$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9aca578b-6d14-4b93-9d59-9797d0829719/928a0271-bd53-370d-a273-7586e8ba0488.roa File: 928a0271-bd53-370d-a273-7586e8ba0488.roa (raw, json) Hash identifier: OS7HcNR5Nq+ZkrtgUwAAKmuwYCyO0uYQa9WKLdwObxw= Subject key identifier: 78:57:7A:1C:11:8A:0C:D5:0D:F9:21:02:94:A4:C6:1B:DE:27:02:98 Certificate issuer: /CN=9aca578b-6d14-4b93-9d59-9797d0829719 Certificate serial: 010D0C9F4328584FB2D9CD316A6D2F89889C9310 Authority key identifier: CF:72:35:8E:07:9C:55:EE:DD:A0:B5:7B:89:AF:E4:12:4A:FF:4B:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9aca578b-6d14-4b93-9d59-9797d0829719.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9aca578b-6d14-4b93-9d59-9797d0829719/928a0271-bd53-370d-a273-7586e8ba0488.roa Signing time: Sun 01 Nov 2026 19:08:11 +0000 ROA not before: Sun 01 Nov 2026 19:08:11 +0000 ROA not after: Sat 30 Jan 2027 18:26:34 +0000 asID: 198949 IP address blocks: 64.68.16.0/20 maxlen: 20 66.171.64.0/20 maxlen: 20 66.171.79.0/24 maxlen: 24 67.214.128.0/21 maxlen: 21 67.214.136.0/21 maxlen: 21 68.170.128.0/20 maxlen: 20 69.18.128.0/18 maxlen: 18 69.18.192.0/19 maxlen: 19 162.222.248.0/22 maxlen: 22 199.244.200.0/22 maxlen: 22 206.197.200.0/23 maxlen: 23 206.201.128.0/23 maxlen: 23 206.201.140.0/22 maxlen: 22 208.75.152.0/21 maxlen: 21 216.70.192.0/21 maxlen: 21 216.70.200.0/21 maxlen: 21 216.70.208.0/21 maxlen: 21 216.70.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9aca578b-6d14-4b93-9d59-9797d0829719/9aca578b-6d14-4b93-9d59-9797d0829719.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9aca578b-6d14-4b93-9d59-9797d0829719/9aca578b-6d14-4b93-9d59-9797d0829719.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9aca578b-6d14-4b93-9d59-9797d0829719.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b2:d9:cd:31:6a:6d:2f:89:88:9c:93:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aca578b-6d14-4b93-9d59-9797d0829719 Validity Not Before: Nov 1 19:08:11 2026 GMT Not After : Jan 30 18:26:34 2027 GMT Subject: CN=fdab163a-a888-48f1-8233-6e0736e9b5e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:35:e7:15:27:89:20:d8:3c:0a:26:5c:c5:97: c9:17:3e:28:16:f1:a3:6f:8a:16:a9:28:be:62:c5: ff:5b:0c:ac:91:5c:40:6f:29:5d:66:2b:6e:18:e4: 66:9a:3f:53:1b:c4:83:2b:d1:c1:5f:c9:7e:90:d5: 9c:05:c1:d7:66:45:44:73:c4:5b:75:b1:ce:e1:30: 83:d8:b2:8e:be:d3:d3:63:ba:e5:b2:e6:6e:31:bb: 3b:08:85:86:78:7d:5e:91:a1:5a:fa:52:af:33:20: 21:21:43:43:b9:3e:b2:53:7e:30:34:9e:a4:23:df: 7f:90:29:57:12:aa:67:5a:12:61:11:78:17:91:7e: 75:d6:15:e9:26:6c:64:c2:23:bb:e3:30:59:1a:19: 93:07:76:3a:a9:14:ee:38:f9:3b:6e:a4:4d:a0:bd: 20:ab:13:ab:5d:43:29:8e:e2:ca:2e:40:f8:5b:55: 60:dc:6c:52:cc:a6:2e:75:6d:42:c8:6f:9d:09:99: 5a:24:b5:d1:23:33:86:47:6e:e9:f3:98:15:db:ab: c6:40:6f:9d:2b:b7:d5:cf:a8:5f:c5:c3:d7:73:81: bc:62:ab:29:27:b3:55:7c:2e:29:5a:1c:ec:b9:c5: e7:2f:e7:4c:61:db:63:59:f7:6c:77:79:5d:67:26: 7a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:57:7A:1C:11:8A:0C:D5:0D:F9:21:02:94:A4:C6:1B:DE:27:02:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9aca578b-6d14-4b93-9d59-9797d0829719/928a0271-bd53-370d-a273-7586e8ba0488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9aca578b-6d14-4b93-9d59-9797d0829719/9aca578b-6d14-4b93-9d59-9797d0829719.crl X509v3 Authority Key Identifier: keyid:CF:72:35:8E:07:9C:55:EE:DD:A0:B5:7B:89:AF:E4:12:4A:FF:4B:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9aca578b-6d14-4b93-9d59-9797d0829719.cer sbgp-ipAddrBlock: critical IPv4: 64.68.16.0/20 66.171.64.0/20 67.214.128.0/20 68.170.128.0/20 69.18.128.0-69.18.223.255 162.222.248.0/22 199.244.200.0/22 206.197.200.0/23 206.201.128.0/23 206.201.140.0/22 208.75.152.0/21 216.70.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:cf:f7:93:b5:93:e2:a0:57:60:14:93:4c:81:ab:08:60:e0: b3:4d:0f:9f:aa:b9:2d:1e:eb:95:cb:8b:51:55:5c:7c:3b:94: a0:8d:33:75:50:69:5c:49:2b:bd:6d:d7:70:11:53:a3:cb:b1: d0:4f:a6:f2:5d:7f:a0:f0:db:a5:7a:b8:0d:33:c5:ff:57:e6: fc:0c:e4:a8:6c:85:ed:49:87:d8:65:ce:bf:c9:df:ed:7c:de: 2a:be:92:a3:b8:27:24:3a:e2:a8:41:38:c6:de:52:04:39:a7: b2:c5:8b:55:d3:05:ee:b6:e7:3a:4d:cd:08:ce:5b:cd:8f:df: 8c:21:80:f0:72:02:bc:59:9a:87:3e:bb:40:b4:e6:24:cd:3e: ae:05:d2:68:b7:7e:c2:5f:fd:d0:42:93:fd:59:1d:90:fe:9a: 43:5f:e9:8a:9f:e1:9e:09:80:49:17:46:38:81:77:81:78:1a: 4a:d4:08:90:ab:e8:d3:ce:76:a5:ae:f2:b2:0b:33:cd:91:8e: fe:14:a1:78:c9:b8:74:77:cd:d1:24:96:79:1f:38:1f:54:00: 86:b3:a7:e4:dc:09:1c:b0:6c:60:4d:e1:7a:62:4a:17:fd:20: 54:b5:32:92:de:4f:d0:cf:89:be:56:dd:d6:9e:d2:32:0a:aa: b4:39:3a:4a -----BEGIN CERTIFICATE----- MIIGjTCCBXWgAwIBAgIUAQ0Mn0MoWE+y2c0xam0viYickxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFjYTU3OGItNmQxNC00YjkzLTlkNTktOTc5N2QwODI5 NzE5MB4XDTI2MTEwMTE5MDgxMVoXDTI3MDEzMDE4MjYzNFowLzEtMCsGA1UEAxMk ZmRhYjE2M2EtYTg4OC00OGYxLTgyMzMtNmUwNzM2ZTliNWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jXnFSeJINg8CiZcxZfJFz4oFvGjb4oWqSi+ YsX/WwyskVxAbyldZituGORmmj9TG8SDK9HBX8l+kNWcBcHXZkVEc8RbdbHO4TCD 2LKOvtPTY7rlsuZuMbs7CIWGeH1ekaFa+lKvMyAhIUNDuT6yU34wNJ6kI99/kClX EqpnWhJhEXgXkX511hXpJmxkwiO74zBZGhmTB3Y6qRTuOPk7bqRNoL0gqxOrXUMp juLKLkD4W1Vg3GxSzKYudW1CyG+dCZlaJLXRIzOGR27p85gV26vGQG+dK7fVz6hf xcPXc4G8YqspJ7NVfC4pWhzsucXnL+dMYdtjWfdsd3ldZyZ6fwIDAQABo4IDnzCC A5swHQYDVR0OBBYEFHhXehwRigzVDfkhApSkxhveJwKYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS85YWNh NTc4Yi02ZDE0LTRiOTMtOWQ1OS05Nzk3ZDA4Mjk3MTkvOTI4YTAyNzEtYmQ1My0z NzBkLWEyNzMtNzU4NmU4YmEwNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvOWFjYTU3OGItNmQxNC00YjkzLTlk NTktOTc5N2QwODI5NzE5LzlhY2E1NzhiLTZkMTQtNGI5My05ZDU5LTk3OTdkMDgy OTcxOS5jcmwwHwYDVR0jBBgwFoAUz3I1jgecVe7doLV7ia/kEkr/S0QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS85YWNhNTc4Yi02ZDE0LTRiOTMtOWQ1OS05Nzk3 ZDA4Mjk3MTkuY2VyMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQEQEQQAwQE QqtAAwQEQ9aAAwQERKqAMAwDBAdFEoADBAVFEsADBAKi3vgDBALH9MgDBAHOxcgD BAHOyYADBALOyYwDBAPQS5gDBAXYRsAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEApc/3k7WT4qBXYBSTTIGr CGDgs00Pn6q5LR7rlcuLUVVcfDuUoI0zdVBpXEkrvW3XcBFTo8ux0E+m8l1/oPDb pXq4DTPF/1fm/AzkqGyF7UmH2GXOv8nf7XzeKr6So7gnJDriqEE4xt5SBDmnssWL VdMF7rbnOk3NCM5bzY/fjCGA8HICvFmahz67QLTmJM0+rgXSaLd+wl/90EKT/Vkd kP6aQ1/pip/hngmASRdGOIF3gXgaStQIkKvo0852pa7ysgszzZGO/hSheMm4dHfN 0SSWeR84H1QAhrOn5NwJHLBsYE3hemJKF/0gVLUykt5P0M+Jvlbd1p7SMgqqtDk6 Sg== -----END CERTIFICATE-----Generated at Tue Nov 3 22:33:15 2026 by rpki-client