$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983/3b94ce38-1210-31dc-85a6-3b4bd5558b9b.roa File: 3b94ce38-1210-31dc-85a6-3b4bd5558b9b.roa (raw, json) Hash identifier: o5pV/pBTWHGSR/k155ufV3Km0AMPUasaaz14lJMaEbU= Subject key identifier: 17:60:96:D5:AE:BC:E3:79:BE:20:DA:85:A9:BF:99:D3:BE:32:C8:A7 Certificate issuer: /CN=bfab1614-ca9b-48b0-baa4-45a61bd07983 Certificate serial: 010D0C9F4328584E4AEF6A3BDA77E9B66874B480 Authority key identifier: 62:B0:C1:4B:1E:0A:D8:47:73:43:94:8F:C4:57:EF:60:68:40:6F:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983/3b94ce38-1210-31dc-85a6-3b4bd5558b9b.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 397635 IP address blocks: 146.225.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983/bfab1614-ca9b-48b0-baa4-45a61bd07983.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983/bfab1614-ca9b-48b0-baa4-45a61bd07983.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:6a:3b:da:77:e9:b6:68:74:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfab1614-ca9b-48b0-baa4-45a61bd07983 Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=944034d3-80a6-4fc0-879e-d980b7b044b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1e:a7:75:27:f2:78:60:38:62:93:23:a5:28: 94:e0:26:74:22:85:1a:e6:1c:32:b1:59:d8:04:63: 1d:59:1e:48:45:6f:9d:66:a0:8f:5b:50:29:f1:b0: 3e:59:83:97:05:16:1f:8a:b1:11:ea:1d:87:96:8b: c2:1d:53:d2:fc:4d:21:6c:f4:81:5b:b2:54:b4:c7: 1d:45:da:3c:aa:4c:65:5a:70:cd:15:9a:16:38:8c: 89:74:01:d6:65:a5:5c:3d:04:15:c9:2a:f9:1a:ff: 9c:a9:3f:0a:a2:cf:c9:b0:ab:7b:e9:f7:de:01:87: 40:fa:c6:3c:a4:12:ac:c0:d6:ca:72:a4:9c:02:11: a9:31:cc:18:4a:ca:67:b3:11:10:49:98:f9:ae:70: a5:2b:4a:88:4a:04:dd:cb:dc:e3:ed:85:c7:85:41: d4:f0:d1:ad:78:53:e9:fa:a5:43:26:8e:65:d9:11: 73:ec:1a:3f:30:ca:13:a2:03:12:13:f4:47:67:be: bb:dd:7d:00:b3:5e:03:34:40:48:2f:82:d9:a0:b2: 6b:32:4f:87:f6:a9:bb:11:ad:31:c7:ea:a7:d5:23: 10:eb:7b:0a:8a:e9:93:8d:c8:6e:55:89:9e:b9:9c: 4f:0c:a8:25:51:89:cf:c8:4a:7b:46:6c:9a:57:02: 83:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:60:96:D5:AE:BC:E3:79:BE:20:DA:85:A9:BF:99:D3:BE:32:C8:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983/3b94ce38-1210-31dc-85a6-3b4bd5558b9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983/bfab1614-ca9b-48b0-baa4-45a61bd07983.crl X509v3 Authority Key Identifier: keyid:62:B0:C1:4B:1E:0A:D8:47:73:43:94:8F:C4:57:EF:60:68:40:6F:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983.cer sbgp-ipAddrBlock: critical IPv4: 146.225.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:d0:e7:d7:aa:03:7c:50:80:a2:4a:aa:36:38:77:68:40:1b: ab:dc:be:28:2d:fa:60:0a:87:7f:02:27:6b:62:ec:54:f3:eb: 35:94:2a:68:17:07:41:b1:15:cf:bf:05:57:e2:ce:bd:59:e1: e0:62:a0:85:dd:2d:38:58:2a:cf:07:4f:13:18:bc:0e:9b:4c: e9:63:87:2a:99:8f:37:34:f6:58:5d:e9:9f:00:28:5c:08:06: ef:e4:be:96:e4:88:25:6a:f3:1a:6b:60:14:e1:0a:9a:4e:2a: 19:d5:e6:c1:4b:13:ae:f0:a1:2d:aa:41:17:9f:c4:bf:08:b2: 64:c5:f6:0a:b7:35:58:cb:17:91:a4:7e:49:51:67:50:22:24: ed:bc:2f:b1:df:2f:3c:4b:00:6e:c1:04:84:c2:8b:7a:66:14: fd:d7:5a:c0:19:51:fa:5b:b7:19:9f:cc:4a:bd:44:66:2c:a1: e4:46:d6:d8:2d:97:45:21:df:8d:e6:00:a1:e0:03:34:63:06: df:90:35:f1:51:67:58:f4:a8:ca:5c:b4:93:db:59:d7:08:64: 6c:29:66:2a:bd:e6:4f:63:1c:37:76:fa:54:e4:d2:38:37:5b: 83:3c:f3:e3:25:02:f0:cf:22:f5:ff:7d:a9:5b:14:80:09:f8: 7e:82:03:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K72o72nfptmh0tIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZhYjE2MTQtY2E5Yi00OGIwLWJhYTQtNDVhNjFiZDA3 OTgzMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk OTQ0MDM0ZDMtODBhNi00ZmMwLTg3OWUtZDk4MGI3YjA0NGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx6ndSfyeGA4YpMjpSiU4CZ0IoUa5hwysVnY BGMdWR5IRW+dZqCPW1Ap8bA+WYOXBRYfirER6h2HlovCHVPS/E0hbPSBW7JUtMcd Rdo8qkxlWnDNFZoWOIyJdAHWZaVcPQQVySr5Gv+cqT8Kos/JsKt76ffeAYdA+sY8 pBKswNbKcqScAhGpMcwYSspnsxEQSZj5rnClK0qISgTdy9zj7YXHhUHU8NGteFPp +qVDJo5l2RFz7Bo/MMoTogMSE/RHZ7673X0As14DNEBIL4LZoLJrMk+H9qm7Ea0x x+qn1SMQ63sKiumTjchuVYmeuZxPDKglUYnPyEp7RmyaVwKDLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdgltWuvON5viDaham/mdO+MsinMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iZmFi MTYxNC1jYTliLTQ4YjAtYmFhNC00NWE2MWJkMDc5ODMvM2I5NGNlMzgtMTIxMC0z MWRjLTg1YTYtM2I0YmQ1NTU4YjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmZhYjE2MTQtY2E5Yi00OGIwLWJh YTQtNDVhNjFiZDA3OTgzL2JmYWIxNjE0LWNhOWItNDhiMC1iYWE0LTQ1YTYxYmQw Nzk4My5jcmwwHwYDVR0jBBgwFoAUYrDBSx4K2EdzQ5SPxFfvYGhAb1swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iZmFiMTYxNC1jYTliLTQ4YjAtYmFhNC00NWE2 MWJkMDc5ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkuEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTQ59eqA3xQgKJKqjY4d2hAG6vcvigt+mAKh38CJ2ti7FTz6zWUKmgX B0GxFc+/BVfizr1Z4eBioIXdLThYKs8HTxMYvA6bTOljhyqZjzc09lhd6Z8AKFwI Bu/kvpbkiCVq8xprYBThCppOKhnV5sFLE67woS2qQRefxL8IsmTF9gq3NVjLF5Gk fklRZ1AiJO28L7HfLzxLAG7BBITCi3pmFP3XWsAZUfpbtxmfzEq9RGYsoeRG1tgt l0Uh343mAKHgAzRjBt+QNfFRZ1j0qMpctJPbWdcIZGwpZiq95k9jHDd2+lTk0jg3 W4M88+MlAvDPIvX/falbFIAJ+H6CA6Q= -----END CERTIFICATE-----Generated at Tue Jul 21 15:46:05 2026 by rpki-client