$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0f4e8c51-54e1-3d28-8820-21d6b6db0d73.roa File: 0f4e8c51-54e1-3d28-8820-21d6b6db0d73.roa (raw, json) Hash identifier: q90u07L98WDQ8D/d8sOqgn7ctTVNxootE0VvKmLXfqo= Subject key identifier: 2D:4C:22:C6:E4:A1:31:60:E0:9D:DD:86:BD:2E:A7:DA:75:AA:C5:02 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E9A7FAFDC7C6565B70D791300 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0f4e8c51-54e1-3d28-8820-21d6b6db0d73.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 211936 IP address blocks: 64.32.152.0/21 maxlen: 24 64.50.136.0/21 maxlen: 24 64.145.128.0/18 maxlen: 24 64.145.192.0/18 maxlen: 24 64.248.0.0/18 maxlen: 24 64.248.64.0/18 maxlen: 24 64.248.128.0/18 maxlen: 24 64.248.192.0/18 maxlen: 24 64.249.0.0/18 maxlen: 24 64.249.64.0/18 maxlen: 24 64.249.128.0/18 maxlen: 24 64.249.192.0/18 maxlen: 24 66.17.72.0/21 maxlen: 24 66.200.0.0/18 maxlen: 24 66.200.64.0/18 maxlen: 24 66.200.128.0/18 maxlen: 24 66.200.192.0/18 maxlen: 24 74.3.0.0/18 maxlen: 24 74.3.64.0/18 maxlen: 24 205.214.32.0/20 maxlen: 24 206.40.192.0/20 maxlen: 24 206.253.0.0/20 maxlen: 24 208.41.0.0/18 maxlen: 24 208.41.64.0/18 maxlen: 24 208.41.128.0/18 maxlen: 24 208.41.192.0/18 maxlen: 24 216.151.224.0/20 maxlen: 24 216.184.128.0/18 maxlen: 24 216.184.192.0/18 maxlen: 24 216.224.0.0/19 maxlen: 24 216.224.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:af:dc:7c:65:65:b7:0d:79:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=c12eb5c5-950e-4052-8e6f-a1e9ea13a8af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e4:ff:11:c1:ca:99:83:35:ff:06:3b:43:27: e3:10:7b:cc:c7:c1:20:68:aa:96:ff:82:b3:9e:15: 1e:a5:96:ea:43:a4:56:0a:f2:10:18:de:66:8b:0b: 9b:58:3a:1a:54:15:4a:51:c7:68:bc:7a:ec:40:de: 10:86:c1:65:1e:6f:48:a1:b5:21:be:90:b4:dc:6a: fa:9b:04:30:ff:3b:ae:93:ee:51:8a:4c:e0:d7:d1: ef:9d:7d:4d:ba:5a:b3:77:6f:ae:68:11:7f:62:64: a5:e6:84:f1:0a:8b:7e:2f:a9:fc:4f:34:04:e2:21: 11:7e:7d:b1:b2:55:12:28:ae:86:b8:72:61:4c:cf: da:36:3c:75:c6:87:10:0c:6f:23:f4:29:24:5d:06: 31:82:b1:c7:6c:54:b8:38:76:e8:26:22:1f:a2:f6: 43:c1:a1:ab:7b:8a:4c:ca:1a:5f:97:26:d2:f8:b4: cc:e2:07:1a:65:e5:f0:d2:80:3a:3a:9e:0c:65:f9: c5:e9:21:1e:59:bc:e4:b4:15:02:9f:eb:8b:fb:ff: 57:6c:ef:81:b1:9b:09:b1:27:c7:52:cb:ce:66:ad: 7a:22:eb:8d:66:07:c4:b0:79:2c:10:37:b0:3d:f3: 11:2a:5b:89:96:7d:a7:21:32:72:bc:75:17:dc:54: bb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4C:22:C6:E4:A1:31:60:E0:9D:DD:86:BD:2E:A7:DA:75:AA:C5:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0f4e8c51-54e1-3d28-8820-21d6b6db0d73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.32.152.0/21 64.50.136.0/21 64.145.128.0/17 64.248.0.0/15 66.17.72.0/21 66.200.0.0/16 74.3.0.0/17 205.214.32.0/20 206.40.192.0/20 206.253.0.0/20 208.41.0.0/16 216.151.224.0/20 216.184.128.0/17 216.224.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:14:2a:6e:f9:0a:a1:ee:c6:e8:4b:fb:98:7d:bd:36:3f:0e: 31:06:5f:f6:ba:e7:15:5c:92:11:83:0a:29:c9:b1:c9:2f:0f: 11:37:c5:d2:f5:d4:89:6b:fb:a3:6e:9e:bc:ca:3a:cf:05:cd: 84:c0:10:97:7f:7f:d2:89:03:f4:49:e2:b4:85:f8:24:73:46: 11:ee:01:ee:88:fc:6c:18:3e:4f:fd:93:9e:3e:27:90:6e:57: e0:42:0d:64:56:88:ef:e9:e1:50:c0:48:8c:48:81:b5:e6:a7: 0d:ae:7c:8c:65:51:d3:4e:cc:3c:f9:eb:39:1a:3b:47:0c:b2: 90:a8:a7:54:66:88:79:50:9d:8a:d4:9d:b0:cf:22:b6:5c:d8: ef:2a:a8:76:9a:74:c0:3e:d4:9f:aa:fe:2e:ee:07:62:3f:94: c4:f3:22:7f:ec:8f:4b:a9:6c:ae:96:96:1b:a9:62:81:39:74: fa:12:c3:d6:dd:36:87:29:bc:40:e3:b0:6b:20:9a:2b:ce:2b: 5f:fc:47:ee:37:8e:b8:42:ac:e6:47:e1:30:84:33:2c:17:7c: 30:1f:ed:ea:71:f7:5c:40:a3:d0:d6:67:e2:64:5f:ed:6a:7d: e1:ec:10:49:15:62:65:30:c0:55:0d:37:74:9d:f3:38:1c:b7: 78:3f:79:7e -----BEGIN CERTIFICATE----- MIIGjjCCBXagAwIBAgIUAQ0Mn0MoWE6af6/cfGVltw15EwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk YzEyZWI1YzUtOTUwZS00MDUyLThlNmYtYTFlOWVhMTNhOGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOT/EcHKmYM1/wY7QyfjEHvMx8EgaKqW/4Kz nhUepZbqQ6RWCvIQGN5miwubWDoaVBVKUcdovHrsQN4QhsFlHm9IobUhvpC03Gr6 mwQw/zuuk+5Rikzg19HvnX1Nulqzd2+uaBF/YmSl5oTxCot+L6n8TzQE4iERfn2x slUSKK6GuHJhTM/aNjx1xocQDG8j9CkkXQYxgrHHbFS4OHboJiIfovZDwaGre4pM yhpflybS+LTM4gcaZeXw0oA6Op4MZfnF6SEeWbzktBUCn+uL+/9XbO+BsZsJsSfH UsvOZq16IuuNZgfEsHksEDewPfMRKluJln2nITJyvHUX3FS7wQIDAQABo4IDoDCC A5wwHQYDVR0OBBYEFC1MIsbkoTFg4J3dhr0up9p1qsUCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGY0ZThjNTEtNTRlMS0z ZDI4LTg4MjAtMjFkNmI2ZGIwZDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMGoGCCsGAQUFBwEHAQH/BFswWTBXBAIAATBRAwQDQCCYAwQD QDKIAwQHQJGAAwMBQPgDBANCEUgDAwBCyAMEB0oDAAMEBM3WIAMEBM4owAMEBM79 AAMDANApAwQE2JfgAwQH2LiAAwQG2OAAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACkUKm75CqHuxuhL+5h9 vTY/DjEGX/a65xVckhGDCinJsckvDxE3xdL11Ilr+6NunrzKOs8FzYTAEJd/f9KJ A/RJ4rSF+CRzRhHuAe6I/GwYPk/9k54+J5BuV+BCDWRWiO/p4VDASIxIgbXmpw2u fIxlUdNOzDz56zkaO0cMspCop1RmiHlQnYrUnbDPIrZc2O8qqHaadMA+1J+q/i7u B2I/lMTzIn/sj0upbK6WlhupYoE5dPoSw9bdNocpvEDjsGsgmivOK1/8R+43jrhC rOZH4TCEMywXfDAf7epx91xAo9DWZ+JkX+1qfeHsEEkVYmUwwFUNN3Sd8zgct3g/ eX4= -----END CERTIFICATE-----Generated at Wed Jul 29 19:41:08 2026 by rpki-client