$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ec678be3-116b-392e-a70c-6e9f357e39d3.roa File: ec678be3-116b-392e-a70c-6e9f357e39d3.roa (raw, json) Hash identifier: PFF9JJs7nYkbltnRRWRUBZ+KvNqHj11sMJLfU4uSsyQ= Subject key identifier: 25:DB:45:D6:DA:1C:CB:42:CE:82:BF:3E:69:F8:A3:95:FE:17:0A:7C Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EA17AA54A4C6FBEB37BD68F80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ec678be3-116b-392e-a70c-6e9f357e39d3.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 6424 IP address blocks: 128.121.128.0/17 maxlen: 24 128.241.48.0/20 maxlen: 24 128.241.64.0/20 maxlen: 24 128.241.96.0/19 maxlen: 24 128.242.64.0/20 maxlen: 24 128.242.160.0/20 maxlen: 24 130.94.160.0/20 maxlen: 24 130.94.224.0/20 maxlen: 24 131.103.32.0/19 maxlen: 24 131.103.64.0/19 maxlen: 24 131.103.144.0/20 maxlen: 24 140.174.112.0/20 maxlen: 24 157.238.96.0/19 maxlen: 24 168.143.80.0/20 maxlen: 24 168.143.192.0/19 maxlen: 24 192.204.112.0/20 maxlen: 24 192.204.128.0/20 maxlen: 24 192.204.160.0/19 maxlen: 24 198.64.96.0/19 maxlen: 24 198.64.128.0/18 maxlen: 24 198.64.224.0/20 maxlen: 24 204.0.32.0/20 maxlen: 24 204.1.144.0/20 maxlen: 24 204.1.224.0/20 maxlen: 24 204.3.0.0/19 maxlen: 24 204.3.64.0/18 maxlen: 24 204.141.64.0/20 maxlen: 24 209.139.0.0/17 maxlen: 24 209.207.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:a5:4a:4c:6f:be:b3:7b:d6:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=221c5d06-9454-48c2-ae58-8d7822304f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:da:f1:4b:43:25:22:01:f8:ee:5e:8c:8f:2a: 5c:d4:8c:71:09:be:fe:6b:8d:18:04:8c:23:fe:93: 9a:cb:c2:f2:74:b0:53:3f:96:48:1f:06:b2:32:24: 37:9e:d8:f5:d4:2d:89:73:cb:3f:78:b0:6b:29:b8: e6:54:0b:a7:e0:99:3e:6e:c4:87:44:59:a4:a4:ea: 9c:d6:33:de:a1:b4:8c:22:bf:f5:78:16:60:04:a2: 58:cd:31:ed:30:c0:07:30:5d:5b:f3:ab:b9:75:a0: c4:ea:92:b2:25:00:0b:01:dc:84:92:4f:54:f3:ac: 36:ab:87:1c:c1:20:f4:1a:4c:0e:c5:62:87:95:67: c5:71:cd:98:e8:86:32:74:93:52:40:1a:b3:a5:58: 69:50:d5:4d:f4:de:4d:cc:4a:5c:46:db:f6:a8:43: 6f:38:35:ff:3b:14:e2:41:87:eb:72:f3:6c:d1:33: b1:b1:59:3e:91:cc:ea:de:11:94:71:60:99:c5:ca: 01:5e:7a:5a:c1:84:b4:ab:eb:9c:6f:df:da:09:87: 08:99:55:6f:00:02:95:38:4f:03:f4:38:9c:21:22: aa:60:77:6e:4e:ff:d4:b1:b7:05:75:10:89:2d:23: 18:46:34:51:0b:21:35:3a:9b:00:c0:49:50:0a:89: 11:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DB:45:D6:DA:1C:CB:42:CE:82:BF:3E:69:F8:A3:95:FE:17:0A:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ec678be3-116b-392e-a70c-6e9f357e39d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.128.0/17 128.241.48.0-128.241.79.255 128.241.96.0/19 128.242.64.0/20 128.242.160.0/20 130.94.160.0/20 130.94.224.0/20 131.103.32.0-131.103.95.255 131.103.144.0/20 140.174.112.0/20 157.238.96.0/19 168.143.80.0/20 168.143.192.0/19 192.204.112.0-192.204.143.255 192.204.160.0/19 198.64.96.0-198.64.191.255 198.64.224.0/20 204.0.32.0/20 204.1.144.0/20 204.1.224.0/20 204.3.0.0/19 204.3.64.0/18 204.141.64.0/20 209.139.0.0/17 209.207.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:6b:13:5c:80:54:0b:aa:00:5d:b5:a5:89:bf:c7:d9:9e:dd: 87:85:b3:5a:2e:f6:30:33:77:3a:6e:2d:97:43:76:1b:82:32: 67:3a:e1:af:4e:4c:32:47:16:a1:b3:ec:d8:d9:49:89:fe:b8: ed:30:4d:75:8b:c0:9e:ec:31:88:5c:a2:93:4f:21:9d:99:7e: b5:ab:0c:60:5c:d3:0f:5f:89:96:35:34:6a:76:f7:cb:f2:80: c8:a8:c1:c8:f2:d9:76:ec:d2:fa:43:29:74:f1:be:42:7d:fc: d5:0a:ad:c8:e8:66:8a:55:db:59:93:32:24:48:4c:0d:39:3c: b5:49:07:42:1b:78:6e:1f:d7:17:19:86:ce:58:22:0b:6a:c1: 73:a9:e8:8c:80:4c:67:10:d3:f8:cd:e4:c9:d1:9c:8d:0a:8e: e6:5e:86:6e:5b:6b:92:0a:8b:4d:8a:e5:1d:4b:58:de:8c:d0: 59:e2:ef:b8:b8:76:fc:e9:6e:d3:43:d5:de:88:02:35:5b:fc: be:30:5f:ee:81:1a:42:f6:cf:4e:f5:c5:f5:39:af:64:b6:62: 92:eb:7b:23:8d:69:67:4f:03:c7:ce:5a:83:1e:ba:40:5a:6b: 2a:c1:92:1d:f3:d0:09:f0:43:4b:ee:38:9d:43:b9:86:e0:28: b0:f2:ca:85 -----BEGIN CERTIFICATE----- MIIG+DCCBeCgAwIBAgIUAQ0Mn0MoWE6heqVKTG++s3vWj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk MjIxYzVkMDYtOTQ1NC00OGMyLWFlNTgtOGQ3ODIyMzA0ZjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdrxS0MlIgH47l6Mjypc1IxxCb7+a40YBIwj /pOay8LydLBTP5ZIHwayMiQ3ntj11C2Jc8s/eLBrKbjmVAun4Jk+bsSHRFmkpOqc 1jPeobSMIr/1eBZgBKJYzTHtMMAHMF1b86u5daDE6pKyJQALAdyEkk9U86w2q4cc wSD0GkwOxWKHlWfFcc2Y6IYydJNSQBqzpVhpUNVN9N5NzEpcRtv2qENvODX/OxTi QYfrcvNs0TOxsVk+kczq3hGUcWCZxcoBXnpawYS0q+ucb9/aCYcImVVvAAKVOE8D 9DicISKqYHduTv/UsbcFdRCJLSMYRjRRCyE1OpsAwElQCokRUwIDAQABo4IECjCC BAYwHQYDVR0OBBYEFCXbRdbaHMtCzoK/Pmn4o5X+Fwp8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZWM2NzhiZTMtMTE2Yi0z OTJlLWE3MGMtNmU5ZjM1N2UzOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMIHTBggrBgEFBQcBBwEB/wSBwzCBwDCBvQQCAAEwgbYDBAeA eYAwDAMEBIDxMAMEBIDxQAMEBYDxYAMEBIDyQAMEBIDyoAMEBIJeoAMEBIJe4DAM AwQFg2cgAwQFg2dAAwQEg2eQAwQEjK5wAwQFne5gAwQEqI9QAwQFqI/AMAwDBATA zHADBATAzIADBAXAzKAwDAMEBcZAYAMEBsZAgAMEBMZA4AMEBMwAIAMEBMwBkAME BMwB4AMEBcwDAAMEBswDQAMEBMyNQAMEB9GLAAMEB9HPgDBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBlaxNc gFQLqgBdtaWJv8fZnt2HhbNaLvYwM3c6bi2XQ3YbgjJnOuGvTkwyRxahs+zY2UmJ /rjtME11i8Ce7DGIXKKTTyGdmX61qwxgXNMPX4mWNTRqdvfL8oDIqMHI8tl27NL6 Qyl08b5CffzVCq3I6GaKVdtZkzIkSEwNOTy1SQdCG3huH9cXGYbOWCILasFzqeiM gExnENP4zeTJ0ZyNCo7mXoZuW2uSCotNiuUdS1jejNBZ4u+4uHb86W7TQ9XeiAI1 W/y+MF/ugRpC9s9O9cX1Oa9ktmKS63sjjWlnTwPHzlqDHrpAWmsqwZId89AJ8ENL 7jidQ7mG4Ciw8sqF -----END CERTIFICATE-----Generated at Tue Jul 28 22:29:22 2026 by rpki-client