$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa File: 2f73330e-1532-3517-a51f-dc46cb11c22c.roa (raw, json) Hash identifier: vmNqrvpeCUyPTWuGVC1nElandG+NuBmOVQYsnsYs4Sw= Subject key identifier: A5:31:97:D2:C4:A1:E3:B5:4A:75:D9:6C:8F:99:C5:54:DE:B2:3C:F8 Certificate issuer: /CN=028c0596-c3dd-44df-9761-677e68794c69 Certificate serial: 010D0C9F4328584ECD371FE852168CD529A75980 Authority key identifier: D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 14371 IP address blocks: 65.18.204.0/22 maxlen: 24 66.171.40.0/21 maxlen: 24 68.235.64.0/18 maxlen: 24 104.219.196.0/22 maxlen: 24 162.254.64.0/22 maxlen: 24 205.149.144.0/20 maxlen: 24 206.223.125.0/24 maxlen: 24 208.77.24.0/22 maxlen: 24 209.191.192.0/19 maxlen: 24 2001:504:29::/48 maxlen: 48 2600:6400::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:1f:e8:52:16:8c:d5:29:a7:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028c0596-c3dd-44df-9761-677e68794c69 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=45945a90-425f-4178-b6ae-d593f300ad63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b2:bb:96:50:41:62:71:e8:00:34:ad:62:79: ff:a0:87:5e:b5:28:1b:24:a1:f1:20:b6:a7:e2:3c: 66:90:05:80:48:9f:45:ee:26:51:fb:ac:77:b5:88: 06:76:2d:9b:92:14:8e:f6:e0:2e:3f:e2:db:03:70: 1f:d4:d1:b4:29:35:f7:cf:d5:bc:29:d9:c8:69:96: ad:ac:ba:a1:eb:ab:9e:49:47:35:e7:9b:77:b3:e1: 13:77:cc:1b:4e:72:98:73:8d:b2:45:71:e6:a2:67: 92:6d:e3:b0:e9:70:61:64:27:20:6a:d4:68:3e:5c: 5e:d5:8f:f6:70:9d:a1:8c:6c:19:b0:b0:0b:14:ab: 3b:9f:65:cf:bd:f7:6b:ad:48:21:44:36:bf:10:37: 27:00:14:34:d0:d1:8b:21:2d:30:72:19:b7:f8:e6: 58:7e:7e:69:56:ed:1d:95:a3:96:4b:9a:39:2e:19: a2:f3:36:d8:f1:72:d8:c1:d0:79:89:24:24:f7:95: e5:bd:f3:cd:76:67:fc:97:fb:88:51:f5:a4:4f:57: 58:29:2c:1d:ba:ad:14:5c:67:ad:1a:5f:b8:7d:c3: 00:b2:c7:98:90:c3:90:da:04:71:11:15:51:ed:e5: 35:66:b5:23:b2:67:34:33:14:3b:c7:25:57:43:ed: c3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:31:97:D2:C4:A1:E3:B5:4A:75:D9:6C:8F:99:C5:54:DE:B2:3C:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.crl X509v3 Authority Key Identifier: keyid:D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer sbgp-ipAddrBlock: critical IPv4: 65.18.204.0/22 66.171.40.0/21 68.235.64.0/18 104.219.196.0/22 162.254.64.0/22 205.149.144.0/20 206.223.125.0/24 208.77.24.0/22 209.191.192.0/19 IPv6: 2001:504:29::/48 2600:6400::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:bd:0f:b9:f2:79:33:fc:cf:81:25:b0:b2:3b:1c:0d:53:9a: 91:2e:ca:2f:29:c0:e0:ba:10:7e:b8:2b:16:dd:e2:96:cf:21: 6f:b1:b3:e4:ff:1e:30:e2:15:3f:8b:e5:39:90:c1:b2:3f:1d: 0d:58:cc:b3:ab:6d:66:e8:ae:60:f1:3e:bb:cd:cf:bd:e4:45: a2:18:e2:61:5d:8a:95:47:4a:99:7e:b8:96:d0:94:af:4a:6a: c5:7e:a4:3f:cf:49:00:ea:59:70:cf:ca:80:9b:bb:7b:c7:c2: 1c:20:a7:32:3c:ff:a3:9a:7f:42:c4:32:65:10:87:1d:0c:92: ff:50:1f:e5:3d:71:55:48:c0:d3:0c:c7:6b:96:a7:5f:27:5d: 8a:a0:41:8b:2d:f8:2b:e5:00:26:d4:90:77:b0:0c:14:ab:9c: df:54:08:b5:c3:0d:8f:43:ba:b8:62:21:91:a6:a8:7b:a8:55: ac:8c:42:18:48:39:ac:d9:28:dd:95:78:cb:1f:27:f1:f3:9b: 87:15:38:65:ea:fd:b6:5e:95:a4:88:23:3c:d9:76:e1:ea:9d: de:40:e0:6e:b2:b0:27:a1:23:9c:04:63:b9:70:74:ff:15:22: 0a:f0:c9:6b:85:36:9f:e6:37:38:0c:8d:a3:b0:f5:78:87:00: 9d:91:ee:7c -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWE7NNx/oUhaM1SmnWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI4YzA1OTYtYzNkZC00NGRmLTk3NjEtNjc3ZTY4Nzk0 YzY5MB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk NDU5NDVhOTAtNDI1Zi00MTc4LWI2YWUtZDU5M2YzMDBhZDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrK7llBBYnHoADStYnn/oIdetSgbJKHxILan 4jxmkAWASJ9F7iZR+6x3tYgGdi2bkhSO9uAuP+LbA3Af1NG0KTX3z9W8KdnIaZat rLqh66ueSUc155t3s+ETd8wbTnKYc42yRXHmomeSbeOw6XBhZCcgatRoPlxe1Y/2 cJ2hjGwZsLALFKs7n2XPvfdrrUghRDa/EDcnABQ00NGLIS0wchm3+OZYfn5pVu0d laOWS5o5Lhmi8zbY8XLYwdB5iSQk95XlvfPNdmf8l/uIUfWkT1dYKSwduq0UXGet Gl+4fcMAsseYkMOQ2gRxERVR7eU1ZrUjsmc0MxQ7xyVXQ+3DywIDAQABo4IDnTCC A5kwHQYDVR0OBBYEFKUxl9LEoeO1SnXZbI+ZxVTesjz4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMjhj MDU5Ni1jM2RkLTQ0ZGYtOTc2MS02NzdlNjg3OTRjNjkvMmY3MzMzMGUtMTUzMi0z NTE3LWE1MWYtZGM0NmNiMTFjMjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDI4YzA1OTYtYzNkZC00NGRmLTk3 NjEtNjc3ZTY4Nzk0YzY5LzAyOGMwNTk2LWMzZGQtNDRkZi05NzYxLTY3N2U2ODc5 NGM2OS5jcmwwHwYDVR0jBBgwFoAU13vNAHAryYoSeo0O6DqODdIIi7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMjhjMDU5Ni1jM2RkLTQ0ZGYtOTc2MS02Nzdl Njg3OTRjNjkuY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjA8BAIAATA2AwQCQRLMAwQD QqsoAwQGROtAAwQCaNvEAwQCov5AAwQEzZWQAwQAzt99AwQC0E0YAwQF0b/AMBYE AgACMBADBwAgAQUEACkDBQQmAGQAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJS9D7nyeTP8z4ElsLI7HA1T mpEuyi8pwOC6EH64Kxbd4pbPIW+xs+T/HjDiFT+L5TmQwbI/HQ1YzLOrbWbormDx PrvNz73kRaIY4mFdipVHSpl+uJbQlK9KasV+pD/PSQDqWXDPyoCbu3vHwhwgpzI8 /6Oaf0LEMmUQhx0Mkv9QH+U9cVVIwNMMx2uWp18nXYqgQYst+CvlACbUkHewDBSr nN9UCLXDDY9DurhiIZGmqHuoVayMQhhIOazZKN2VeMsfJ/Hzm4cVOGXq/bZelaSI IzzZduHqnd5A4G6ysCehI5wEY7lwdP8VIgrwyWuFNp/mNzgMjaOw9XiHAJ2R7nw= -----END CERTIFICATE-----Generated at Sat Sep 12 09:44:34 2026 by rpki-client