$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/b68f39be-2699-3e0e-a76d-a98cf991241a.roa File: b68f39be-2699-3e0e-a76d-a98cf991241a.roa (raw, json) Hash identifier: lsZBIlpvQoUJy0QqCrmcrxsABiK/lc7lqPNGwGxh3lo= Subject key identifier: 40:0B:A5:34:82:1F:16:11:79:B0:0F:80:89:13:58:03:66:D2:4C:EB Certificate issuer: /CN=3990f0e4-fc13-467e-a765-98d98d252d56 Certificate serial: 010D0C9F4328584F49735D3D61BCAFABED4F7980 Authority key identifier: FF:3D:67:22:26:51:19:F2:73:94:7E:6D:15:33:1D:13:10:A4:41:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/b68f39be-2699-3e0e-a76d-a98cf991241a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 25956 IP address blocks: 66.64.0.0/18 maxlen: 24 66.196.192.0/18 maxlen: 24 67.200.128.0/17 maxlen: 24 69.94.224.0/19 maxlen: 24 74.213.0.0/18 maxlen: 24 96.43.0.0/19 maxlen: 24 139.138.128.0/18 maxlen: 24 162.252.160.0/22 maxlen: 24 192.52.188.0/22 maxlen: 24 192.64.92.0/22 maxlen: 24 199.15.164.0/22 maxlen: 24 199.115.168.0/22 maxlen: 24 199.241.248.0/21 maxlen: 24 206.126.32.0/19 maxlen: 24 207.91.128.0/18 maxlen: 24 209.94.224.0/19 maxlen: 24 209.189.232.0/21 maxlen: 24 216.74.224.0/19 maxlen: 24 216.130.240.0/20 maxlen: 24 216.201.128.0/17 maxlen: 24 216.215.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:5d:3d:61:bc:af:ab:ed:4f:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3990f0e4-fc13-467e-a765-98d98d252d56 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=294f5793-646f-4bf1-86ee-5aceee606ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ac:51:24:37:b7:93:8d:7d:46:f6:6c:eb:0c: 80:dd:9a:c7:a2:5f:5a:0a:c1:aa:ae:59:ec:bd:16: 70:48:24:0f:0d:9f:5c:26:17:ca:be:49:e5:6d:0c: 0a:f1:c3:9a:15:dc:ab:4b:fe:c9:2b:bb:c2:d7:c5: b7:9f:9f:38:6e:7e:8c:f1:b2:01:50:37:38:3d:52: ae:5e:6d:1f:2a:63:4a:89:e6:88:f3:ec:0d:c4:12: da:a6:cf:67:59:a6:0b:34:1b:be:25:db:6e:8c:0e: d5:3f:98:6a:eb:bd:dd:34:50:d1:11:7b:ba:28:cd: 47:8f:ad:15:a4:28:31:d2:0d:a6:9f:8a:a8:4d:e5: 00:26:0c:ae:24:b4:06:5f:be:be:2b:90:7a:7b:88: 4e:cb:bb:fa:1e:f1:49:23:3f:bf:f9:50:9e:b6:b7: 2e:b1:20:9a:7a:b9:fe:e3:35:2b:a6:c9:dd:18:3d: 68:46:57:ef:e3:68:c7:fe:4a:c6:f1:51:30:2f:ad: b7:07:ed:b1:d9:9a:ca:91:7e:a2:c9:4f:4e:5d:e3: 8b:74:80:9e:cb:34:c8:c3:54:ad:ba:6c:ad:fc:ef: 05:d6:e1:3b:44:65:3f:42:2b:df:b4:29:3f:9a:bf: 0c:e5:9b:ad:17:ce:68:9a:e9:94:73:45:23:2c:0b: 58:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0B:A5:34:82:1F:16:11:79:B0:0F:80:89:13:58:03:66:D2:4C:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/b68f39be-2699-3e0e-a76d-a98cf991241a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.crl X509v3 Authority Key Identifier: keyid:FF:3D:67:22:26:51:19:F2:73:94:7E:6D:15:33:1D:13:10:A4:41:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer sbgp-ipAddrBlock: critical IPv4: 66.64.0.0/18 66.196.192.0/18 67.200.128.0/17 69.94.224.0/19 74.213.0.0/18 96.43.0.0/19 139.138.128.0/18 162.252.160.0/22 192.52.188.0/22 192.64.92.0/22 199.15.164.0/22 199.115.168.0/22 199.241.248.0/21 206.126.32.0/19 207.91.128.0/18 209.94.224.0/19 209.189.232.0/21 216.74.224.0/19 216.130.240.0/20 216.201.128.0/17 216.215.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:5e:87:e0:fa:bb:d8:1a:d7:61:04:1e:51:53:5f:b7:6e:88: c8:e4:04:35:0d:02:9f:87:30:ce:16:6a:b7:13:75:d0:18:8e: 2e:d2:08:2a:23:6f:37:e5:06:39:32:61:c8:fb:c1:d2:5a:48: bc:70:3c:50:27:55:e2:04:e6:6a:d9:d2:eb:19:6c:42:3e:aa: 3c:95:95:7a:38:da:96:55:38:81:c7:e1:aa:69:f7:55:13:ec: 70:e0:4e:83:59:55:47:15:f8:79:50:46:c6:68:15:c1:79:32: 15:00:ef:f7:06:a4:10:c3:c5:af:b6:b1:c8:a9:4a:41:cf:54: 51:0f:74:b7:9b:16:59:33:e0:17:83:2d:5a:e4:2c:60:ff:f3: 02:f9:a0:b0:53:3f:c3:c7:ea:48:91:b7:9c:62:b2:17:30:63: 15:4c:cb:8d:17:31:4b:20:e5:95:c0:af:55:34:b8:07:90:b1: 56:18:7e:9a:72:ea:30:1b:75:ee:d4:03:3b:b4:84:25:15:a0: 52:5d:f1:f3:88:0f:32:38:7e:c2:83:c2:bd:ee:3d:61:d7:cb: 08:37:1e:83:bc:66:e0:8c:b6:48:4d:a8:fe:09:c5:02:85:7d: 82:cc:e6:b7:dd:c1:28:18:f8:8f:83:88:41:77:73:0b:a9:fc: 73:c6:d9:78 -----BEGIN CERTIFICATE----- MIIGvzCCBaegAwIBAgIUAQ0Mn0MoWE9Jc109Ybyvq+1PeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk5MGYwZTQtZmMxMy00NjdlLWE3NjUtOThkOThkMjUy ZDU2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Mjk0ZjU3OTMtNjQ2Zi00YmYxLTg2ZWUtNWFjZWVlNjA2ZWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qxRJDe3k419RvZs6wyA3ZrHol9aCsGqrlns vRZwSCQPDZ9cJhfKvknlbQwK8cOaFdyrS/7JK7vC18W3n584bn6M8bIBUDc4PVKu Xm0fKmNKieaI8+wNxBLaps9nWaYLNBu+JdtujA7VP5hq673dNFDREXu6KM1Hj60V pCgx0g2mn4qoTeUAJgyuJLQGX76+K5B6e4hOy7v6HvFJIz+/+VCetrcusSCaern+ 4zUrpsndGD1oRlfv42jH/krG8VEwL623B+2x2ZrKkX6iyU9OXeOLdICeyzTIw1St umyt/O8F1uE7RGU/QivftCk/mr8M5ZutF85omumUc0UjLAtY+wIDAQABo4ID0TCC A80wHQYDVR0OBBYEFEALpTSCHxYRebAPgIkTWANm0kzrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zOTkw ZjBlNC1mYzEzLTQ2N2UtYTc2NS05OGQ5OGQyNTJkNTYvYjY4ZjM5YmUtMjY5OS0z ZTBlLWE3NmQtYTk4Y2Y5OTEyNDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzk5MGYwZTQtZmMxMy00NjdlLWE3 NjUtOThkOThkMjUyZDU2LzM5OTBmMGU0LWZjMTMtNDY3ZS1hNzY1LTk4ZDk4ZDI1 MmQ1Ni5jcmwwHwYDVR0jBBgwFoAU/z1nIiZRGfJzlH5tFTMdExCkQb0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zOTkwZjBlNC1mYzEzLTQ2N2UtYTc2NS05OGQ5 OGQyNTJkNTYuY2VyMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEBkJA AAMEBkLEwAMEB0PIgAMEBUVe4AMEBkrVAAMEBWArAAMEBouKgAMEAqL8oAMEAsA0 vAMEAsBAXAMEAscPpAMEAsdzqAMEA8fx+AMEBc5+IAMEBs9bgAMEBdFe4AMEA9G9 6AMEBdhK4AMEBNiC8AMEB9jJgAMEBtjXQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8Xofg+rvYGtdhBB5R U1+3bojI5AQ1DQKfhzDOFmq3E3XQGI4u0ggqI2835QY5MmHI+8HSWki8cDxQJ1Xi BOZq2dLrGWxCPqo8lZV6ONqWVTiBx+GqafdVE+xw4E6DWVVHFfh5UEbGaBXBeTIV AO/3BqQQw8WvtrHIqUpBz1RRD3S3mxZZM+AXgy1a5Cxg//MC+aCwUz/Dx+pIkbec YrIXMGMVTMuNFzFLIOWVwK9VNLgHkLFWGH6acuowG3Xu1AM7tIQlFaBSXfHziA8y OH7Cg8K97j1h18sINx6DvGbgjLZITaj+CcUChX2CzOa33cEoGPiPg4hBd3MLqfxz xtl4 -----END CERTIFICATE-----Generated at Tue Oct 13 08:07:27 2026 by rpki-client