$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd5d1b36-ecf8-3a8e-b842-7b339cc641ae.roa File: dd5d1b36-ecf8-3a8e-b842-7b339cc641ae.roa (raw, json) Hash identifier: LDCcx7lCygBzJ6bh03q5ft/VDGDPkrVEecdv5HX94qY= Subject key identifier: 63:F3:FF:C2:34:76:65:FE:07:80:F1:A1:05:7C:10:37:40:C2:E1:F5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F3E48048682F16B6B2C174F00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd5d1b36-ecf8-3a8e-b842-7b339cc641ae.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 7029 IP address blocks: 64.32.152.0/21 maxlen: 24 64.50.136.0/21 maxlen: 24 64.145.128.0/18 maxlen: 24 64.145.192.0/18 maxlen: 24 64.248.0.0/18 maxlen: 24 64.248.64.0/18 maxlen: 24 64.248.128.0/18 maxlen: 24 64.248.192.0/18 maxlen: 24 64.249.0.0/18 maxlen: 24 64.249.64.0/18 maxlen: 24 64.249.128.0/18 maxlen: 24 64.249.192.0/18 maxlen: 24 66.17.72.0/21 maxlen: 24 66.200.0.0/18 maxlen: 24 66.200.64.0/18 maxlen: 24 66.200.128.0/18 maxlen: 24 66.200.192.0/18 maxlen: 24 74.3.0.0/18 maxlen: 24 74.3.64.0/18 maxlen: 24 205.214.32.0/20 maxlen: 24 206.40.192.0/20 maxlen: 24 206.253.0.0/20 maxlen: 24 208.41.0.0/18 maxlen: 24 208.41.64.0/18 maxlen: 24 208.41.128.0/18 maxlen: 24 208.41.192.0/18 maxlen: 24 216.151.224.0/20 maxlen: 24 216.184.128.0/18 maxlen: 24 216.184.192.0/18 maxlen: 24 216.224.0.0/19 maxlen: 24 216.224.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:48:04:86:82:f1:6b:6b:2c:17:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=1fa0bc59-c942-446a-a249-6234289cb819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:dc:f3:4c:fb:8b:a2:dd:9d:1c:e1:93:bb:98: cd:09:4b:27:56:69:5f:19:bc:a7:53:17:eb:5d:d5: 31:42:24:ea:ae:87:d8:9d:30:73:c1:26:de:fa:1a: 45:9f:a2:2a:a0:c3:f7:96:33:8f:3f:3d:41:cf:49: 65:6d:87:07:21:1b:cb:f2:be:10:a7:98:6a:21:9f: 9b:2a:11:48:48:9b:71:59:34:45:2c:cf:64:ab:62: a7:16:bf:30:41:6c:aa:7a:97:7e:95:01:7a:02:4c: 89:e9:c2:a1:8d:f9:03:01:a9:de:ca:cf:fc:3d:60: 49:cf:6c:1e:cd:ad:0a:86:d2:f1:f2:4f:18:f7:58: bd:ca:ca:f7:04:18:3d:db:c7:ad:32:ee:eb:14:03: ea:e9:66:ce:f3:5d:1e:72:e1:93:cc:06:7f:32:c0: 87:31:7f:41:e8:ed:48:f4:41:90:85:83:dd:2e:07: 81:33:ea:8a:13:82:7a:74:9f:20:27:68:76:30:96: a9:5a:11:32:78:08:0f:16:50:74:41:8c:64:53:0a: 46:92:44:1a:63:89:e4:ff:48:52:ed:77:2a:55:73: 1a:79:64:aa:d7:15:08:6b:52:92:26:01:86:8c:65: 59:64:6e:63:ea:c4:1f:34:5d:f1:08:f8:84:90:37: 68:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F3:FF:C2:34:76:65:FE:07:80:F1:A1:05:7C:10:37:40:C2:E1:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd5d1b36-ecf8-3a8e-b842-7b339cc641ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.32.152.0/21 64.50.136.0/21 64.145.128.0/17 64.248.0.0/15 66.17.72.0/21 66.200.0.0/16 74.3.0.0/17 205.214.32.0/20 206.40.192.0/20 206.253.0.0/20 208.41.0.0/16 216.151.224.0/20 216.184.128.0/17 216.224.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:61:08:66:b7:11:8d:a8:34:73:2e:3d:fb:f4:b0:f3:64:e6: 67:77:ee:6d:81:a5:2e:57:61:98:e1:90:7b:d3:89:3a:b5:c2: a4:74:09:ff:90:f8:c4:fd:23:67:e6:69:dd:43:24:6d:e0:63: 8b:8a:43:4f:34:95:59:73:17:c5:8c:db:09:ce:f7:1d:8d:9f: 1d:3a:ae:22:c7:ef:f7:16:a0:d7:3b:50:2e:00:d2:36:c0:74: 45:ef:20:80:ab:78:3c:5c:f6:22:7e:e1:43:8a:4d:10:e9:e2: b3:12:44:22:a5:04:91:8a:fa:1c:8f:17:d5:29:a6:fa:96:18: 01:4b:5e:b8:4c:81:fb:9d:c6:2f:af:9d:df:9f:ad:4e:8e:56: bb:28:d7:d8:93:df:0f:d9:7f:1d:1e:75:35:65:fe:60:38:3a: c9:a4:e3:9f:f4:04:d6:a5:32:b3:c5:97:fc:b3:67:b4:33:81: 4e:22:23:b6:16:9a:1f:e9:ad:ad:b4:8a:56:4e:e2:4e:6f:d3: 32:00:03:5f:80:57:ef:e8:38:a6:a5:0a:c2:3c:5f:6c:66:b8: 60:76:6b:92:01:89:43:79:48:99:f6:a9:a4:4f:94:03:43:c0: fc:03:6d:76:5d:a9:3b:60:64:cb:f5:e9:b2:db:a9:ca:70:44: c0:24:06:91 -----BEGIN CERTIFICATE----- MIIGjjCCBXagAwIBAgIUAQ0Mn0MoWE8+SASGgvFraywXTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MWZhMGJjNTktYzk0Mi00NDZhLWEyNDktNjIzNDI4OWNiODE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tzzTPuLot2dHOGTu5jNCUsnVmlfGbynUxfr XdUxQiTqrofYnTBzwSbe+hpFn6IqoMP3ljOPPz1Bz0llbYcHIRvL8r4Qp5hqIZ+b KhFISJtxWTRFLM9kq2KnFr8wQWyqepd+lQF6AkyJ6cKhjfkDAaneys/8PWBJz2we za0KhtLx8k8Y91i9ysr3BBg928etMu7rFAPq6WbO810ecuGTzAZ/MsCHMX9B6O1I 9EGQhYPdLgeBM+qKE4J6dJ8gJ2h2MJapWhEyeAgPFlB0QYxkUwpGkkQaY4nk/0hS 7XcqVXMaeWSq1xUIa1KSJgGGjGVZZG5j6sQfNF3xCPiEkDdoAwIDAQABo4IDoDCC A5wwHQYDVR0OBBYEFGPz/8I0dmX+B4DxoQV8EDdAwuH1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGQ1ZDFiMzYtZWNmOC0z YThlLWI4NDItN2IzMzljYzY0MWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMGoGCCsGAQUFBwEHAQH/BFswWTBXBAIAATBRAwQDQCCYAwQD QDKIAwQHQJGAAwMBQPgDBANCEUgDAwBCyAMEB0oDAAMEBM3WIAMEBM4owAMEBM79 AAMDANApAwQE2JfgAwQH2LiAAwQG2OAAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJFhCGa3EY2oNHMuPfv0 sPNk5md37m2BpS5XYZjhkHvTiTq1wqR0Cf+Q+MT9I2fmad1DJG3gY4uKQ080lVlz F8WM2wnO9x2Nnx06riLH7/cWoNc7UC4A0jbAdEXvIICreDxc9iJ+4UOKTRDp4rMS RCKlBJGK+hyPF9UppvqWGAFLXrhMgfudxi+vnd+frU6OVrso19iT3w/Zfx0edTVl /mA4Osmk45/0BNalMrPFl/yzZ7QzgU4iI7YWmh/pra20ilZO4k5v0zIAA1+AV+/o OKalCsI8X2xmuGB2a5IBiUN5SJn2qaRPlANDwPwDbXZdqTtgZMv16bLbqcpwRMAk BpE= -----END CERTIFICATE-----Generated at Mon Oct 5 13:41:35 2026 by rpki-client