$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/f86b6f27-de96-3aed-b000-0f261ccc01d7.roa File: f86b6f27-de96-3aed-b000-0f261ccc01d7.roa (raw, json) Hash identifier: pC6LlGTdEEtttXStsEs+X/6VNSjn4kYgdKEb9WpyU3g= Subject key identifier: 68:70:BB:01:A1:A7:2F:19:08:7B:F1:DC:20:E6:D0:8F:05:CE:09:2C Certificate issuer: /CN=bf7d171d-7917-4a21-b6cc-8a27039802a5 Certificate serial: 010D0C9F4328584F8F3DBF1A5D24345C442368C0 Authority key identifier: AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/f86b6f27-de96-3aed-b000-0f261ccc01d7.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 13415 IP address blocks: 65.181.48.0/20 maxlen: 20 66.7.112.0/20 maxlen: 20 66.7.116.0/24 maxlen: 24 66.60.96.0/19 maxlen: 19 66.85.16.0/22 maxlen: 22 66.219.192.0/18 maxlen: 18 66.219.200.0/23 maxlen: 23 66.219.224.0/23 maxlen: 23 66.219.248.0/23 maxlen: 23 67.206.160.0/20 maxlen: 21 67.214.224.0/19 maxlen: 19 68.66.160.0/20 maxlen: 20 69.27.0.0/19 maxlen: 19 69.169.128.0/18 maxlen: 18 76.8.192.0/19 maxlen: 19 97.75.160.0/19 maxlen: 19 104.153.124.0/22 maxlen: 22 104.244.84.0/22 maxlen: 22 162.219.20.0/22 maxlen: 22 162.223.32.0/21 maxlen: 21 162.247.176.0/22 maxlen: 22 172.83.4.0/22 maxlen: 22 192.34.248.0/21 maxlen: 21 192.92.200.0/21 maxlen: 21 199.30.68.0/22 maxlen: 22 199.96.116.0/22 maxlen: 22 199.115.244.0/22 maxlen: 22 199.127.120.0/21 maxlen: 21 204.15.84.0/22 maxlen: 22 205.204.32.0/20 maxlen: 20 208.72.160.0/21 maxlen: 21 216.10.236.0/22 maxlen: 22 2600:7400::/28 maxlen: 28 2600:7401::/32 maxlen: 32 2600:740b:2::/48 maxlen: 48 2607:f898::/32 maxlen: 32 2607:f898:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:bf:1a:5d:24:34:5c:44:23:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7d171d-7917-4a21-b6cc-8a27039802a5 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=1c71345c-e887-422e-a34b-1fc7b2eaa65d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:30:c2:cb:a5:ae:73:9c:43:7e:ba:42:62:37: 18:d6:aa:f5:09:d9:11:f9:8a:61:ad:32:f5:e8:13: ef:db:5f:b4:32:99:7a:91:1d:01:4a:7d:8c:97:6d: bf:37:d1:b2:cc:63:d9:67:4f:94:f9:4a:7e:3e:16: f9:8d:8a:e5:6b:4c:91:cc:1c:b3:40:cc:8f:ce:61: e2:3a:86:75:2e:51:70:9a:81:ab:10:40:e7:a0:4a: df:db:fe:e6:db:94:49:76:1e:19:21:04:ca:64:1e: eb:6c:0c:13:33:0c:32:c4:cb:4c:2f:8a:2a:bf:67: 0f:4e:66:62:c6:e6:0c:6a:01:08:97:99:10:c5:b2: 87:ac:84:9e:56:c8:a1:74:c4:ad:da:73:55:8f:73: ad:61:68:b2:47:22:74:39:b2:37:2a:2c:71:cc:81: a6:77:dc:c9:3c:29:db:5c:bb:1b:08:a1:5f:3d:e5: 22:59:b2:91:1c:72:af:12:81:2c:f7:7f:ee:8c:fb: f2:25:63:2a:f5:75:7d:41:47:43:97:27:a5:99:c2: f9:7b:7a:09:69:26:71:8a:0a:0b:79:9b:30:54:b5: bc:de:6c:c5:c1:8f:7e:66:7c:90:9c:42:4f:11:e9: 19:17:e8:72:4d:f5:89:55:ce:cc:aa:c9:06:dc:e5: cc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:70:BB:01:A1:A7:2F:19:08:7B:F1:DC:20:E6:D0:8F:05:CE:09:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/f86b6f27-de96-3aed-b000-0f261ccc01d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl X509v3 Authority Key Identifier: keyid:AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer sbgp-ipAddrBlock: critical IPv4: 65.181.48.0/20 66.7.112.0/20 66.60.96.0/19 66.85.16.0/22 66.219.192.0/18 67.206.160.0/20 67.214.224.0/19 68.66.160.0/20 69.27.0.0/19 69.169.128.0/18 76.8.192.0/19 97.75.160.0/19 104.153.124.0/22 104.244.84.0/22 162.219.20.0/22 162.223.32.0/21 162.247.176.0/22 172.83.4.0/22 192.34.248.0/21 192.92.200.0/21 199.30.68.0/22 199.96.116.0/22 199.115.244.0/22 199.127.120.0/21 204.15.84.0/22 205.204.32.0/20 208.72.160.0/21 216.10.236.0/22 IPv6: 2600:7400::/28 2607:f898::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:26:59:bd:aa:23:ec:a0:ec:07:b9:82:a4:3a:7f:d5:51:5d: 34:d2:7f:c3:1b:4a:d1:59:e5:ad:13:a4:ee:6d:53:7a:04:a9: 7d:d2:14:34:2d:04:6a:f6:d5:ef:6a:e5:93:09:b7:1c:84:c6: 70:23:60:13:58:86:c3:67:6a:75:6b:7c:7b:11:11:de:19:85: fe:5d:7f:b9:37:79:92:7d:4c:76:eb:85:25:24:f9:28:de:ba: cb:56:d5:c9:bf:89:fe:3d:9d:63:d5:8a:4f:fa:a0:64:55:cb: ca:b2:a6:2a:55:89:a3:fa:95:68:88:e1:39:ab:28:f7:54:c5: 4d:40:85:23:ce:0f:02:6e:98:2f:9b:66:57:8e:19:04:4c:13: 14:ae:85:9f:5c:47:90:f5:8f:94:38:74:16:f5:e1:16:ee:3e: 19:ef:82:be:0d:cd:22:83:df:7c:42:30:3b:a7:89:a2:ac:b4: 46:74:cc:ac:80:78:9f:cf:41:ca:eb:9d:27:e4:95:3a:53:b0: 60:2c:08:f4:db:90:50:1f:34:9f:19:48:d3:70:b3:69:3c:19: 61:71:f7:bd:0b:00:51:6d:2b:bd:e6:61:4c:82:b5:ea:1d:1d: 7b:e7:06:eb:93:21:f7:94:42:88:25:01:82:2d:da:fc:b1:f6: 5c:ca:36:7b -----BEGIN CERTIFICATE----- MIIHADCCBeigAwIBAgIUAQ0Mn0MoWE+PPb8aXSQ0XEQjaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3ZDE3MWQtNzkxNy00YTIxLWI2Y2MtOGEyNzAzOTgw MmE1MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk MWM3MTM0NWMtZTg4Ny00MjJlLWEzNGItMWZjN2IyZWFhNjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozDCy6Wuc5xDfrpCYjcY1qr1CdkR+YphrTL1 6BPv21+0Mpl6kR0BSn2Ml22/N9GyzGPZZ0+U+Up+Phb5jYrla0yRzByzQMyPzmHi OoZ1LlFwmoGrEEDnoErf2/7m25RJdh4ZIQTKZB7rbAwTMwwyxMtML4oqv2cPTmZi xuYMagEIl5kQxbKHrISeVsihdMSt2nNVj3OtYWiyRyJ0ObI3KixxzIGmd9zJPCnb XLsbCKFfPeUiWbKRHHKvEoEs93/ujPvyJWMq9XV9QUdDlyelmcL5e3oJaSZxigoL eZswVLW83mzFwY9+ZnyQnEJPEekZF+hyTfWJVc7MqskG3OXMTwIDAQABo4IEEjCC BA4wHQYDVR0OBBYEFGhwuwGhpy8ZCHvx3CDm0I8FzgksMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdk MTcxZC03OTE3LTRhMjEtYjZjYy04YTI3MDM5ODAyYTUvZjg2YjZmMjctZGU5Ni0z YWVkLWIwMDAtMGYyNjFjY2MwMWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmY3ZDE3MWQtNzkxNy00YTIxLWI2 Y2MtOGEyNzAzOTgwMmE1L2JmN2QxNzFkLTc5MTctNGEyMS1iNmNjLThhMjcwMzk4 MDJhNS5jcmwwHwYDVR0jBBgwFoAUrfa9+KlGwDdFy21HxWzSxxXvijswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdkMTcxZC03OTE3LTRhMjEtYjZjYy04YTI3 MDM5ODAyYTUuY2VyMIHbBggrBgEFBQcBBwEB/wSByzCByDCBrwQCAAEwgagDBARB tTADBARCB3ADBAVCPGADBAJCVRADBAZC28ADBARDzqADBAVD1uADBAREQqADBAVF GwADBAZFqYADBAVMCMADBAVhS6ADBAJomXwDBAJo9FQDBAKi2xQDBAOi3yADBAKi 97ADBAKsUwQDBAPAIvgDBAPAXMgDBALHHkQDBALHYHQDBALHc/QDBAPHf3gDBALM D1QDBATNzCADBAPQSKADBALYCuwwFAQCAAIwDgMFBCYAdAADBQAmB/iYMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAHwmWb2qI+yg7Ae5gqQ6f9VRXTTSf8MbStFZ5a0TpO5tU3oEqX3SFDQtBGr2 1e9q5ZMJtxyExnAjYBNYhsNnanVrfHsREd4Zhf5df7k3eZJ9THbrhSUk+SjeustW 1cm/if49nWPVik/6oGRVy8qypipViaP6lWiI4TmrKPdUxU1AhSPODwJumC+bZleO GQRMExSuhZ9cR5D1j5Q4dBb14RbuPhnvgr4NzSKD33xCMDuniaKstEZ0zKyAeJ/P QcrrnSfklTpTsGAsCPTbkFAfNJ8ZSNNws2k8GWFx970LAFFtK73mYUyCteodHXvn BuuTIfeUQoglAYIt2vyx9lzKNns= -----END CERTIFICATE-----Generated at Mon Oct 26 11:02:49 2026 by rpki-client