$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa File: bc669675-4f09-3100-852b-f89b8e4fa0ee.roa (raw, json) Hash identifier: Cdsio8C6qmjTvHAEhz7zP05VHryfXoVzMOIa0ZGIICs= Subject key identifier: 70:54:CA:B0:B5:E9:B6:AB:71:AC:FC:5D:7B:E3:D1:EB:6E:33:70:4D Certificate issuer: /CN=da61f786-99c2-4468-90f7-0b35abd168e5 Certificate serial: 010D0C9F4328584E94EA4E3DF38BE79EB2955900 Authority key identifier: 9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa Signing time: Wed 22 Jul 2026 09:00:11 +0000 ROA not before: Wed 22 Jul 2026 09:00:11 +0000 ROA not after: Tue 20 Oct 2026 09:00:11 +0000 asID: 54650 IP address blocks: 206.166.208.0/24 maxlen: 24 206.166.209.0/24 maxlen: 24 206.166.210.0/24 maxlen: 24 206.166.211.0/24 maxlen: 24 206.188.200.0/24 maxlen: 24 206.188.201.0/24 maxlen: 24 209.172.14.0/24 maxlen: 24 209.172.15.0/24 maxlen: 24 2604:bb40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:94:ea:4e:3d:f3:8b:e7:9e:b2:95:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da61f786-99c2-4468-90f7-0b35abd168e5 Validity Not Before: Jul 22 09:00:11 2026 GMT Not After : Oct 20 09:00:11 2026 GMT Subject: CN=f3af7d02-5d72-4f6c-b78a-45407f117347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d5:94:c4:1d:20:7f:d9:b2:c4:2e:c3:ad:0a: d4:a2:54:d4:c6:d7:59:6b:35:e4:8c:5a:c3:d6:34: 6c:a7:14:69:30:c1:fc:fa:0c:8a:8b:1a:7a:39:7d: 4f:7c:c7:e2:92:32:ab:a8:e2:ec:52:d1:c5:89:04: 69:94:11:80:43:23:54:77:ff:74:e0:6e:aa:c5:fc: bb:03:45:04:bf:35:3a:62:45:ea:75:1e:c8:0c:18: 92:49:c5:58:50:18:b3:57:dd:c7:84:51:7f:2e:b5: 2f:83:76:16:48:26:8e:36:62:f9:61:1e:7b:fe:c6: 78:70:a4:fd:e8:85:bd:b2:86:ad:25:cc:b2:11:1c: 3a:c9:95:5f:09:23:d0:fd:7f:f6:c8:2b:6a:f4:cc: 7d:7f:07:a0:e6:59:d4:55:90:e3:1b:df:71:81:cf: 15:96:f9:40:e2:42:8b:2a:33:1d:7a:09:0f:7c:11: fc:b4:88:52:60:7a:bf:52:72:b4:cf:d9:ac:fb:cc: 43:2b:2a:e5:80:e3:a8:a6:41:c9:80:a9:16:b8:57: 7f:13:1d:28:de:5e:ea:61:10:66:a6:e9:a8:69:df: c8:1a:de:33:a3:da:d3:49:f1:50:b6:4d:64:25:56: c8:52:f3:67:c9:36:28:38:8f:ed:73:c0:52:44:09: cf:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:54:CA:B0:B5:E9:B6:AB:71:AC:FC:5D:7B:E3:D1:EB:6E:33:70:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl X509v3 Authority Key Identifier: keyid:9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer sbgp-ipAddrBlock: critical IPv4: 206.166.208.0/22 206.188.200.0/23 209.172.14.0/23 IPv6: 2604:bb40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:20:06:a9:93:c0:74:5b:ab:36:ec:c5:32:67:48:71:3c:c6: 4a:b2:2c:f3:8c:4a:1b:37:08:da:98:3f:a3:2e:b1:34:84:66: 59:2f:03:e0:bc:e3:7f:5f:b1:a3:5c:7a:70:02:c3:5e:c9:b5: fe:a2:ad:a2:0f:0a:ab:5e:7d:4b:d2:b7:9b:5d:c6:09:dc:a3: 09:cb:92:77:93:b7:f2:57:c6:f1:e4:19:e2:65:b0:35:09:04: 68:90:bc:55:b7:03:e1:95:56:aa:24:d9:cd:0e:97:d3:1e:0a: 1b:68:a6:b6:41:90:40:ed:76:49:e9:27:94:a7:49:19:cf:fb: 39:25:dd:b2:5a:d6:d1:d9:88:09:15:73:e7:50:6a:7d:77:ea: 04:a1:1a:ad:d0:95:96:72:89:a7:26:ed:29:3f:af:28:0a:52: d6:6f:c5:9e:a8:b0:f1:63:59:f9:60:a3:e2:a1:3f:e6:89:f4: 4d:a4:c3:98:b9:16:fc:18:3a:6f:ea:25:92:c8:9d:f6:df:a5: 32:f8:05:97:5f:8a:2a:3e:ca:db:06:33:d2:1d:2e:c9:35:f1: 80:2a:e3:ad:dc:93:81:85:2a:15:88:f0:7a:6a:fd:cd:fa:b1: ad:86:af:50:27:09:27:9b:30:6e:a3:79:60:9f:9c:84:be:c2: bf:c4:6a:e3 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE6U6k4984vnnrKVWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2MWY3ODYtOTljMi00NDY4LTkwZjctMGIzNWFiZDE2 OGU1MB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk ZjNhZjdkMDItNWQ3Mi00ZjZjLWI3OGEtNDU0MDdmMTE3MzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tWUxB0gf9myxC7DrQrUolTUxtdZazXkjFrD 1jRspxRpMMH8+gyKixp6OX1PfMfikjKrqOLsUtHFiQRplBGAQyNUd/904G6qxfy7 A0UEvzU6YkXqdR7IDBiSScVYUBizV93HhFF/LrUvg3YWSCaONmL5YR57/sZ4cKT9 6IW9soatJcyyERw6yZVfCSPQ/X/2yCtq9Mx9fweg5lnUVZDjG99xgc8VlvlA4kKL KjMdegkPfBH8tIhSYHq/UnK0z9ms+8xDKyrlgOOopkHJgKkWuFd/Ex0o3l7qYRBm pumoad/IGt4zo9rTSfFQtk1kJVbIUvNnyTYoOI/tc8BSRAnPawIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFHBUyrC16barcaz8XXvj0etuM3BNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYTYx Zjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1YWJkMTY4ZTUvYmM2Njk2NzUtNGYwOS0z MTAwLTg1MmItZjg5YjhlNGZhMGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGE2MWY3ODYtOTljMi00NDY4LTkw ZjctMGIzNWFiZDE2OGU1L2RhNjFmNzg2LTk5YzItNDQ2OC05MGY3LTBiMzVhYmQx NjhlNS5jcmwwHwYDVR0jBBgwFoAUm7JW3Y6M5BMCH6y6TevAUqLlBVkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYTYxZjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1 YWJkMTY4ZTUuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCzqbQAwQB zrzIAwQB0awOMA0EAgACMAcDBQAmBLtAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG8gBqmTwHRbqzbsxTJn SHE8xkqyLPOMShs3CNqYP6MusTSEZlkvA+C8439fsaNcenACw17Jtf6iraIPCqte fUvSt5tdxgncownLkneTt/JXxvHkGeJlsDUJBGiQvFW3A+GVVqok2c0Ol9MeChto prZBkEDtdknpJ5SnSRnP+zkl3bJa1tHZiAkVc+dQan136gShGq3QlZZyiacm7Sk/ rygKUtZvxZ6osPFjWflgo+KhP+aJ9E2kw5i5FvwYOm/qJZLInfbfpTL4BZdfiio+ ytsGM9IdLsk18YAq463ck4GFKhWI8Hpq/c36sa2Gr1AnCSebMG6jeWCfnIS+wr/E auM= -----END CERTIFICATE-----Generated at Fri Jul 24 14:44:24 2026 by rpki-client