$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa File: bc669675-4f09-3100-852b-f89b8e4fa0ee.roa (raw, json) Hash identifier: 5wu+kihzMSxcqOG0BqV2tO+DrWsi2seFE64wdF5hGzw= Subject key identifier: C5:48:BE:D7:88:BF:8E:58:78:1E:4E:B6:DD:0E:22:7E:83:A0:D5:8F Certificate issuer: /CN=da61f786-99c2-4468-90f7-0b35abd168e5 Certificate serial: 010D0C9F4328584E340A91B1DAA239789A938280 Authority key identifier: 9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa Signing time: Wed 17 Jun 2026 16:11:51 +0000 ROA not before: Wed 17 Jun 2026 16:11:51 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 54650 IP address blocks: 206.166.208.0/24 maxlen: 24 206.166.209.0/24 maxlen: 24 206.166.210.0/24 maxlen: 24 206.166.211.0/24 maxlen: 24 206.188.200.0/24 maxlen: 24 206.188.201.0/24 maxlen: 24 209.172.14.0/24 maxlen: 24 209.172.15.0/24 maxlen: 24 2604:bb40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:34:0a:91:b1:da:a2:39:78:9a:93:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da61f786-99c2-4468-90f7-0b35abd168e5 Validity Not Before: Jun 17 16:11:51 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=7635b71a-b288-4a1a-8890-91e282f64e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9b:5d:8e:50:b4:00:65:14:7d:2a:9a:8c:79: c0:e0:ef:40:ab:42:89:de:42:53:39:5a:fe:c4:16: 80:25:66:9d:61:94:c4:98:04:44:2d:c6:70:ab:a8: b8:66:2b:79:02:68:b8:c8:cf:9e:33:9a:92:a3:d6: dc:65:22:eb:06:d6:41:7b:f1:d4:54:d3:f5:f3:da: 34:e6:6c:dd:89:93:0c:5e:49:eb:6b:c0:2e:0f:95: 73:37:6a:e4:e4:47:76:e3:9b:b9:7b:75:5a:51:94: dc:82:2b:a7:93:98:ed:14:ec:04:4d:0f:0a:f7:9a: e7:05:02:0c:03:dd:3d:2e:24:f3:9e:3b:1e:a0:70: 10:e0:ce:e7:70:6b:37:ec:9b:78:f2:86:6d:ba:8c: 8e:48:5b:45:c1:80:97:ed:32:a3:b9:98:16:36:5d: ee:2f:37:da:a0:c6:53:3e:e0:23:85:55:60:30:c1: 65:ea:c1:e7:fc:b3:64:93:8b:a4:67:17:db:15:cc: 21:9e:78:2a:bd:f9:4a:e4:1e:c2:10:8f:43:ef:5e: 60:d2:e2:3a:40:95:2d:e3:67:50:85:49:a0:54:9f: 81:c5:07:d3:9f:24:8e:a7:ff:9c:f2:eb:73:1c:5a: 5b:1e:a4:4e:e9:ab:fa:3e:17:17:e4:3f:1b:24:3a: 81:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:48:BE:D7:88:BF:8E:58:78:1E:4E:B6:DD:0E:22:7E:83:A0:D5:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl X509v3 Authority Key Identifier: keyid:9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer sbgp-ipAddrBlock: critical IPv4: 206.166.208.0/22 206.188.200.0/23 209.172.14.0/23 IPv6: 2604:bb40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:13:f1:cc:21:ce:b5:d5:99:89:71:90:2d:12:95:9c:75:37: dc:b1:4f:4c:6d:09:06:e0:46:09:a9:67:b6:33:a5:28:55:47: 70:3f:da:86:ba:8e:2f:72:4b:17:9d:e3:40:69:f7:17:c5:86: b1:ef:6a:1a:40:70:09:52:49:84:e6:af:8d:37:60:0c:59:6e: 2c:c0:2e:65:f1:c9:71:fa:8e:91:91:a4:fc:1c:12:89:df:0e: c7:36:0a:15:f9:82:33:da:e0:73:9e:67:de:a2:b8:15:96:2c: 74:cf:a4:7d:27:68:4b:84:8c:dd:f8:74:9e:1e:b0:77:27:7e: 90:f2:5a:c8:e1:a5:ee:4c:ab:bb:89:d8:c3:96:e6:b3:ce:01: e8:70:f5:8c:ed:8c:58:ab:53:4b:5b:a8:6e:36:34:6f:5b:3a: c6:52:8f:c2:96:69:46:60:77:cc:00:69:b4:f9:e6:2c:1e:72: a6:12:52:a4:bb:da:1c:e3:a3:b1:ad:54:e3:d0:f2:47:b5:2d: d2:68:7c:22:42:03:09:9b:90:55:cd:32:d7:ab:91:fc:4e:26: 06:21:ed:46:3c:79:3e:8b:33:47:c6:7c:98:23:a0:2e:83:16: 4e:26:50:d4:08:2e:ba:21:7e:b1:58:94:e8:39:b3:37:1a:3c: a8:f4:81:cc -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE40CpGx2qI5eJqTgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2MWY3ODYtOTljMi00NDY4LTkwZjctMGIzNWFiZDE2 OGU1MB4XDTI2MDYxNzE2MTE1MVoXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk NzYzNWI3MWEtYjI4OC00YTFhLTg4OTAtOTFlMjgyZjY0ZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZtdjlC0AGUUfSqajHnA4O9Aq0KJ3kJTOVr+ xBaAJWadYZTEmARELcZwq6i4Zit5Ami4yM+eM5qSo9bcZSLrBtZBe/HUVNP189o0 5mzdiZMMXknra8AuD5VzN2rk5Ed245u5e3VaUZTcgiunk5jtFOwETQ8K95rnBQIM A909LiTznjseoHAQ4M7ncGs37Jt48oZtuoyOSFtFwYCX7TKjuZgWNl3uLzfaoMZT PuAjhVVgMMFl6sHn/LNkk4ukZxfbFcwhnngqvflK5B7CEI9D715g0uI6QJUt42dQ hUmgVJ+BxQfTnySOp/+c8utzHFpbHqRO6av6PhcX5D8bJDqBHQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFMVIvteIv45YeB5Ott0OIn6DoNWPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYTYx Zjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1YWJkMTY4ZTUvYmM2Njk2NzUtNGYwOS0z MTAwLTg1MmItZjg5YjhlNGZhMGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGE2MWY3ODYtOTljMi00NDY4LTkw ZjctMGIzNWFiZDE2OGU1L2RhNjFmNzg2LTk5YzItNDQ2OC05MGY3LTBiMzVhYmQx NjhlNS5jcmwwHwYDVR0jBBgwFoAUm7JW3Y6M5BMCH6y6TevAUqLlBVkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYTYxZjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1 YWJkMTY4ZTUuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCzqbQAwQB zrzIAwQB0awOMA0EAgACMAcDBQAmBLtAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEgT8cwhzrXVmYlxkC0S lZx1N9yxT0xtCQbgRgmpZ7YzpShVR3A/2oa6ji9ySxed40Bp9xfFhrHvahpAcAlS SYTmr403YAxZbizALmXxyXH6jpGRpPwcEonfDsc2ChX5gjPa4HOeZ96iuBWWLHTP pH0naEuEjN34dJ4esHcnfpDyWsjhpe5Mq7uJ2MOW5rPOAehw9YztjFirU0tbqG42 NG9bOsZSj8KWaUZgd8wAabT55iwecqYSUqS72hzjo7GtVOPQ8ke1LdJofCJCAwmb kFXNMterkfxOJgYh7UY8eT6LM0fGfJgjoC6DFk4mUNQILrohfrFYlOg5szcaPKj0 gcw= -----END CERTIFICATE-----Generated at Thu Jul 9 10:29:03 2026 by rpki-client