$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/129ca3ea-c39a-39d8-a16a-0337acba9185.roa File: 129ca3ea-c39a-39d8-a16a-0337acba9185.roa (raw, json) Hash identifier: WFgPin5hD60jy6kIFyD6jag+X4KjU84p58+qeJU8uUQ= Subject key identifier: 4A:E9:1C:92:93:5D:C1:87:0D:D4:57:66:D7:FA:BA:2E:2A:6A:25:45 Certificate issuer: /CN=3990f0e4-fc13-467e-a765-98d98d252d56 Certificate serial: 010D0C9F4328584F49734988059F667806089900 Authority key identifier: FF:3D:67:22:26:51:19:F2:73:94:7E:6D:15:33:1D:13:10:A4:41:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/129ca3ea-c39a-39d8-a16a-0337acba9185.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11215 IP address blocks: 66.64.0.0/18 maxlen: 24 66.196.192.0/18 maxlen: 24 67.200.128.0/17 maxlen: 24 69.94.224.0/19 maxlen: 24 74.213.0.0/18 maxlen: 24 96.43.0.0/19 maxlen: 24 139.138.128.0/18 maxlen: 24 162.252.160.0/22 maxlen: 24 192.52.188.0/22 maxlen: 24 192.64.92.0/22 maxlen: 24 199.15.164.0/22 maxlen: 24 199.115.168.0/22 maxlen: 24 199.241.248.0/21 maxlen: 24 206.126.32.0/19 maxlen: 24 207.91.128.0/18 maxlen: 24 209.94.224.0/19 maxlen: 24 209.189.232.0/21 maxlen: 24 216.74.224.0/19 maxlen: 24 216.130.240.0/20 maxlen: 24 216.201.128.0/17 maxlen: 24 216.215.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:49:88:05:9f:66:78:06:08:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3990f0e4-fc13-467e-a765-98d98d252d56 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=89fad092-2023-479c-a074-579d7d3de46c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ef:67:72:dc:0f:20:1f:39:1e:16:2a:70:76: 85:2a:b5:11:f3:f9:2b:db:e4:22:8e:00:51:4c:96: 50:78:4f:ed:41:1d:51:dc:4b:7f:ca:49:e5:5f:c6: 26:30:58:df:66:3f:c7:9a:e8:e4:95:b8:22:93:47: 14:86:f4:49:5a:1f:c7:6d:73:f4:32:62:0c:08:a5: 95:9f:40:f5:a6:95:e0:2e:4a:80:3a:27:fa:99:5f: 35:4a:08:4a:31:74:40:0c:18:51:ec:af:b6:b6:ed: 99:f1:63:a9:25:26:b9:fd:0e:77:7d:52:c2:ab:19: 9a:62:5e:90:d3:b0:d5:af:aa:09:12:0b:b7:76:c7: b5:2f:16:ed:ae:b6:0d:c3:9a:8d:19:07:56:6f:62: ba:fe:88:aa:f5:ab:1c:3b:3f:14:3b:c8:bc:73:17: 2f:af:bf:2c:98:c2:4d:91:5a:12:84:24:a6:25:ac: a2:00:51:ed:6d:ed:fd:81:44:f4:23:36:ee:df:26: 29:2a:54:67:54:d8:35:4b:78:27:24:9e:40:57:2b: d6:04:47:31:01:b6:d4:1d:ae:bb:5d:b0:7b:d4:48: d0:bd:57:c3:58:7c:dc:3a:af:ac:c9:3b:52:97:b3: fb:e4:b1:7b:11:84:b8:0f:f9:6c:f7:7f:6d:00:b2: 3d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E9:1C:92:93:5D:C1:87:0D:D4:57:66:D7:FA:BA:2E:2A:6A:25:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/129ca3ea-c39a-39d8-a16a-0337acba9185.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.crl X509v3 Authority Key Identifier: keyid:FF:3D:67:22:26:51:19:F2:73:94:7E:6D:15:33:1D:13:10:A4:41:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer sbgp-ipAddrBlock: critical IPv4: 66.64.0.0/18 66.196.192.0/18 67.200.128.0/17 69.94.224.0/19 74.213.0.0/18 96.43.0.0/19 139.138.128.0/18 162.252.160.0/22 192.52.188.0/22 192.64.92.0/22 199.15.164.0/22 199.115.168.0/22 199.241.248.0/21 206.126.32.0/19 207.91.128.0/18 209.94.224.0/19 209.189.232.0/21 216.74.224.0/19 216.130.240.0/20 216.201.128.0/17 216.215.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:e3:ad:9c:a4:de:87:61:f7:05:c9:2e:1f:95:f3:a5:d6:57: 1e:06:79:03:b0:0e:61:b0:80:64:bc:e1:03:ea:79:20:1b:11: ac:a4:9f:b1:4b:82:e7:54:00:82:29:93:6b:1c:d0:c7:e1:e3: 83:18:9e:2d:de:4d:58:af:0e:0e:23:db:68:4f:07:40:9b:00: c0:30:a5:e1:82:75:c1:b0:5c:f5:b4:7d:69:83:fa:ca:99:3d: bc:50:a2:ef:d7:6a:1f:91:5e:4c:91:03:67:01:ef:d5:12:90: a3:ab:65:5e:ec:b3:a3:71:f4:c0:44:c9:7b:61:e3:40:d6:66: 29:27:00:e7:70:57:a7:ed:37:b6:37:64:6c:35:77:4d:9c:3f: eb:e5:a6:9a:6f:3f:2a:d2:07:bf:b8:80:d0:a4:00:20:07:b0: 4c:7a:d8:28:b5:e5:1e:cc:88:ed:a3:8f:8e:e9:7a:27:58:d5: 5c:45:54:ab:3c:89:93:c2:14:29:e4:43:17:f3:f3:55:c8:9d: 89:95:45:4f:b0:c1:80:12:b4:c4:70:40:d2:2b:f7:d4:23:60: 30:4d:47:65:ee:03:a3:3a:bd:94:ed:5c:e1:e5:96:68:0a:02: 4d:74:54:b2:f5:5d:51:d7:1d:44:6e:96:78:3f:82:89:22:9c: 8e:b9:57:b9 -----BEGIN CERTIFICATE----- MIIGvzCCBaegAwIBAgIUAQ0Mn0MoWE9Jc0mIBZ9meAYImQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk5MGYwZTQtZmMxMy00NjdlLWE3NjUtOThkOThkMjUy ZDU2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODlmYWQwOTItMjAyMy00NzljLWEwNzQtNTc5ZDdkM2RlNDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+9nctwPIB85HhYqcHaFKrUR8/kr2+QijgBR TJZQeE/tQR1R3Et/yknlX8YmMFjfZj/Hmujklbgik0cUhvRJWh/HbXP0MmIMCKWV n0D1ppXgLkqAOif6mV81SghKMXRADBhR7K+2tu2Z8WOpJSa5/Q53fVLCqxmaYl6Q 07DVr6oJEgu3dse1LxbtrrYNw5qNGQdWb2K6/oiq9ascOz8UO8i8cxcvr78smMJN kVoShCSmJayiAFHtbe39gUT0Izbu3yYpKlRnVNg1S3gnJJ5AVyvWBEcxAbbUHa67 XbB71EjQvVfDWHzcOq+syTtSl7P75LF7EYS4D/ls939tALI9UwIDAQABo4ID0TCC A80wHQYDVR0OBBYEFErpHJKTXcGHDdRXZtf6ui4qaiVFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zOTkw ZjBlNC1mYzEzLTQ2N2UtYTc2NS05OGQ5OGQyNTJkNTYvMTI5Y2EzZWEtYzM5YS0z OWQ4LWExNmEtMDMzN2FjYmE5MTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzk5MGYwZTQtZmMxMy00NjdlLWE3 NjUtOThkOThkMjUyZDU2LzM5OTBmMGU0LWZjMTMtNDY3ZS1hNzY1LTk4ZDk4ZDI1 MmQ1Ni5jcmwwHwYDVR0jBBgwFoAU/z1nIiZRGfJzlH5tFTMdExCkQb0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zOTkwZjBlNC1mYzEzLTQ2N2UtYTc2NS05OGQ5 OGQyNTJkNTYuY2VyMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEBkJA AAMEBkLEwAMEB0PIgAMEBUVe4AMEBkrVAAMEBWArAAMEBouKgAMEAqL8oAMEAsA0 vAMEAsBAXAMEAscPpAMEAsdzqAMEA8fx+AMEBc5+IAMEBs9bgAMEBdFe4AMEA9G9 6AMEBdhK4AMEBNiC8AMEB9jJgAMEBtjXQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/462cpN6HYfcFyS4f lfOl1lceBnkDsA5hsIBkvOED6nkgGxGspJ+xS4LnVACCKZNrHNDH4eODGJ4t3k1Y rw4OI9toTwdAmwDAMKXhgnXBsFz1tH1pg/rKmT28UKLv12ofkV5MkQNnAe/VEpCj q2Ve7LOjcfTARMl7YeNA1mYpJwDncFen7Te2N2RsNXdNnD/r5aaabz8q0ge/uIDQ pAAgB7BMetgoteUezIjto4+O6XonWNVcRVSrPImTwhQp5EMX8/NVyJ2JlUVPsMGA ErTEcEDSK/fUI2AwTUdl7gOjOr2U7Vzh5ZZoCgJNdFSy9V1R1x1EbpZ4P4KJIpyO uVe5 -----END CERTIFICATE-----Generated at Tue Oct 13 19:19:47 2026 by rpki-client