$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa File: bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa (raw, json) Hash identifier: 3QMtFoB3NJk/FHfrQMaVk/y40urGm8uwrk5W6k90Mbo= Subject key identifier: BC:0F:76:C9:AF:04:23:C8:AA:40:30:E5:C3:11:25:53:3C:FB:E2:4D Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584F34826E58F5B8A9838C9F1A80 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 10397 IP address blocks: 162.244.96.0/24 maxlen: 24 162.244.97.0/24 maxlen: 24 162.244.98.0/24 maxlen: 24 162.244.99.0/24 maxlen: 24 162.244.100.0/24 maxlen: 24 162.244.101.0/24 maxlen: 24 204.16.48.0/24 maxlen: 24 208.67.12.0/24 maxlen: 24 208.67.13.0/24 maxlen: 24 208.67.14.0/24 maxlen: 24 208.67.15.0/24 maxlen: 24 208.85.128.0/24 maxlen: 24 208.85.133.0/24 maxlen: 24 208.85.134.0/24 maxlen: 24 208.85.135.0/24 maxlen: 24 209.42.166.0/24 maxlen: 24 209.42.191.0/24 maxlen: 24 209.209.128.0/21 maxlen: 21 209.209.139.0/24 maxlen: 24 209.209.140.0/22 maxlen: 22 209.209.141.0/24 maxlen: 24 209.209.144.0/20 maxlen: 20 209.209.160.0/20 maxlen: 20 209.209.163.0/24 maxlen: 24 209.209.167.0/24 maxlen: 24 209.209.176.0/22 maxlen: 22 209.209.180.0/23 maxlen: 23 209.209.181.0/24 maxlen: 24 209.209.183.0/24 maxlen: 24 209.209.184.0/24 maxlen: 24 209.209.186.0/23 maxlen: 23 209.209.189.0/24 maxlen: 24 209.209.190.0/23 maxlen: 23 209.250.32.0/19 maxlen: 19 2607:b600::/48 maxlen: 48 2607:b600:1::/48 maxlen: 48 2607:b600:2::/48 maxlen: 48 2607:b600:4::/48 maxlen: 48 2607:b600:5::/48 maxlen: 48 2607:b600:6::/48 maxlen: 48 2607:b600:8::/48 maxlen: 48 2607:b600:10::/48 maxlen: 48 2607:b600:12::/48 maxlen: 48 2607:b600:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:6e:58:f5:b8:a9:83:8c:9f:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=1a802ea6-51d1-4d75-8c7c-625741cb8b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:aa:92:1e:a7:b4:eb:c5:9d:05:81:79:38:a3: dd:b9:5b:2f:ba:53:d0:82:22:87:f5:66:d9:20:0e: 1a:a7:a6:f1:20:e2:74:2a:10:0d:ac:f5:04:19:1d: 82:5d:17:01:71:cd:91:c7:24:98:6c:04:c2:2d:04: 55:f0:4c:51:c9:8d:60:8e:90:d9:a6:4e:53:94:d0: 2a:d7:2e:bd:c4:d8:87:84:0a:24:7b:22:03:d8:4d: dc:d5:d6:a4:30:7a:da:79:9b:5d:10:a8:01:7c:2a: 90:f4:cc:17:ff:a4:72:74:93:f7:fb:0f:40:e2:80: 7b:1f:08:8a:95:95:49:b0:69:54:f6:09:f9:53:06: 99:8a:23:ce:f3:da:a4:0f:cb:b1:9d:ba:5b:3f:67: 1c:cf:de:07:e5:68:57:25:89:db:7a:9d:85:50:9f: 65:9f:46:16:3d:aa:b1:b4:57:3c:30:c3:15:13:b2: 48:65:25:f7:8c:de:4c:4f:3c:ed:fe:de:2a:2e:a6: 4f:aa:29:17:86:bd:49:df:80:f0:21:b0:25:44:1b: 09:aa:d1:80:1b:8c:49:d8:3d:af:89:99:3d:66:39: f6:d2:0d:b0:ab:15:4c:fd:24:be:d3:82:0c:a4:40: 4b:30:d5:d0:2e:b7:58:fb:68:ae:5b:9f:b2:ea:f3: 10:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0F:76:C9:AF:04:23:C8:AA:40:30:E5:C3:11:25:53:3C:FB:E2:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 162.244.96.0-162.244.101.255 204.16.48.0/24 208.67.12.0/22 208.85.128.0/24 208.85.133.0-208.85.135.255 209.42.166.0/24 209.42.191.0/24 209.209.128.0/21 209.209.139.0-209.209.181.255 209.209.183.0-209.209.184.255 209.209.186.0/23 209.209.189.0-209.209.191.255 209.250.32.0/19 IPv6: 2607:b600::-2607:b600:2:ffff:ffff:ffff:ffff:ffff 2607:b600:4::-2607:b600:6:ffff:ffff:ffff:ffff:ffff 2607:b600:8::/48 2607:b600:10::/48 2607:b600:12::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:02:de:3e:f2:46:24:03:08:17:78:08:ae:6c:cb:3b:c0:89: 79:d1:c1:f4:75:96:96:90:1c:2a:b0:69:47:db:59:86:d5:9b: ed:76:47:be:ea:77:90:ae:aa:22:cf:c2:47:43:fb:c7:af:08: 15:ae:90:3b:ac:61:e7:e8:0e:48:08:a9:25:82:2d:72:d7:5b: 15:65:48:5a:a6:97:35:6a:55:51:6e:9b:27:8c:d6:ef:d8:25: 78:f4:a2:bf:bf:7d:5d:ac:08:33:80:91:ac:e7:1d:c8:62:48: d4:a1:ea:7f:27:39:df:c1:05:aa:46:d5:c2:55:38:93:ca:7d: 0f:56:6c:c9:2c:13:a7:fc:db:c7:c8:34:c7:56:83:64:ee:8f: 91:7b:a0:d7:60:a1:53:78:49:35:c6:97:2d:ac:e0:44:9e:e9: 5f:5c:fe:a1:61:45:88:7e:f4:75:da:7f:78:8d:22:c3:87:a5: 90:76:30:ed:95:71:66:0d:66:14:56:e4:0e:64:80:95:4f:7e: da:aa:ac:1c:73:a2:46:e0:1d:03:c1:e1:60:ea:ae:2f:b1:a4: 3a:2c:7f:9f:44:ad:aa:f9:7f:a4:7f:72:f2:13:06:d5:83:a4: d7:80:88:62:d6:87:3b:d4:c5:61:4a:77:66:5b:58:64:1c:7b: a8:65:83:d0 -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWE80gm5Y9bipg4yfGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk MWE4MDJlYTYtNTFkMS00ZDc1LThjN2MtNjI1NzQxY2I4YjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqqSHqe068WdBYF5OKPduVsvulPQgiKH9WbZ IA4ap6bxIOJ0KhANrPUEGR2CXRcBcc2RxySYbATCLQRV8ExRyY1gjpDZpk5TlNAq 1y69xNiHhAokeyID2E3c1dakMHraeZtdEKgBfCqQ9MwX/6RydJP3+w9A4oB7HwiK lZVJsGlU9gn5UwaZiiPO89qkD8uxnbpbP2ccz94H5WhXJYnbep2FUJ9ln0YWPaqx tFc8MMMVE7JIZSX3jN5MTzzt/t4qLqZPqikXhr1J34DwIbAlRBsJqtGAG4xJ2D2v iZk9Zjn20g2wqxVM/SS+04IMpEBLMNXQLrdY+2iuW5+y6vMQcQIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFLwPdsmvBCPIqkAw5cMRJVM8++JNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvYmQ4N2I0MmEtY2I3Yy0z OWM0LThmZGEtM2YzYThmYzY5MzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMIHZBggrBgEFBQcBBwEB/wSByTCBxjB8BAIAATB2MAwDBAWi 9GADBAGi9GQDBADMEDADBALQQwwDBADQVYAwDAMEANBVhQMEA9BVgAMEANEqpgME ANEqvwMEA9HRgDAMAwQA0dGLAwQB0dG0MAwDBADR0bcDBADR0bgDBAHR0bowDAME ANHRvQMEBtHRgAMEBdH6IDBGBAIAAjBAMA8DBAEmB7YDBwAmB7YAAAIwEgMHAiYH tgAABAMHACYHtgAABgMHACYHtgAACAMHACYHtgAAEAMHASYHtgAAEjBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQBNAt4+8kYkAwgXeAiubMs7wIl50cH0dZaWkBwqsGlH21mG1Zvtdke+6neQrqoi z8JHQ/vHrwgVrpA7rGHn6A5ICKklgi1y11sVZUhappc1alVRbpsnjNbv2CV49KK/ v31drAgzgJGs5x3IYkjUoep/JznfwQWqRtXCVTiTyn0PVmzJLBOn/NvHyDTHVoNk 7o+Re6DXYKFTeEk1xpctrOBEnulfXP6hYUWIfvR12n94jSLDh6WQdjDtlXFmDWYU VuQOZICVT37aqqwcc6JG4B0DweFg6q4vsaQ6LH+fRK2q+X+kf3LyEwbVg6TXgIhi 1oc71MVhSndmW1hkHHuoZYPQ -----END CERTIFICATE-----Generated at Sat Sep 26 13:38:32 2026 by rpki-client