$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa File: bc669675-4f09-3100-852b-f89b8e4fa0ee.roa (raw, json) Hash identifier: nXp1IO6vV2SEmPosZg6Fwpr4slpIbEQlmmAf0RbFM04= Subject key identifier: A8:E1:DB:0B:F5:77:ED:DD:4B:C9:84:B2:38:BD:14:05:D8:07:F2:F8 Certificate issuer: /CN=da61f786-99c2-4468-90f7-0b35abd168e5 Certificate serial: 010D0C9F4328584F374D1CA9DB7710E5544A3890 Authority key identifier: 9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 54650 IP address blocks: 206.166.208.0/24 maxlen: 24 206.166.209.0/24 maxlen: 24 206.166.210.0/24 maxlen: 24 206.166.211.0/24 maxlen: 24 206.188.200.0/24 maxlen: 24 206.188.201.0/24 maxlen: 24 209.172.14.0/24 maxlen: 24 209.172.15.0/24 maxlen: 24 2604:bb40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:1c:a9:db:77:10:e5:54:4a:38:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da61f786-99c2-4468-90f7-0b35abd168e5 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=582e11a1-a3f4-4f29-8814-750e50ff8fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ac:15:a1:31:71:cd:73:4b:ed:48:33:5e:f6: 78:14:1c:48:48:4d:8e:e1:41:2e:0a:6b:b8:99:2c: d7:dc:47:27:c3:6e:ec:d9:cb:5b:b1:50:50:18:94: c2:a7:d5:00:ae:5b:f1:c7:88:d5:30:f4:e9:16:0e: 07:88:4e:12:b4:23:0b:50:70:0e:06:11:80:4b:a8: 61:b6:eb:5d:98:6e:7a:c7:dc:fe:8e:3a:96:e5:d1: d0:4c:ba:35:90:fe:07:b8:d1:1d:5e:7c:a2:8b:d9: 6c:3d:5e:5c:95:84:fe:e7:59:56:4c:05:12:82:24: 46:77:1a:bf:6b:c9:83:da:6c:fa:dc:3c:3b:af:b9: 3e:ee:83:08:89:6b:de:62:37:76:83:c3:07:d8:cf: b8:77:25:94:94:23:fa:a9:6b:7a:90:a0:73:4d:28: f5:62:49:0f:e2:95:57:4d:e0:7f:43:22:69:f2:b3: 18:74:e8:36:81:10:55:e1:51:01:40:cd:77:c0:6a: 04:e9:c9:8a:35:ec:0e:1f:39:08:50:ca:17:1e:22: e3:3e:39:f3:bc:6c:03:c8:d2:7c:2f:70:75:80:cc: 87:c4:58:ea:8d:ea:c0:2f:ba:cd:d1:d7:86:50:a9: fe:db:3b:e0:98:cd:58:4e:f2:9b:2a:af:75:40:45: 0b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E1:DB:0B:F5:77:ED:DD:4B:C9:84:B2:38:BD:14:05:D8:07:F2:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl X509v3 Authority Key Identifier: keyid:9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer sbgp-ipAddrBlock: critical IPv4: 206.166.208.0/22 206.188.200.0/23 209.172.14.0/23 IPv6: 2604:bb40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b0:d5:ae:91:22:f0:92:5b:83:e8:d5:55:f3:06:3a:2b:c1: 8c:be:f8:e6:f9:c7:9f:42:62:77:3f:ab:91:0d:d5:48:d7:c2: 65:6e:8c:f7:61:73:f1:11:4d:7a:8e:43:26:15:5c:f2:94:dd: c6:70:e6:e0:e9:90:34:13:e3:b2:75:73:b5:f0:98:33:09:8d: d5:74:2f:18:ba:b9:f0:69:37:e6:18:fc:f0:b0:ec:08:cb:0f: 24:bd:cd:a2:64:a9:0f:ec:d1:f7:fe:c4:63:61:0e:d0:43:b0: e7:39:36:8a:fa:7c:15:82:4c:83:fe:4f:5b:52:77:d5:2b:61: 1c:23:81:c8:09:e1:33:eb:a2:7a:76:83:03:7d:25:cd:46:80: c2:d7:0b:aa:c5:10:db:c8:fb:8f:06:17:4e:ce:34:d1:fa:67: 98:79:36:99:e3:14:8c:b6:46:62:0d:01:44:db:19:7a:44:b5: f3:b5:e4:4f:8d:25:13:77:79:04:5e:2a:b9:63:ed:f3:1e:f0: 25:b8:37:e6:38:79:c2:13:cb:67:71:05:fa:f5:f7:89:8d:4b: 5f:31:90:77:65:57:55:27:4a:99:c9:0b:b9:d2:e9:84:2c:2e: 08:b6:13:b9:b6:bc:62:85:57:e4:18:39:7d:2c:ee:f5:29:6a: 47:d5:34:68 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE83TRyp23cQ5VRKOJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2MWY3ODYtOTljMi00NDY4LTkwZjctMGIzNWFiZDE2 OGU1MB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk NTgyZTExYTEtYTNmNC00ZjI5LTg4MTQtNzUwZTUwZmY4ZmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqwVoTFxzXNL7UgzXvZ4FBxISE2O4UEuCmu4 mSzX3Ecnw27s2ctbsVBQGJTCp9UArlvxx4jVMPTpFg4HiE4StCMLUHAOBhGAS6hh tutdmG56x9z+jjqW5dHQTLo1kP4HuNEdXnyii9lsPV5clYT+51lWTAUSgiRGdxq/ a8mD2mz63Dw7r7k+7oMIiWveYjd2g8MH2M+4dyWUlCP6qWt6kKBzTSj1YkkP4pVX TeB/QyJp8rMYdOg2gRBV4VEBQM13wGoE6cmKNewOHzkIUMoXHiLjPjnzvGwDyNJ8 L3B1gMyHxFjqjerAL7rN0deGUKn+2zvgmM1YTvKbKq91QEULQwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFKjh2wv1d+3dS8mEsji9FAXYB/L4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYTYx Zjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1YWJkMTY4ZTUvYmM2Njk2NzUtNGYwOS0z MTAwLTg1MmItZjg5YjhlNGZhMGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGE2MWY3ODYtOTljMi00NDY4LTkw ZjctMGIzNWFiZDE2OGU1L2RhNjFmNzg2LTk5YzItNDQ2OC05MGY3LTBiMzVhYmQx NjhlNS5jcmwwHwYDVR0jBBgwFoAUm7JW3Y6M5BMCH6y6TevAUqLlBVkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYTYxZjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1 YWJkMTY4ZTUuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCzqbQAwQB zrzIAwQB0awOMA0EAgACMAcDBQAmBLtAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABGw1a6RIvCSW4Po1VXz BjorwYy++Ob5x59CYnc/q5EN1UjXwmVujPdhc/ERTXqOQyYVXPKU3cZw5uDpkDQT 47J1c7XwmDMJjdV0Lxi6ufBpN+YY/PCw7AjLDyS9zaJkqQ/s0ff+xGNhDtBDsOc5 Nor6fBWCTIP+T1tSd9UrYRwjgcgJ4TPronp2gwN9Jc1GgMLXC6rFENvI+48GF07O NNH6Z5h5NpnjFIy2RmINAUTbGXpEtfO15E+NJRN3eQReKrlj7fMe8CW4N+Y4ecIT y2dxBfr194mNS18xkHdlV1UnSpnJC7nS6YQsLgi2E7m2vGKFV+QYOX0s7vUpakfV NGg= -----END CERTIFICATE-----Generated at Mon Oct 12 23:16:53 2026 by rpki-client