$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/28cc181f-7bbe-3348-96d4-658069e7572a.roa File: 28cc181f-7bbe-3348-96d4-658069e7572a.roa (raw, json) Hash identifier: Mp+8BWoOMe90RDjMLMMAYAy8q2cthLODlAT01TnSIH8= Subject key identifier: 23:3E:F6:EE:75:26:B7:AE:28:75:BD:3A:D6:F4:4B:EF:0B:93:E0:48 Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584F4976C580ECDA16FA318489C0 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/28cc181f-7bbe-3348-96d4-658069e7572a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 46450 IP address blocks: 142.154.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:c5:80:ec:da:16:fa:31:84:89:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4a195df9-72c0-403c-94aa-3c25761e7df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8f:2a:5e:31:87:08:30:f1:a8:75:94:a0:2f: a5:e1:00:a1:7f:00:93:1f:97:e4:a0:b6:21:2e:60: 89:c7:9d:88:af:91:fc:d0:b6:51:16:48:ba:dc:01: 8b:73:f7:a6:f5:17:42:6a:b8:55:67:5f:df:ac:0d: e0:ea:f2:9d:bb:3d:e2:db:b4:b9:71:fb:e0:74:79: b0:bc:a7:34:5f:08:4b:e3:ad:14:a1:d1:e6:58:70: 60:bc:c2:17:e5:ec:9a:32:88:fa:39:96:41:02:b9: ea:62:fe:de:43:8a:2c:6f:dc:61:05:af:20:90:06: 77:3d:46:11:ff:62:9d:45:fc:2f:29:53:10:1a:f4: 1a:01:b4:f9:80:11:29:0f:9c:8b:e6:16:f5:42:e2: 6d:64:22:c9:6d:2f:d0:1a:da:46:87:6d:22:24:74: 60:94:ae:06:9f:86:a4:86:5e:7c:bc:cc:37:e9:df: 32:9e:e3:76:db:9f:d9:48:d4:a4:04:55:f7:09:3a: 80:a9:b1:f6:f4:9e:cc:ba:7e:08:e3:ad:22:71:6e: 0e:ab:4e:2e:cf:a8:48:25:41:7b:b6:52:01:b5:5e: bb:09:54:87:8d:76:e1:e6:b3:5f:43:f8:17:28:18: 24:a8:7a:44:ce:34:ff:cf:bf:c2:79:d0:c6:64:46: 6a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3E:F6:EE:75:26:B7:AE:28:75:BD:3A:D6:F4:4B:EF:0B:93:E0:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/28cc181f-7bbe-3348-96d4-658069e7572a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 142.154.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:79:76:e6:a3:2b:75:26:ef:3e:c4:4a:b7:be:0b:28:d6:86: 21:5d:cf:4a:b2:05:bf:be:2c:ba:c8:a5:14:27:6b:63:da:a0: 24:89:5f:e1:1f:ba:9e:b8:dc:c7:83:82:7d:cf:2a:4d:bd:88: e4:3e:d0:04:33:86:78:8a:f9:19:bf:4c:c7:20:19:a8:60:38: d7:10:5d:46:a8:04:4d:72:d1:51:41:1a:01:10:a7:f3:88:23: bc:22:de:d8:2b:c4:cc:d0:0a:52:ce:dd:62:da:21:5f:92:ec: 32:da:91:b8:91:c3:29:cb:0c:48:41:bc:fe:b8:7c:50:fa:ad: 96:08:34:88:32:b3:27:21:7c:10:b0:6b:44:e9:73:9b:e1:43: 04:97:62:33:e8:2c:6f:f4:e8:f4:20:2d:9d:b3:17:18:ff:91: f4:f7:4a:a7:03:4b:d9:d7:ed:32:f1:00:ef:18:d6:93:d5:75: 28:09:f8:e1:0d:a6:26:cd:b2:d1:ee:8f:ea:13:cb:b7:c5:9f: 98:50:b0:86:93:29:34:61:1f:1e:3f:b0:10:3f:2b:ee:59:47: f6:2e:12:65:16:a9:00:32:ac:f1:68:e3:c9:b1:63:6c:22:53: 14:25:f1:d6:75:ad:bb:ef:5d:0c:7c:78:41:0c:e5:5f:5b:fd: 21:91:72:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdsWA7NoW+jGEicAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGExOTVkZjktNzJjMC00MDNjLTk0YWEtM2MyNTc2MWU3ZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI8qXjGHCDDxqHWUoC+l4QChfwCTH5fkoLYh LmCJx52Ir5H80LZRFki63AGLc/em9RdCarhVZ1/frA3g6vKduz3i27S5cfvgdHmw vKc0XwhL460UodHmWHBgvMIX5eyaMoj6OZZBArnqYv7eQ4osb9xhBa8gkAZ3PUYR /2KdRfwvKVMQGvQaAbT5gBEpD5yL5hb1QuJtZCLJbS/QGtpGh20iJHRglK4Gn4ak hl58vMw36d8ynuN225/ZSNSkBFX3CTqAqbH29J7Mun4I460icW4Oq04uz6hIJUF7 tlIBtV67CVSHjXbh5rNfQ/gXKBgkqHpEzjT/z7/CedDGZEZqqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCM+9u51JreuKHW9Otb0S+8Lk+BIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvMjhjYzE4MWYtN2JiZS0z MzQ4LTk2ZDQtNjU4MDY5ZTc1NzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjprAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACx5duajK3Um7z7ESre+CyjWhiFdz0qyBb++LLrIpRQna2PaoCSJX+Ef up643MeDgn3PKk29iOQ+0AQzhniK+Rm/TMcgGahgONcQXUaoBE1y0VFBGgEQp/OI I7wi3tgrxMzQClLO3WLaIV+S7DLakbiRwynLDEhBvP64fFD6rZYINIgysychfBCw a0Tpc5vhQwSXYjPoLG/06PQgLZ2zFxj/kfT3SqcDS9nX7TLxAO8Y1pPVdSgJ+OEN pibNstHuj+oTy7fFn5hQsIaTKTRhHx4/sBA/K+5ZR/YuEmUWqQAyrPFo48mxY2wi UxQl8dZ1rbvvXQx8eEEM5V9b/SGRcsg= -----END CERTIFICATE-----Generated at Thu Oct 29 09:12:19 2026 by rpki-client