$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/be6ca291-2d27-3d55-bd3a-edcae2d27349.roa File: be6ca291-2d27-3d55-bd3a-edcae2d27349.roa (raw, json) Hash identifier: bVR0AmWLJDDJPeUsiOAXBjNeSrinlG5WhhlL4vRyjXA= Subject key identifier: D6:29:BD:03:3A:A1:54:67:0E:6F:45:F2:16:71:97:12:95:9E:1E:56 Certificate issuer: /CN=d131ffaa-85f2-4bd5-8961-9dc8adf15b8b Certificate serial: 010D0C9F4328584ECD371BC1D376AE7507AA5A00 Authority key identifier: 9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/be6ca291-2d27-3d55-bd3a-edcae2d27349.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 16509 IP address blocks: 66.206.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:1b:c1:d3:76:ae:75:07:aa:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d131ffaa-85f2-4bd5-8961-9dc8adf15b8b Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=fac859c3-e310-4cc6-b815-efd0c336df17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:69:75:87:2d:32:29:61:e3:7a:43:2f:fb:7b: b0:2a:6f:27:d7:aa:48:83:4e:54:0f:54:a9:c9:fd: c6:a5:7f:56:7b:d1:e4:08:d8:94:77:40:82:d3:f9: 42:1b:2f:7f:2e:87:18:4c:2b:9e:12:45:77:9f:aa: 37:5d:9c:bd:f8:69:1c:93:f0:8f:4c:2c:6c:26:c1: f2:83:c5:17:25:6f:23:39:a4:7c:77:e2:99:e2:ff: c3:df:d0:ba:4a:80:56:b8:14:c2:a0:74:f3:f8:90: 7a:37:5c:fa:22:23:62:7f:d4:fb:36:79:a9:75:4f: 16:d7:7b:1c:14:98:f0:c8:1b:1e:ba:72:8a:82:6e: 1b:e1:3b:24:4e:e6:b0:68:41:43:50:f3:5f:f2:c0: 48:2c:2c:1e:06:3d:4b:fe:eb:2c:df:68:0b:94:bd: 19:de:4c:b2:0b:50:e2:c6:c1:d6:7c:8c:90:a9:78: 80:c4:7a:f6:e7:52:12:d6:46:a1:9f:97:9a:aa:98: ea:3e:b6:2a:c0:62:4a:c5:1f:c9:4c:23:49:21:26: 39:61:3b:b4:3e:3c:fa:ef:6e:03:81:2b:e6:4b:57: 41:8d:f8:ca:62:ac:d1:20:d8:38:14:a2:df:d3:7f: 8f:58:8e:8f:4d:78:d8:f8:fa:d2:5d:7b:73:a7:26: c0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:29:BD:03:3A:A1:54:67:0E:6F:45:F2:16:71:97:12:95:9E:1E:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/be6ca291-2d27-3d55-bd3a-edcae2d27349.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.crl X509v3 Authority Key Identifier: keyid:9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer sbgp-ipAddrBlock: critical IPv4: 66.206.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:6d:a1:97:99:83:57:b8:64:5a:94:e2:4d:ff:60:9e:69:1a: 71:01:a6:1f:00:78:63:bb:b8:db:d1:83:b6:69:b4:7c:33:9a: c5:11:67:66:96:fb:81:ac:ba:6c:02:b0:bc:d4:64:53:4f:c3: b8:ba:32:66:da:ed:aa:d1:d2:41:a5:b3:1b:44:90:c0:c2:82: d3:11:fb:f9:a7:2d:f1:3b:61:0e:6d:53:e4:23:7c:44:f3:b3: 31:b1:f7:0c:06:38:87:0c:07:dc:ea:30:c1:ad:91:2f:59:4e: 34:b0:96:2f:fb:cf:d6:ff:15:a2:e9:40:28:36:30:8e:bc:f0: ff:0d:13:66:b1:88:64:29:0c:15:2c:b4:48:5e:79:b8:16:35: f1:7c:d3:0e:f3:d3:5c:8f:df:75:79:b7:60:a0:17:58:ed:d6: 21:41:73:33:3d:7d:ed:f7:69:1b:9a:f6:52:2e:46:bb:63:d0: a3:b5:36:79:12:61:a6:28:f7:d6:1c:36:30:f0:1c:1d:33:51: 86:4d:b0:a6:b8:9b:84:c9:d3:ae:f8:52:43:f2:b2:df:4c:0a: 59:4d:72:26:8c:a1:4c:ad:af:c5:20:b6:1f:9a:f6:ba:5f:92: 1b:54:9f:00:67:2b:6a:39:2b:e3:59:0c:5c:7e:92:a9:6e:56: d5:1a:31:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNxvB03audQeqWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDEzMWZmYWEtODVmMi00YmQ1LTg5NjEtOWRjOGFkZjE1 YjhiMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk ZmFjODU5YzMtZTMxMC00Y2M2LWI4MTUtZWZkMGMzMzZkZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGl1hy0yKWHjekMv+3uwKm8n16pIg05UD1Sp yf3GpX9We9HkCNiUd0CC0/lCGy9/LocYTCueEkV3n6o3XZy9+Gkck/CPTCxsJsHy g8UXJW8jOaR8d+KZ4v/D39C6SoBWuBTCoHTz+JB6N1z6IiNif9T7NnmpdU8W13sc FJjwyBseunKKgm4b4TskTuawaEFDUPNf8sBILCweBj1L/uss32gLlL0Z3kyyC1Di xsHWfIyQqXiAxHr251IS1kahn5eaqpjqPrYqwGJKxR/JTCNJISY5YTu0Pjz6724D gSvmS1dBjfjKYqzRINg4FKLf03+PWI6PTXjY+PrSXXtzpybAnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYpvQM6oVRnDm9F8hZxlxKVnh5WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMTMx ZmZhYS04NWYyLTRiZDUtODk2MS05ZGM4YWRmMTViOGIvYmU2Y2EyOTEtMmQyNy0z ZDU1LWJkM2EtZWRjYWUyZDI3MzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDEzMWZmYWEtODVmMi00YmQ1LTg5 NjEtOWRjOGFkZjE1YjhiL2QxMzFmZmFhLTg1ZjItNGJkNS04OTYxLTlkYzhhZGYx NWI4Yi5jcmwwHwYDVR0jBBgwFoAUnxc+xPRbxWcgps2BFQ3CS2MpTvUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMTMxZmZhYS04NWYyLTRiZDUtODk2MS05ZGM4 YWRmMTViOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQs6tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZtoZeZg1e4ZFqU4k3/YJ5pGnEBph8AeGO7uNvRg7ZptHwzmsURZ2aW +4GsumwCsLzUZFNPw7i6Mmba7arR0kGlsxtEkMDCgtMR+/mnLfE7YQ5tU+QjfETz szGx9wwGOIcMB9zqMMGtkS9ZTjSwli/7z9b/FaLpQCg2MI688P8NE2axiGQpDBUs tEheebgWNfF80w7z01yP33V5t2CgF1jt1iFBczM9fe33aRua9lIuRrtj0KO1NnkS YaYo99YcNjDwHB0zUYZNsKa4m4TJ0674UkPyst9MCllNciaMoUytr8Ugth+a9rpf khtUnwBnK2o5K+NZDFx+kqluVtUaMVE= -----END CERTIFICATE-----Generated at Fri Aug 21 00:18:33 2026 by rpki-client