$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/1016c453-3950-3157-8238-b1385cd19da0.roa File: 1016c453-3950-3157-8238-b1385cd19da0.roa (raw, json) Hash identifier: ovrY7wvyoZsvDX65GLYEKE6VwB9apueRqffgWlEUtJg= Subject key identifier: BC:AF:49:FC:FE:22:14:63:9F:32:E7:87:09:6A:67:3F:12:C9:44:0A Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584F9A68729D3C2E5BD09D6A2240 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/1016c453-3950-3157-8238-b1385cd19da0.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 32128 IP address blocks: 158.106.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 31 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:72:9d:3c:2e:5b:d0:9d:6a:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=5ec3e257-000f-4e28-b201-933cc01401a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:47:92:0f:a3:05:f4:a5:b1:8b:c6:2f:80:a4: 3e:96:b7:1f:7b:b1:66:ed:e1:40:9c:58:b0:9c:3b: 02:5e:29:cd:68:79:5c:c8:8d:b9:44:ad:e1:3b:a3: 80:8a:15:e6:9d:7d:32:07:13:e7:ca:12:e2:65:2d: e3:26:b3:b3:e8:c8:87:c0:2d:46:f1:93:b8:b1:5d: c9:8b:41:df:11:3a:37:30:10:06:91:79:32:21:98: ca:23:44:1b:02:b9:90:eb:55:b1:2c:84:aa:0c:19: 60:36:da:65:b7:92:64:30:8b:6e:9e:56:c3:35:63: dc:d9:51:3e:74:fd:00:0f:6e:48:59:19:12:5b:ce: 4f:89:da:0b:85:64:0b:ee:68:79:bb:b4:51:24:b3: c4:be:55:b6:7f:a6:03:1e:26:2a:2f:b5:06:88:f9: 22:5e:50:e6:e5:07:1b:07:0d:16:4c:9d:4f:f7:c6: 3f:44:9d:68:d8:14:42:45:f8:02:c6:d7:25:98:90: 4e:16:56:ad:89:3a:fd:56:ce:ee:7e:8d:bf:8e:ad: e3:36:eb:e5:6d:9f:c7:ba:09:48:d0:66:a8:3e:68: d8:02:ea:ad:8f:6d:1b:82:ba:e5:14:8c:6b:b9:4e: 73:77:97:48:25:c9:d9:65:33:37:2a:75:22:28:c2: c4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AF:49:FC:FE:22:14:63:9F:32:E7:87:09:6A:67:3F:12:C9:44:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/1016c453-3950-3157-8238-b1385cd19da0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 158.106.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:48:5f:3e:0d:9c:ff:af:8f:29:4f:1d:4e:ab:83:63:75:0f: e8:c5:d5:a0:e4:ab:8d:bc:16:6d:32:04:da:a7:7e:59:84:a9: c5:dd:86:e5:d8:8f:06:a9:82:63:6b:f7:03:aa:93:d5:b1:62: 93:12:a2:a4:82:e1:8c:70:bb:de:f0:b7:bb:26:af:d6:58:e9: 8b:ea:9d:b6:cb:26:60:f1:01:8a:7f:27:17:8f:f7:9b:00:9d: 44:63:7b:bd:c8:78:72:af:3e:b0:d4:71:63:4a:49:a8:88:d4: bc:fd:de:37:f6:92:e6:67:eb:b5:85:fc:c9:59:d8:89:cd:eb: 1b:23:83:a4:f8:44:da:2a:b4:75:34:86:58:cd:3e:d8:a3:54: 86:54:83:84:60:d2:bc:fb:71:a6:09:07:41:6c:ed:b1:2e:04: 82:4d:b3:8f:de:b1:21:8f:2b:b3:d1:61:cf:06:c0:02:fd:af: 08:2a:9e:2e:72:21:b9:fb:88:6c:6c:54:65:80:fa:db:eb:fe: 60:86:08:ff:85:8d:94:4d:a7:57:b0:2f:b0:c6:3a:54:44:18: a8:44:12:fd:bc:73:aa:2f:da:b9:61:9b:1c:8c:6b:33:28:69: b8:2d:b7:5c:bd:42:aa:01:d0:fc:98:f9:ab:7e:3c:47:28:00: 25:3a:75:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaHKdPC5b0J1qIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk NWVjM2UyNTctMDAwZi00ZTI4LWIyMDEtOTMzY2MwMTQwMWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUeSD6MF9KWxi8YvgKQ+lrcfe7Fm7eFAnFiw nDsCXinNaHlcyI25RK3hO6OAihXmnX0yBxPnyhLiZS3jJrOz6MiHwC1G8ZO4sV3J i0HfETo3MBAGkXkyIZjKI0QbArmQ61WxLISqDBlgNtplt5JkMItunlbDNWPc2VE+ dP0AD25IWRkSW85PidoLhWQL7mh5u7RRJLPEvlW2f6YDHiYqL7UGiPkiXlDm5Qcb Bw0WTJ1P98Y/RJ1o2BRCRfgCxtclmJBOFlatiTr9Vs7ufo2/jq3jNuvlbZ/HuglI 0GaoPmjYAuqtj20bgrrlFIxruU5zd5dIJcnZZTM3KnUiKMLERwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyvSfz+IhRjnzLnhwlqZz8SyUQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvMTAxNmM0NTMtMzk1MC0z MTU3LTgyMzgtYjEzODVjZDE5ZGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnmrOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9IXz4NnP+vjylPHU6rg2N1D+jF1aDkq428Fm0yBNqnflmEqcXdhuXY jwapgmNr9wOqk9WxYpMSoqSC4Yxwu97wt7smr9ZY6YvqnbbLJmDxAYp/JxeP95sA nURje73IeHKvPrDUcWNKSaiI1Lz93jf2kuZn67WF/MlZ2InN6xsjg6T4RNoqtHU0 hljNPtijVIZUg4Rg0rz7caYJB0Fs7bEuBIJNs4/esSGPK7PRYc8GwAL9rwgqni5y Ibn7iGxsVGWA+tvr/mCGCP+FjZRNp1ewL7DGOlREGKhEEv28c6ov2rlhmxyMazMo abgtt1y9QqoB0PyY+at+PEcoACU6db0= -----END CERTIFICATE-----Generated at Thu Oct 29 22:45:11 2026 by rpki-client