$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/91574ab1-ab04-3e09-a6a3-9ce142d46e27.roa File: 91574ab1-ab04-3e09-a6a3-9ce142d46e27.roa (raw, json) Hash identifier: Aj5U8x4tb0byQS0Nx+yZd59Ao6uoXSKhd4ePBsN/dmk= Subject key identifier: C8:50:1B:DD:27:E8:20:DC:17:D3:A9:7D:AD:82:0A:7D:31:A5:AC:C2 Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584F8F3DF206D856C4365341CF00 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/91574ab1-ab04-3e09-a6a3-9ce142d46e27.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 46450 IP address blocks: 209.178.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 31 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:f2:06:d8:56:c4:36:53:41:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=53b1e9f6-2f70-48c7-8dad-1113bb751db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c9:0f:ee:42:83:ca:01:b7:4a:ce:93:4f:02: d0:43:c3:7a:1b:d7:9e:6d:d2:2a:3c:42:13:66:98: 81:02:34:c0:ef:19:2a:c9:53:5e:e1:ac:86:fc:a9: ba:98:cf:55:34:f6:05:ef:b4:cb:14:8e:10:a4:cd: 36:09:08:ca:be:4d:80:ff:2c:b7:eb:86:b0:92:8c: d6:78:c4:ae:ad:f0:97:d2:a8:df:31:00:f7:9c:b7: a8:8c:e0:26:23:9a:70:14:a7:77:29:7e:ca:6d:80: 90:37:d3:50:86:38:9b:d7:14:0e:2b:62:b2:5b:cf: cd:d2:cb:4b:83:77:08:1f:fa:f1:d8:7e:00:08:1f: c8:17:ce:40:12:8f:88:10:bb:e8:95:ad:da:bc:79: 3b:4c:2e:c0:08:ff:d4:ef:13:c3:ad:ec:7e:34:c4: b2:21:07:5c:46:06:ac:a6:b8:ab:83:f8:66:51:bb: 55:3d:0f:ea:a1:09:fd:f2:ca:25:a9:83:52:c1:b4: 23:b0:16:60:a4:e6:d0:d6:fa:a3:d0:99:f9:1a:78: 44:7c:fe:c7:2f:96:3d:36:68:0a:2c:27:f6:b5:ab: 1e:c5:8a:e2:ad:f0:eb:a6:7e:d0:2d:06:5e:ef:43: 31:ca:39:b4:07:db:5c:81:40:9e:a8:19:7c:f9:b0: c0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:50:1B:DD:27:E8:20:DC:17:D3:A9:7D:AD:82:0A:7D:31:A5:AC:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/91574ab1-ab04-3e09-a6a3-9ce142d46e27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 209.178.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:95:0f:de:ab:e6:de:02:45:f2:a1:ef:66:39:7c:7f:9c:43: 0a:bc:42:fa:df:2a:0d:f0:4a:0b:a0:ce:44:76:f0:4e:74:04: 88:db:30:9b:35:f2:7a:a5:ba:6e:3d:1e:59:aa:53:6b:be:23: 1c:65:ad:06:a3:f8:d1:89:a5:4e:0c:bc:c6:94:7f:7f:9b:9f: 4b:4a:12:34:c5:15:44:d4:13:4f:d5:57:02:e9:fe:6b:6b:c2: 1c:b3:f0:d6:98:fd:36:dc:be:7e:78:5d:88:51:7c:5e:f9:1d: 03:32:71:8c:87:7f:ce:39:5c:39:5e:c3:36:ee:33:3d:50:89: 1a:60:73:32:1a:d1:70:74:8a:0b:00:82:ff:e8:5e:d3:2d:c8: d4:a6:46:3e:c4:be:f0:8b:ed:65:70:93:89:fa:88:b4:c0:9f: ec:ab:dc:c4:ee:56:c0:de:89:46:b8:00:7d:e2:4c:54:32:ef: 22:68:79:69:5d:84:01:f0:d1:64:e2:92:9d:c4:8a:b8:a2:8a: 95:92:39:00:fc:ab:3d:fe:20:2e:e0:85:fb:ad:94:db:a5:70: c8:65:bd:19:8e:95:9e:b8:a0:69:c2:b9:ed:4a:49:bb:2f:e0: 7f:f7:72:eb:9d:ce:0a:47:38:28:51:a1:d6:aa:75:df:0b:bb: 48:70:18:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPfIG2FbENlNBzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk NTNiMWU5ZjYtMmY3MC00OGM3LThkYWQtMTExM2JiNzUxZGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8kP7kKDygG3Ss6TTwLQQ8N6G9eebdIqPEIT ZpiBAjTA7xkqyVNe4ayG/Km6mM9VNPYF77TLFI4QpM02CQjKvk2A/yy364awkozW eMSurfCX0qjfMQD3nLeojOAmI5pwFKd3KX7KbYCQN9NQhjib1xQOK2KyW8/N0stL g3cIH/rx2H4ACB/IF85AEo+IELvola3avHk7TC7ACP/U7xPDrex+NMSyIQdcRgas prirg/hmUbtVPQ/qoQn98solqYNSwbQjsBZgpObQ1vqj0Jn5GnhEfP7HL5Y9NmgK LCf2tasexYrirfDrpn7QLQZe70Mxyjm0B9tcgUCeqBl8+bDAEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhQG90n6CDcF9Opfa2CCn0xpazCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvOTE1NzRhYjEtYWIwNC0z ZTA5LWE2YTMtOWNlMTQyZDQ2ZTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0bLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANCVD96r5t4CRfKh72Y5fH+cQwq8QvrfKg3wSgugzkR28E50BIjbMJs1 8nqlum49HlmqU2u+IxxlrQaj+NGJpU4MvMaUf3+bn0tKEjTFFUTUE0/VVwLp/mtr whyz8NaY/Tbcvn54XYhRfF75HQMycYyHf845XDlewzbuMz1QiRpgczIa0XB0igsA gv/oXtMtyNSmRj7EvvCL7WVwk4n6iLTAn+yr3MTuVsDeiUa4AH3iTFQy7yJoeWld hAHw0WTikp3EiriiipWSOQD8qz3+IC7ghfutlNulcMhlvRmOlZ64oGnCue1KSbsv 4H/3cuudzgpHOChRodaqdd8Lu0hwGCo= -----END CERTIFICATE-----Generated at Thu Oct 29 16:46:44 2026 by rpki-client