$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1ad074b3-1ef3-3eda-98c9-f9561f0b6a33.roa File: 1ad074b3-1ef3-3eda-98c9-f9561f0b6a33.roa (raw, json) Hash identifier: oaaOtqPswsqI9675lIwQpqxidDL7aVTJd9kntM2illM= Subject key identifier: BB:C4:C9:08:D2:92:7E:3F:EA:1D:03:08:B5:38:78:4E:DF:91:AA:C0 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F3E480843DAB173984AF9BE00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1ad074b3-1ef3-3eda-98c9-f9561f0b6a33.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 6762 IP address blocks: 64.32.152.0/21 maxlen: 21 64.50.136.0/21 maxlen: 21 64.145.128.0/18 maxlen: 18 64.145.192.0/18 maxlen: 18 64.248.0.0/18 maxlen: 18 64.248.64.0/18 maxlen: 18 64.248.128.0/18 maxlen: 18 64.248.192.0/18 maxlen: 18 64.249.0.0/18 maxlen: 18 64.249.64.0/18 maxlen: 18 64.249.128.0/18 maxlen: 18 64.249.192.0/18 maxlen: 18 66.17.72.0/21 maxlen: 21 66.200.0.0/18 maxlen: 18 66.200.64.0/18 maxlen: 18 66.200.128.0/18 maxlen: 18 66.200.192.0/18 maxlen: 18 74.3.0.0/18 maxlen: 18 74.3.64.0/18 maxlen: 18 205.214.32.0/20 maxlen: 20 206.40.192.0/20 maxlen: 20 206.253.0.0/20 maxlen: 20 208.41.0.0/18 maxlen: 18 208.41.64.0/18 maxlen: 18 208.41.128.0/18 maxlen: 18 208.41.192.0/18 maxlen: 18 216.151.224.0/20 maxlen: 20 216.184.128.0/18 maxlen: 18 216.184.192.0/18 maxlen: 18 216.224.0.0/19 maxlen: 19 216.224.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:48:08:43:da:b1:73:98:4a:f9:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=42f5fd8d-1647-4a25-a27b-0f1340e1d1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:88:10:8d:d8:c0:c5:a8:58:91:05:ba:2e:0d: 65:3f:04:dc:91:6c:9f:e2:70:3b:4e:e1:c3:aa:62: 6d:15:b0:d9:7b:51:a4:7c:d7:03:1c:9a:68:6b:ae: 31:b9:c7:fb:e0:be:e3:47:88:95:fa:34:78:f8:00: c8:08:7b:07:b1:9d:3c:a5:c1:d9:d2:64:5c:2c:01: cb:6c:1a:0f:fc:f4:c5:9e:8d:ad:c2:55:e1:80:ff: 8d:61:7e:ec:4e:4c:c3:9c:2d:48:cb:67:d8:4a:a5: fd:c5:6d:98:11:f2:89:97:39:65:af:ca:f9:67:05: 3f:3c:1f:3d:54:85:24:7e:f8:60:03:83:ab:a6:d6: ce:50:de:60:f2:90:83:7c:f1:80:05:8e:60:0a:b2: 46:63:15:ec:6a:b1:87:50:3a:29:05:9b:6b:cd:b8: 69:57:f2:90:ed:f8:f0:d8:fa:67:74:e0:37:ef:ea: ef:79:e2:07:6f:26:1c:b3:7f:35:8e:61:04:95:89: 2c:a3:c1:66:eb:8d:19:32:16:95:14:5d:1b:0b:b8: 31:be:4d:b3:bf:e3:b6:d4:dd:bf:96:b4:15:64:da: b6:07:94:40:ae:07:64:c1:5c:70:9b:69:c0:ec:1b: 8f:ce:5a:a8:19:29:85:20:fe:96:af:b2:83:1e:33: d3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C4:C9:08:D2:92:7E:3F:EA:1D:03:08:B5:38:78:4E:DF:91:AA:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1ad074b3-1ef3-3eda-98c9-f9561f0b6a33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.32.152.0/21 64.50.136.0/21 64.145.128.0/17 64.248.0.0/15 66.17.72.0/21 66.200.0.0/16 74.3.0.0/17 205.214.32.0/20 206.40.192.0/20 206.253.0.0/20 208.41.0.0/16 216.151.224.0/20 216.184.128.0/17 216.224.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:30:b0:1b:78:e7:19:27:08:48:f8:75:1f:ad:f0:65:5d:8d: f1:5f:eb:07:51:47:32:f6:a9:58:09:b2:4d:be:f3:39:2f:53: 0f:37:a9:be:13:1c:0e:2e:02:84:10:ea:6a:ba:a3:94:25:4f: e9:a7:03:85:4f:e8:92:87:a7:9b:48:ba:25:c0:bd:a3:1c:0c: 43:ab:fc:85:75:68:52:2a:9e:0d:e0:79:65:12:7c:a8:20:60: 97:bf:70:d4:dd:64:5b:8c:ed:f2:04:de:b2:5c:02:f3:ac:87: ff:8e:8d:40:e6:4a:aa:8d:b3:83:4e:a8:81:95:6b:1b:e8:08: f4:54:55:a2:83:00:4c:5a:a8:93:21:8d:62:f0:b5:cd:8f:ff: 76:18:b5:9c:8e:bf:89:34:de:e7:df:e0:0d:a2:2d:a4:7f:56: 09:7c:2f:f4:fb:09:59:6b:2c:d6:a5:57:a4:d4:9d:ad:f5:79: 89:a8:07:2c:80:d1:1f:af:5b:c1:d0:a6:61:a0:9d:76:48:3f: 94:aa:e7:a5:3a:49:eb:71:d5:b3:a9:b0:ec:7a:31:69:5d:47: dc:88:47:5f:49:de:9f:cf:fb:68:19:aa:35:6d:03:fe:39:96: 8c:b8:40:ec:a1:4b:68:58:13:1e:d6:84:12:14:69:8d:52:a4: 49:71:17:d6 -----BEGIN CERTIFICATE----- MIIGjjCCBXagAwIBAgIUAQ0Mn0MoWE8+SAhD2rFzmEr5vgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk NDJmNWZkOGQtMTY0Ny00YTI1LWEyN2ItMGYxMzQwZTFkMWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIgQjdjAxahYkQW6Lg1lPwTckWyf4nA7TuHD qmJtFbDZe1GkfNcDHJpoa64xucf74L7jR4iV+jR4+ADICHsHsZ08pcHZ0mRcLAHL bBoP/PTFno2twlXhgP+NYX7sTkzDnC1Iy2fYSqX9xW2YEfKJlzllr8r5ZwU/PB89 VIUkfvhgA4OrptbOUN5g8pCDfPGABY5gCrJGYxXsarGHUDopBZtrzbhpV/KQ7fjw 2PpndOA37+rveeIHbyYcs381jmEElYkso8Fm640ZMhaVFF0bC7gxvk2zv+O21N2/ lrQVZNq2B5RArgdkwVxwm2nA7BuPzlqoGSmFIP6Wr7KDHjPTDwIDAQABo4IDoDCC A5wwHQYDVR0OBBYEFLvEyQjSkn4/6h0DCLU4eE7fkarAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMWFkMDc0YjMtMWVmMy0z ZWRhLTk4YzktZjk1NjFmMGI2YTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMGoGCCsGAQUFBwEHAQH/BFswWTBXBAIAATBRAwQDQCCYAwQD QDKIAwQHQJGAAwMBQPgDBANCEUgDAwBCyAMEB0oDAAMEBM3WIAMEBM4owAMEBM79 AAMDANApAwQE2JfgAwQH2LiAAwQG2OAAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMYwsBt45xknCEj4dR+t 8GVdjfFf6wdRRzL2qVgJsk2+8zkvUw83qb4THA4uAoQQ6mq6o5QlT+mnA4VP6JKH p5tIuiXAvaMcDEOr/IV1aFIqng3geWUSfKggYJe/cNTdZFuM7fIE3rJcAvOsh/+O jUDmSqqNs4NOqIGVaxvoCPRUVaKDAExaqJMhjWLwtc2P/3YYtZyOv4k03uff4A2i LaR/Vgl8L/T7CVlrLNalV6TUna31eYmoByyA0R+vW8HQpmGgnXZIP5Sq56U6Setx 1bOpsOx6MWldR9yIR19J3p/P+2gZqjVtA/45loy4QOyhS2hYEx7WhBIUaY1SpElx F9Y= -----END CERTIFICATE-----Generated at Tue Oct 13 00:47:34 2026 by rpki-client