$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa File: 2f73330e-1532-3517-a51f-dc46cb11c22c.roa (raw, json) Hash identifier: QnvJDnIOiMlZeCa/QgUetC9lVf2YbNfeJrfDxz4w+p0= Subject key identifier: 18:E9:79:BE:43:40:7D:B4:93:5B:BE:59:51:D1:18:25:1F:3D:94:7C Certificate issuer: /CN=028c0596-c3dd-44df-9761-677e68794c69 Certificate serial: 010D0C9F4328584C6B56A043D78C1C719F2F5080 Authority key identifier: D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa Signing time: Mon 05 Jan 2026 02:00:31 +0000 ROA not before: Mon 05 Jan 2026 02:00:31 +0000 ROA not after: Sun 05 Apr 2026 01:00:31 +0000 asID: 14371 IP address blocks: 65.18.204.0/22 maxlen: 24 66.171.40.0/21 maxlen: 24 68.235.64.0/18 maxlen: 24 104.219.196.0/22 maxlen: 24 162.254.64.0/22 maxlen: 24 205.149.144.0/20 maxlen: 24 206.223.125.0/24 maxlen: 24 208.77.24.0/22 maxlen: 24 209.191.192.0/19 maxlen: 24 2001:504:29::/48 maxlen: 48 2600:6400::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Feb 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6b:56:a0:43:d7:8c:1c:71:9f:2f:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028c0596-c3dd-44df-9761-677e68794c69 Validity Not Before: Jan 5 02:00:31 2026 GMT Not After : Apr 5 01:00:31 2026 GMT Subject: CN=21245263-9557-46d4-8154-616e8f45734b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:34:55:9d:ae:3e:fb:9c:13:a9:dd:5f:5e:f1: c7:b8:86:04:5f:d8:45:70:02:44:99:cb:fd:4e:c4: b7:ca:c1:91:78:3c:09:c6:b3:5f:2e:63:e8:6e:78: eb:6d:4d:d8:c1:b4:5e:3f:4e:6b:ea:8d:69:ba:9b: 26:98:2b:36:0c:af:bf:54:60:93:24:60:7b:e5:7d: f9:58:f2:37:88:ac:d1:89:0f:99:11:e6:ac:e1:66: 42:a3:c3:c1:d5:72:74:f0:1f:28:96:69:5a:a0:13: 94:c3:58:20:61:13:4a:02:37:8f:a5:63:60:c3:e0: c4:75:d9:76:71:3b:ce:dd:27:18:1c:d0:c0:43:1a: b2:5d:6a:42:8a:27:42:bc:24:ea:55:62:94:04:c6: 58:8f:73:fc:06:91:b5:23:4a:a4:f7:dd:44:0f:a3: 9b:bb:c0:2c:51:67:d8:c2:0b:ac:1e:0f:dd:62:1b: 82:f6:1c:af:e7:01:e3:ab:aa:8a:c5:96:50:45:26: bb:2f:8e:b5:09:2f:ea:ec:54:ca:7d:bb:9b:22:99: 33:7b:22:5f:8b:4d:63:77:52:9e:22:a4:26:da:4b: fb:95:f6:66:a2:65:96:31:07:6d:d0:bc:ab:a0:d2: 22:84:b6:49:0b:b1:73:8b:ae:19:4d:b2:32:df:25: 02:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E9:79:BE:43:40:7D:B4:93:5B:BE:59:51:D1:18:25:1F:3D:94:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.crl X509v3 Authority Key Identifier: keyid:D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer sbgp-ipAddrBlock: critical IPv4: 65.18.204.0/22 66.171.40.0/21 68.235.64.0/18 104.219.196.0/22 162.254.64.0/22 205.149.144.0/20 206.223.125.0/24 208.77.24.0/22 209.191.192.0/19 IPv6: 2001:504:29::/48 2600:6400::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:9d:18:68:ab:ac:c4:22:30:e5:00:fa:b0:0d:14:99:d8:36: 24:27:ac:a1:8d:50:0a:51:db:23:39:d3:4b:a9:57:65:f6:7a: df:af:32:03:19:de:14:83:b4:43:71:f4:86:bc:3b:17:78:95: 11:6a:68:d6:b5:36:40:de:f2:cd:a9:b3:46:f0:44:f0:24:b1: ed:e9:35:86:9f:bb:a2:38:ee:13:55:0a:72:b6:01:66:81:b7: 96:cf:cf:fb:f6:6f:ff:20:7d:67:a8:3c:b8:8f:17:b7:a4:7a: 6c:14:96:f4:c8:a4:1b:5d:e9:12:e8:6e:dd:22:f4:35:f2:ad: b3:32:0d:99:14:ae:8e:11:5d:b0:26:c2:8f:f7:dc:c5:af:ed: a7:dd:65:a6:b7:26:2b:32:f1:78:3a:81:04:3e:e2:06:9b:97: e0:e2:09:1e:95:0d:8c:ce:de:64:84:6e:d5:33:d8:19:47:67: 01:15:d2:05:cf:0b:2e:ae:7e:f2:17:f2:16:b9:87:df:a2:47: fb:45:dd:52:58:90:d6:ef:7a:c9:7b:3a:2b:a4:30:a9:4b:7e: 34:68:2d:1a:a2:1a:70:6d:0a:7c:7b:0e:10:b7:ec:f1:cd:b4: a3:32:dc:fb:dd:37:e3:f5:c3:73:1d:d5:fe:9d:7b:bc:44:db: d7:cc:78:9a -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWExrVqBD14wccZ8vUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI4YzA1OTYtYzNkZC00NGRmLTk3NjEtNjc3ZTY4Nzk0 YzY5MB4XDTI2MDEwNTAyMDAzMVoXDTI2MDQwNTAxMDAzMVowLzEtMCsGA1UEAxMk MjEyNDUyNjMtOTU1Ny00NmQ0LTgxNTQtNjE2ZThmNDU3MzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjRVna4++5wTqd1fXvHHuIYEX9hFcAJEmcv9 TsS3ysGReDwJxrNfLmPobnjrbU3YwbReP05r6o1pupsmmCs2DK+/VGCTJGB75X35 WPI3iKzRiQ+ZEeas4WZCo8PB1XJ08B8olmlaoBOUw1ggYRNKAjePpWNgw+DEddl2 cTvO3ScYHNDAQxqyXWpCiidCvCTqVWKUBMZYj3P8BpG1I0qk991ED6Obu8AsUWfY wgusHg/dYhuC9hyv5wHjq6qKxZZQRSa7L461CS/q7FTKfbubIpkzeyJfi01jd1Ke IqQm2kv7lfZmomWWMQdt0LyroNIihLZJC7Fzi64ZTbIy3yUCAwIDAQABo4IDnTCC A5kwHQYDVR0OBBYEFBjpeb5DQH20k1u+WVHRGCUfPZR8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMjhj MDU5Ni1jM2RkLTQ0ZGYtOTc2MS02NzdlNjg3OTRjNjkvMmY3MzMzMGUtMTUzMi0z NTE3LWE1MWYtZGM0NmNiMTFjMjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDI4YzA1OTYtYzNkZC00NGRmLTk3 NjEtNjc3ZTY4Nzk0YzY5LzAyOGMwNTk2LWMzZGQtNDRkZi05NzYxLTY3N2U2ODc5 NGM2OS5jcmwwHwYDVR0jBBgwFoAU13vNAHAryYoSeo0O6DqODdIIi7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMjhjMDU5Ni1jM2RkLTQ0ZGYtOTc2MS02Nzdl Njg3OTRjNjkuY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjA8BAIAATA2AwQCQRLMAwQD QqsoAwQGROtAAwQCaNvEAwQCov5AAwQEzZWQAwQAzt99AwQC0E0YAwQF0b/AMBYE AgACMBADBwAgAQUEACkDBQQmAGQAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADadGGirrMQiMOUA+rANFJnY NiQnrKGNUApR2yM500upV2X2et+vMgMZ3hSDtENx9Ia8Oxd4lRFqaNa1NkDe8s2p s0bwRPAkse3pNYafu6I47hNVCnK2AWaBt5bPz/v2b/8gfWeoPLiPF7ekemwUlvTI pBtd6RLobt0i9DXyrbMyDZkUro4RXbAmwo/33MWv7afdZaa3Jisy8Xg6gQQ+4gab l+DiCR6VDYzO3mSEbtUz2BlHZwEV0gXPCy6ufvIX8ha5h9+iR/tF3VJYkNbvesl7 OiukMKlLfjRoLRqiGnBtCnx7DhC37PHNtKMy3PvdN+P1w3Md1f6de7xE29fMeJo= -----END CERTIFICATE-----Generated at Thu Feb 19 21:14:21 2026 by rpki-client