$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa File: a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa (raw, json) Hash identifier: YJqAPcbXYJIUViaecalvhW4OQnB4NyO60iltKyGZ31U= Subject key identifier: DD:31:C3:97:DF:1F:BA:62:71:61:B8:DB:34:69:89:F7:71:CF:46:E2 Certificate issuer: /CN=8df83f2e-e4b4-4953-8acc-7816b333d332 Certificate serial: 010D0C9F4328584E210EF804E0DAF28ACC1BB480 Authority key identifier: 0D:A6:2A:C6:EA:68:4E:B2:C5:7D:5B:E2:F5:3F:23:30:63:8F:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa Signing time: Wed 10 Jun 2026 21:00:11 +0000 ROA not before: Wed 10 Jun 2026 21:00:11 +0000 ROA not after: Tue 08 Sep 2026 21:00:11 +0000 asID: 46844 IP address blocks: 45.58.128.0/18 maxlen: 24 64.32.0.0/19 maxlen: 24 67.21.64.0/19 maxlen: 24 70.39.64.0/18 maxlen: 24 104.37.244.0/22 maxlen: 24 104.160.160.0/19 maxlen: 24 107.167.0.0/19 maxlen: 24 170.178.160.0/19 maxlen: 24 174.128.224.0/19 maxlen: 24 198.148.80.0/20 maxlen: 24 199.115.100.0/22 maxlen: 24 204.188.192.0/18 maxlen: 24 208.98.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:21:0e:f8:04:e0:da:f2:8a:cc:1b:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8df83f2e-e4b4-4953-8acc-7816b333d332 Validity Not Before: Jun 10 21:00:11 2026 GMT Not After : Sep 8 21:00:11 2026 GMT Subject: CN=3fb1f04f-c5e7-4d36-b15f-31a680f69192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:68:86:8f:90:89:b8:51:63:f3:5b:d4:aa:bc: 9a:07:d3:43:46:11:b2:8e:cc:e8:97:78:d4:02:70: 60:3e:11:9c:fc:ea:9e:79:a7:99:d2:95:95:4d:8e: dd:dc:97:70:51:28:c9:24:eb:ae:e6:04:b6:8b:a8: 39:49:4f:d5:d1:74:79:a7:96:bf:32:95:03:f3:81: fc:5e:92:f5:7d:70:9f:d2:df:6c:3f:55:23:0b:39: e5:32:d7:d7:e3:1e:78:13:5a:7f:92:3c:f5:63:e9: 36:c6:df:f4:41:05:d0:7a:92:a9:63:52:fa:a0:ce: 14:fb:ca:ac:55:18:3d:41:62:a4:44:e3:95:b1:5e: 61:f5:10:6d:59:af:b6:c4:74:18:a3:4d:38:84:d9: 87:a9:ac:5e:c4:54:7a:c8:f4:bf:73:de:b9:ca:03: aa:02:52:4d:8b:c4:c0:71:0c:ad:8d:b8:d0:f3:8d: c2:7b:81:d9:f3:cd:0e:7d:a4:6a:45:41:01:3b:1c: 09:4a:39:e1:94:09:61:d4:73:fd:c6:aa:67:80:01: 62:a8:67:f0:ef:c1:0d:f9:48:37:ee:41:73:71:72: 7d:d2:09:22:78:fb:a5:57:7e:b7:c3:cb:c8:89:ab: c4:9a:30:9a:23:01:67:d8:ce:e3:d0:47:f6:51:dc: 2f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:31:C3:97:DF:1F:BA:62:71:61:B8:DB:34:69:89:F7:71:CF:46:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.crl X509v3 Authority Key Identifier: keyid:0D:A6:2A:C6:EA:68:4E:B2:C5:7D:5B:E2:F5:3F:23:30:63:8F:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer sbgp-ipAddrBlock: critical IPv4: 45.58.128.0/18 64.32.0.0/19 67.21.64.0/19 70.39.64.0/18 104.37.244.0/22 104.160.160.0/19 107.167.0.0/19 170.178.160.0/19 174.128.224.0/19 198.148.80.0/20 199.115.100.0/22 204.188.192.0/18 208.98.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:52:65:ae:b7:6f:a6:db:ea:7b:10:87:cd:0f:23:33:47:bf: 26:9c:85:72:d3:28:9f:81:16:30:4d:e0:f3:f6:11:e4:6c:b4: c4:a1:a7:2d:4b:d4:16:fe:ed:42:a7:46:6f:52:52:9e:d6:40: 77:1c:05:f5:50:c2:e0:49:af:b6:c7:e8:26:b1:fb:7b:ac:e3: d4:3d:44:bb:64:74:8e:09:ec:84:ca:c1:ff:79:62:df:1c:85: d2:64:e5:1b:28:6f:7a:ff:c9:37:da:89:82:ec:40:a3:cd:6d: f4:5c:6f:1a:09:be:84:5a:ab:d1:5b:38:38:7f:27:36:11:be: e7:3b:b8:2c:36:df:a5:c1:a4:55:18:81:d5:78:7f:ef:aa:35: 5f:57:ab:a9:b7:b9:ed:e9:32:42:b3:fd:ed:c0:c1:68:f9:97: ac:1a:7d:a8:d8:7e:7b:6a:fe:28:4b:1e:8b:76:53:ef:92:ac: 9e:a9:79:c0:76:32:b0:75:e3:1d:00:e9:cf:78:c3:a5:ea:15: 6d:9d:eb:5c:9b:ca:f0:0c:3a:d3:c4:36:c1:90:7b:07:80:85: 7a:2a:d2:3e:ba:ff:84:46:ff:2b:be:ea:a1:31:db:02:d6:98: e5:02:66:f2:76:89:53:01:f2:71:15:d9:ab:2f:25:de:8b:c9: bf:5a:24:0c -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWE4hDvgE4NryiswbtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRmODNmMmUtZTRiNC00OTUzLThhY2MtNzgxNmIzMzNk MzMyMB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk M2ZiMWYwNGYtYzVlNy00ZDM2LWIxNWYtMzFhNjgwZjY5MTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmiGj5CJuFFj81vUqryaB9NDRhGyjszol3jU AnBgPhGc/OqeeaeZ0pWVTY7d3JdwUSjJJOuu5gS2i6g5SU/V0XR5p5a/MpUD84H8 XpL1fXCf0t9sP1UjCznlMtfX4x54E1p/kjz1Y+k2xt/0QQXQepKpY1L6oM4U+8qs VRg9QWKkROOVsV5h9RBtWa+2xHQYo004hNmHqaxexFR6yPS/c965ygOqAlJNi8TA cQytjbjQ843Ce4HZ880OfaRqRUEBOxwJSjnhlAlh1HP9xqpngAFiqGfw78EN+Ug3 7kFzcXJ90gkiePulV363w8vIiavEmjCaIwFn2M7j0Ef2UdwvRQIDAQABo4IDnTCC A5kwHQYDVR0OBBYEFN0xw5ffH7picWG42zRpifdxz0biMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZGY4 M2YyZS1lNGI0LTQ5NTMtOGFjYy03ODE2YjMzM2QzMzIvYTVjYjRlOGItNTJiNy0z ZjNhLTgyNTktZjQ3YzU4NTVhMjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGRmODNmMmUtZTRiNC00OTUzLThh Y2MtNzgxNmIzMzNkMzMyLzhkZjgzZjJlLWU0YjQtNDk1My04YWNjLTc4MTZiMzMz ZDMzMi5jcmwwHwYDVR0jBBgwFoAUDaYqxupoTrLFfVvi9T8jMGOP5uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZGY4M2YyZS1lNGI0LTQ5NTMtOGFjYy03ODE2 YjMzM2QzMzIuY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQGLTqAAwQF QCAAAwQFQxVAAwQGRidAAwQCaCX0AwQFaKCgAwQFa6cAAwQFqrKgAwQFroDgAwQE xpRQAwQCx3NkAwQGzLzAAwQG0GIAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGdSZa63b6bb6nsQh80PIzNH vyachXLTKJ+BFjBN4PP2EeRstMShpy1L1Bb+7UKnRm9SUp7WQHccBfVQwuBJr7bH 6Cax+3us49Q9RLtkdI4J7ITKwf95Yt8chdJk5Rsob3r/yTfaiYLsQKPNbfRcbxoJ voRaq9FbODh/JzYRvuc7uCw236XBpFUYgdV4f++qNV9Xq6m3ue3pMkKz/e3AwWj5 l6wafajYfntq/ihLHot2U++SrJ6pecB2MrB14x0A6c94w6XqFW2d61ybyvAMOtPE NsGQeweAhXoq0j66/4RG/yu+6qEx2wLWmOUCZvJ2iVMB8nEV2asvJd6Lyb9aJAw= -----END CERTIFICATE-----Generated at Sat Jun 13 13:46:07 2026 by rpki-client