$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/72d68341-406f-3575-a1d8-62ee6b9302b3.roa File: 72d68341-406f-3575-a1d8-62ee6b9302b3.roa (raw, json) Hash identifier: Skw3HHpY9Z6T/aNo9u4+FIoaIDiNV/Cjl3ZVWrWY988= Subject key identifier: 5B:CC:06:57:89:1F:88:75:37:7B:66:C1:61:E4:2F:6E:00:91:21:C2 Certificate issuer: /CN=3990f0e4-fc13-467e-a765-98d98d252d56 Certificate serial: 010D0C9F4328584F497433449CD8DF8ACD0DF700 Authority key identifier: FF:3D:67:22:26:51:19:F2:73:94:7E:6D:15:33:1D:13:10:A4:41:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/72d68341-406f-3575-a1d8-62ee6b9302b3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 1299 IP address blocks: 66.64.0.0/18 maxlen: 24 66.196.192.0/18 maxlen: 24 67.200.128.0/17 maxlen: 24 69.94.224.0/19 maxlen: 24 74.213.0.0/18 maxlen: 24 96.43.0.0/19 maxlen: 24 139.138.128.0/18 maxlen: 24 162.252.160.0/22 maxlen: 24 192.52.188.0/22 maxlen: 24 192.64.92.0/22 maxlen: 24 199.15.164.0/22 maxlen: 24 199.115.168.0/22 maxlen: 24 199.241.248.0/21 maxlen: 24 206.126.32.0/19 maxlen: 24 207.91.128.0/18 maxlen: 24 209.94.224.0/19 maxlen: 24 209.189.232.0/21 maxlen: 24 216.74.224.0/19 maxlen: 24 216.130.240.0/20 maxlen: 24 216.201.128.0/17 maxlen: 24 216.215.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:33:44:9c:d8:df:8a:cd:0d:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3990f0e4-fc13-467e-a765-98d98d252d56 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dabb5e8f-0822-4a1d-aabd-147a24f4cef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b6:40:32:b5:d1:24:47:3b:be:84:cb:0a:d5: 97:32:39:22:aa:6f:7c:75:bf:bd:9f:49:9e:aa:14: 1b:5c:12:83:13:e2:b2:8d:af:b8:ab:09:ce:17:6d: 9b:c6:e2:40:24:96:e1:ba:b5:fc:96:57:cb:54:45: 92:03:0e:73:a4:47:5e:3b:9b:44:d1:a4:da:60:fe: 79:2d:3f:12:c8:82:10:5b:9b:12:61:2a:b6:45:43: e4:7f:d7:fc:f8:ff:27:9d:8b:ce:25:e0:48:26:76: 13:85:84:10:24:74:85:40:6c:3e:c0:a5:33:f2:48: 4b:0c:e1:10:01:ef:b3:3b:9b:8c:ae:2f:17:2f:02: e2:75:7e:e0:0d:d4:b8:b4:36:55:19:8f:a1:03:06: 7d:f1:dd:27:b8:8d:81:8c:8d:4e:93:80:6b:74:51: da:05:e5:a1:a6:02:7d:58:bb:ba:85:f7:92:dc:53: 2a:bf:f1:12:c7:bf:5d:2d:d9:8e:ae:b9:31:30:37: c6:fe:cc:f5:69:77:26:8e:c5:4e:32:51:b2:d1:72: 90:a5:82:f8:b0:bc:b6:6d:07:9f:14:eb:1c:fa:c6: da:ce:37:81:4d:dd:4b:20:09:c2:d9:af:b3:52:a8: d9:38:45:cd:ac:05:db:0d:5f:57:7d:b4:9d:cd:a4: c5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CC:06:57:89:1F:88:75:37:7B:66:C1:61:E4:2F:6E:00:91:21:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/72d68341-406f-3575-a1d8-62ee6b9302b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.crl X509v3 Authority Key Identifier: keyid:FF:3D:67:22:26:51:19:F2:73:94:7E:6D:15:33:1D:13:10:A4:41:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer sbgp-ipAddrBlock: critical IPv4: 66.64.0.0/18 66.196.192.0/18 67.200.128.0/17 69.94.224.0/19 74.213.0.0/18 96.43.0.0/19 139.138.128.0/18 162.252.160.0/22 192.52.188.0/22 192.64.92.0/22 199.15.164.0/22 199.115.168.0/22 199.241.248.0/21 206.126.32.0/19 207.91.128.0/18 209.94.224.0/19 209.189.232.0/21 216.74.224.0/19 216.130.240.0/20 216.201.128.0/17 216.215.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:c2:95:ac:07:e9:34:40:e1:90:d9:72:a1:a9:29:df:d8:f5: da:5f:77:11:6d:4e:7d:03:64:ba:41:8f:d5:96:4e:c1:1d:5b: c8:6e:b3:1f:c0:a1:cc:84:46:0a:12:e6:cd:3d:91:92:7a:ca: ac:1f:f5:80:75:6e:58:47:e8:d1:72:85:a5:46:53:55:e6:6d: 8f:54:d8:e9:40:01:4f:5b:8b:cc:88:ca:9f:5d:67:f2:e5:38: cd:a9:e2:5a:ca:a2:24:fa:b4:ee:2c:ca:9f:f3:9e:a1:d6:62: c9:91:f9:ac:16:28:84:44:4a:73:36:87:df:0b:13:d4:42:14: f6:b9:d9:87:fa:28:58:92:89:0c:27:0b:13:54:fd:a7:49:36: 09:45:0d:5f:c4:7c:97:77:fd:fd:c2:b1:ab:48:c2:b1:4e:b9: ba:a9:51:f0:6d:1a:74:c2:99:bf:7d:48:50:ea:54:7a:8d:bf: 34:84:ba:c5:30:cc:22:a7:20:25:53:9d:c5:25:41:b3:4d:03: 36:cf:9a:77:cd:96:a3:61:5c:5d:2c:3b:d2:44:96:0b:1c:d9: 49:d1:3c:bd:e4:31:68:5d:37:d7:6e:52:22:41:6a:33:b5:7a: 5b:92:e0:58:92:a0:b8:39:60:fd:89:56:c4:d6:6c:dc:fe:b7: 7e:3f:b4:ee -----BEGIN CERTIFICATE----- MIIGvzCCBaegAwIBAgIUAQ0Mn0MoWE9JdDNEnNjfis0N9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk5MGYwZTQtZmMxMy00NjdlLWE3NjUtOThkOThkMjUy ZDU2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGFiYjVlOGYtMDgyMi00YTFkLWFhYmQtMTQ3YTI0ZjRjZWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7ZAMrXRJEc7voTLCtWXMjkiqm98db+9n0me qhQbXBKDE+Kyja+4qwnOF22bxuJAJJbhurX8llfLVEWSAw5zpEdeO5tE0aTaYP55 LT8SyIIQW5sSYSq2RUPkf9f8+P8nnYvOJeBIJnYThYQQJHSFQGw+wKUz8khLDOEQ Ae+zO5uMri8XLwLidX7gDdS4tDZVGY+hAwZ98d0nuI2BjI1Ok4BrdFHaBeWhpgJ9 WLu6hfeS3FMqv/ESx79dLdmOrrkxMDfG/sz1aXcmjsVOMlGy0XKQpYL4sLy2bQef FOsc+sbazjeBTd1LIAnC2a+zUqjZOEXNrAXbDV9XfbSdzaTFpwIDAQABo4ID0TCC A80wHQYDVR0OBBYEFFvMBleJH4h1N3tmwWHkL24AkSHCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zOTkw ZjBlNC1mYzEzLTQ2N2UtYTc2NS05OGQ5OGQyNTJkNTYvNzJkNjgzNDEtNDA2Zi0z NTc1LWExZDgtNjJlZTZiOTMwMmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzk5MGYwZTQtZmMxMy00NjdlLWE3 NjUtOThkOThkMjUyZDU2LzM5OTBmMGU0LWZjMTMtNDY3ZS1hNzY1LTk4ZDk4ZDI1 MmQ1Ni5jcmwwHwYDVR0jBBgwFoAU/z1nIiZRGfJzlH5tFTMdExCkQb0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zOTkwZjBlNC1mYzEzLTQ2N2UtYTc2NS05OGQ5 OGQyNTJkNTYuY2VyMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEBkJA AAMEBkLEwAMEB0PIgAMEBUVe4AMEBkrVAAMEBWArAAMEBouKgAMEAqL8oAMEAsA0 vAMEAsBAXAMEAscPpAMEAsdzqAMEA8fx+AMEBc5+IAMEBs9bgAMEBdFe4AMEA9G9 6AMEBdhK4AMEBNiC8AMEB9jJgAMEBtjXQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB4wpWsB+k0QOGQ2XKh qSnf2PXaX3cRbU59A2S6QY/Vlk7BHVvIbrMfwKHMhEYKEubNPZGSesqsH/WAdW5Y R+jRcoWlRlNV5m2PVNjpQAFPW4vMiMqfXWfy5TjNqeJayqIk+rTuLMqf856h1mLJ kfmsFiiEREpzNoffCxPUQhT2udmH+ihYkokMJwsTVP2nSTYJRQ1fxHyXd/39wrGr SMKxTrm6qVHwbRp0wpm/fUhQ6lR6jb80hLrFMMwipyAlU53FJUGzTQM2z5p3zZaj YVxdLDvSRJYLHNlJ0Ty95DFoXTfXblIiQWoztXpbkuBYkqC4OWD9iVbE1mzc/rd+ P7Tu -----END CERTIFICATE-----Generated at Tue Oct 13 13:39:56 2026 by rpki-client