$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/f86b6f27-de96-3aed-b000-0f261ccc01d7.roa File: f86b6f27-de96-3aed-b000-0f261ccc01d7.roa (raw, json) Hash identifier: QscuXQ7lXw+4Q+nY7ygIzS+UefcEZ8onDBNdAsSOTAY= Subject key identifier: 6B:0C:12:2A:0C:EA:D7:B6:C9:62:39:52:86:06:4F:69:4D:E3:48:B0 Certificate issuer: /CN=bf7d171d-7917-4a21-b6cc-8a27039802a5 Certificate serial: 010D0C9F4328584D6AAA7E6A28CFA749A4917B80 Authority key identifier: AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/f86b6f27-de96-3aed-b000-0f261ccc01d7.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 13415 IP address blocks: 65.181.48.0/20 maxlen: 20 66.7.112.0/20 maxlen: 20 66.7.116.0/24 maxlen: 24 66.60.96.0/19 maxlen: 19 66.85.16.0/22 maxlen: 22 66.219.192.0/18 maxlen: 18 66.219.200.0/23 maxlen: 23 66.219.224.0/23 maxlen: 23 66.219.248.0/23 maxlen: 23 67.206.160.0/20 maxlen: 21 67.214.224.0/19 maxlen: 19 68.66.160.0/20 maxlen: 20 69.27.0.0/19 maxlen: 19 69.169.128.0/18 maxlen: 18 76.8.192.0/19 maxlen: 19 97.75.160.0/19 maxlen: 19 104.153.124.0/22 maxlen: 22 104.244.84.0/22 maxlen: 22 162.219.20.0/22 maxlen: 22 162.223.32.0/21 maxlen: 21 162.247.176.0/22 maxlen: 22 172.83.4.0/22 maxlen: 22 192.34.248.0/21 maxlen: 21 192.92.200.0/21 maxlen: 21 199.30.68.0/22 maxlen: 22 199.96.116.0/22 maxlen: 22 199.115.244.0/22 maxlen: 22 199.127.120.0/21 maxlen: 21 204.15.84.0/22 maxlen: 22 205.204.32.0/20 maxlen: 20 208.72.160.0/21 maxlen: 21 216.10.236.0/22 maxlen: 22 2600:7400::/28 maxlen: 28 2600:7401::/32 maxlen: 32 2600:740b:2::/48 maxlen: 48 2607:f898::/32 maxlen: 32 2607:f898:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:7e:6a:28:cf:a7:49:a4:91:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7d171d-7917-4a21-b6cc-8a27039802a5 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=91492b6a-385c-4a9f-9089-e21492daacf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:17:a4:a5:19:0a:49:dc:f7:f7:81:41:7e:72: d6:3e:c4:38:27:32:be:71:62:03:7f:6e:f3:d1:fa: 9e:da:48:5e:e6:af:f7:97:e9:c2:ba:24:52:7c:26: 30:57:8a:fe:d0:3e:c6:3b:99:65:ff:ef:6b:95:37: 53:39:70:74:0a:e4:36:3b:a9:e7:18:00:4d:e0:43: 23:ba:6c:da:27:36:21:da:f9:ff:de:7d:53:dd:df: 0f:a4:07:a1:9c:49:26:39:ef:49:73:ea:8c:68:11: 9c:32:4c:d1:82:4d:a5:82:28:43:7e:6c:7d:a9:65: ce:16:4b:49:c6:b1:da:04:15:37:22:2c:ab:64:89: 82:76:f6:bc:a3:c3:f1:9a:a8:55:e6:76:51:b8:23: a3:ee:14:5f:0b:3c:a9:97:11:87:0f:dc:11:b0:84: ea:1d:ea:14:97:0a:f9:d8:63:da:76:91:66:98:f2: 1c:7f:1a:f2:c8:26:88:93:97:b1:2e:e8:a1:64:06: ba:22:bc:8c:65:87:9a:42:f3:2b:b5:6b:97:12:2a: 7d:8f:60:d0:5d:ec:a0:c1:a7:7d:9c:13:30:84:69: 30:62:b5:9f:b1:e2:be:4d:52:58:5a:21:c9:30:b9: 3f:0e:b3:d3:7e:d9:55:42:7b:d2:d9:51:54:cc:eb: 46:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0C:12:2A:0C:EA:D7:B6:C9:62:39:52:86:06:4F:69:4D:E3:48:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/f86b6f27-de96-3aed-b000-0f261ccc01d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl X509v3 Authority Key Identifier: keyid:AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer sbgp-ipAddrBlock: critical IPv4: 65.181.48.0/20 66.7.112.0/20 66.60.96.0/19 66.85.16.0/22 66.219.192.0/18 67.206.160.0/20 67.214.224.0/19 68.66.160.0/20 69.27.0.0/19 69.169.128.0/18 76.8.192.0/19 97.75.160.0/19 104.153.124.0/22 104.244.84.0/22 162.219.20.0/22 162.223.32.0/21 162.247.176.0/22 172.83.4.0/22 192.34.248.0/21 192.92.200.0/21 199.30.68.0/22 199.96.116.0/22 199.115.244.0/22 199.127.120.0/21 204.15.84.0/22 205.204.32.0/20 208.72.160.0/21 216.10.236.0/22 IPv6: 2600:7400::/28 2607:f898::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:a4:2d:4d:b4:a2:4e:25:a2:bc:9b:17:db:25:30:9c:da:9d: 18:0f:fd:81:30:db:d6:91:5b:07:dd:cf:62:85:9e:e1:2b:a8: 89:68:3c:83:8d:f9:2c:e3:6d:9f:ee:97:ed:31:1b:c6:02:5f: 76:4f:42:62:bb:f3:c0:6c:ac:56:ac:17:06:5d:cf:29:6f:af: 4e:78:5b:f4:72:e9:8e:56:23:49:7a:72:ca:db:fc:d9:20:b9: d0:44:6f:b1:d6:ac:8a:fe:d0:b3:3b:0b:da:c8:c8:3d:62:98: 30:4b:b3:a1:c7:4d:df:0c:c7:79:c4:6a:8d:80:fc:2e:38:b5: 33:c6:11:df:0f:ed:e2:a7:7c:cc:04:8e:6f:66:13:95:15:08: 63:c9:00:c2:0c:e1:59:5b:8d:2a:a1:c3:b5:c9:71:a8:63:95: 90:3a:ab:bf:a3:74:66:e5:a7:d1:56:42:d0:42:d2:50:f6:26: 47:40:3c:b2:6e:9d:f2:c8:60:92:59:56:30:3e:f6:62:72:67: d2:bf:e7:a1:30:b7:f1:3c:7f:40:8f:0e:77:c3:a3:3a:df:5e: c9:36:aa:51:87:bb:f9:c9:21:15:a5:19:37:3e:e4:c6:2b:e1: d8:7b:39:14:6c:4a:32:31:52:46:93:5d:2c:a1:31:33:28:c9: ca:30:8e:9a -----BEGIN CERTIFICATE----- MIIHADCCBeigAwIBAgIUAQ0Mn0MoWE1qqn5qKM+nSaSRe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3ZDE3MWQtNzkxNy00YTIxLWI2Y2MtOGEyNzAzOTgw MmE1MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk OTE0OTJiNmEtMzg1Yy00YTlmLTkwODktZTIxNDkyZGFhY2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBekpRkKSdz394FBfnLWPsQ4JzK+cWIDf27z 0fqe2khe5q/3l+nCuiRSfCYwV4r+0D7GO5ll/+9rlTdTOXB0CuQ2O6nnGABN4EMj umzaJzYh2vn/3n1T3d8PpAehnEkmOe9Jc+qMaBGcMkzRgk2lgihDfmx9qWXOFktJ xrHaBBU3IiyrZImCdva8o8PxmqhV5nZRuCOj7hRfCzyplxGHD9wRsITqHeoUlwr5 2GPadpFmmPIcfxryyCaIk5exLuihZAa6IryMZYeaQvMrtWuXEip9j2DQXeygwad9 nBMwhGkwYrWfseK+TVJYWiHJMLk/DrPTftlVQnvS2VFUzOtGYQIDAQABo4IEEjCC BA4wHQYDVR0OBBYEFGsMEioM6te2yWI5UoYGT2lN40iwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdk MTcxZC03OTE3LTRhMjEtYjZjYy04YTI3MDM5ODAyYTUvZjg2YjZmMjctZGU5Ni0z YWVkLWIwMDAtMGYyNjFjY2MwMWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmY3ZDE3MWQtNzkxNy00YTIxLWI2 Y2MtOGEyNzAzOTgwMmE1L2JmN2QxNzFkLTc5MTctNGEyMS1iNmNjLThhMjcwMzk4 MDJhNS5jcmwwHwYDVR0jBBgwFoAUrfa9+KlGwDdFy21HxWzSxxXvijswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdkMTcxZC03OTE3LTRhMjEtYjZjYy04YTI3 MDM5ODAyYTUuY2VyMIHbBggrBgEFBQcBBwEB/wSByzCByDCBrwQCAAEwgagDBARB tTADBARCB3ADBAVCPGADBAJCVRADBAZC28ADBARDzqADBAVD1uADBAREQqADBAVF GwADBAZFqYADBAVMCMADBAVhS6ADBAJomXwDBAJo9FQDBAKi2xQDBAOi3yADBAKi 97ADBAKsUwQDBAPAIvgDBAPAXMgDBALHHkQDBALHYHQDBALHc/QDBAPHf3gDBALM D1QDBATNzCADBAPQSKADBALYCuwwFAQCAAIwDgMFBCYAdAADBQAmB/iYMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAAqkLU20ok4lorybF9slMJzanRgP/YEw29aRWwfdz2KFnuErqIloPION+Szj bZ/ul+0xG8YCX3ZPQmK788BsrFasFwZdzylvr054W/Ry6Y5WI0l6csrb/NkgudBE b7HWrIr+0LM7C9rIyD1imDBLs6HHTd8Mx3nEao2A/C44tTPGEd8P7eKnfMwEjm9m E5UVCGPJAMIM4VlbjSqhw7XJcahjlZA6q7+jdGblp9FWQtBC0lD2JkdAPLJunfLI YJJZVjA+9mJyZ9K/56Ewt/E8f0CPDnfDozrfXsk2qlGHu/nJIRWlGTc+5MYr4dh7 ORRsSjIxUkaTXSyhMTMoycowjpo= -----END CERTIFICATE-----Generated at Wed Apr 15 21:50:25 2026 by rpki-client