$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa File: 2f73330e-1532-3517-a51f-dc46cb11c22c.roa (raw, json) Hash identifier: 2CKmdCpbwk19jr0aKC8pU32K7HxtOQ1I6cq8qOOK3v0= Subject key identifier: B4:E2:72:86:59:AC:2B:30:CC:36:9C:9D:B7:BA:84:36:0E:F1:74:3C Certificate issuer: /CN=028c0596-c3dd-44df-9761-677e68794c69 Certificate serial: 010D0C9F4328584D4A8F9607C0FD6BF56FFC1B80 Authority key identifier: D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 14371 IP address blocks: 65.18.204.0/22 maxlen: 24 66.171.40.0/21 maxlen: 24 68.235.64.0/18 maxlen: 24 104.219.196.0/22 maxlen: 24 162.254.64.0/22 maxlen: 24 205.149.144.0/20 maxlen: 24 206.223.125.0/24 maxlen: 24 208.77.24.0/22 maxlen: 24 209.191.192.0/19 maxlen: 24 2001:504:29::/48 maxlen: 48 2600:6400::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:96:07:c0:fd:6b:f5:6f:fc:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028c0596-c3dd-44df-9761-677e68794c69 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=800a7e5a-d0cb-4cc9-a839-b11be323f62a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:03:df:d0:fa:e6:4a:e9:21:26:eb:51:d0:6d: 96:23:8e:d2:0c:c0:29:45:89:8c:50:5c:80:4e:15: 39:82:45:75:fb:fa:48:d5:40:f7:6a:89:94:9e:fc: c9:6e:bb:19:35:cf:93:c8:10:63:7b:d1:11:49:f8: a7:7f:a1:cf:3b:29:fb:3e:03:9b:0c:08:a9:43:2a: 7f:1b:16:64:14:91:3c:ca:b9:a7:36:71:5f:a1:47: 4e:ef:a1:79:9b:68:51:ae:32:e2:fa:0c:53:aa:2d: 54:43:5c:bc:1e:46:2f:69:ba:2d:88:3b:a4:e6:cb: 15:5e:16:b1:7d:e1:f8:8b:33:3a:f4:f6:a6:f4:e4: f0:11:43:cf:ff:f3:1d:1a:71:fa:c4:e5:a5:43:59: 1b:fe:30:73:fa:de:a1:cf:12:28:58:ad:bd:b7:00: e0:02:6a:6c:0b:2e:47:2c:44:8c:b6:9d:3f:f7:2b: 56:d4:26:67:4d:7b:3b:c0:ef:a9:33:db:80:8d:71: 28:58:17:8d:c0:99:5e:da:d8:19:c2:77:9b:1a:d1: e4:97:15:54:97:14:cf:e7:20:91:84:69:b1:d6:85: 40:1e:ea:26:76:f7:dc:fe:5b:f2:96:3b:74:61:24: e6:3d:a7:44:a6:31:6e:7a:8b:51:68:03:f6:5f:d2: 40:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E2:72:86:59:AC:2B:30:CC:36:9C:9D:B7:BA:84:36:0E:F1:74:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.crl X509v3 Authority Key Identifier: keyid:D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer sbgp-ipAddrBlock: critical IPv4: 65.18.204.0/22 66.171.40.0/21 68.235.64.0/18 104.219.196.0/22 162.254.64.0/22 205.149.144.0/20 206.223.125.0/24 208.77.24.0/22 209.191.192.0/19 IPv6: 2001:504:29::/48 2600:6400::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:f8:4d:39:10:0e:ff:4e:e1:78:df:38:49:3e:92:8d:5b:6c: cb:9b:8d:e9:ff:19:44:05:bd:86:9c:b7:09:cf:e8:d5:6d:cf: 0c:f9:6d:81:3d:9a:23:ec:6f:f8:e5:1b:69:16:4a:a4:97:aa: d0:10:59:99:8d:59:77:07:91:96:2a:b2:b8:16:7c:bf:e8:5c: 9b:42:05:dc:66:fc:e7:ea:6f:6e:10:4a:cd:dc:a8:8b:a9:02: 35:a8:ba:71:49:c9:12:48:f2:a8:96:c0:2d:f0:30:97:d5:ad: 00:c1:75:49:60:fa:45:64:73:a7:08:b4:94:12:4e:aa:5a:e5: 83:7c:dd:02:a2:dd:ce:20:71:10:b3:b4:2c:f3:e4:56:64:9d: 74:f0:93:6e:de:ae:c9:7d:58:a9:71:69:20:e6:31:54:72:41: 5a:14:08:db:a1:e4:90:9b:2f:9c:06:60:eb:3f:4d:f0:0f:4b: b8:1e:a9:24:cd:f6:e9:c4:61:11:f6:99:4b:40:cb:32:2e:a6: 43:5c:08:f0:88:5a:ce:ab:c9:e8:b4:9e:6f:a2:1d:dc:7f:79: 09:b9:76:16:41:d2:88:04:34:d2:42:33:fa:72:29:6f:00:ec: 6c:02:23:3b:dc:61:59:88:24:ab:da:14:f3:75:6e:df:40:8d: 64:11:f0:6d -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWE1Kj5YHwP1r9W/8G4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI4YzA1OTYtYzNkZC00NGRmLTk3NjEtNjc3ZTY4Nzk0 YzY5MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk ODAwYTdlNWEtZDBjYi00Y2M5LWE4MzktYjExYmUzMjNmNjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgPf0PrmSukhJutR0G2WI47SDMApRYmMUFyA ThU5gkV1+/pI1UD3aomUnvzJbrsZNc+TyBBje9ERSfinf6HPOyn7PgObDAipQyp/ GxZkFJE8yrmnNnFfoUdO76F5m2hRrjLi+gxTqi1UQ1y8HkYvabotiDuk5ssVXhax feH4izM69Pam9OTwEUPP//MdGnH6xOWlQ1kb/jBz+t6hzxIoWK29twDgAmpsCy5H LESMtp0/9ytW1CZnTXs7wO+pM9uAjXEoWBeNwJle2tgZwnebGtHklxVUlxTP5yCR hGmx1oVAHuomdvfc/lvyljt0YSTmPadEpjFueotRaAP2X9JAPQIDAQABo4IDnTCC A5kwHQYDVR0OBBYEFLTicoZZrCswzDacnbe6hDYO8XQ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMjhj MDU5Ni1jM2RkLTQ0ZGYtOTc2MS02NzdlNjg3OTRjNjkvMmY3MzMzMGUtMTUzMi0z NTE3LWE1MWYtZGM0NmNiMTFjMjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDI4YzA1OTYtYzNkZC00NGRmLTk3 NjEtNjc3ZTY4Nzk0YzY5LzAyOGMwNTk2LWMzZGQtNDRkZi05NzYxLTY3N2U2ODc5 NGM2OS5jcmwwHwYDVR0jBBgwFoAU13vNAHAryYoSeo0O6DqODdIIi7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMjhjMDU5Ni1jM2RkLTQ0ZGYtOTc2MS02Nzdl Njg3OTRjNjkuY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjA8BAIAATA2AwQCQRLMAwQD QqsoAwQGROtAAwQCaNvEAwQCov5AAwQEzZWQAwQAzt99AwQC0E0YAwQF0b/AMBYE AgACMBADBwAgAQUEACkDBQQmAGQAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEn4TTkQDv9O4XjfOEk+ko1b bMubjen/GUQFvYactwnP6NVtzwz5bYE9miPsb/jlG2kWSqSXqtAQWZmNWXcHkZYq srgWfL/oXJtCBdxm/Ofqb24QSs3cqIupAjWounFJyRJI8qiWwC3wMJfVrQDBdUlg +kVkc6cItJQSTqpa5YN83QKi3c4gcRCztCzz5FZknXTwk27ersl9WKlxaSDmMVRy QVoUCNuh5JCbL5wGYOs/TfAPS7geqSTN9unEYRH2mUtAyzIupkNcCPCIWs6ryei0 nm+iHdx/eQm5dhZB0ogENNJCM/pyKW8A7GwCIzvcYVmIJKvaFPN1bt9AjWQR8G0= -----END CERTIFICATE-----Generated at Sat Apr 18 06:28:08 2026 by rpki-client