$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9c16d572-f991-3b9b-a82f-4375ba97aaa2.roa File: 9c16d572-f991-3b9b-a82f-4375ba97aaa2.roa (raw, json) Hash identifier: 4przIWTXrLjfI/SLrdmC+V9URUO9q4iT3kAn6mM32Ig= Subject key identifier: 3E:89:AC:20:19:05:2A:87:46:56:5B:FD:A3:A2:2E:8A:E4:5C:57:36 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F3E47CD56CCF6DCBF4C4D0680 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9c16d572-f991-3b9b-a82f-4375ba97aaa2.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 20115 IP address blocks: 64.32.152.0/21 maxlen: 24 64.50.136.0/21 maxlen: 24 64.145.128.0/18 maxlen: 24 64.145.192.0/18 maxlen: 24 64.248.0.0/18 maxlen: 24 64.248.64.0/18 maxlen: 24 64.248.128.0/18 maxlen: 24 64.248.192.0/18 maxlen: 24 64.249.0.0/18 maxlen: 24 64.249.64.0/18 maxlen: 24 64.249.128.0/18 maxlen: 24 64.249.192.0/18 maxlen: 24 66.17.72.0/21 maxlen: 24 66.200.0.0/18 maxlen: 24 66.200.64.0/18 maxlen: 24 66.200.128.0/18 maxlen: 24 66.200.192.0/18 maxlen: 24 74.3.0.0/18 maxlen: 24 74.3.64.0/18 maxlen: 24 205.214.32.0/20 maxlen: 24 206.40.192.0/20 maxlen: 24 206.253.0.0/20 maxlen: 24 208.41.0.0/18 maxlen: 24 208.41.64.0/18 maxlen: 24 208.41.128.0/18 maxlen: 24 208.41.192.0/18 maxlen: 24 216.151.224.0/20 maxlen: 24 216.184.128.0/18 maxlen: 24 216.184.192.0/18 maxlen: 24 216.224.0.0/19 maxlen: 24 216.224.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:cd:56:cc:f6:dc:bf:4c:4d:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=a9689a16-1965-44ab-bbb8-5e41bdf75aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f4:1c:bf:27:77:d5:9a:bb:28:81:d7:ca:71: 57:e9:4f:d4:68:ee:10:cb:be:99:eb:c4:7b:19:90: 84:4b:08:fa:69:09:77:6e:5f:ef:7c:f1:72:59:7a: 64:f7:b0:32:d9:3f:69:0d:dc:b1:b6:3e:3d:94:95: 78:8c:67:15:cb:47:9f:3a:ba:d6:03:da:21:9a:90: e6:78:11:a9:52:74:51:7e:60:bb:dc:22:30:6a:d3: 5e:e9:d2:f0:bc:af:fe:77:98:30:03:38:19:91:bf: e4:d3:71:9b:91:84:d1:b2:0e:c0:c7:92:d6:6c:ba: 60:4a:d1:05:0b:62:ae:c4:4c:76:b3:4f:25:2a:de: a8:67:41:63:e2:50:6a:68:e1:2d:a6:c2:ee:88:53: a8:c4:66:04:13:08:e2:94:63:7e:cf:5a:8e:99:9f: 10:5d:ee:83:16:b8:56:e8:18:a5:b6:93:35:15:69: 9a:cb:b6:e9:f8:89:31:21:e2:78:b5:57:7f:a7:b2: a2:4c:2f:8c:f3:bb:e2:a1:35:96:f1:3c:54:ca:ba: 60:40:d3:24:b0:48:c4:f7:42:a7:94:ff:15:91:d6: 25:d5:48:f6:61:f4:ca:1a:f1:44:b8:38:2e:1b:6e: 81:2f:8b:5e:3c:c7:24:9a:37:3c:96:68:6f:c2:52: 76:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:89:AC:20:19:05:2A:87:46:56:5B:FD:A3:A2:2E:8A:E4:5C:57:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9c16d572-f991-3b9b-a82f-4375ba97aaa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.32.152.0/21 64.50.136.0/21 64.145.128.0/17 64.248.0.0/15 66.17.72.0/21 66.200.0.0/16 74.3.0.0/17 205.214.32.0/20 206.40.192.0/20 206.253.0.0/20 208.41.0.0/16 216.151.224.0/20 216.184.128.0/17 216.224.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:3c:4d:b5:31:e9:c4:e1:93:ed:39:43:be:81:ec:ff:39:4a: 88:44:0b:f9:4e:cd:3b:f1:55:25:50:33:bf:bf:31:1a:df:59: 1b:db:38:f3:9e:21:2a:0a:1f:8f:14:fd:ea:2b:03:5d:bb:33: 0a:b1:3d:c9:f5:a8:d4:19:1c:49:65:09:53:bf:25:32:c2:eb: 84:98:3d:72:0a:e4:c6:d5:18:10:1a:97:8b:d7:c6:7d:37:3a: 5b:41:1c:93:6b:56:ca:74:6b:32:ab:7e:50:b8:ef:dd:c8:a2: 5c:b1:6d:68:7e:97:b4:de:0a:80:01:ba:bd:38:19:5b:6c:8d: d5:95:4b:93:89:8d:d1:fe:1f:1d:57:bf:59:19:07:5e:64:9c: 92:88:11:0c:a1:47:3d:88:c4:e1:46:e5:ed:6d:b4:91:43:5f: a9:a3:fe:f8:51:36:98:b3:1c:43:ea:4e:e2:ba:55:32:bd:d0: 7a:a6:af:e5:ad:44:94:e2:ad:11:37:66:6e:d1:99:3c:a2:2c: fb:8a:85:82:cf:60:7e:55:88:44:ce:aa:d1:d4:d6:06:45:c8: 6f:df:ff:73:c8:ab:f9:be:83:a6:cb:f0:73:c1:94:0c:61:6f: c5:a1:24:54:0d:bf:e5:8a:f5:bc:c8:24:28:a0:50:70:dd:0b: 4a:e5:df:78 -----BEGIN CERTIFICATE----- MIIGjjCCBXagAwIBAgIUAQ0Mn0MoWE8+R81WzPbcv0xNBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk YTk2ODlhMTYtMTk2NS00NGFiLWJiYjgtNWU0MWJkZjc1YWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPQcvyd31Zq7KIHXynFX6U/UaO4Qy76Z68R7 GZCESwj6aQl3bl/vfPFyWXpk97Ay2T9pDdyxtj49lJV4jGcVy0efOrrWA9ohmpDm eBGpUnRRfmC73CIwatNe6dLwvK/+d5gwAzgZkb/k03GbkYTRsg7Ax5LWbLpgStEF C2KuxEx2s08lKt6oZ0Fj4lBqaOEtpsLuiFOoxGYEEwjilGN+z1qOmZ8QXe6DFrhW 6BiltpM1FWmay7bp+IkxIeJ4tVd/p7KiTC+M87vioTWW8TxUyrpgQNMksEjE90Kn lP8VkdYl1Uj2YfTKGvFEuDguG26BL4tePMckmjc8lmhvwlJ22wIDAQABo4IDoDCC A5wwHQYDVR0OBBYEFD6JrCAZBSqHRlZb/aOiLorkXFc2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWMxNmQ1NzItZjk5MS0z YjliLWE4MmYtNDM3NWJhOTdhYWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMGoGCCsGAQUFBwEHAQH/BFswWTBXBAIAATBRAwQDQCCYAwQD QDKIAwQHQJGAAwMBQPgDBANCEUgDAwBCyAMEB0oDAAMEBM3WIAMEBM4owAMEBM79 AAMDANApAwQE2JfgAwQH2LiAAwQG2OAAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACA8TbUx6cThk+05Q76B 7P85SohEC/lOzTvxVSVQM7+/MRrfWRvbOPOeISoKH48U/eorA127MwqxPcn1qNQZ HEllCVO/JTLC64SYPXIK5MbVGBAal4vXxn03OltBHJNrVsp0azKrflC4793Iolyx bWh+l7TeCoABur04GVtsjdWVS5OJjdH+Hx1Xv1kZB15knJKIEQyhRz2IxOFG5e1t tJFDX6mj/vhRNpizHEPqTuK6VTK90Hqmr+WtRJTirRE3Zm7RmTyiLPuKhYLPYH5V iETOqtHU1gZFyG/f/3PIq/m+g6bL8HPBlAxhb8WhJFQNv+WK9bzIJCigUHDdC0rl 33g= -----END CERTIFICATE-----Generated at Mon Oct 12 19:29:13 2026 by rpki-client