae:e3: 44:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:49:E6:A6:34:DC:D5:6B:C1:19:CA:62:A0:D1:81:D4:D3:1D:AB:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/0cc982f6-b60e-35b5-b0aa-0b9f4c802a3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/418536e3-a238-4d5c-85de-f77873e419af.crl X509v3 Authority Key Identifier: keyid:86:30:08:47:96:08:91:BF:19:5C:82:DE:7F:52:59:C1:30:76:FE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af.cer sbgp-ipAddrBlock: critical IPv4: 72.18.208.0/24 72.18.210.0/24 72.18.212.0/23 72.18.217.0-72.18.220.255 72.18.223.0/24 199.45.166.0/24 199.45.236.0-199.45.240.255 199.45.255.0/24 199.127.200.0/22 204.144.128.0-204.144.134.255 204.144.140.0/23 204.144.151.0/24 204.144.181.0/24 204.144.184.0/24 206.168.0.0/24 206.168.13.0/24 206.168.39.0/24 206.168.96.0/24 206.168.112.0/24 206.168.114.0/24 206.168.117.0/24 206.168.153.0/24 206.168.172.0/24 206.168.187.0-206.168.189.255 206.168.216.0-206.168.220.255 206.168.222.0-206.168.231.255 207.174.8.0/24 207.174.21.0/24 207.174.72.0/23 207.174.76.0/23 207.174.98.0/24 207.174.113.0-207.174.114.255 207.174.117.0/24 207.174.130.0/24 207.174.137.0-207.174.143.255 207.174.157.0/24 207.174.175.0/24 207.174.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:ac:56:5e:b0:b1:24:d7:82:8e:0b:24:1e:f9:3d:14:28:89: 7a:4a:03:d6:a1:e4:b2:ee:7b:c8:d0:5e:5b:8b:9b:fd:62:b5: 8c:0d:03:02:d8:50:3c:90:7a:4f:13:84:76:f6:56:87:6c:17: 30:cf:44:1a:47:ba:d3:68:f8:3e:ee:2e:1d:74:5f:14:94:7e: 9f:5c:d8:32:27:68:d9:de:f8:8d:c2:bc:ec:ae:4e:3f:df:9e: 35:17:43:ec:99:07:9a:d5:a2:78:8b:95:a3:19:ef:21:ca:ea: b5:4d:0f:e7:99:43:72:ff:41:79:77:53:fb:85:72:85:84:f1: 51:b5:ca:8a:91:d2:64:a4:fc:ea:37:bf:fd:74:19:e5:40:a3: 93:18:41:95:4d:ee:83:f9:98:40:4a:d0:26:d2:c5:9a:4a:a8: 84:a8:fc:27:83:fd:18:e0:eb:e0:67:db:2a:69:ac:5a:6f:0f: 38:d1:75:99:5b:7b:59:7f:b7:a0:e7:ad:39:67:04:0a:7c:fe: 19:40:2c:88:94:52:1f:05:62:18:1d:d2:f1:c8:a5:cb:78:49: 0f:3e:97:f4:85:92:f6:79:3b:81:b0:56:5f:95:3d:41:ab:4c: 50:47:22:04:4c:40:44:a7:6e:b4:88:e9:5d:fa:5a:d1:1a:33: cf:51:a4:6d -----BEGIN CERTIFICATE----- MIIHazCCBlOgAwIBAgIUAQ0Mn0MoWE6niKS8RMse/aKbRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE4NTM2ZTMtYTIzOC00ZDVjLTg1ZGUtZjc3ODczZTQx OWFmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZGU2N2Q4MTctNjAwMi00NDE2LThiMmEtNTFjMWZkMTkwZjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpPTAnKOMdXOFfmo8Wkvjsk15XZWZU7isGWR sdcGCVxUKUCjhJTBSuAXcPbQWZZKN6UDXz20h2Hd8fsFbfDwt8YuSzmBKhoETzrv v0/qSXg0dNxubj5ZRtvW+Axa2H/hM7gegLV7G7rDtPiJPYOA61yW+QOSsSMCzmIB mq8UiSM5HokO8qa9T6UZY/BhWXWq//0lbFis+vXW83x66olMQKnNqsDYcsB9CgpD r43M5Ss7QFKitCsxkooWH3fgxEuiCDo8QF8699zniYvX+nv9bNWyotKUv5giCdxe Uwzz996lHi4aTZMtRxBk54tVfs2Pji5yumLEQJ62eX4AruNECwIDAQABo4IEfTCC BHkwHQYDVR0OBBYEFJtJ5qY03NVrwRnKYqDRgdTTHatmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80MTg1 MzZlMy1hMjM4LTRkNWMtODVkZS1mNzc4NzNlNDE5YWYvMGNjOTgyZjYtYjYwZS0z NWI1LWIwYWEtMGI5ZjRjODAyYTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNDE4NTM2ZTMtYTIzOC00ZDVjLTg1 ZGUtZjc3ODczZTQxOWFmLzQxODUzNmUzLWEyMzgtNGQ1Yy04NWRlLWY3Nzg3M2U0 MTlhZi5jcmwwHwYDVR0jBBgwFoAUhjAIR5YIkb8ZXILef1JZwTB2/i4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80MTg1MzZlMy1hMjM4LTRkNWMtODVkZS1mNzc4 NzNlNDE5YWYuY2VyMIIBRQYIKwYBBQUHAQcBAf8EggE0MIIBMDCCASwEAgABMIIB JAMEAEgS0AMEAEgS0gMEAUgS1DAMAwQASBLZAwQASBLcAwQASBLfAwQAxy2mMAwD BALHLewDBADHLfADBADHLf8DBALHf8gwDAMEB8yQgAMEAMyQhgMEAcyQjAMEAMyQ lwMEAMyQtQMEAMyQuAMEAM6oAAMEAM6oDQMEAM6oJwMEAM6oYAMEAM6ocAMEAM6o cgMEAM6odQMEAM6omQMEAM6orDAMAwQAzqi7AwQBzqi8MAwDBAPOqNgDBADOqNww DAMEAc6o3gMEA86o4AMEAM+uCAMEAM+uFQMEAc+uSAMEAc+uTAMEAM+uYjAMAwQA z65xAwQAz65yAwQAz651AwQAz66CMAwDBADProkDBATProADBADPrp0DBADPrq8D BADPrskwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAPKxWXrCxJNeCjgskHvk9FCiJekoD1qHksu57yNBeW4ub /WK1jA0DAthQPJB6TxOEdvZWh2wXMM9EGke602j4Pu4uHXRfFJR+n1zYMido2d74 jcK87K5OP9+eNRdD7JkHmtWieIuVoxnvIcrqtU0P55lDcv9BeXdT+4VyhYTxUbXK ipHSZKT86je//XQZ5UCjkxhBlU3ug/mYQErQJtLFmkqohKj8J4P9GODr4GfbKmms Wm8PONF1mVt7WX+3oOetOWcECnz+GUAsiJRSHwViGB3S8cily3hJDz6X9IWS9nk7 gbBWX5U9QatMUEciBExARKdutIjpXfpa0Rozz1GkbQ== -----END CERTIFICATE-----Generated at Mon Aug 31 10:37:50 2026 by rpki-client