$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d0247306-290f-4f19-89c3-f2f1fe2c16d5/ceeaa520-dfdc-304f-b4db-b794853b5d2d.roa File: ceeaa520-dfdc-304f-b4db-b794853b5d2d.roa (raw, json) Hash identifier: 0InoRBNogMQq2GmcQfQKKcR+wkcaJe3oXOznBC6v4NI= Subject key identifier: 98:CF:08:2A:25:E8:F8:8D:25:20:1D:59:F8:FA:F4:31:CD:C4:F1:89 Certificate issuer: /CN=d0247306-290f-4f19-89c3-f2f1fe2c16d5 Certificate serial: 010D0C9F4328584DFF0A0093B0B7D85D35FCCE80 Authority key identifier: 29:01:B4:58:73:01:74:01:DA:58:66:DA:B5:8A:DE:C4:B7:C4:4C:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d0247306-290f-4f19-89c3-f2f1fe2c16d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d0247306-290f-4f19-89c3-f2f1fe2c16d5/ceeaa520-dfdc-304f-b4db-b794853b5d2d.roa Signing time: Fri 29 May 2026 16:32:51 +0000 ROA not before: Fri 29 May 2026 16:32:51 +0000 ROA not after: Thu 27 Aug 2026 16:32:51 +0000 asID: 4927 IP address blocks: 64.29.224.0/20 maxlen: 20 64.68.128.0/21 maxlen: 21 64.68.136.0/21 maxlen: 21 205.254.224.0/19 maxlen: 19 207.71.192.0/18 maxlen: 18 207.154.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d0247306-290f-4f19-89c3-f2f1fe2c16d5/d0247306-290f-4f19-89c3-f2f1fe2c16d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d0247306-290f-4f19-89c3-f2f1fe2c16d5/d0247306-290f-4f19-89c3-f2f1fe2c16d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d0247306-290f-4f19-89c3-f2f1fe2c16d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ff:0a:00:93:b0:b7:d8:5d:35:fc:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0247306-290f-4f19-89c3-f2f1fe2c16d5 Validity Not Before: May 29 16:32:51 2026 GMT Not After : Aug 27 16:32:51 2026 GMT Subject: CN=1ebbf544-ce58-4979-b741-6448e5cd0fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b5:ba:ed:09:fd:dc:e1:a0:fc:ce:be:3f:dc: 38:e8:f4:65:88:86:4e:fd:fc:f6:dc:e2:e4:31:ae: 7e:7b:30:62:14:19:73:3f:ad:4f:9e:7d:66:ef:af: bd:0f:de:de:a4:ce:25:f7:d1:9d:9d:f5:2e:b9:0e: 7b:21:4e:63:1b:b2:f9:43:c0:f4:0e:19:b7:f7:3e: 45:b3:4b:1d:e8:b2:93:96:d5:39:92:dd:00:0c:79: df:34:dc:ae:6e:4d:58:e1:f3:76:2e:7f:c0:fa:02: a8:be:76:9e:51:de:9a:70:eb:5f:8e:9e:86:32:24: 01:2c:e2:f2:77:28:ea:db:f7:c4:fd:9a:d9:fa:bf: 15:ce:9a:ee:f9:83:bc:38:ad:71:45:76:f5:97:da: 1e:3c:5c:79:d0:b6:7f:42:58:16:ce:15:1c:a0:d7: 1f:29:23:d8:3e:bc:d1:78:e6:f7:44:44:03:14:86: b4:42:eb:46:7d:85:70:a2:bd:71:84:e2:27:7f:f2: e5:0a:2a:37:99:77:38:b7:99:80:02:f3:fc:01:5a: b9:dd:0b:f8:81:3a:05:67:88:d8:dc:83:e1:8e:28: c9:87:26:f2:98:0d:f0:40:27:8e:3f:91:cd:a9:bf: 89:3f:4e:37:ea:c9:4d:8c:b5:82:0d:1a:06:26:7a: 02:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:CF:08:2A:25:E8:F8:8D:25:20:1D:59:F8:FA:F4:31:CD:C4:F1:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d0247306-290f-4f19-89c3-f2f1fe2c16d5/ceeaa520-dfdc-304f-b4db-b794853b5d2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d0247306-290f-4f19-89c3-f2f1fe2c16d5/d0247306-290f-4f19-89c3-f2f1fe2c16d5.crl X509v3 Authority Key Identifier: keyid:29:01:B4:58:73:01:74:01:DA:58:66:DA:B5:8A:DE:C4:B7:C4:4C:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d0247306-290f-4f19-89c3-f2f1fe2c16d5.cer sbgp-ipAddrBlock: critical IPv4: 64.29.224.0/20 64.68.128.0/20 205.254.224.0/19 207.71.192.0/18 207.154.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:42:a1:ee:5c:62:ed:54:2b:a2:ca:e9:2a:42:b9:6f:e7:74: f1:9e:87:a6:11:4e:91:73:06:e6:77:18:b6:ab:34:af:db:44: bd:2c:40:21:96:f7:c8:2c:73:a4:e7:d3:1e:eb:49:64:0e:96: 69:57:ec:fc:a1:da:0d:f9:f3:8e:b2:f1:17:91:9b:d9:4e:42: 5d:16:a0:a9:14:3e:ff:43:a6:ac:cd:72:78:5b:7d:03:57:30: d1:d0:b5:fb:36:b6:51:47:94:79:21:19:7e:58:37:e4:3b:33: d0:c4:9c:04:26:96:54:04:92:b0:0c:09:3e:ff:53:77:9e:7c: aa:bc:28:96:e8:a1:5d:89:fa:a2:1b:9e:5d:19:ff:e1:fd:cc: 4e:ab:c7:ce:4a:ce:d9:12:f4:17:26:0a:a8:43:7a:06:29:bd: f7:86:57:e8:6a:4b:11:e3:16:52:63:0b:3e:fd:ae:05:e0:52: ea:a9:5e:3a:ac:ce:b9:10:c3:0d:3f:db:63:26:29:eb:bb:6e: 33:ab:50:e7:12:b9:bc:2c:d7:f0:0b:4e:b8:ac:09:7c:d2:71: de:09:91:ed:26:b1:38:84:b1:a2:53:21:75:4c:e8:42:f3:43: 3d:4d:dd:f7:c3:67:1c:4d:98:55:3b:ac:61:cc:85:15:4a:42: 78:65:c3:c3 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWE3/CgCTsLfYXTX8zoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyNDczMDYtMjkwZi00ZjE5LTg5YzMtZjJmMWZlMmMx NmQ1MB4XDTI2MDUyOTE2MzI1MVoXDTI2MDgyNzE2MzI1MVowLzEtMCsGA1UEAxMk MWViYmY1NDQtY2U1OC00OTc5LWI3NDEtNjQ0OGU1Y2QwZmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLW67Qn93OGg/M6+P9w46PRliIZO/fz23OLk Ma5+ezBiFBlzP61Pnn1m76+9D97epM4l99GdnfUuuQ57IU5jG7L5Q8D0Dhm39z5F s0sd6LKTltU5kt0ADHnfNNyubk1Y4fN2Ln/A+gKovnaeUd6acOtfjp6GMiQBLOLy dyjq2/fE/ZrZ+r8Vzpru+YO8OK1xRXb1l9oePFx50LZ/QlgWzhUcoNcfKSPYPrzR eOb3REQDFIa0QutGfYVwor1xhOInf/LlCio3mXc4t5mAAvP8AVq53Qv4gToFZ4jY 3IPhjijJhybymA3wQCeOP5HNqb+JP0436slNjLWCDRoGJnoCQwIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFJjPCCol6PiNJSAdWfj69DHNxPGJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMDI0 NzMwNi0yOTBmLTRmMTktODljMy1mMmYxZmUyYzE2ZDUvY2VlYWE1MjAtZGZkYy0z MDRmLWI0ZGItYjc5NDg1M2I1ZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDAyNDczMDYtMjkwZi00ZjE5LTg5 YzMtZjJmMWZlMmMxNmQ1L2QwMjQ3MzA2LTI5MGYtNGYxOS04OWMzLWYyZjFmZTJj MTZkNS5jcmwwHwYDVR0jBBgwFoAUKQG0WHMBdAHaWGbatYrexLfETH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMDI0NzMwNi0yOTBmLTRmMTktODljMy1mMmYx ZmUyYzE2ZDUuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQEQB3gAwQE QESAAwQFzf7gAwQGz0fAAwQGz5pAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAItCoe5cYu1UK6LK6SpCuW/n dPGeh6YRTpFzBuZ3GLarNK/bRL0sQCGW98gsc6Tn0x7rSWQOlmlX7Pyh2g35846y 8ReRm9lOQl0WoKkUPv9DpqzNcnhbfQNXMNHQtfs2tlFHlHkhGX5YN+Q7M9DEnAQm llQEkrAMCT7/U3eefKq8KJbooV2J+qIbnl0Z/+H9zE6rx85KztkS9BcmCqhDegYp vfeGV+hqSxHjFlJjCz79rgXgUuqpXjqszrkQww0/22MmKeu7bjOrUOcSubws1/AL TrisCXzScd4Jke0msTiEsaJTIXVM6ELzQz1N3ffDZxxNmFU7rGHMhRVKQnhlw8M= -----END CERTIFICATE-----Generated at Mon Jun 1 22:03:32 2026 by rpki-client