$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdfa307b-4d25-3d25-acdf-7c0672499955.roa File: bdfa307b-4d25-3d25-acdf-7c0672499955.roa (raw, json) Hash identifier: C+PcDGXFCdbmResNnxucQTtQkJ1S8QOMzmU/izOGAys= Subject key identifier: 0C:AA:28:81:83:15:B3:F7:05:6A:C5:14:C7:F2:FF:E7:52:5D:15:68 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584EEA877299E5FAF3402D3695C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdfa307b-4d25-3d25-acdf-7c0672499955.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 108.162.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:72:99:e5:fa:f3:40:2d:36:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=d79b7c07-73c1-4cb9-9f90-368c089ca3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:12:cf:cf:48:bb:e7:52:5d:95:1b:36:14:16: 93:25:49:3f:7e:96:5c:0f:a1:33:e8:bc:04:97:fd: ed:ea:b0:71:df:99:87:5d:f3:0a:9e:86:01:0a:6d: f9:3e:24:8f:40:ab:c5:21:53:3c:ee:cc:e9:15:bd: 0f:bf:fd:af:a6:2f:0f:03:a1:37:38:1d:e1:8b:dd: 5a:9a:c7:13:b3:55:3e:a7:51:be:b3:63:94:1a:e7: 27:cb:60:5b:c1:98:63:e5:d9:40:4d:ae:9b:cf:00: 14:41:e0:33:10:fa:c2:0c:73:fe:28:b0:eb:04:fa: da:43:4c:e7:eb:b7:68:e7:77:83:b3:7a:4a:85:82: 94:ac:87:bc:23:22:54:d5:49:ff:b7:cf:e2:4e:d8: be:f5:40:b2:d6:8a:da:e3:89:99:97:2c:42:c7:d3: 0a:d3:0e:3f:2e:64:6a:02:8c:5b:31:ed:be:52:b9: 61:90:6e:37:f9:b2:e0:4d:6b:c7:9c:0d:65:c1:1b: e9:9b:91:96:af:be:07:68:4b:d1:1b:e3:27:c5:6c: fe:07:1a:94:4c:c6:5e:4a:d9:eb:77:a4:8d:20:fb: c8:cf:d1:9b:db:5b:dc:f9:6d:34:26:e7:0c:67:68: 27:f4:31:f0:62:43:02:4a:a3:cc:9d:b0:27:10:2f: ea:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AA:28:81:83:15:B3:F7:05:6A:C5:14:C7:F2:FF:E7:52:5D:15:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdfa307b-4d25-3d25-acdf-7c0672499955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 108.162.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:0b:da:5e:92:ee:13:46:4c:e7:c2:5d:c3:64:91:55:bf:9a: ff:6e:2a:50:72:9e:64:8b:98:60:bf:b8:1a:9b:b0:57:03:75: 73:73:93:72:f8:2b:50:14:00:c8:a2:9f:66:a0:f0:38:9b:b7: 0c:41:67:93:00:7a:18:a1:1d:a6:07:d6:87:38:0a:37:a4:70: 1d:f3:39:be:bf:eb:64:e3:21:ad:6b:86:a9:82:e2:21:42:26: 4d:08:7b:9e:8c:f3:a4:21:36:a4:49:23:c6:a3:3d:05:19:b0: 67:6a:a8:49:fc:b1:7c:56:46:ac:f4:6f:5d:8f:ce:bb:27:29: ff:41:18:bb:50:3c:f4:70:37:d2:15:d0:9d:7e:0f:f2:f3:61: ff:1f:9e:d7:42:5b:16:3a:f9:2a:d0:7f:2a:01:f8:8c:03:2b: 11:b5:4c:b0:6f:98:de:28:d4:d3:3d:08:ca:5e:af:cc:39:7d: ef:8b:4e:d3:e1:f2:57:57:37:a0:99:9e:09:6a:21:d7:55:65: a9:3b:64:2d:6a:0a:e4:01:3a:9a:28:d3:52:21:66:4f:12:4e: ab:37:50:06:96:4e:c2:d4:17:c1:36:49:5c:1f:71:6b:30:ef: 99:67:d2:86:30:0c:f3:b1:a6:fe:2b:8b:cc:ee:b5:65:14:86: 46:26:73:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh3KZ5frzQC02lcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ZDc5YjdjMDctNzNjMS00Y2I5LTlmOTAtMzY4YzA4OWNhM2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBLPz0i751JdlRs2FBaTJUk/fpZcD6Ez6LwE l/3t6rBx35mHXfMKnoYBCm35PiSPQKvFIVM87szpFb0Pv/2vpi8PA6E3OB3hi91a mscTs1U+p1G+s2OUGucny2BbwZhj5dlATa6bzwAUQeAzEPrCDHP+KLDrBPraQ0zn 67do53eDs3pKhYKUrIe8IyJU1Un/t8/iTti+9UCy1ora44mZlyxCx9MK0w4/LmRq AoxbMe2+UrlhkG43+bLgTWvHnA1lwRvpm5GWr74HaEvRG+MnxWz+BxqUTMZeStnr d6SNIPvIz9Gb21vc+W00JucMZ2gn9DHwYkMCSqPMnbAnEC/qvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyqKIGDFbP3BWrFFMfy/+dSXRVoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmRmYTMwN2ItNGQyNS0z ZDI1LWFjZGYtN2MwNjcyNDk5OTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKLWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsL2l6S7hNGTOfCXcNkkVW/mv9uKlBynmSLmGC/uBqbsFcDdXNzk3L4 K1AUAMiin2ag8DibtwxBZ5MAehihHaYH1oc4CjekcB3zOb6/62TjIa1rhqmC4iFC Jk0Ie56M86QhNqRJI8ajPQUZsGdqqEn8sXxWRqz0b12PzrsnKf9BGLtQPPRwN9IV 0J1+D/LzYf8fntdCWxY6+SrQfyoB+IwDKxG1TLBvmN4o1NM9CMper8w5fe+LTtPh 8ldXN6CZnglqIddVZak7ZC1qCuQBOpoo01IhZk8STqs3UAaWTsLUF8E2SVwfcWsw 75ln0oYwDPOxpv4ri8zutWUUhkYmc/Y= -----END CERTIFICATE-----Generated at Tue Sep 22 08:28:00 2026 by rpki-client