$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1ef2cde9-f378-392a-a337-28ea4489c130.roa File: 1ef2cde9-f378-392a-a337-28ea4489c130.roa (raw, json) Hash identifier: znk5tAeFBK4GUvLbHFV5iCLNW8lr7awtUdV2YitO0T4= Subject key identifier: E2:85:2F:B0:C9:65:76:B0:0A:63:A7:76:CE:21:D1:47:51:01:72:78 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EA17A5D15C462840997C6FF80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1ef2cde9-f378-392a-a337-28ea4489c130.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 20115 IP address blocks: 64.93.40.0/21 maxlen: 24 64.205.236.0/22 maxlen: 24 65.86.136.0/22 maxlen: 24 69.33.72.0/22 maxlen: 24 69.33.80.0/22 maxlen: 24 74.0.84.0/22 maxlen: 24 74.0.120.0/21 maxlen: 24 74.2.20.0/22 maxlen: 24 74.2.36.0/22 maxlen: 24 74.2.120.0/21 maxlen: 24 74.2.248.0/21 maxlen: 24 216.46.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:5d:15:c4:62:84:09:97:c6:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=e69d65d4-df4e-4882-9c73-7eea75957c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1e:86:9e:18:aa:d7:f4:50:20:f5:82:8e:6c: af:ba:85:37:dc:b0:cb:d0:80:ed:bd:14:17:8e:69: 51:7a:d9:63:ae:44:7e:a2:f0:36:ae:dc:23:4f:20: 49:c7:69:bd:db:fc:d9:a4:64:06:ac:af:88:8a:cf: e5:5f:47:b5:fd:36:cc:29:2c:7e:73:94:df:84:ec: 49:38:06:6c:a9:fc:3f:ab:ec:85:02:10:6d:e5:0b: 43:89:39:b6:aa:20:68:c6:01:25:d8:32:fc:7a:2a: bf:ba:d7:de:57:ae:54:3f:ab:2a:f0:da:ad:f2:b1: ad:cb:54:29:c8:be:02:d9:2d:f2:7d:d5:05:04:96: e3:92:9c:c1:a3:6a:89:45:20:7e:91:f5:59:6c:1a: 7a:56:d6:e8:ea:e4:4a:d5:cf:76:fa:c1:cc:21:7b: 01:60:d2:82:17:11:98:fb:15:73:18:3a:f0:08:06: b5:03:f8:14:90:cb:f9:4e:89:bf:9c:cc:a9:33:ec: c3:a9:a4:cd:0f:cb:cf:f3:86:70:3f:59:45:b9:84: 89:a6:54:2e:56:40:d0:76:27:43:88:c1:7b:ac:a4: e8:90:d6:e7:fc:4d:95:70:a6:87:d3:97:18:6f:92: f6:04:9c:a3:13:16:2b:c7:2f:e4:d5:1c:fd:02:63: 67:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:85:2F:B0:C9:65:76:B0:0A:63:A7:76:CE:21:D1:47:51:01:72:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1ef2cde9-f378-392a-a337-28ea4489c130.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.93.40.0/21 64.205.236.0/22 65.86.136.0/22 69.33.72.0/22 69.33.80.0/22 74.0.84.0/22 74.0.120.0/21 74.2.20.0/22 74.2.36.0/22 74.2.120.0/21 74.2.248.0/21 216.46.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:f5:d9:c9:c4:82:c0:45:70:4b:5b:53:6d:d8:eb:aa:c9:d2: 3e:63:3e:e2:c1:5f:00:5e:0f:61:f6:88:fe:06:6f:8e:a8:e0: 7b:4f:69:40:2d:5f:96:6f:63:bf:5e:28:4c:a8:43:88:39:b3: 6f:e2:d2:f1:71:99:86:18:fb:8c:1a:fe:63:cb:67:35:07:d5: aa:f9:32:be:46:57:30:01:eb:3b:cb:2c:55:76:e5:db:1f:84: 7f:0c:6e:80:c2:b1:bf:00:7e:7e:2c:e7:bb:0b:4d:c8:71:45: aa:30:be:7b:02:b0:6e:13:49:73:c1:46:66:42:e5:94:57:ea: 13:ee:62:a1:fa:64:19:4d:85:56:da:6b:68:e5:c7:91:1c:18: 25:1e:6d:c4:35:ee:fc:75:1e:64:67:fa:17:78:ca:85:69:ac: 4d:94:4f:35:bb:de:37:43:32:dd:a4:1a:a2:35:da:6e:a7:46: 58:a3:16:d5:95:32:55:b1:31:f5:96:e4:36:55:3d:3a:8f:1f: 40:e6:83:36:ca:e4:00:b4:4e:19:97:09:0f:16:5a:84:93:1e: 8a:36:b8:a5:c9:35:36:1c:81:98:28:4c:e4:4c:2b:6d:a8:4c: 03:b2:65:7c:2e:bb:9a:90:cf:e1:43:0c:8a:1e:56:10:75:e4: 64:34:82:3e -----BEGIN CERTIFICATE----- MIIGhTCCBW2gAwIBAgIUAQ0Mn0MoWE6hel0VxGKECZfG/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk ZTY5ZDY1ZDQtZGY0ZS00ODgyLTljNzMtN2VlYTc1OTU3YzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx6Gnhiq1/RQIPWCjmyvuoU33LDL0IDtvRQX jmlRetljrkR+ovA2rtwjTyBJx2m92/zZpGQGrK+Iis/lX0e1/TbMKSx+c5TfhOxJ OAZsqfw/q+yFAhBt5QtDiTm2qiBoxgEl2DL8eiq/utfeV65UP6sq8Nqt8rGty1Qp yL4C2S3yfdUFBJbjkpzBo2qJRSB+kfVZbBp6Vtbo6uRK1c92+sHMIXsBYNKCFxGY +xVzGDrwCAa1A/gUkMv5Tom/nMypM+zDqaTND8vP84ZwP1lFuYSJplQuVkDQdidD iMF7rKTokNbn/E2VcKaH05cYb5L2BJyjExYrxy/k1Rz9AmNntwIDAQABo4IDlzCC A5MwHQYDVR0OBBYEFOKFL7DJZXawCmOnds4h0UdRAXJ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMWVmMmNkZTktZjM3OC0z OTJhLWEzMzctMjhlYTQ0ODljMTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQDQF0oAwQC QM3sAwQCQVaIAwQCRSFIAwQCRSFQAwQCSgBUAwQDSgB4AwQCSgIUAwQCSgIkAwQD SgJ4AwQDSgL4AwQC2C5cMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIT12cnEgsBFcEtbU23Y66rJ0j5jPuLB XwBeD2H2iP4Gb46o4HtPaUAtX5ZvY79eKEyoQ4g5s2/i0vFxmYYY+4wa/mPLZzUH 1ar5Mr5GVzAB6zvLLFV25dsfhH8MboDCsb8Afn4s57sLTchxRaowvnsCsG4TSXPB RmZC5ZRX6hPuYqH6ZBlNhVbaa2jlx5EcGCUebcQ17vx1HmRn+hd4yoVprE2UTzW7 3jdDMt2kGqI12m6nRlijFtWVMlWxMfWW5DZVPTqPH0DmgzbK5AC0ThmXCQ8WWoST Hoo2uKXJNTYcgZgoTORMK22oTAOyZXwuu5qQz+FDDIoeVhB15GQ0gj4= -----END CERTIFICATE-----Generated at Wed Jul 29 20:56:35 2026 by rpki-client