$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa File: 2f73330e-1532-3517-a51f-dc46cb11c22c.roa (raw, json) Hash identifier: zkIRI34IoTpADR3Q4TQ21Ne2wrBLI4jSTxVil2/cwNM= Subject key identifier: AF:EE:73:B7:BC:18:75:B0:D1:CF:88:4A:C0:D5:E4:7A:F6:14:66:87 Certificate issuer: /CN=028c0596-c3dd-44df-9761-677e68794c69 Certificate serial: 010D0C9F4328584F6F230229339793307D679300 Authority key identifier: D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 14371 IP address blocks: 65.18.204.0/22 maxlen: 24 66.171.40.0/21 maxlen: 24 68.235.64.0/18 maxlen: 24 104.219.196.0/22 maxlen: 24 162.254.64.0/22 maxlen: 24 205.149.144.0/20 maxlen: 24 206.223.125.0/24 maxlen: 24 208.77.24.0/22 maxlen: 24 209.191.192.0/19 maxlen: 24 2001:504:29::/48 maxlen: 48 2600:6400::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:02:29:33:97:93:30:7d:67:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028c0596-c3dd-44df-9761-677e68794c69 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=020c4e2e-d426-4a7d-9c15-3a5ec1a5b4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:de:b3:55:4b:7e:51:cd:cd:00:a1:99:22:80: aa:31:06:c0:5d:26:12:04:27:7e:08:36:86:af:51: 61:68:4b:53:9f:95:76:b0:f5:35:22:22:02:7b:48: 07:ba:b5:92:3f:b5:32:dc:c8:e4:d8:32:9c:60:3c: a2:50:0c:e7:83:f8:4a:d4:5b:92:f2:9b:03:cb:64: cd:9c:3e:ec:b4:72:a0:5e:6d:94:aa:4a:ee:86:1f: f5:65:af:c4:8e:49:21:50:57:0b:c2:e6:a3:a6:ed: ce:56:25:dc:26:5b:a4:ed:a4:18:26:f2:a2:33:97: 39:69:1d:dc:5a:07:70:58:e0:b8:ca:78:16:45:a3: d1:86:94:05:d6:95:10:ee:3e:a9:19:3e:f4:03:9b: a9:bd:ae:11:01:d0:7a:ad:1b:dd:76:3f:e5:5d:c1: c0:b5:5f:d7:e0:8e:99:90:e6:17:2f:c0:0b:78:7f: 45:7f:64:f0:09:c0:3d:95:b2:21:b4:08:74:66:84: a6:e8:d8:ed:27:23:43:31:79:3d:37:ec:3f:35:fa: 3e:5a:81:b5:32:2b:d3:74:c7:ac:47:9f:93:1f:74: be:13:42:43:d0:a6:41:b7:fc:28:b4:3b:74:4f:5d: 29:46:ac:78:bf:ab:93:e4:10:de:87:9a:d1:9f:b9: e6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:EE:73:B7:BC:18:75:B0:D1:CF:88:4A:C0:D5:E4:7A:F6:14:66:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/2f73330e-1532-3517-a51f-dc46cb11c22c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.crl X509v3 Authority Key Identifier: keyid:D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer sbgp-ipAddrBlock: critical IPv4: 65.18.204.0/22 66.171.40.0/21 68.235.64.0/18 104.219.196.0/22 162.254.64.0/22 205.149.144.0/20 206.223.125.0/24 208.77.24.0/22 209.191.192.0/19 IPv6: 2001:504:29::/48 2600:6400::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:47:26:34:a0:fa:df:d9:87:1e:3c:56:7c:5f:e3:94:8f:b4: 3f:5e:07:c9:24:58:65:59:77:20:5f:f3:16:18:5d:78:56:9c: 0a:1b:ea:8a:1e:63:85:57:2e:94:7c:1d:98:ec:4a:33:f3:79: 76:9e:82:83:23:12:51:c0:9a:58:ce:4d:cf:95:98:a9:ac:72: d2:de:df:e2:d9:ef:61:43:5a:f7:f1:8a:7a:8f:32:e0:b8:41: 9b:9e:2a:3e:58:c8:43:1b:f0:09:58:0c:0c:23:06:18:40:10: ba:0e:f8:57:34:e4:f9:3c:e1:39:aa:d6:b0:6f:be:12:5e:9a: fd:9e:3a:2a:8b:a4:23:f9:e0:68:af:34:f0:9b:e3:8c:77:b2: d7:5f:c1:ab:1a:c2:cd:28:1c:f6:03:d5:09:36:3f:05:8f:71: 9f:0d:77:ff:1c:6a:53:01:94:97:b6:7d:77:cd:1f:67:3d:17: 65:2a:30:ad:4b:a6:f8:fd:c4:e7:a8:41:7c:2d:9f:fa:c1:b1: 1c:86:32:6c:64:96:d1:ba:7f:88:7c:61:90:07:f0:66:63:66: 1f:f7:49:e5:45:ad:d3:e6:eb:fb:e6:8f:8a:59:cf:86:68:31: d7:cd:2f:aa:de:ad:dd:0b:26:72:c0:54:9d:f4:64:04:5a:21: 0f:01:2b:f5 -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWE9vIwIpM5eTMH1nkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI4YzA1OTYtYzNkZC00NGRmLTk3NjEtNjc3ZTY4Nzk0 YzY5MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk MDIwYzRlMmUtZDQyNi00YTdkLTljMTUtM2E1ZWMxYTViNGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN6zVUt+Uc3NAKGZIoCqMQbAXSYSBCd+CDaG r1FhaEtTn5V2sPU1IiICe0gHurWSP7Uy3Mjk2DKcYDyiUAzng/hK1FuS8psDy2TN nD7stHKgXm2Uqkruhh/1Za/EjkkhUFcLwuajpu3OViXcJluk7aQYJvKiM5c5aR3c WgdwWOC4yngWRaPRhpQF1pUQ7j6pGT70A5upva4RAdB6rRvddj/lXcHAtV/X4I6Z kOYXL8ALeH9Ff2TwCcA9lbIhtAh0ZoSm6NjtJyNDMXk9N+w/Nfo+WoG1MivTdMes R5+TH3S+E0JD0KZBt/wotDt0T10pRqx4v6uT5BDeh5rRn7nmXQIDAQABo4IDnTCC A5kwHQYDVR0OBBYEFK/uc7e8GHWw0c+ISsDV5Hr2FGaHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMjhj MDU5Ni1jM2RkLTQ0ZGYtOTc2MS02NzdlNjg3OTRjNjkvMmY3MzMzMGUtMTUzMi0z NTE3LWE1MWYtZGM0NmNiMTFjMjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDI4YzA1OTYtYzNkZC00NGRmLTk3 NjEtNjc3ZTY4Nzk0YzY5LzAyOGMwNTk2LWMzZGQtNDRkZi05NzYxLTY3N2U2ODc5 NGM2OS5jcmwwHwYDVR0jBBgwFoAU13vNAHAryYoSeo0O6DqODdIIi7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMjhjMDU5Ni1jM2RkLTQ0ZGYtOTc2MS02Nzdl Njg3OTRjNjkuY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjA8BAIAATA2AwQCQRLMAwQD QqsoAwQGROtAAwQCaNvEAwQCov5AAwQEzZWQAwQAzt99AwQC0E0YAwQF0b/AMBYE AgACMBADBwAgAQUEACkDBQQmAGQAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAlHJjSg+t/Zhx48Vnxf45SP tD9eB8kkWGVZdyBf8xYYXXhWnAob6ooeY4VXLpR8HZjsSjPzeXaegoMjElHAmljO Tc+VmKmsctLe3+LZ72FDWvfxinqPMuC4QZueKj5YyEMb8AlYDAwjBhhAELoO+Fc0 5Pk84Tmq1rBvvhJemv2eOiqLpCP54GivNPCb44x3stdfwasaws0oHPYD1Qk2PwWP cZ8Nd/8calMBlJe2fXfNH2c9F2UqMK1Lpvj9xOeoQXwtn/rBsRyGMmxkltG6f4h8 YZAH8GZjZh/3SeVFrdPm6/vmj4pZz4ZoMdfNL6rerd0LJnLAVJ30ZARaIQ8BK/U= -----END CERTIFICATE-----Generated at Sun Oct 11 01:26:33 2026 by rpki-client