$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/868a6d39-bad9-3428-ae07-3a8c54acb3d6.roa File: 868a6d39-bad9-3428-ae07-3a8c54acb3d6.roa (raw, json) Hash identifier: TMglPgsQVB8+w9PoVcCbm2huOcNrGvZF+PAyI6ENeaM= Subject key identifier: E2:AB:56:4E:45:7D:C5:8F:90:9F:3A:A4:05:45:46:AB:D4:7A:C4:09 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584EED520E95570D8B5E2664D400 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/868a6d39-bad9-3428-ae07-3a8c54acb3d6.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 22606 IP address blocks: 13.111.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:0e:95:57:0d:8b:5e:26:64:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=6eccbfc2-58f7-4c5e-aa21-3f69d7bcc8e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7c:6f:d6:bd:dc:2f:3f:51:b6:29:b0:54:ab: ba:da:14:33:90:ba:ec:63:da:97:2f:d6:ad:aa:63: 6a:87:54:4b:68:be:70:b0:e7:47:54:57:89:46:04: f1:3e:8a:6c:bb:8d:53:30:b6:5d:cf:bb:31:03:12: 93:2a:65:21:77:7f:65:13:7a:ec:cc:04:56:df:72: 90:be:4c:da:18:ee:13:50:86:9b:13:49:52:ba:b6: f2:3b:d2:9f:64:bc:fb:31:57:d9:d6:48:39:ba:e1: 3a:0b:3c:70:cb:5f:8d:66:2a:99:0f:9a:61:24:ac: c9:a2:aa:83:b5:9d:8d:93:f1:81:1d:28:3e:62:e5: e4:88:cb:33:f4:3d:a6:85:92:31:37:f5:82:c9:95: 74:40:d4:c8:a9:5e:31:7b:86:2d:f6:b2:d3:9e:f6: e6:7c:8c:fa:3a:0b:54:80:ff:7b:ab:bd:20:0f:7e: bd:2d:a5:a0:06:79:bc:ef:a8:bc:66:79:5a:52:d0: d8:6a:98:cd:26:d8:21:29:17:70:e8:3d:6c:a6:39: 17:58:6a:16:e4:d6:3c:c9:69:7c:32:76:a4:02:a0: ec:f8:5e:05:e8:83:29:c7:33:0a:17:79:92:00:90: 99:ec:6b:89:82:02:be:ed:58:ac:32:0a:53:44:73: 5f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AB:56:4E:45:7D:C5:8F:90:9F:3A:A4:05:45:46:AB:D4:7A:C4:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/868a6d39-bad9-3428-ae07-3a8c54acb3d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 13.111.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:a0:e6:0d:f7:44:d3:8c:aa:5d:c8:8f:7d:c2:a2:76:c4:f7: 82:c9:1a:f8:16:39:32:0c:72:af:d8:7f:ec:67:19:a8:a6:17: b0:04:f4:6a:fd:08:32:31:6c:ab:9f:be:08:52:a2:43:74:d4: a0:53:21:34:b4:1e:81:47:b0:37:72:f6:6e:62:7b:fe:56:bd: 3f:92:23:38:5d:26:0f:de:e0:45:22:6c:01:af:61:60:ed:c9: 55:02:61:5c:98:77:65:75:25:a4:ec:62:34:8e:62:a1:75:36: ca:9c:6f:6b:e5:82:cd:1b:d3:ea:18:6f:0d:55:59:7d:86:e5: a8:10:16:72:5f:d2:24:de:e9:f1:d4:ba:f6:9c:7e:24:2b:43: 04:85:11:30:0e:3d:26:49:03:63:9b:b7:dd:aa:0a:67:44:e4: 0d:71:43:23:e7:8c:01:7e:b8:4c:d5:4e:f6:3c:63:95:da:4a: ed:19:ef:10:2c:4d:0d:89:c3:ef:50:03:f7:5b:6b:28:64:b2: 2c:fd:22:f8:34:20:7a:06:42:2b:c8:35:df:de:34:97:31:24: 11:42:89:a9:ec:b7:1f:f5:dc:cc:2c:17:47:c2:19:97:70:37: 7e:37:ad:10:38:1f:03:e6:0c:04:cb:7e:90:72:01:67:06:ed: dd:e8:7c:a3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7tUg6VVw2LXiZk1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NmVjY2JmYzItNThmNy00YzVlLWFhMjEtM2Y2OWQ3YmNjOGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3xv1r3cLz9RtimwVKu62hQzkLrsY9qXL9at qmNqh1RLaL5wsOdHVFeJRgTxPopsu41TMLZdz7sxAxKTKmUhd39lE3rszARW33KQ vkzaGO4TUIabE0lSurbyO9KfZLz7MVfZ1kg5uuE6Czxwy1+NZiqZD5phJKzJoqqD tZ2Nk/GBHSg+YuXkiMsz9D2mhZIxN/WCyZV0QNTIqV4xe4Yt9rLTnvbmfIz6OgtU gP97q70gD369LaWgBnm876i8ZnlaUtDYapjNJtghKRdw6D1spjkXWGoW5NY8yWl8 MnakAqDs+F4F6IMpxzMKF3mSAJCZ7GuJggK+7VisMgpTRHNfnQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOKrVk5FfcWPkJ86pAVFRqvUesQJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvODY4YTZkMzktYmFkOS0z NDI4LWFlMDctM2E4YzU0YWNiM2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMADW8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAhaDmDfdE04yqXciPfcKidsT3gska+BY5Mgxyr9h/7GcZqKYXsAT0av0I MjFsq5++CFKiQ3TUoFMhNLQegUewN3L2bmJ7/la9P5IjOF0mD97gRSJsAa9hYO3J VQJhXJh3ZXUlpOxiNI5ioXU2ypxva+WCzRvT6hhvDVVZfYblqBAWcl/SJN7p8dS6 9px+JCtDBIURMA49JkkDY5u33aoKZ0TkDXFDI+eMAX64TNVO9jxjldpK7RnvECxN DYnD71AD91trKGSyLP0i+DQgegZCK8g13940lzEkEUKJqey3H/XczCwXR8IZl3A3 fjetEDgfA+YMBMt+kHIBZwbt3eh8ow== -----END CERTIFICATE-----Generated at Sat Oct 10 22:24:34 2026 by rpki-client