$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/1321ac84-55e5-32cc-9b4b-9d8b72e1473d.roa File: 1321ac84-55e5-32cc-9b4b-9d8b72e1473d.roa (raw, json) Hash identifier: tdWsR5bAdZEsgzS78xs6hGew7pg/u6tEMPHhyW4/Kt8= Subject key identifier: 26:A3:30:97:2A:BF:76:35:7F:1A:9D:E2:C1:C8:59:04:E1:30:EB:F6 Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169 Certificate serial: 010D0C9F4328584F4988B53F7DB2827B10D46BA0 Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/1321ac84-55e5-32cc-9b4b-9d8b72e1473d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 1403 IP address blocks: 66.129.132.0/24 maxlen: 24 66.129.134.0/24 maxlen: 24 66.129.135.0/24 maxlen: 24 66.129.138.0/24 maxlen: 24 66.129.139.0/24 maxlen: 24 66.129.140.0/24 maxlen: 24 66.129.141.0/24 maxlen: 24 66.129.142.0/24 maxlen: 24 66.129.144.0/24 maxlen: 24 66.129.148.0/24 maxlen: 24 66.129.149.0/24 maxlen: 24 66.129.150.0/24 maxlen: 24 66.129.151.0/24 maxlen: 24 66.129.152.0/22 maxlen: 24 66.129.156.0/24 maxlen: 24 66.129.157.0/24 maxlen: 24 66.129.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:b5:3f:7d:b2:82:7b:10:d4:6b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=789c48ed-e136-4617-93fd-c96b9a58f67a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0b:3b:c0:bf:09:90:6c:03:d5:4a:ad:98:bb: 6b:8e:9c:c1:81:8a:59:67:1f:26:9b:bd:ca:19:28: 26:2e:97:5b:18:e1:36:92:98:50:21:27:68:7c:a2: 6c:2a:f3:e7:d7:0a:e0:f2:4c:35:f6:5e:6e:b8:9c: 2d:ca:64:94:3a:15:0b:ae:4b:f1:61:6b:f4:d2:c4: 30:de:da:d9:c7:71:a3:f4:82:ef:9d:07:16:33:d6: 11:7f:72:b9:69:a3:ca:47:96:e3:75:f1:b6:b5:77: 0b:53:f2:28:04:43:7f:7b:2f:93:95:21:9a:8e:92: 6e:30:96:83:34:74:49:88:19:22:1e:b7:f8:03:b9: 29:16:04:26:08:78:0c:ae:02:67:09:b5:b0:d2:d4: e3:46:9e:64:b8:9b:8b:ac:b0:b8:47:c6:67:e6:8d: f9:94:fe:f0:43:c5:20:32:f5:00:4c:ef:30:3d:23: 54:6f:20:d8:c8:79:81:db:68:53:7a:7f:64:ce:70: ce:d2:c0:60:54:d8:b6:6a:83:f5:c1:fb:5d:01:4a: 4a:b6:a9:d6:d7:a1:a2:49:0e:c6:85:50:26:2b:e6: 71:0a:2f:f6:a1:e4:d6:b2:ee:06:7a:ba:a8:39:52: fd:88:a8:ae:ac:ca:63:8c:4d:73:77:95:31:67:0e: f4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A3:30:97:2A:BF:76:35:7F:1A:9D:E2:C1:C8:59:04:E1:30:EB:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/1321ac84-55e5-32cc-9b4b-9d8b72e1473d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl X509v3 Authority Key Identifier: keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer sbgp-ipAddrBlock: critical IPv4: 66.129.132.0/24 66.129.134.0/23 66.129.138.0-66.129.142.255 66.129.144.0/24 66.129.148.0-66.129.158.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:a1:05:0d:8d:ac:59:cd:2e:52:23:bb:fd:92:04:af:5e:bf: 0a:b7:70:e0:d8:23:bb:10:92:60:b1:c6:c2:0b:4f:21:f9:51: 29:70:d8:7e:f0:74:31:fc:51:06:5f:d5:41:95:67:ae:f3:35: 8d:a4:5e:6c:70:95:94:a0:e0:c2:e6:49:73:a7:75:f0:d6:d7: c2:7a:f9:b2:fe:a2:73:49:41:29:fa:ae:e7:4d:cc:b4:08:73: ca:28:55:13:2a:62:df:40:cd:ec:b2:e6:83:66:0d:ec:3a:9a: 2c:c5:44:98:3d:fa:ba:5a:a9:44:14:e9:51:32:b9:e5:8b:70: be:a1:e9:bf:d6:96:7c:b6:43:43:1b:d5:e8:38:30:2b:c1:a2: b8:84:03:f0:6b:83:44:ab:8c:3f:7c:95:d1:3e:1a:08:fd:57: 2e:2d:f4:38:99:81:24:59:d4:3a:12:7f:da:66:5f:96:cc:04: 55:2d:24:02:30:83:13:d5:87:80:26:ae:ba:72:1c:a8:44:3c: bb:8d:ae:d5:91:ff:71:52:1f:d3:17:c8:cd:d1:48:59:11:e6: 46:2a:79:4f:a6:6e:0d:ff:32:fc:75:50:ee:b9:38:84:f5:45: e4:50:11:7a:2d:e1:7b:35:73:e0:e9:d0:c2:18:27:5c:ba:47: 9f:40:be:95 -----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWE9JiLU/fbKCexDUa6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5 MTY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Nzg5YzQ4ZWQtZTEzNi00NjE3LTkzZmQtYzk2YjlhNThmNjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogs7wL8JkGwD1UqtmLtrjpzBgYpZZx8mm73K GSgmLpdbGOE2kphQISdofKJsKvPn1wrg8kw19l5uuJwtymSUOhULrkvxYWv00sQw 3trZx3Gj9ILvnQcWM9YRf3K5aaPKR5bjdfG2tXcLU/IoBEN/ey+TlSGajpJuMJaD NHRJiBkiHrf4A7kpFgQmCHgMrgJnCbWw0tTjRp5kuJuLrLC4R8Zn5o35lP7wQ8Ug MvUATO8wPSNUbyDYyHmB22hTen9kznDO0sBgVNi2aoP1wftdAUpKtqnW16GiSQ7G hVAmK+ZxCi/2oeTWsu4GerqoOVL9iKiurMpjjE1zd5UxZw70wwIDAQABo4IDfTCC A3kwHQYDVR0OBBYEFCajMJcqv3Y1fxqd4sHIWQThMOv2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvMTMyMWFjODQtNTVlNS0z MmNjLTliNGItOWQ4YjcyZTE0NzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0 NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3 OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj NjBkNzkxNjkuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQAQoGEAwQB QoGGMAwDBAFCgYoDBABCgY4DBABCgZAwDAMEAkKBlAMEAEKBnjBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAr oQUNjaxZzS5SI7v9kgSvXr8Kt3Dg2CO7EJJgscbCC08h+VEpcNh+8HQx/FEGX9VB lWeu8zWNpF5scJWUoODC5klzp3Xw1tfCevmy/qJzSUEp+q7nTcy0CHPKKFUTKmLf QM3ssuaDZg3sOposxUSYPfq6WqlEFOlRMrnli3C+oem/1pZ8tkNDG9XoODArwaK4 hAPwa4NEq4w/fJXRPhoI/VcuLfQ4mYEkWdQ6En/aZl+WzARVLSQCMIMT1YeAJq66 chyoRDy7ja7Vkf9xUh/TF8jN0UhZEeZGKnlPpm4N/zL8dVDuuTiE9UXkUBF6LeF7 NXPg6dDCGCdcukefQL6V -----END CERTIFICATE-----Generated at Sun Sep 27 12:24:57 2026 by rpki-client