$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/95fc21bc-973e-3417-b44f-73a044281803.roa File: 95fc21bc-973e-3417-b44f-73a044281803.roa (raw, json) Hash identifier: 68ivcNZ7SCWlqwYZxXR7UmIymif/Q/L2K5DSeDibo+4= Subject key identifier: EE:7A:5B:BF:04:15:B8:EB:D8:E6:13:02:56:B4:64:27:56:6A:C5:C6 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F7D3155B4C13181B718C89400 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/95fc21bc-973e-3417-b44f-73a044281803.roa Signing time: Tue 13 Oct 2026 13:50:54 +0000 ROA not before: Tue 13 Oct 2026 13:50:54 +0000 ROA not after: Wed 06 Jan 2027 18:23:53 +0000 asID: 3320 IP address blocks: 128.121.0.0/22 maxlen: 24 128.241.84.0/22 maxlen: 24 130.94.196.0/22 maxlen: 24 157.238.180.0/22 maxlen: 24 198.63.224.0/20 maxlen: 24 198.88.96.0/20 maxlen: 24 198.104.208.0/20 maxlen: 24 198.107.144.0/20 maxlen: 24 198.138.48.0/20 maxlen: 24 204.143.80.0/21 maxlen: 24 204.171.32.0/20 maxlen: 24 207.21.112.0/21 maxlen: 24 207.55.152.0/21 maxlen: 24 207.67.152.0/21 maxlen: 24 207.71.88.0/21 maxlen: 24 207.91.104.0/21 maxlen: 24 207.111.64.0/21 maxlen: 24 207.137.88.0/21 maxlen: 24 207.152.72.0/21 maxlen: 24 207.198.136.0/21 maxlen: 24 207.241.16.0/21 maxlen: 24 209.107.88.0/21 maxlen: 24 209.168.112.0/21 maxlen: 24 216.42.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7d:31:55:b4:c1:31:81:b7:18:c8:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 13 13:50:54 2026 GMT Not After : Jan 6 18:23:53 2027 GMT Subject: CN=58d1dc92-18e5-43b3-b7e4-70373f656f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ba:2b:c0:8b:50:31:af:5c:5c:18:43:04:d0: 82:a2:ac:fd:52:a7:aa:97:7c:a1:f3:11:da:a6:00: 57:8b:92:74:a5:be:8e:2d:3d:d1:a3:02:ac:52:a0: 0a:cd:df:fb:68:92:df:80:25:ca:a5:ff:74:8f:cd: 21:fa:02:1f:a0:a1:cf:69:20:58:dc:da:ec:19:21: 16:4e:bb:d2:cd:1f:de:e7:9a:a9:c3:7e:94:03:06: 5c:aa:f2:9b:20:84:42:1e:e4:d5:54:7a:c0:1b:d5: 20:e7:eb:c9:8d:53:b6:09:02:45:66:d1:2b:1c:5e: 27:be:e9:3f:a4:12:de:64:c4:fd:05:10:e1:b8:8d: 99:76:15:c3:f1:ee:f1:92:ae:45:40:db:3b:7e:95: 96:7c:7f:a1:e2:8f:6e:90:45:43:ca:e5:be:5a:70: 28:7e:07:9c:73:50:ec:50:a9:5a:b4:c2:6a:4e:96: e9:2b:5f:a1:61:ba:2a:0b:9d:b6:35:46:31:4f:98: 39:c5:15:91:11:56:ea:57:a7:1d:5f:48:9d:cd:b5: 16:86:c9:b6:d9:01:28:34:f6:b2:2e:ce:49:04:1b: fb:96:2b:f2:22:1e:e7:99:b5:e3:51:2e:9b:49:c9: 42:c8:98:2f:b2:3d:1e:83:d5:70:03:76:b8:b6:02: 7b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7A:5B:BF:04:15:B8:EB:D8:E6:13:02:56:B4:64:27:56:6A:C5:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/95fc21bc-973e-3417-b44f-73a044281803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.0.0/22 128.241.84.0/22 130.94.196.0/22 157.238.180.0/22 198.63.224.0/20 198.88.96.0/20 198.104.208.0/20 198.107.144.0/20 198.138.48.0/20 204.143.80.0/21 204.171.32.0/20 207.21.112.0/21 207.55.152.0/21 207.67.152.0/21 207.71.88.0/21 207.91.104.0/21 207.111.64.0/21 207.137.88.0/21 207.152.72.0/21 207.198.136.0/21 207.241.16.0/21 209.107.88.0/21 209.168.112.0/21 216.42.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:42:84:e7:5e:7b:fc:50:58:4b:92:9e:31:47:75:15:88:77: 60:17:10:73:6c:d4:2e:f4:bb:61:34:c4:8a:06:4d:5a:ac:27: 9b:cf:09:1e:2d:47:e1:3e:64:30:66:23:c8:9c:ba:89:22:e5: 35:d2:64:ec:26:d6:5a:53:bc:9d:e0:7f:78:b5:10:b0:83:92: 47:59:e0:e6:c5:06:ca:40:63:c8:9b:14:e6:e8:d1:b0:e4:ce: 8c:a4:52:98:14:36:27:73:5e:9c:67:3d:06:f6:e2:b4:4c:da: 78:7b:bf:59:12:c4:09:58:86:9e:33:06:7c:7d:21:c5:aa:db: 28:14:2d:2e:c8:2a:53:cd:91:14:96:58:63:ed:4b:df:42:82: a6:0d:6b:fe:ab:c1:57:59:a4:71:ca:21:c7:15:f7:25:9b:63: 9c:d3:ed:72:9a:40:1a:df:a8:0f:45:10:ac:78:1a:aa:2a:86: 88:9d:67:df:92:88:60:5e:83:0d:31:d2:e9:86:89:c7:60:b6: 26:47:b6:c7:49:fe:61:ee:11:b7:39:0f:6a:f9:84:70:08:61: a3:9a:5b:30:a3:07:79:30:7c:7f:f5:ce:bd:6d:5c:b8:a3:6c: b5:53:47:8d:cc:81:f3:2d:d5:37:fb:63:64:7d:18:9e:0c:f9: 05:3d:82:0b -----BEGIN CERTIFICATE----- MIIG0jCCBbqgAwIBAgIUAQ0Mn0MoWE99MVW0wTGBtxjIlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MTAxMzEzNTA1NFoXDTI3MDEwNjE4MjM1M1owLzEtMCsGA1UEAxMk NThkMWRjOTItMThlNS00M2IzLWI3ZTQtNzAzNzNmNjU2Zjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7orwItQMa9cXBhDBNCCoqz9Uqeql3yh8xHa pgBXi5J0pb6OLT3RowKsUqAKzd/7aJLfgCXKpf90j80h+gIfoKHPaSBY3NrsGSEW TrvSzR/e55qpw36UAwZcqvKbIIRCHuTVVHrAG9Ug5+vJjVO2CQJFZtErHF4nvuk/ pBLeZMT9BRDhuI2ZdhXD8e7xkq5FQNs7fpWWfH+h4o9ukEVDyuW+WnAofgecc1Ds UKlatMJqTpbpK1+hYboqC522NUYxT5g5xRWREVbqV6cdX0idzbUWhsm22QEoNPay Ls5JBBv7livyIh7nmbXjUS6bSclCyJgvsj0eg9VwA3a4tgJ7KQIDAQABo4ID5DCC A+AwHQYDVR0OBBYEFO56W78EFbjr2OYTAla0ZCdWasXGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOTVmYzIxYmMtOTczZS0z NDE3LWI0NGYtNzNhMDQ0MjgxODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZADBAKA eQADBAKA8VQDBAKCXsQDBAKd7rQDBATGP+ADBATGWGADBATGaNADBATGa5ADBATG ijADBAPMj1ADBATMqyADBAPPFXADBAPPN5gDBAPPQ5gDBAPPR1gDBAPPW2gDBAPP b0ADBAPPiVgDBAPPmEgDBAPPxogDBAPP8RADBAPRa1gDBAPRqHADBAPYKpAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEArEKE5157/FBYS5KeMUd1FYh3YBcQc2zULvS7YTTEigZNWqwnm88JHi1H 4T5kMGYjyJy6iSLlNdJk7CbWWlO8neB/eLUQsIOSR1ng5sUGykBjyJsU5ujRsOTO jKRSmBQ2J3NenGc9BvbitEzaeHu/WRLECViGnjMGfH0hxarbKBQtLsgqU82RFJZY Y+1L30KCpg1r/qvBV1mkccohxxX3JZtjnNPtcppAGt+oD0UQrHgaqiqGiJ1n35KI YF6DDTHS6YaJx2C2Jke2x0n+Ye4RtzkPavmEcAhho5pbMKMHeTB8f/XOvW1cuKNs tVNHjcyB8y3VN/tjZH0Yngz5BT2CCw== -----END CERTIFICATE-----Generated at Fri Oct 23 14:11:14 2026 by rpki-client