$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/f86b6f27-de96-3aed-b000-0f261ccc01d7.roa File: f86b6f27-de96-3aed-b000-0f261ccc01d7.roa (raw, json) Hash identifier: IbOjM8DaeImlQ48/ZPsHXUtxkqscRlD0j++jy28H3ho= Subject key identifier: 32:2A:1B:DB:46:6B:68:27:D4:92:A5:73:43:03:27:CC:8E:F1:BD:00 Certificate issuer: /CN=bf7d171d-7917-4a21-b6cc-8a27039802a5 Certificate serial: 010D0C9F4328584BA93264D8B5357FC56B81B480 Authority key identifier: AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/f86b6f27-de96-3aed-b000-0f261ccc01d7.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13415 IP address blocks: 65.181.48.0/20 maxlen: 20 66.7.112.0/20 maxlen: 20 66.7.116.0/24 maxlen: 24 66.60.96.0/19 maxlen: 19 66.85.16.0/22 maxlen: 22 66.219.192.0/18 maxlen: 18 66.219.200.0/23 maxlen: 23 66.219.224.0/23 maxlen: 23 66.219.248.0/23 maxlen: 23 67.206.160.0/20 maxlen: 21 67.214.224.0/19 maxlen: 19 68.66.160.0/20 maxlen: 20 69.27.0.0/19 maxlen: 19 69.169.128.0/18 maxlen: 18 76.8.192.0/19 maxlen: 19 97.75.160.0/19 maxlen: 19 104.153.124.0/22 maxlen: 22 104.244.84.0/22 maxlen: 22 162.219.20.0/22 maxlen: 22 162.223.32.0/21 maxlen: 21 162.247.176.0/22 maxlen: 22 172.83.4.0/22 maxlen: 22 192.34.248.0/21 maxlen: 21 192.92.200.0/21 maxlen: 21 199.30.68.0/22 maxlen: 22 199.96.116.0/22 maxlen: 22 199.115.244.0/22 maxlen: 22 199.127.120.0/21 maxlen: 21 204.15.84.0/22 maxlen: 22 205.204.32.0/20 maxlen: 20 208.72.160.0/21 maxlen: 21 216.10.236.0/22 maxlen: 22 2600:7400::/28 maxlen: 28 2600:7401::/32 maxlen: 32 2600:740b:2::/48 maxlen: 48 2607:f898::/32 maxlen: 32 2607:f898:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:64:d8:b5:35:7f:c5:6b:81:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7d171d-7917-4a21-b6cc-8a27039802a5 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=cb2dfda8-f9d9-451d-a811-c02e7dae579b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3f:f3:35:b5:35:2d:1a:e7:0b:4c:3b:6f:b3: d0:1d:4b:53:7e:a6:ce:07:93:13:85:53:95:b0:3f: f0:af:2e:ce:91:76:84:6a:2a:fa:5f:57:8a:28:35: 74:14:95:a6:3d:18:91:b2:f3:11:4a:b1:51:3d:62: 81:16:fc:f9:75:8a:78:3c:20:52:58:63:af:72:67: df:9e:4b:a2:ca:ea:96:bc:78:7e:5e:12:d0:f2:96: b7:cf:f2:f9:0f:0c:95:69:26:4b:ea:c1:17:a4:05: e9:95:8f:21:82:75:e1:e0:bc:20:b5:f9:19:51:ec: 23:18:1a:f8:55:39:6a:db:19:de:ae:b6:77:0c:46: bb:cf:58:74:f8:bf:f3:9a:1f:96:a4:32:11:5f:25: ea:b3:f4:ad:d7:01:81:5b:e7:cc:b6:27:1d:7f:31: ca:cd:c8:43:a7:6f:f0:8d:f6:54:18:fe:64:44:75: 8a:4a:41:ac:77:72:72:ce:3e:95:f5:9e:f1:d2:24: 18:a0:97:ac:39:64:ba:68:3f:00:f7:39:9e:e8:65: 78:fb:a6:10:38:80:ac:44:73:a1:d5:ca:c5:f0:f0: b2:8b:a9:9d:76:30:fc:d6:78:e6:74:d0:45:c2:9f: 19:4e:87:ff:f4:c6:c9:cf:c6:24:50:43:b8:d3:23: 40:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2A:1B:DB:46:6B:68:27:D4:92:A5:73:43:03:27:CC:8E:F1:BD:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/f86b6f27-de96-3aed-b000-0f261ccc01d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl X509v3 Authority Key Identifier: keyid:AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer sbgp-ipAddrBlock: critical IPv4: 65.181.48.0/20 66.7.112.0/20 66.60.96.0/19 66.85.16.0/22 66.219.192.0/18 67.206.160.0/20 67.214.224.0/19 68.66.160.0/20 69.27.0.0/19 69.169.128.0/18 76.8.192.0/19 97.75.160.0/19 104.153.124.0/22 104.244.84.0/22 162.219.20.0/22 162.223.32.0/21 162.247.176.0/22 172.83.4.0/22 192.34.248.0/21 192.92.200.0/21 199.30.68.0/22 199.96.116.0/22 199.115.244.0/22 199.127.120.0/21 204.15.84.0/22 205.204.32.0/20 208.72.160.0/21 216.10.236.0/22 IPv6: 2600:7400::/28 2607:f898::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:e8:88:b9:b1:eb:46:a7:dc:4f:b2:98:0c:18:17:8e:b1:1b: 4d:42:e6:99:f2:f5:84:00:b4:5c:43:79:ad:42:63:76:8b:e3: e3:4e:36:df:9a:44:68:ee:53:0c:3d:29:24:38:3d:ea:40:d4: b5:89:09:73:2f:28:4b:74:7e:29:b5:27:06:9c:f1:27:57:bf: 10:a0:8f:87:4f:42:dc:e8:78:7c:00:8d:1f:15:4a:fd:a7:62: d4:1d:b0:c9:e1:9c:33:83:27:1f:04:4e:10:81:6e:4e:85:27: 98:1d:b3:19:35:6b:a1:0d:54:a1:a7:e3:cf:bf:99:07:98:b6: 37:69:e3:72:1b:9d:f9:1b:42:a1:7d:1e:3a:fd:dd:42:58:3a: b8:85:e6:64:95:01:f8:e4:55:20:b2:0c:99:e2:30:7f:6d:35: 27:54:b4:12:fa:55:3f:08:93:84:c6:d5:1b:85:10:d2:77:a3: cc:38:e8:0a:15:e3:4f:84:39:a7:2d:64:59:77:3d:ba:cc:b8: b1:91:9c:d0:41:57:0d:c0:1d:0d:de:68:88:d1:d2:7a:14:ce: 3b:90:f8:06:40:37:c1:82:34:1c:93:89:6c:9f:13:65:9d:c0: 75:32:b7:b4:b4:a1:34:ca:cf:15:1d:6f:40:4a:4a:99:c1:ae: 45:0a:3a:65 -----BEGIN CERTIFICATE----- MIIHADCCBeigAwIBAgIUAQ0Mn0MoWEupMmTYtTV/xWuBtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3ZDE3MWQtNzkxNy00YTIxLWI2Y2MtOGEyNzAzOTgw MmE1MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk Y2IyZGZkYTgtZjlkOS00NTFkLWE4MTEtYzAyZTdkYWU1NzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj/zNbU1LRrnC0w7b7PQHUtTfqbOB5MThVOV sD/wry7OkXaEair6X1eKKDV0FJWmPRiRsvMRSrFRPWKBFvz5dYp4PCBSWGOvcmff nkuiyuqWvHh+XhLQ8pa3z/L5DwyVaSZL6sEXpAXplY8hgnXh4LwgtfkZUewjGBr4 VTlq2xnerrZ3DEa7z1h0+L/zmh+WpDIRXyXqs/St1wGBW+fMticdfzHKzchDp2/w jfZUGP5kRHWKSkGsd3Jyzj6V9Z7x0iQYoJesOWS6aD8A9zme6GV4+6YQOICsRHOh 1crF8PCyi6mddjD81njmdNBFwp8ZTof/9MbJz8YkUEO40yNASwIDAQABo4IEEjCC BA4wHQYDVR0OBBYEFDIqG9tGa2gn1JKlc0MDJ8yO8b0AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdk MTcxZC03OTE3LTRhMjEtYjZjYy04YTI3MDM5ODAyYTUvZjg2YjZmMjctZGU5Ni0z YWVkLWIwMDAtMGYyNjFjY2MwMWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmY3ZDE3MWQtNzkxNy00YTIxLWI2 Y2MtOGEyNzAzOTgwMmE1L2JmN2QxNzFkLTc5MTctNGEyMS1iNmNjLThhMjcwMzk4 MDJhNS5jcmwwHwYDVR0jBBgwFoAUrfa9+KlGwDdFy21HxWzSxxXvijswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdkMTcxZC03OTE3LTRhMjEtYjZjYy04YTI3 MDM5ODAyYTUuY2VyMIHbBggrBgEFBQcBBwEB/wSByzCByDCBrwQCAAEwgagDBARB tTADBARCB3ADBAVCPGADBAJCVRADBAZC28ADBARDzqADBAVD1uADBAREQqADBAVF GwADBAZFqYADBAVMCMADBAVhS6ADBAJomXwDBAJo9FQDBAKi2xQDBAOi3yADBAKi 97ADBAKsUwQDBAPAIvgDBAPAXMgDBALHHkQDBALHYHQDBALHc/QDBAPHf3gDBALM D1QDBATNzCADBAPQSKADBALYCuwwFAQCAAIwDgMFBCYAdAADBQAmB/iYMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBADzoiLmx60an3E+ymAwYF46xG01C5pny9YQAtFxDea1CY3aL4+NONt+aRGju Uww9KSQ4PepA1LWJCXMvKEt0fim1Jwac8SdXvxCgj4dPQtzoeHwAjR8VSv2nYtQd sMnhnDODJx8EThCBbk6FJ5gdsxk1a6ENVKGn48+/mQeYtjdp43IbnfkbQqF9Hjr9 3UJYOriF5mSVAfjkVSCyDJniMH9tNSdUtBL6VT8Ik4TG1RuFENJ3o8w46AoV40+E OactZFl3PbrMuLGRnNBBVw3AHQ3eaIjR0noUzjuQ+AZAN8GCNByTiWyfE2WdwHUy t7S0oTTKzxUdb0BKSpnBrkUKOmU= -----END CERTIFICATE-----Generated at Wed Nov 5 01:58:22 2025 by rpki-client