$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/129ca3ea-c39a-39d8-a16a-0337acba9185.roa File: 129ca3ea-c39a-39d8-a16a-0337acba9185.roa (raw, json) Hash identifier: wQnwTZIFLDylYedBuJdBdnhIsd9OUL1fqmr1ETkFWlo= Subject key identifier: E9:65:B4:F3:8E:9F:49:F5:B0:85:87:EE:9F:05:39:3F:B1:76:33:26 Certificate issuer: /CN=3990f0e4-fc13-467e-a765-98d98d252d56 Certificate serial: 010D0C9F4328584D19B4D9444E4000C06B9D1540 Authority key identifier: FF:3D:67:22:26:51:19:F2:73:94:7E:6D:15:33:1D:13:10:A4:41:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/129ca3ea-c39a-39d8-a16a-0337acba9185.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 11215 IP address blocks: 66.64.0.0/18 maxlen: 24 66.196.192.0/18 maxlen: 24 67.200.128.0/17 maxlen: 24 69.94.224.0/19 maxlen: 24 74.213.0.0/18 maxlen: 24 96.43.0.0/19 maxlen: 24 139.138.128.0/18 maxlen: 24 162.252.160.0/22 maxlen: 24 192.52.188.0/22 maxlen: 24 192.64.92.0/22 maxlen: 24 199.15.164.0/22 maxlen: 24 199.115.168.0/22 maxlen: 24 199.241.248.0/21 maxlen: 24 206.126.32.0/19 maxlen: 24 207.91.128.0/18 maxlen: 24 209.94.224.0/19 maxlen: 24 209.189.232.0/21 maxlen: 24 216.74.224.0/19 maxlen: 24 216.130.240.0/20 maxlen: 24 216.201.128.0/17 maxlen: 24 216.215.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d9:44:4e:40:00:c0:6b:9d:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3990f0e4-fc13-467e-a765-98d98d252d56 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=f81a89bf-56fe-466e-9cc7-159bd35c7f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:36:76:9f:1f:79:5f:cf:e1:30:c4:14:dd:26: 06:7f:91:63:71:19:67:15:8a:55:0f:4d:84:91:b7: 88:11:37:64:8b:67:fc:8c:75:13:02:b2:d5:e7:4e: 9d:76:22:9e:39:d3:21:8d:cc:05:cb:5a:a7:72:26: f3:e8:ea:46:a7:85:a1:9f:61:43:86:01:6f:b4:c7: 53:5c:ac:d7:40:23:f8:2e:20:19:97:e3:6f:f0:9d: 64:fb:eb:d1:1a:b8:9d:2c:92:33:da:11:26:cb:5e: 18:ca:97:5b:77:4b:84:c0:97:fb:37:83:6f:ff:3d: b6:c1:ee:e9:21:6b:1a:23:fc:76:90:d7:4a:69:08: 65:4a:34:53:ab:46:91:cf:e9:fe:5f:55:ba:b6:98: 6e:47:6a:84:b0:c5:ab:87:98:67:ff:a0:74:88:4a: 5d:56:9a:10:d0:86:49:25:33:28:aa:90:75:7e:c5: 39:44:b8:2e:d1:36:47:9c:34:ce:1f:6e:20:78:3f: 88:21:25:bc:0c:0d:b1:75:53:ba:3a:3e:72:03:04: 2d:0e:f2:6d:5b:32:30:12:ea:54:a8:46:21:c2:53: 3d:98:b9:7b:e7:4c:5a:04:79:b7:58:8f:ec:d1:ac: 6a:04:a3:98:15:46:8d:40:a6:55:0d:86:09:a3:7d: 1a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:65:B4:F3:8E:9F:49:F5:B0:85:87:EE:9F:05:39:3F:B1:76:33:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/129ca3ea-c39a-39d8-a16a-0337acba9185.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56/3990f0e4-fc13-467e-a765-98d98d252d56.crl X509v3 Authority Key Identifier: keyid:FF:3D:67:22:26:51:19:F2:73:94:7E:6D:15:33:1D:13:10:A4:41:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3990f0e4-fc13-467e-a765-98d98d252d56.cer sbgp-ipAddrBlock: critical IPv4: 66.64.0.0/18 66.196.192.0/18 67.200.128.0/17 69.94.224.0/19 74.213.0.0/18 96.43.0.0/19 139.138.128.0/18 162.252.160.0/22 192.52.188.0/22 192.64.92.0/22 199.15.164.0/22 199.115.168.0/22 199.241.248.0/21 206.126.32.0/19 207.91.128.0/18 209.94.224.0/19 209.189.232.0/21 216.74.224.0/19 216.130.240.0/20 216.201.128.0/17 216.215.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:5b:85:37:32:fa:95:8e:55:dd:ed:38:48:43:1d:1d:50:f6: 65:54:78:30:4f:42:69:d2:44:04:75:a4:f2:0a:89:2b:85:ea: fe:cd:c3:62:ee:da:a9:78:0f:6a:5b:dc:4d:2d:4e:d6:56:c6: 9a:be:43:78:e2:c5:d3:71:cc:b3:7a:be:f3:66:46:61:28:10: a4:08:8d:20:09:77:a5:53:3c:5c:26:6d:48:a0:43:d0:40:f6: 52:fc:c4:9a:2b:57:39:8f:cb:c6:77:be:ba:95:7b:14:2c:ea: bc:e1:90:11:0b:5d:46:42:90:9c:18:83:bd:0b:df:04:9b:65: 4e:d2:ac:19:18:4f:1c:d3:ad:72:9f:89:da:58:d9:1f:9f:aa: 58:8a:38:95:68:bc:dd:58:a6:4c:1d:ee:47:d8:b7:60:37:03: 39:4d:cd:60:b9:94:62:47:21:d4:5c:31:c8:c3:c1:96:82:c4: 40:7e:c8:21:45:2d:fa:02:68:59:bf:7f:77:e7:29:f7:36:0c: d1:c6:08:11:a4:41:17:fe:e6:95:b6:6e:d3:4e:5a:19:27:3e: 28:41:be:ef:50:cd:3f:2f:6f:1e:80:eb:73:a7:c2:1a:86:b5: 1c:07:83:0e:3d:84:ad:09:16:48:4c:98:1f:7f:a7:ec:a4:22: ed:e6:1b:9f -----BEGIN CERTIFICATE----- MIIGvzCCBaegAwIBAgIUAQ0Mn0MoWE0ZtNlETkAAwGudFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk5MGYwZTQtZmMxMy00NjdlLWE3NjUtOThkOThkMjUy ZDU2MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk ZjgxYTg5YmYtNTZmZS00NjZlLTljYzctMTU5YmQzNWM3ZjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojZ2nx95X8/hMMQU3SYGf5FjcRlnFYpVD02E kbeIETdki2f8jHUTArLV506ddiKeOdMhjcwFy1qncibz6OpGp4Whn2FDhgFvtMdT XKzXQCP4LiAZl+Nv8J1k++vRGridLJIz2hEmy14Yypdbd0uEwJf7N4Nv/z22we7p IWsaI/x2kNdKaQhlSjRTq0aRz+n+X1W6tphuR2qEsMWrh5hn/6B0iEpdVpoQ0IZJ JTMoqpB1fsU5RLgu0TZHnDTOH24geD+IISW8DA2xdVO6Oj5yAwQtDvJtWzIwEupU qEYhwlM9mLl750xaBHm3WI/s0axqBKOYFUaNQKZVDYYJo30a+wIDAQABo4ID0TCC A80wHQYDVR0OBBYEFOlltPOOn0n1sIWH7p8FOT+xdjMmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zOTkw ZjBlNC1mYzEzLTQ2N2UtYTc2NS05OGQ5OGQyNTJkNTYvMTI5Y2EzZWEtYzM5YS0z OWQ4LWExNmEtMDMzN2FjYmE5MTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzk5MGYwZTQtZmMxMy00NjdlLWE3 NjUtOThkOThkMjUyZDU2LzM5OTBmMGU0LWZjMTMtNDY3ZS1hNzY1LTk4ZDk4ZDI1 MmQ1Ni5jcmwwHwYDVR0jBBgwFoAU/z1nIiZRGfJzlH5tFTMdExCkQb0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zOTkwZjBlNC1mYzEzLTQ2N2UtYTc2NS05OGQ5 OGQyNTJkNTYuY2VyMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEBkJA AAMEBkLEwAMEB0PIgAMEBUVe4AMEBkrVAAMEBWArAAMEBouKgAMEAqL8oAMEAsA0 vAMEAsBAXAMEAscPpAMEAsdzqAMEA8fx+AMEBc5+IAMEBs9bgAMEBdFe4AMEA9G9 6AMEBdhK4AMEBNiC8AMEB9jJgAMEBtjXQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBWW4U3MvqVjlXd7ThI Qx0dUPZlVHgwT0Jp0kQEdaTyCokrher+zcNi7tqpeA9qW9xNLU7WVsaavkN44sXT ccyzer7zZkZhKBCkCI0gCXelUzxcJm1IoEPQQPZS/MSaK1c5j8vGd766lXsULOq8 4ZARC11GQpCcGIO9C98Em2VO0qwZGE8c061yn4naWNkfn6pYijiVaLzdWKZMHe5H 2LdgNwM5Tc1guZRiRyHUXDHIw8GWgsRAfsghRS36AmhZv3935yn3NgzRxggRpEEX /uaVtm7TTloZJz4oQb7vUM0/L28egOtzp8IahrUcB4MOPYStCRZITJgff6fspCLt 5huf -----END CERTIFICATE-----Generated at Thu Mar 26 19:53:23 2026 by rpki-client