$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/0443ed63-bdb0-3397-9726-ca6b2191fabc.roa File: 0443ed63-bdb0-3397-9726-ca6b2191fabc.roa (raw, json) Hash identifier: y/oBrXrbQk0+gvZ3rWbuYtMxUJSKX5I5GTn/QkizQUg= Subject key identifier: C5:4B:DA:8A:E8:68:7B:73:24:02:BC:FF:AC:BC:28:66:E1:5C:38:AB Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584F8F3DF1D9497FAF956D7608C0 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/0443ed63-bdb0-3397-9726-ca6b2191fabc.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 46450 IP address blocks: 208.64.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:f1:d9:49:7f:af:95:6d:76:08:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=c3dd5f53-8205-468b-9598-d22603cfcecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:20:12:22:61:c4:a2:54:6f:e8:af:07:e9:3b: 55:30:9f:d5:b6:22:21:c9:0e:e9:21:70:e5:aa:a9: 7a:b9:dc:a9:2a:47:12:d7:20:25:37:8a:0f:ea:b2: 77:10:94:9c:d9:f6:79:b4:87:e1:23:31:e0:ef:ea: 46:f6:76:de:8c:3e:8f:a8:7d:47:4e:ed:99:f5:0b: e7:f3:88:62:65:d4:c6:79:d8:73:40:57:12:e6:fc: 11:e3:0e:18:e1:8d:90:8b:fd:6a:6e:5d:58:ae:61: 75:3a:e5:9e:48:67:ec:0d:c8:68:e7:ed:cc:98:5e: a1:ac:1b:ad:8e:f3:e0:35:83:0c:23:1f:ac:88:16: 53:e5:55:03:83:70:a2:6e:fe:77:d5:8f:68:10:d3: 06:fb:5e:2f:77:f8:3d:c5:84:3a:9b:a7:07:93:c2: 9d:90:36:e7:01:35:b1:63:bd:72:94:86:ba:8c:55: 8e:9f:e1:29:47:e4:7b:40:16:e9:32:fd:2c:f8:cf: 0f:26:1e:99:f5:56:5a:a6:e3:83:07:10:5a:af:aa: b5:63:21:16:3c:49:1f:e7:cc:4a:a8:9a:33:81:06: 99:1a:12:7a:fe:32:51:4e:a5:aa:7c:c8:bc:ef:0a: b2:33:82:7b:97:2d:ae:b4:35:40:6d:9f:47:5e:ab: 4b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4B:DA:8A:E8:68:7B:73:24:02:BC:FF:AC:BC:28:66:E1:5C:38:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/0443ed63-bdb0-3397-9726-ca6b2191fabc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 208.64.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:93:a4:d5:17:de:7a:75:90:8b:96:e0:be:f6:8d:f1:38:5f: 72:18:00:11:92:57:1b:f4:92:9f:47:fc:f8:a4:b9:43:e1:21: eb:ab:0e:f0:cf:a6:ad:0f:aa:cd:ea:43:d5:91:c7:ac:82:60: eb:f5:9e:56:1c:5b:54:62:2b:3a:d0:2d:16:20:74:34:97:c3: 95:e1:c9:c2:d1:b6:15:69:0f:dd:a0:6b:fb:0e:82:82:39:c3: 7e:4a:1f:70:41:22:90:a5:09:f4:db:ff:d6:7a:4b:5f:42:11: 39:55:35:0f:f3:c4:2e:32:f2:32:8f:17:a3:75:b4:77:be:5a: da:75:6e:70:83:f8:b4:51:b8:12:53:b9:66:a7:76:cb:37:68: 9d:2b:a7:c3:c6:cb:7c:76:8e:e4:75:35:b3:2c:dd:05:b1:9f: fa:b6:18:d3:46:08:c0:3d:c9:97:7f:77:85:e9:d9:11:27:3c: d4:41:a9:a0:21:7e:60:f2:ef:0d:96:cf:7a:c7:bc:2f:65:55: 2f:69:2f:d5:73:3c:f1:6d:0b:e0:53:b7:35:13:05:c6:cf:d2: bd:eb:5d:26:a9:71:b6:f2:5c:f0:79:0e:67:9a:87:99:60:d5: 5f:95:ae:c7:2b:cb:8c:81:78:fa:62:37:9e:b7:31:43:1d:03: 8e:9d:c0:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPfHZSX+vlW12CMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk YzNkZDVmNTMtODIwNS00NjhiLTk1OTgtZDIyNjAzY2ZjZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCASImHEolRv6K8H6TtVMJ/VtiIhyQ7pIXDl qql6udypKkcS1yAlN4oP6rJ3EJSc2fZ5tIfhIzHg7+pG9nbejD6PqH1HTu2Z9Qvn 84hiZdTGedhzQFcS5vwR4w4Y4Y2Qi/1qbl1YrmF1OuWeSGfsDcho5+3MmF6hrBut jvPgNYMMIx+siBZT5VUDg3Cibv531Y9oENMG+14vd/g9xYQ6m6cHk8KdkDbnATWx Y71ylIa6jFWOn+EpR+R7QBbpMv0s+M8PJh6Z9VZapuODBxBar6q1YyEWPEkf58xK qJozgQaZGhJ6/jJRTqWqfMi87wqyM4J7ly2utDVAbZ9HXqtL6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVL2oroaHtzJAK8/6y8KGbhXDirMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvMDQ0M2VkNjMtYmRiMC0z Mzk3LTk3MjYtY2E2YjIxOTFmYWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EAYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALyTpNUX3np1kIuW4L72jfE4X3IYABGSVxv0kp9H/PikuUPhIeurDvDP pq0Pqs3qQ9WRx6yCYOv1nlYcW1RiKzrQLRYgdDSXw5XhycLRthVpD92ga/sOgoI5 w35KH3BBIpClCfTb/9Z6S19CETlVNQ/zxC4y8jKPF6N1tHe+Wtp1bnCD+LRRuBJT uWandss3aJ0rp8PGy3x2juR1NbMs3QWxn/q2GNNGCMA9yZd/d4Xp2REnPNRBqaAh fmDy7w2Wz3rHvC9lVS9pL9VzPPFtC+BTtzUTBcbP0r3rXSapcbbyXPB5Dmeah5lg 1V+Vrscry4yBePpiN563MUMdA46dwAs= -----END CERTIFICATE-----Generated at Thu Oct 29 08:09:42 2026 by rpki-client