$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa File: bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa (raw, json) Hash identifier: Ym4RNBoodS5B+v1obDBKhPcChHoYhJDiAJkLgYYVpe4= Subject key identifier: 5F:E0:08:85:92:9E:BA:52:6F:28:20:48:E8:4B:38:21:17:16:E2:B8 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584E921FA32C0666FE52B6C469E0 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 10397 IP address blocks: 162.244.96.0/24 maxlen: 24 162.244.97.0/24 maxlen: 24 162.244.98.0/24 maxlen: 24 162.244.99.0/24 maxlen: 24 162.244.100.0/24 maxlen: 24 162.244.101.0/24 maxlen: 24 204.16.48.0/24 maxlen: 24 208.67.12.0/24 maxlen: 24 208.67.13.0/24 maxlen: 24 208.67.14.0/24 maxlen: 24 208.67.15.0/24 maxlen: 24 208.85.128.0/24 maxlen: 24 208.85.133.0/24 maxlen: 24 208.85.134.0/24 maxlen: 24 208.85.135.0/24 maxlen: 24 209.42.166.0/24 maxlen: 24 209.42.191.0/24 maxlen: 24 209.209.128.0/21 maxlen: 21 209.209.139.0/24 maxlen: 24 209.209.140.0/22 maxlen: 22 209.209.141.0/24 maxlen: 24 209.209.144.0/20 maxlen: 20 209.209.160.0/20 maxlen: 20 209.209.163.0/24 maxlen: 24 209.209.167.0/24 maxlen: 24 209.209.176.0/22 maxlen: 22 209.209.180.0/23 maxlen: 23 209.209.181.0/24 maxlen: 24 209.209.183.0/24 maxlen: 24 209.209.184.0/24 maxlen: 24 209.209.186.0/23 maxlen: 23 209.209.189.0/24 maxlen: 24 209.209.190.0/23 maxlen: 23 209.250.32.0/19 maxlen: 19 2607:b600::/48 maxlen: 48 2607:b600:1::/48 maxlen: 48 2607:b600:2::/48 maxlen: 48 2607:b600:4::/48 maxlen: 48 2607:b600:5::/48 maxlen: 48 2607:b600:6::/48 maxlen: 48 2607:b600:8::/48 maxlen: 48 2607:b600:10::/48 maxlen: 48 2607:b600:12::/48 maxlen: 48 2607:b600:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:a3:2c:06:66:fe:52:b6:c4:69:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=2a84df67-3661-4009-9725-c72195d414aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e2:1f:19:f6:a4:74:ff:9a:90:30:fb:13:ce: ca:93:74:e7:ab:a2:ac:97:1c:6f:86:52:02:7a:e6: a6:d2:27:33:17:65:f1:0f:05:93:95:ca:c9:e6:c1: c2:5a:f5:76:a8:7f:a8:0c:c2:51:f8:91:47:4c:78: be:3d:84:6e:15:5e:72:a3:ed:37:04:75:85:6c:40: b6:ce:e4:8a:7b:82:1c:a8:1f:2a:f2:97:da:47:4e: 8c:53:74:19:1a:44:1c:44:a5:19:3b:b3:d0:ae:03: 6f:93:5f:02:b1:21:d4:54:73:3c:3c:eb:9b:e0:fe: ff:32:80:04:0f:a1:a1:c2:cc:ae:ec:e1:5c:78:b1: 51:13:4e:c4:de:e4:04:43:bf:30:09:67:af:e8:dd: e6:0d:ca:51:b1:18:af:57:58:bd:67:fe:6d:47:7c: ab:af:87:7a:7b:18:28:ed:50:82:c1:ee:3b:08:79: 1c:b7:4e:88:e3:91:ea:41:00:57:18:eb:71:f1:b7: 01:5b:5e:f8:64:6b:67:21:47:6e:31:c4:b5:01:cf: 92:14:86:a0:1c:38:9b:55:f8:a5:3d:e4:43:88:f7: 48:e5:31:9f:84:44:f4:14:6d:2e:22:a5:b5:00:ad: bf:b0:46:25:2b:53:65:2e:7a:1b:2b:ea:de:4b:1a: cf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E0:08:85:92:9E:BA:52:6F:28:20:48:E8:4B:38:21:17:16:E2:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 162.244.96.0-162.244.101.255 204.16.48.0/24 208.67.12.0/22 208.85.128.0/24 208.85.133.0-208.85.135.255 209.42.166.0/24 209.42.191.0/24 209.209.128.0/21 209.209.139.0-209.209.181.255 209.209.183.0-209.209.184.255 209.209.186.0/23 209.209.189.0-209.209.191.255 209.250.32.0/19 IPv6: 2607:b600::-2607:b600:2:ffff:ffff:ffff:ffff:ffff 2607:b600:4::-2607:b600:6:ffff:ffff:ffff:ffff:ffff 2607:b600:8::/48 2607:b600:10::/48 2607:b600:12::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:f7:a2:bf:40:28:fa:a2:7c:f3:eb:40:b5:a8:75:2f:f5:a9: 41:ef:1b:9b:33:9a:4c:6b:f0:ad:8e:1f:c2:47:a6:e5:f3:25: 1d:67:0f:48:f7:87:11:62:89:1d:69:9a:b1:1c:04:be:77:87: 7b:f2:a1:32:fe:11:94:aa:48:b5:bc:7c:23:e1:ae:2b:96:01: 0b:43:c6:35:ec:f2:5b:5c:d6:60:c0:6e:ba:c3:f3:6a:f0:0e: 86:0b:46:06:5e:f5:7b:2a:ad:ad:e0:82:59:52:3b:68:33:43: 5d:61:17:3e:f9:87:cc:f6:1d:e3:4c:39:9a:64:f5:ab:f2:b7: fe:18:f3:18:0d:a9:65:05:15:ef:cf:4f:a8:12:95:43:bf:bb: b1:ef:1f:56:fb:1e:b0:2d:38:19:62:b0:13:72:b8:a6:b3:0b: 55:01:86:6e:ff:39:e5:20:1f:77:65:50:09:0f:db:85:bd:e5: 8e:ee:14:2c:e2:19:96:e8:74:08:57:fb:2f:ce:2c:b9:0c:82: 94:ee:8a:4f:63:82:c3:94:0c:e1:02:2f:09:a5:ae:59:44:98: fe:6b:70:70:1b:de:8e:c6:de:15:72:d0:c5:59:c2:f3:3b:a2: ff:3c:48:14:c0:2f:68:c2:51:62:99:7d:70:d5:fb:57:86:00: 3b:f5:30:6a -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWE6SH6MsBmb+UrbEaeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk MmE4NGRmNjctMzY2MS00MDA5LTk3MjUtYzcyMTk1ZDQxNGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuIfGfakdP+akDD7E87Kk3Tnq6KslxxvhlIC euam0iczF2XxDwWTlcrJ5sHCWvV2qH+oDMJR+JFHTHi+PYRuFV5yo+03BHWFbEC2 zuSKe4IcqB8q8pfaR06MU3QZGkQcRKUZO7PQrgNvk18CsSHUVHM8POub4P7/MoAE D6Ghwsyu7OFceLFRE07E3uQEQ78wCWev6N3mDcpRsRivV1i9Z/5tR3yrr4d6exgo 7VCCwe47CHkct06I45HqQQBXGOtx8bcBW174ZGtnIUduMcS1Ac+SFIagHDibVfil PeRDiPdI5TGfhET0FG0uIqW1AK2/sEYlK1NlLnobK+reSxrPSQIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFF/gCIWSnrpSbyggSOhLOCEXFuK4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvYmQ4N2I0MmEtY2I3Yy0z OWM0LThmZGEtM2YzYThmYzY5MzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMIHZBggrBgEFBQcBBwEB/wSByTCBxjB8BAIAATB2MAwDBAWi 9GADBAGi9GQDBADMEDADBALQQwwDBADQVYAwDAMEANBVhQMEA9BVgAMEANEqpgME ANEqvwMEA9HRgDAMAwQA0dGLAwQB0dG0MAwDBADR0bcDBADR0bgDBAHR0bowDAME ANHRvQMEBtHRgAMEBdH6IDBGBAIAAjBAMA8DBAEmB7YDBwAmB7YAAAIwEgMHAiYH tgAABAMHACYHtgAABgMHACYHtgAACAMHACYHtgAAEAMHASYHtgAAEjBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQA896K/QCj6onzz60C1qHUv9alB7xubM5pMa/Ctjh/CR6bl8yUdZw9I94cRYokd aZqxHAS+d4d78qEy/hGUqki1vHwj4a4rlgELQ8Y17PJbXNZgwG66w/Nq8A6GC0YG XvV7Kq2t4IJZUjtoM0NdYRc++YfM9h3jTDmaZPWr8rf+GPMYDallBRXvz0+oEpVD v7ux7x9W+x6wLTgZYrATcrimswtVAYZu/znlIB93ZVAJD9uFveWO7hQs4hmW6HQI V/svziy5DIKU7opPY4LDlAzhAi8Jpa5ZRJj+a3BwG96Oxt4VctDFWcLzO6L/PEgU wC9owlFimX1w1ftXhgA79TBq -----END CERTIFICATE-----Generated at Fri Jul 24 11:35:23 2026 by rpki-client