$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/206642a2-d7e1-3098-9a4d-25ac023b6972.roa File: 206642a2-d7e1-3098-9a4d-25ac023b6972.roa (raw, json) Hash identifier: 6EqsHuE0sIIMr3mD7Gi6s/ys0T2nfifI0k+rioC73J0= Subject key identifier: BD:9F:0A:81:B9:77:E0:51:FB:6B:3C:2C:13:65:07:E0:82:E7:EE:C9 Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584F4976C67084705368FC18D3C0 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/206642a2-d7e1-3098-9a4d-25ac023b6972.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 46450 IP address blocks: 192.81.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 31 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:c6:70:84:70:53:68:fc:18:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3a4824df-9c6b-460e-b24c-0bf12964ba83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a5:e3:25:b6:cb:0b:4d:39:4e:4f:33:50:81: dd:40:ab:20:a3:e5:50:04:8d:38:a9:ab:bb:56:59: 2a:c6:27:7e:48:17:4f:d5:30:df:38:72:74:40:c9: 63:bc:ee:59:e2:9d:12:0e:8c:27:27:6b:7e:fe:cc: fa:dc:10:74:77:f1:59:8d:15:da:3b:db:f9:b2:b0: da:45:e5:76:b8:a4:35:b8:85:05:05:f8:21:0a:18: 3b:82:6a:55:1f:4f:1e:9b:ab:e7:d9:87:4d:81:0d: 8d:4a:ec:04:a0:2c:94:0d:d4:f7:02:a9:70:13:3d: da:bc:01:c3:6b:c1:ee:53:45:b4:61:a5:ac:ea:fc: 31:dc:62:d9:09:70:54:28:99:73:ca:e0:73:af:5e: 44:41:72:ce:ac:00:43:b9:1b:8e:70:36:a4:97:7b: 65:2c:58:09:d8:09:c8:e2:8e:63:35:ad:a1:c1:37: 9b:f4:73:cc:e5:f9:2a:62:7e:d2:13:02:7a:51:1e: 1f:9c:1c:df:dd:ca:18:e2:70:00:75:38:d1:b8:1c: 3a:6c:f9:6d:2e:fd:e9:0e:97:3d:52:d5:49:06:86: 66:dd:20:7a:da:0a:4e:64:1a:ff:7a:bb:4f:91:dc: 40:1e:df:a8:67:58:fc:4d:ba:0e:09:e9:bb:47:f0: 1c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:9F:0A:81:B9:77:E0:51:FB:6B:3C:2C:13:65:07:E0:82:E7:EE:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/206642a2-d7e1-3098-9a4d-25ac023b6972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 192.81.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:72:db:89:4a:90:cc:a9:93:33:38:55:00:41:95:97:b3:3b: 01:75:90:4a:d6:45:1b:a4:1f:ce:c4:d7:23:77:58:44:0f:2e: 16:f8:d9:5e:f1:23:16:7a:68:e6:27:47:79:b4:39:db:2b:02: 9f:7c:32:7b:1b:cf:fe:17:59:77:0d:f4:2b:fc:89:af:47:dd: 4b:42:8b:2c:fd:87:39:e2:5a:ce:b6:4e:77:3f:cb:fc:47:b1: 50:85:bf:7b:e0:ef:30:f4:68:d3:ba:7b:7e:42:2e:54:92:d6: 85:a2:eb:8e:ec:73:b0:9f:e3:a2:6e:8a:0b:f5:4c:36:d0:bd: c2:e2:e0:59:0e:ff:81:4c:73:61:28:31:86:f5:4d:60:24:e2: bc:fc:2c:74:b3:3d:68:de:2e:67:35:2f:8b:01:f7:fb:ba:89: ac:c4:ac:df:21:36:1e:9b:34:f3:ef:2e:0c:7f:66:ce:15:dd: 30:95:6f:93:f8:46:32:d0:8c:fc:b0:7f:12:03:5f:1f:9f:5f: 66:7b:71:00:05:d0:e1:3a:9d:28:5d:e5:25:1f:df:4a:3e:9f: c1:c5:cf:3d:29:ea:38:6f:7b:d9:14:8c:8a:ba:98:6e:a6:47: 3d:76:6b:dd:1a:a5:c3:ef:3a:16:44:97:4d:5e:3b:83:fc:b0: b9:f6:fd:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdsZwhHBTaPwY08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2E0ODI0ZGYtOWM2Yi00NjBlLWIyNGMtMGJmMTI5NjRiYTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6XjJbbLC005Tk8zUIHdQKsgo+VQBI04qau7 Vlkqxid+SBdP1TDfOHJ0QMljvO5Z4p0SDownJ2t+/sz63BB0d/FZjRXaO9v5srDa ReV2uKQ1uIUFBfghChg7gmpVH08em6vn2YdNgQ2NSuwEoCyUDdT3AqlwEz3avAHD a8HuU0W0YaWs6vwx3GLZCXBUKJlzyuBzr15EQXLOrABDuRuOcDakl3tlLFgJ2AnI 4o5jNa2hwTeb9HPM5fkqYn7SEwJ6UR4fnBzf3coY4nAAdTjRuBw6bPltLv3pDpc9 UtVJBoZm3SB62gpOZBr/ertPkdxAHt+oZ1j8TboOCem7R/Ac3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2fCoG5d+BR+2s8LBNlB+CC5+7JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvMjA2NjQyYTItZDdlMS0z MDk4LTlhNGQtMjVhYzAyM2I2OTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwFGIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZy24lKkMypkzM4VQBBlZezOwF1kErWRRukH87E1yN3WEQPLhb42V7x IxZ6aOYnR3m0OdsrAp98Mnsbz/4XWXcN9Cv8ia9H3UtCiyz9hzniWs62Tnc/y/xH sVCFv3vg7zD0aNO6e35CLlSS1oWi647sc7Cf46Juigv1TDbQvcLi4FkO/4FMc2Eo MYb1TWAk4rz8LHSzPWjeLmc1L4sB9/u6iazErN8hNh6bNPPvLgx/Zs4V3TCVb5P4 RjLQjPywfxIDXx+fX2Z7cQAF0OE6nShd5SUf30o+n8HFzz0p6jhve9kUjIq6mG6m Rz12a90apcPvOhZEl01eO4P8sLn2/XE= -----END CERTIFICATE-----Generated at Thu Oct 29 16:46:51 2026 by rpki-client