$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3becc9af-9630-3ef3-91f4-e75f4fa4a2d4.roa File: 3becc9af-9630-3ef3-91f4-e75f4fa4a2d4.roa (raw, json) Hash identifier: UR08eQ3ONj0o0+TmebRf7FetU7BoLDNoIxy+pe/IPJg= Subject key identifier: 15:41:61:77:60:9C:99:3D:48:22:CE:ED:D8:E9:CC:75:D3:8E:08:F3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E9BE52F61E7B5051148EA9920 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3becc9af-9630-3ef3-91f4-e75f4fa4a2d4.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 3320 IP address blocks: 64.32.152.0/21 maxlen: 24 64.50.136.0/21 maxlen: 24 64.145.128.0/18 maxlen: 24 64.145.192.0/18 maxlen: 24 64.248.0.0/18 maxlen: 24 64.248.64.0/18 maxlen: 24 64.248.128.0/18 maxlen: 24 64.248.192.0/18 maxlen: 24 64.249.0.0/18 maxlen: 24 64.249.64.0/18 maxlen: 24 64.249.128.0/18 maxlen: 24 64.249.192.0/18 maxlen: 24 66.17.72.0/21 maxlen: 24 66.200.0.0/18 maxlen: 24 66.200.64.0/18 maxlen: 24 66.200.128.0/18 maxlen: 24 66.200.192.0/18 maxlen: 24 74.3.0.0/18 maxlen: 24 74.3.64.0/18 maxlen: 24 205.214.32.0/20 maxlen: 24 206.40.192.0/20 maxlen: 24 206.253.0.0/20 maxlen: 24 208.41.0.0/18 maxlen: 24 208.41.64.0/18 maxlen: 24 208.41.128.0/18 maxlen: 24 208.41.192.0/18 maxlen: 24 216.151.224.0/20 maxlen: 24 216.184.128.0/18 maxlen: 24 216.184.192.0/18 maxlen: 24 216.224.0.0/19 maxlen: 24 216.224.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:2f:61:e7:b5:05:11:48:ea:99:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=11f7e71f-b278-4493-a7e8-d4160dda0ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:45:e4:e2:7e:27:48:53:a0:77:0d:14:05:cc: 8b:97:3d:80:aa:8c:fa:bc:5c:15:34:05:87:e4:5e: e1:45:cb:bd:e7:e6:30:1e:c0:d8:13:ca:e1:82:61: 02:a5:b4:47:e7:96:9f:d2:af:c9:1c:9a:82:50:59: 2c:e8:6f:81:d2:f8:d3:e2:b5:38:81:f5:c8:b6:60: 98:59:00:16:b8:6c:cf:a6:68:66:0d:96:cb:95:a9: 99:24:fd:ca:4c:ee:ea:6f:e4:27:47:bf:de:70:cf: 0b:c3:ba:96:d5:18:9f:d5:df:ec:2d:6e:2a:f1:60: 67:8c:c0:20:59:ed:8d:34:cf:69:40:88:4c:e1:74: 2f:e9:a0:68:ca:ba:42:64:23:2b:6a:f9:eb:bd:19: 46:92:6a:93:8c:2b:df:5b:99:8e:fc:2e:c9:38:67: 7f:b8:69:78:2c:8a:21:50:0d:3b:c5:84:c1:0a:97: 33:8b:d6:0f:64:b9:8c:3d:1c:db:3e:9d:0f:34:00: 9b:76:7c:37:ae:fc:bb:e7:dd:bd:b5:ce:b2:3a:ae: f2:6c:48:3e:ed:12:72:02:e7:a5:44:83:d9:95:b8: 71:c2:43:94:d6:58:37:92:b5:8d:56:bd:40:ee:99: bd:f2:40:dc:26:c3:e7:8a:5b:99:44:d5:c8:34:a3: c2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:41:61:77:60:9C:99:3D:48:22:CE:ED:D8:E9:CC:75:D3:8E:08:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3becc9af-9630-3ef3-91f4-e75f4fa4a2d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.32.152.0/21 64.50.136.0/21 64.145.128.0/17 64.248.0.0/15 66.17.72.0/21 66.200.0.0/16 74.3.0.0/17 205.214.32.0/20 206.40.192.0/20 206.253.0.0/20 208.41.0.0/16 216.151.224.0/20 216.184.128.0/17 216.224.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:40:e0:32:21:c1:42:73:f9:f0:5b:8d:a5:97:df:8d:ed:c3: 66:16:fa:c5:66:81:68:e8:4d:b7:4e:1c:84:a7:a0:76:af:33: dc:62:22:31:fd:85:7f:59:ee:e0:3c:06:3b:d9:94:44:f1:f4: cb:85:77:85:01:14:59:31:48:7f:bb:9f:be:3c:b2:32:81:82: 5c:33:aa:7d:ec:ea:02:10:ec:3c:cd:0c:c4:e0:3d:ed:8b:96: 98:f0:64:3e:50:eb:48:f7:8c:de:b3:29:59:ba:d4:6c:09:7c: 8d:cf:05:51:aa:25:47:91:d2:de:e3:73:5e:09:6c:47:97:48: a2:0a:de:8d:db:8e:45:23:f3:81:b9:c0:72:fc:b9:fd:2f:ef: de:f2:d0:3a:10:97:ee:a2:f5:cf:fd:e7:c0:23:3e:a5:c1:f9: a6:27:f3:60:d9:28:6f:c5:e7:df:c7:45:e8:67:67:48:af:1d: f0:2b:95:33:74:4d:7f:de:7d:a9:f4:ee:02:5b:12:d2:18:e2: 2e:d8:cb:3e:3e:c1:ba:8a:e1:7a:df:a5:0f:78:ff:a9:d7:0e: 15:1b:22:9e:94:54:95:be:9b:dc:b9:cf:8b:b6:6d:34:e9:3b: 31:82:6e:7e:72:40:c6:88:a2:63:b6:82:b3:9f:45:23:cf:bf: 3b:82:57:49 -----BEGIN CERTIFICATE----- MIIGjjCCBXagAwIBAgIUAQ0Mn0MoWE6b5S9h57UFEUjqmSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk MTFmN2U3MWYtYjI3OC00NDkzLWE3ZTgtZDQxNjBkZGEwZWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0Xk4n4nSFOgdw0UBcyLlz2Aqoz6vFwVNAWH 5F7hRcu95+YwHsDYE8rhgmECpbRH55af0q/JHJqCUFks6G+B0vjT4rU4gfXItmCY WQAWuGzPpmhmDZbLlamZJP3KTO7qb+QnR7/ecM8Lw7qW1Rif1d/sLW4q8WBnjMAg We2NNM9pQIhM4XQv6aBoyrpCZCMravnrvRlGkmqTjCvfW5mO/C7JOGd/uGl4LIoh UA07xYTBCpczi9YPZLmMPRzbPp0PNACbdnw3rvy75929tc6yOq7ybEg+7RJyAuel RIPZlbhxwkOU1lg3krWNVr1A7pm98kDcJsPniluZRNXINKPCoQIDAQABo4IDoDCC A5wwHQYDVR0OBBYEFBVBYXdgnJk9SCLO7djpzHXTjgjzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2JlY2M5YWYtOTYzMC0z ZWYzLTkxZjQtZTc1ZjRmYTRhMmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMGoGCCsGAQUFBwEHAQH/BFswWTBXBAIAATBRAwQDQCCYAwQD QDKIAwQHQJGAAwMBQPgDBANCEUgDAwBCyAMEB0oDAAMEBM3WIAMEBM4owAMEBM79 AAMDANApAwQE2JfgAwQH2LiAAwQG2OAAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEVA4DIhwUJz+fBbjaWX 343tw2YW+sVmgWjoTbdOHISnoHavM9xiIjH9hX9Z7uA8BjvZlETx9MuFd4UBFFkx SH+7n748sjKBglwzqn3s6gIQ7DzNDMTgPe2LlpjwZD5Q60j3jN6zKVm61GwJfI3P BVGqJUeR0t7jc14JbEeXSKIK3o3bjkUj84G5wHL8uf0v797y0DoQl+6i9c/958Aj PqXB+aYn82DZKG/F59/HRehnZ0ivHfArlTN0TX/efan07gJbEtIY4i7Yyz4+wbqK 4XrfpQ94/6nXDhUbIp6UVJW+m9y5z4u2bTTpOzGCbn5yQMaIomO2grOfRSPPvzuC V0k= -----END CERTIFICATE-----Generated at Tue Jul 28 13:39:36 2026 by rpki-client