$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/0cc982f6-b60e-35b5-b0aa-0b9f4c802a3b.roa File: 0cc982f6-b60e-35b5-b0aa-0b9f4c802a3b.roa (raw, json) Hash identifier: QDiTN06CvbQVWQlSxv1pzSLcSCti4RdNWea/q1Lf748= Subject key identifier: D0:F6:CF:57:DC:FC:E1:84:2A:94:05:D8:D4:43:89:40:B3:2B:AF:6E Certificate issuer: /CN=418536e3-a238-4d5c-85de-f77873e419af Certificate serial: 010D0C9F4328584F4973455145CD2E420D19FB00 Authority key identifier: 86:30:08:47:96:08:91:BF:19:5C:82:DE:7F:52:59:C1:30:76:FE:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/0cc982f6-b60e-35b5-b0aa-0b9f4c802a3b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21777 IP address blocks: 72.18.208.0/24 maxlen: 24 72.18.210.0/24 maxlen: 24 72.18.212.0/23 maxlen: 23 72.18.217.0/24 maxlen: 24 72.18.218.0/23 maxlen: 23 72.18.220.0/24 maxlen: 24 72.18.223.0/24 maxlen: 24 199.45.166.0/24 maxlen: 24 199.45.236.0/22 maxlen: 22 199.45.240.0/24 maxlen: 24 199.45.255.0/24 maxlen: 24 199.127.200.0/22 maxlen: 22 204.144.128.0/22 maxlen: 22 204.144.132.0/23 maxlen: 23 204.144.134.0/24 maxlen: 24 204.144.140.0/23 maxlen: 23 204.144.151.0/24 maxlen: 24 204.144.181.0/24 maxlen: 24 204.144.184.0/24 maxlen: 24 206.168.0.0/24 maxlen: 24 206.168.13.0/24 maxlen: 24 206.168.39.0/24 maxlen: 24 206.168.96.0/24 maxlen: 24 206.168.112.0/24 maxlen: 24 206.168.114.0/24 maxlen: 24 206.168.117.0/24 maxlen: 24 206.168.153.0/24 maxlen: 24 206.168.172.0/24 maxlen: 24 206.168.187.0/24 maxlen: 24 206.168.188.0/24 maxlen: 24 206.168.189.0/24 maxlen: 24 206.168.216.0/22 maxlen: 22 206.168.220.0/24 maxlen: 24 206.168.222.0/23 maxlen: 23 206.168.224.0/21 maxlen: 21 207.174.8.0/24 maxlen: 24 207.174.21.0/24 maxlen: 24 207.174.72.0/23 maxlen: 23 207.174.76.0/24 maxlen: 24 207.174.77.0/24 maxlen: 24 207.174.98.0/24 maxlen: 24 207.174.113.0/24 maxlen: 24 207.174.114.0/24 maxlen: 24 207.174.117.0/24 maxlen: 24 207.174.130.0/24 maxlen: 24 207.174.137.0/24 maxlen: 24 207.174.138.0/23 maxlen: 23 207.174.140.0/22 maxlen: 22 207.174.157.0/24 maxlen: 24 207.174.175.0/24 maxlen: 24 207.174.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/418536e3-a238-4d5c-85de-f77873e419af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/418536e3-a238-4d5c-85de-f77873e419af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:45:51:45:cd:2e:42:0d:19:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=418536e3-a238-4d5c-85de-f77873e419af Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2cb4a0c7-384d-42f2-9f02-0e0c52a8626d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f4:8a:86:27:b4:6a:e8:2d:3d:f1:89:74:bb: ba:76:4b:00:53:51:59:03:bf:42:81:32:a9:ca:97: f1:cc:47:48:3b:58:a1:ff:44:a0:09:97:12:87:88: e8:ce:32:8a:f7:4b:00:96:74:41:cf:c5:a0:ae:79: 98:62:ea:11:35:26:08:a5:d3:4a:f0:cc:ec:c8:56: 7b:24:67:f6:ec:be:bf:22:45:d4:55:5e:8f:28:a1: dc:d4:e5:ae:48:8f:2c:aa:d9:18:4c:86:b0:b7:38: ed:6a:00:c2:d7:52:99:4d:1a:94:a8:79:dc:e2:da: 5c:f0:a4:37:b5:85:c5:7f:63:8b:f3:14:59:33:f3: 8a:50:cc:d2:4f:6e:f8:33:f5:1f:ea:64:1a:53:0b: ed:37:f6:55:93:c4:53:8d:0a:86:90:53:f6:53:a9: e1:f6:db:16:4c:bf:3c:f0:65:16:bf:0f:b5:5e:ee: fb:fb:8a:02:ad:0a:47:65:cf:f9:17:24:92:ff:2e: 86:ff:ee:27:0c:dc:69:b7:91:78:d2:d3:4e:17:59: 53:43:eb:05:ec:c1:10:c1:2e:61:94:9f:55:6c:ac: c7:70:5b:0a:88:cd:39:20:36:85:cd:08:6e:8a:a7: b9:05:1d:07:62:34:b7:5a:32:0e:55:4f:b6:23:2e: 84:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F6:CF:57:DC:FC:E1:84:2A:94:05:D8:D4:43:89:40:B3:2B:AF:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/0cc982f6-b60e-35b5-b0aa-0b9f4c802a3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/418536e3-a238-4d5c-85de-f77873e419af.crl X509v3 Authority Key Identifier: keyid:86:30:08:47:96:08:91:BF:19:5C:82:DE:7F:52:59:C1:30:76:FE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af.cer sbgp-ipAddrBlock: critical IPv4: 72.18.208.0/24 72.18.210.0/24 72.18.212.0/23 72.18.217.0-72.18.220.255 72.18.223.0/24 199.45.166.0/24 199.45.236.0-199.45.240.255 199.45.255.0/24 199.127.200.0/22 204.144.128.0-204.144.134.255 204.144.140.0/23 204.144.151.0/24 204.144.181.0/24 204.144.184.0/24 206.168.0.0/24 206.168.13.0/24 206.168.39.0/24 206.168.96.0/24 206.168.112.0/24 206.168.114.0/24 206.168.117.0/24 206.168.153.0/24 206.168.172.0/24 206.168.187.0-206.168.189.255 206.168.216.0-206.168.220.255 206.168.222.0-206.168.231.255 207.174.8.0/24 207.174.21.0/24 207.174.72.0/23 207.174.76.0/23 207.174.98.0/24 207.174.113.0-207.174.114.255 207.174.117.0/24 207.174.130.0/24 207.174.137.0-207.174.143.255 207.174.157.0/24 207.174.175.0/24 207.174.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:8d:72:94:b7:27:a9:ba:d8:3a:5b:93:f8:7c:40:00:46:26: e8:23:b6:fc:31:e0:1c:e0:3e:e9:1b:38:3d:d0:05:2a:23:e0: f8:46:aa:14:c4:2d:a5:27:ec:5a:b6:c8:08:79:13:4a:3d:db: 29:32:ac:8b:d3:ff:26:9b:b9:93:44:9c:3f:b8:14:2f:ae:0c: 34:3a:4d:2f:36:36:b8:e6:0e:fd:eb:6b:4d:ed:87:4c:ec:ea: b2:c6:7e:e8:a9:27:17:15:e7:51:b6:0d:f3:02:8d:36:d7:a7: 66:11:61:cf:5c:93:8c:b0:4c:ce:1a:27:43:7d:66:43:b3:5c: c5:94:35:3f:6d:d0:91:4b:8b:b5:e4:eb:c1:9b:c2:37:df:9d: f4:c6:43:31:ee:02:91:79:52:95:bf:5b:18:e3:9f:b6:db:b7: cb:0f:f8:c9:b9:75:6b:cd:98:17:a5:93:95:14:04:6e:c4:28: c1:17:5c:f4:bf:84:ed:37:67:65:65:af:86:0f:16:5c:49:a1: 76:3c:1b:06:11:0d:6c:6d:3a:f2:76:15:85:51:bc:b5:db:eb: 4a:51:d1:75:c6:53:73:1f:13:aa:25:28:98:2e:e1:32:f1:c3: 6b:d3:ff:6c:e2:6c:95:ed:0a:91:c1:95:a4:44:ed:19:1e:af: 6a:fc:80:5e -----BEGIN CERTIFICATE----- MIIHazCCBlOgAwIBAgIUAQ0Mn0MoWE9Jc0VRRc0uQg0Z+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE4NTM2ZTMtYTIzOC00ZDVjLTg1ZGUtZjc3ODczZTQx OWFmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmNiNGEwYzctMzg0ZC00MmYyLTlmMDItMGUwYzUyYTg2MjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfSKhie0augtPfGJdLu6dksAU1FZA79CgTKp ypfxzEdIO1ih/0SgCZcSh4jozjKK90sAlnRBz8WgrnmYYuoRNSYIpdNK8MzsyFZ7 JGf27L6/IkXUVV6PKKHc1OWuSI8sqtkYTIawtzjtagDC11KZTRqUqHnc4tpc8KQ3 tYXFf2OL8xRZM/OKUMzST274M/Uf6mQaUwvtN/ZVk8RTjQqGkFP2U6nh9tsWTL88 8GUWvw+1Xu77+4oCrQpHZc/5FySS/y6G/+4nDNxpt5F40tNOF1lTQ+sF7MEQwS5h lJ9VbKzHcFsKiM05IDaFzQhuiqe5BR0HYjS3WjIOVU+2Iy6EywIDAQABo4IEfTCC BHkwHQYDVR0OBBYEFND2z1fc/OGEKpQF2NRDiUCzK69uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80MTg1 MzZlMy1hMjM4LTRkNWMtODVkZS1mNzc4NzNlNDE5YWYvMGNjOTgyZjYtYjYwZS0z NWI1LWIwYWEtMGI5ZjRjODAyYTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNDE4NTM2ZTMtYTIzOC00ZDVjLTg1 ZGUtZjc3ODczZTQxOWFmLzQxODUzNmUzLWEyMzgtNGQ1Yy04NWRlLWY3Nzg3M2U0 MTlhZi5jcmwwHwYDVR0jBBgwFoAUhjAIR5YIkb8ZXILef1JZwTB2/i4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80MTg1MzZlMy1hMjM4LTRkNWMtODVkZS1mNzc4 NzNlNDE5YWYuY2VyMIIBRQYIKwYBBQUHAQcBAf8EggE0MIIBMDCCASwEAgABMIIB JAMEAEgS0AMEAEgS0gMEAUgS1DAMAwQASBLZAwQASBLcAwQASBLfAwQAxy2mMAwD BALHLewDBADHLfADBADHLf8DBALHf8gwDAMEB8yQgAMEAMyQhgMEAcyQjAMEAMyQ lwMEAMyQtQMEAMyQuAMEAM6oAAMEAM6oDQMEAM6oJwMEAM6oYAMEAM6ocAMEAM6o cgMEAM6odQMEAM6omQMEAM6orDAMAwQAzqi7AwQBzqi8MAwDBAPOqNgDBADOqNww DAMEAc6o3gMEA86o4AMEAM+uCAMEAM+uFQMEAc+uSAMEAc+uTAMEAM+uYjAMAwQA z65xAwQAz65yAwQAz651AwQAz66CMAwDBADProkDBATProADBADPrp0DBADPrq8D BADPrskwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEArY1ylLcnqbrYOluT+HxAAEYm6CO2/DHgHOA+6Rs4PdAF KiPg+EaqFMQtpSfsWrbICHkTSj3bKTKsi9P/Jpu5k0ScP7gUL64MNDpNLzY2uOYO /etrTe2HTOzqssZ+6KknFxXnUbYN8wKNNtenZhFhz1yTjLBMzhonQ31mQ7NcxZQ1 P23QkUuLteTrwZvCN9+d9MZDMe4CkXlSlb9bGOOfttu3yw/4ybl1a82YF6WTlRQE bsQowRdc9L+E7TdnZWWvhg8WXEmhdjwbBhENbG068nYVhVG8tdvrSlHRdcZTcx8T qiUomC7hMvHDa9P/bOJsle0KkcGVpETtGR6vavyAXg== -----END CERTIFICATE-----Generated at Wed Oct 28 14:35:46 2026 by rpki-client