$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf44b1fa-dcc7-4d59-8057-3eeaabe145fc/ca432fd6-6040-3efa-bec5-817c92c77169.roa File: ca432fd6-6040-3efa-bec5-817c92c77169.roa (raw, json) Hash identifier: 3HZoN2LcbvbxpXw0T6KQhyiO/c01VTfL9WjRK4d3aiQ= Subject key identifier: 85:CF:6B:CC:10:55:87:9C:10:88:28:54:4A:D8:25:81:99:31:1B:CE Certificate issuer: /CN=bf44b1fa-dcc7-4d59-8057-3eeaabe145fc Certificate serial: 010D0C9F4328584F48F7B70BEF92A4DAF7465040 Authority key identifier: 39:A1:6A:AC:C0:49:17:BA:13:67:84:C7:C2:DE:E1:0C:B6:C1:DF:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf44b1fa-dcc7-4d59-8057-3eeaabe145fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf44b1fa-dcc7-4d59-8057-3eeaabe145fc/ca432fd6-6040-3efa-bec5-817c92c77169.roa Signing time: Thu 24 Sep 2026 20:52:46 +0000 ROA not before: Thu 24 Sep 2026 20:52:46 +0000 ROA not after: Wed 23 Dec 2026 21:52:46 +0000 asID: 8075 IP address blocks: 198.148.155.0/24 maxlen: 24 199.245.204.0/24 maxlen: 24 204.153.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf44b1fa-dcc7-4d59-8057-3eeaabe145fc/bf44b1fa-dcc7-4d59-8057-3eeaabe145fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf44b1fa-dcc7-4d59-8057-3eeaabe145fc/bf44b1fa-dcc7-4d59-8057-3eeaabe145fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf44b1fa-dcc7-4d59-8057-3eeaabe145fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:f7:b7:0b:ef:92:a4:da:f7:46:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf44b1fa-dcc7-4d59-8057-3eeaabe145fc Validity Not Before: Sep 24 20:52:46 2026 GMT Not After : Dec 23 21:52:46 2026 GMT Subject: CN=858aa575-73c9-49c4-b500-d0f66d0523c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:53:5f:d5:53:63:51:fe:f8:de:49:45:98:87: 78:e0:73:05:f8:e6:97:cd:2e:35:f9:3c:63:ea:29: d1:0e:10:1e:c8:6d:23:08:f7:d1:f5:38:3e:67:f6: a1:47:6d:09:f6:1a:34:11:9a:82:68:a0:f2:22:6a: fb:8b:17:8e:2c:8e:88:72:06:b4:92:a9:82:21:a2: d5:4a:85:50:4e:23:98:90:cd:d8:61:af:4c:af:4c: df:dd:cb:e7:a0:8c:86:f6:49:a5:3b:77:90:4c:6d: 4f:d4:08:c7:82:3f:c2:9a:3b:fb:f4:7f:a7:d5:84: 4b:fd:4a:d0:19:e6:c9:13:6c:bd:4e:67:a7:e2:0c: b6:68:9d:87:f1:cb:9c:1e:a2:fa:64:d4:07:01:fe: 8f:77:b8:d1:c3:16:ee:be:49:fb:9d:df:ee:85:57: b8:33:5f:83:66:a9:52:34:d6:78:fe:d2:1d:9c:52: ea:f7:02:b0:2e:78:41:fb:fb:ec:ea:cf:2c:e3:40: 1b:36:18:6b:ca:dc:b2:65:f6:8a:ee:c7:11:39:3a: cd:53:54:12:ab:3c:70:00:98:71:0c:a9:de:b5:9f: 31:58:b5:f1:51:a6:c6:9c:43:f8:f0:8e:f1:56:2b: 60:92:89:7d:ac:0a:c2:c0:37:e3:f6:76:77:94:6d: ab:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CF:6B:CC:10:55:87:9C:10:88:28:54:4A:D8:25:81:99:31:1B:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf44b1fa-dcc7-4d59-8057-3eeaabe145fc/ca432fd6-6040-3efa-bec5-817c92c77169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf44b1fa-dcc7-4d59-8057-3eeaabe145fc/bf44b1fa-dcc7-4d59-8057-3eeaabe145fc.crl X509v3 Authority Key Identifier: keyid:39:A1:6A:AC:C0:49:17:BA:13:67:84:C7:C2:DE:E1:0C:B6:C1:DF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bf44b1fa-dcc7-4d59-8057-3eeaabe145fc.cer sbgp-ipAddrBlock: critical IPv4: 198.148.155.0/24 199.245.204.0/24 204.153.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:fd:78:a3:bf:db:4d:51:7c:3f:17:b7:39:fa:a6:68:eb:94: b7:4f:c8:2b:49:89:4e:75:81:bf:4b:9d:1a:12:e1:40:90:93: 61:75:90:88:eb:c9:23:72:09:cb:cc:dc:ed:18:1f:4d:de:61: a6:30:e2:3c:25:69:d5:25:1c:73:5d:93:84:67:9e:55:8d:ec: df:b2:2a:ec:0d:56:8d:24:11:db:64:96:aa:08:fb:e0:86:87: 99:49:14:d7:5b:33:12:59:08:6e:aa:d1:8a:b0:ca:df:c1:67: f4:ec:c4:57:2a:ad:27:7e:f1:0f:ca:74:fa:d8:28:45:6a:55: ee:9d:67:00:07:e2:3c:8e:88:fc:05:4b:28:6a:86:ad:8e:45: 81:4c:01:1d:de:4b:8a:e7:70:b6:a3:e0:aa:b3:95:f0:a2:5b: 1f:51:10:b0:65:4e:e5:04:86:80:7b:52:5e:35:c0:6f:c6:0d: d7:e0:ca:5b:5a:b2:85:28:c4:77:f1:b0:31:1b:12:fd:3e:68: 67:6c:66:a2:9c:11:75:5c:1c:59:03:04:45:fa:0d:a6:8b:f3: 77:90:df:89:6d:94:d3:b7:9d:b2:80:ed:e4:8c:f1:c3:0c:cf: 13:5f:c4:d6:c4:9f:ae:f1:d0:b2:74:03:eb:f1:7b:53:80:13: 86:4b:0e:d6 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9I97cL75Kk2vdGUEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY0NGIxZmEtZGNjNy00ZDU5LTgwNTctM2VlYWFiZTE0 NWZjMB4XDTI2MDkyNDIwNTI0NloXDTI2MTIyMzIxNTI0NlowLzEtMCsGA1UEAxMk ODU4YWE1NzUtNzNjOS00OWM0LWI1MDAtZDBmNjZkMDUyM2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1Nf1VNjUf743klFmId44HMF+OaXzS41+Txj 6inRDhAeyG0jCPfR9Tg+Z/ahR20J9ho0EZqCaKDyImr7ixeOLI6Icga0kqmCIaLV SoVQTiOYkM3YYa9Mr0zf3cvnoIyG9kmlO3eQTG1P1AjHgj/Cmjv79H+n1YRL/UrQ GebJE2y9Tmen4gy2aJ2H8cucHqL6ZNQHAf6Pd7jRwxbuvkn7nd/uhVe4M1+DZqlS NNZ4/tIdnFLq9wKwLnhB+/vs6s8s40AbNhhrytyyZfaK7scROTrNU1QSqzxwAJhx DKnetZ8xWLXxUabGnEP48I7xVitgkol9rArCwDfj9nZ3lG2rBQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFIXPa8wQVYecEIgoVErYJYGZMRvOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9iZjQ0 YjFmYS1kY2M3LTRkNTktODA1Ny0zZWVhYWJlMTQ1ZmMvY2E0MzJmZDYtNjA0MC0z ZWZhLWJlYzUtODE3YzkyYzc3MTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYmY0NGIxZmEtZGNjNy00ZDU5LTgw NTctM2VlYWFiZTE0NWZjL2JmNDRiMWZhLWRjYzctNGQ1OS04MDU3LTNlZWFhYmUx NDVmYy5jcmwwHwYDVR0jBBgwFoAUOaFqrMBJF7oTZ4THwt7hDLbB37AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9iZjQ0YjFmYS1kY2M3LTRkNTktODA1Ny0zZWVh YWJlMTQ1ZmMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAxpSbAwQA x/XMAwQCzJlQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAKb9eKO/201RfD8Xtzn6pmjrlLdPyCtJiU51gb9L nRoS4UCQk2F1kIjrySNyCcvM3O0YH03eYaYw4jwladUlHHNdk4RnnlWN7N+yKuwN Vo0kEdtklqoI++CGh5lJFNdbMxJZCG6q0Yqwyt/BZ/TsxFcqrSd+8Q/KdPrYKEVq Ve6dZwAH4jyOiPwFSyhqhq2ORYFMAR3eS4rncLaj4KqzlfCiWx9RELBlTuUEhoB7 Ul41wG/GDdfgyltasoUoxHfxsDEbEv0+aGdsZqKcEXVcHFkDBEX6DaaL83eQ34lt lNO3nbKA7eSM8cMMzxNfxNbEn67x0LJ0A+vxe1OAE4ZLDtY= -----END CERTIFICATE-----Generated at Wed Oct 21 03:54:53 2026 by rpki-client