$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/bc5d5900-8a56-34f9-99ae-d183d5df9b7a.roa File: bc5d5900-8a56-34f9-99ae-d183d5df9b7a.roa (raw, json) Hash identifier: t7MCgsVr5M7dsYCbx4VkIPwYM9alERu50jbjSNqmleA= Subject key identifier: 1D:C3:18:85:63:0B:1D:9B:83:96:68:B1:98:B8:71:80:5F:CB:30:4A Certificate issuer: /CN=a278da28-82b3-48fe-bc76-7859a82f5651 Certificate serial: 010D0C9F4328584E2C39AE2CCE4CE87E80E51B00 Authority key identifier: F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/bc5d5900-8a56-34f9-99ae-d183d5df9b7a.roa Signing time: Sun 14 Jun 2026 21:00:12 +0000 ROA not before: Sun 14 Jun 2026 21:00:12 +0000 ROA not after: Sat 12 Sep 2026 21:00:12 +0000 asID: 215748 IP address blocks: 209.209.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2c:39:ae:2c:ce:4c:e8:7e:80:e5:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a278da28-82b3-48fe-bc76-7859a82f5651 Validity Not Before: Jun 14 21:00:12 2026 GMT Not After : Sep 12 21:00:12 2026 GMT Subject: CN=5c6a23b9-1bd7-469b-bf41-f048209806c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:21:ac:89:b0:ec:a3:74:d2:63:64:2f:09:1d: 75:5f:a8:2a:61:3a:ae:17:54:ac:f1:df:6f:a3:ff: de:e5:95:ca:90:00:e7:b9:e1:c4:a3:7e:aa:b1:94: e7:ad:33:8a:9c:0a:23:dd:69:e6:d9:f8:aa:81:fc: a8:aa:49:92:b2:c5:b1:20:08:13:f8:43:58:1f:b3: 17:11:b4:8f:c2:90:d7:64:67:53:d8:34:93:dd:bc: b0:6e:48:b2:84:b1:6c:b3:f1:77:ce:de:95:12:6e: 34:04:9a:88:88:72:bc:b2:9f:e8:4a:de:4c:28:de: 8b:76:96:e3:5a:6e:1f:85:7d:9b:a2:d9:65:49:8b: 76:f8:7d:5b:01:5b:07:59:ac:02:f4:d8:14:e7:29: 64:37:7b:1b:53:20:20:16:d2:cc:b2:a2:d8:45:82: ca:fd:d5:74:66:ef:6c:68:87:7c:21:06:4a:b4:45: 20:06:c8:f0:72:48:30:8c:ca:68:5b:86:2a:39:42: 6f:7e:34:99:30:7a:91:c4:4c:b8:c9:1d:a1:f7:29: 97:72:af:df:dd:4c:08:b7:43:62:a0:9f:9c:c0:6f: d3:9d:51:76:c1:be:f0:53:e3:23:07:b3:c8:43:08: 86:84:dc:32:03:36:f2:f6:ef:d9:b4:3e:41:ff:90: c2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C3:18:85:63:0B:1D:9B:83:96:68:B1:98:B8:71:80:5F:CB:30:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/bc5d5900-8a56-34f9-99ae-d183d5df9b7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl X509v3 Authority Key Identifier: keyid:F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer sbgp-ipAddrBlock: critical IPv4: 209.209.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:83:f8:6f:d2:ed:48:d0:4c:ab:88:4e:59:ae:13:ec:de:4c: 4c:c4:f4:9c:c7:02:31:1e:63:2a:0e:93:87:55:d0:cc:fa:07: 38:be:54:32:85:2a:4f:9d:aa:0f:6d:40:a3:d8:09:10:87:a5: 57:50:63:0f:ca:eb:16:95:17:f9:8b:9b:2e:e3:39:1a:4d:f0: ed:c8:d0:ba:41:57:0a:f5:19:f8:28:c9:6c:e5:de:98:9a:57: 66:ff:0a:ee:50:6c:75:96:a6:bb:f0:e8:47:4f:32:60:11:a1: 80:bd:eb:27:19:ef:6d:9f:80:da:5e:c7:6f:ee:05:30:42:d2: 78:bb:1c:5a:09:46:35:17:2c:c5:b5:ad:7d:0a:73:dc:b9:6f: c6:c9:b2:f7:0e:1a:ad:57:b5:4e:fe:71:ee:ab:0d:ac:1b:cf: a6:d5:60:c2:92:fe:23:c2:ea:b8:1c:b1:bf:e9:96:f4:69:bb: 24:d4:1f:93:d2:1a:8e:a0:e6:fd:d2:46:b1:19:14:dc:c3:3c: 73:f9:12:c3:58:63:96:a7:86:01:41:40:e5:39:61:99:d8:ed: 20:0a:5f:c5:6e:09:f4:43:b7:f8:57:a9:94:6e:ca:6b:db:5f: 37:b1:25:4e:f8:ca:47:2a:45:9f:e0:28:21:fc:d7:fc:d6:bb: 14:3e:a4:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4sOa4szkzofoDlGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI3OGRhMjgtODJiMy00OGZlLWJjNzYtNzg1OWE4MmY1 NjUxMB4XDTI2MDYxNDIxMDAxMloXDTI2MDkxMjIxMDAxMlowLzEtMCsGA1UEAxMk NWM2YTIzYjktMWJkNy00NjliLWJmNDEtZjA0ODIwOTgwNmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSGsibDso3TSY2QvCR11X6gqYTquF1Ss8d9v o//e5ZXKkADnueHEo36qsZTnrTOKnAoj3Wnm2fiqgfyoqkmSssWxIAgT+ENYH7MX EbSPwpDXZGdT2DST3bywbkiyhLFss/F3zt6VEm40BJqIiHK8sp/oSt5MKN6Ldpbj Wm4fhX2botllSYt2+H1bAVsHWawC9NgU5ylkN3sbUyAgFtLMsqLYRYLK/dV0Zu9s aId8IQZKtEUgBsjwckgwjMpoW4YqOUJvfjSZMHqRxEy4yR2h9ymXcq/f3UwIt0Ni oJ+cwG/TnVF2wb7wU+MjB7PIQwiGhNwyAzby9u/ZtD5B/5DC/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3DGIVjCx2bg5ZosZi4cYBfyzBKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMjc4 ZGEyOC04MmIzLTQ4ZmUtYmM3Ni03ODU5YTgyZjU2NTEvYmM1ZDU5MDAtOGE1Ni0z NGY5LTk5YWUtZDE4M2Q1ZGY5YjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTI3OGRhMjgtODJiMy00OGZlLWJj NzYtNzg1OWE4MmY1NjUxL2EyNzhkYTI4LTgyYjMtNDhmZS1iYzc2LTc4NTlhODJm NTY1MS5jcmwwHwYDVR0jBBgwFoAU9ipjPl1+gQsD5F/PfySWru+jWRkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMjc4ZGEyOC04MmIzLTQ4ZmUtYmM3Ni03ODU5 YTgyZjU2NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dFWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiD+G/S7UjQTKuITlmuE+zeTEzE9JzHAjEeYyoOk4dV0Mz6Bzi+VDKF Kk+dqg9tQKPYCRCHpVdQYw/K6xaVF/mLmy7jORpN8O3I0LpBVwr1GfgoyWzl3pia V2b/Cu5QbHWWprvw6EdPMmARoYC96ycZ722fgNpex2/uBTBC0ni7HFoJRjUXLMW1 rX0Kc9y5b8bJsvcOGq1XtU7+ce6rDawbz6bVYMKS/iPC6rgcsb/plvRpuyTUH5PS Go6g5v3SRrEZFNzDPHP5EsNYY5anhgFBQOU5YZnY7SAKX8VuCfRDt/hXqZRuymvb XzexJU74ykcqRZ/gKCH81/zWuxQ+pI8= -----END CERTIFICATE-----Generated at Tue Jul 21 12:35:57 2026 by rpki-client