$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/bd3dbe1d-519e-3641-a008-c0c899bd117b.roa File: bd3dbe1d-519e-3641-a008-c0c899bd117b.roa (raw, json) Hash identifier: HHzVcrPO2Ny4E0NqxU89cFd60dVXWWzjY8UJc2n5BbY= Subject key identifier: 97:72:4B:4F:2B:04:F9:8E:9B:5A:A6:AF:6D:21:DB:51:CC:92:94:3B Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584F050CC8C6B67A0D3AE80E8320 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/bd3dbe1d-519e-3641-a008-c0c899bd117b.roa Signing time: Mon 31 Aug 2026 13:00:12 +0000 ROA not before: Mon 31 Aug 2026 13:00:12 +0000 ROA not after: Sun 29 Nov 2026 14:00:12 +0000 asID: 140952 IP address blocks: 205.185.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:05:0c:c8:c6:b6:7a:0d:3a:e8:0e:83:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Aug 31 13:00:12 2026 GMT Not After : Nov 29 14:00:12 2026 GMT Subject: CN=91da5905-e93e-4959-820d-8cc000ae8efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:51:fc:f0:86:ec:e3:23:8e:98:2f:95:f9:37: 20:1c:0a:c9:45:73:9c:a2:03:5c:8b:73:b1:0f:7d: a7:81:d0:75:25:b0:84:08:6e:48:ac:5f:36:0e:8f: f8:42:0e:ec:93:8b:2e:b0:68:43:92:bb:7d:20:13: c6:5e:2b:9d:fc:a2:85:1a:c1:ea:e9:f2:03:42:a8: ef:66:80:0c:9d:c2:2c:1b:95:82:6f:b2:35:60:d8: 68:42:5f:f4:c6:41:bb:91:d1:bb:15:ca:90:5c:da: c1:75:b0:01:12:16:30:83:ed:09:25:37:9e:34:a4: 48:52:b6:09:30:59:fa:50:47:f0:53:5b:dd:07:b4: a3:50:8c:8e:f4:9b:65:96:cd:48:6f:0d:fa:63:f0: db:2e:fa:59:0d:36:60:e0:7a:f0:32:b2:70:5f:21: 13:4b:0c:a1:09:60:27:ad:3d:38:36:95:74:9d:2d: f1:2e:7f:97:80:d2:aa:6c:33:c7:e3:49:fe:76:6b: 54:a1:ba:87:b7:0a:3b:9d:88:d0:9f:08:3a:1a:c0: c2:45:a1:24:53:2f:14:98:83:1c:54:6e:95:41:d5: 67:2f:8c:a7:00:19:3c:ff:4b:0a:28:79:07:0e:db: 1f:61:2a:94:f0:5c:e8:f2:29:00:39:10:04:14:cb: 04:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:72:4B:4F:2B:04:F9:8E:9B:5A:A6:AF:6D:21:DB:51:CC:92:94:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/bd3dbe1d-519e-3641-a008-c0c899bd117b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 205.185.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:37:5f:d4:29:e6:12:e1:f6:0b:c1:3f:59:01:ae:39:1b:a2: 05:23:9e:d7:7d:90:42:f6:17:f3:47:ec:a7:3e:bf:af:e2:79: 1c:24:dd:2b:3e:c4:b7:94:5c:e5:b8:9b:90:0b:93:e0:9d:cd: 3f:eb:20:09:5b:20:40:30:f6:a4:4e:ae:54:d7:05:01:63:72: a8:f4:dd:5b:a9:e6:67:c1:6a:d5:e8:f1:26:1d:6f:4f:a1:97: 79:32:dd:73:e7:39:d3:5d:54:ba:3f:ba:0e:35:b5:8c:78:01: 7d:ca:8f:cc:80:fa:2e:20:f9:e4:27:e0:6b:06:63:d2:a2:fa: 05:a7:bf:f7:c2:cc:f3:9f:da:36:a8:e5:3f:23:be:6d:0a:c1: 6f:05:eb:3c:a5:48:17:c9:8b:8b:30:5a:06:66:73:0c:86:69: 6e:67:e1:6d:58:26:c1:11:66:f3:6d:02:5b:76:39:70:c3:90: 38:bc:9a:1f:59:94:de:01:97:29:8b:34:8f:db:f3:d3:f3:bd: 79:ab:81:83:ac:31:fe:e4:65:4d:67:d6:9d:08:d7:9d:7a:93: 6f:5c:46:06:ee:d0:4a:b9:88:e7:21:d2:9f:e5:38:97:cd:88: 1c:ba:fb:62:91:24:6a:f9:c5:b3:75:d2:00:3a:a3:79:ed:54: 56:b8:42:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8FDMjGtnoNOugOgyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI2MDgzMTEzMDAxMloXDTI2MTEyOTE0MDAxMlowLzEtMCsGA1UEAxMk OTFkYTU5MDUtZTkzZS00OTU5LTgyMGQtOGNjMDAwYWU4ZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1H88Ibs4yOOmC+V+TcgHArJRXOcogNci3Ox D32ngdB1JbCECG5IrF82Do/4Qg7sk4susGhDkrt9IBPGXiud/KKFGsHq6fIDQqjv ZoAMncIsG5WCb7I1YNhoQl/0xkG7kdG7FcqQXNrBdbABEhYwg+0JJTeeNKRIUrYJ MFn6UEfwU1vdB7SjUIyO9Jtlls1Ibw36Y/DbLvpZDTZg4HrwMrJwXyETSwyhCWAn rT04NpV0nS3xLn+XgNKqbDPH40n+dmtUobqHtwo7nYjQnwg6GsDCRaEkUy8UmIMc VG6VQdVnL4ynABk8/0sKKHkHDtsfYSqU8Fzo8ikAORAEFMsEXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdyS08rBPmOm1qmr20h21HMkpQ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvYmQzZGJlMWQtNTE5ZS0z NjQxLWEwMDgtYzBjODk5YmQxMTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzbnfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJM3X9Qp5hLh9gvBP1kBrjkbogUjntd9kEL2F/NH7Kc+v6/ieRwk3Ss+ xLeUXOW4m5ALk+CdzT/rIAlbIEAw9qROrlTXBQFjcqj03Vup5mfBatXo8SYdb0+h l3ky3XPnOdNdVLo/ug41tYx4AX3Kj8yA+i4g+eQn4GsGY9Ki+gWnv/fCzPOf2jao 5T8jvm0KwW8F6zylSBfJi4swWgZmcwyGaW5n4W1YJsERZvNtAlt2OXDDkDi8mh9Z lN4BlymLNI/b89PzvXmrgYOsMf7kZU1n1p0I1516k29cRgbu0Eq5iOch0p/lOJfN iBy6+2KRJGr5xbN10gA6o3ntVFa4Qv0= -----END CERTIFICATE-----Generated at Sat Sep 19 00:11:54 2026 by rpki-client