$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/9611be9e-b000-3cb4-9a06-a14f04291ad4.roa File: 9611be9e-b000-3cb4-9a06-a14f04291ad4.roa (raw, json) Hash identifier: lbjGiA8F6RgiKSXj5nY6giaOktYtkdFKN9rc0RElB90= Subject key identifier: 17:05:2A:C8:FB:1F:8D:F0:B2:05:83:CD:26:BE:BF:75:0A:60:E1:6D Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584F549D63D80BBCE2FA4DBBD3C0 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/9611be9e-b000-3cb4-9a06-a14f04291ad4.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 155.226.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:63:d8:0b:bc:e2:fa:4d:bb:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=479480b2-a4fe-4342-8b44-b0126b96590c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c5:3c:ac:b4:08:4f:e6:41:00:35:00:2a:b8: 54:25:32:7c:18:6b:3b:1b:10:6d:f8:34:83:94:75: e8:18:92:9a:2d:b1:70:f0:9c:ce:a1:4b:15:f0:43: d8:85:b1:e6:01:2e:4a:b7:1e:3a:f3:3a:b9:6c:63: be:24:00:cd:6c:2b:db:01:12:57:c0:f0:ae:f3:31: 6f:14:e3:69:6a:38:dd:e5:c4:26:03:e4:ca:59:f6: 4a:7f:e7:d3:b5:59:f5:e9:55:4a:0c:4f:69:23:5b: 9b:dd:d3:9b:81:3d:ca:ca:4c:ca:b4:ab:e6:23:e4: 1b:94:55:4f:22:c0:2c:42:99:86:24:0e:b1:9d:6e: f6:bc:45:e8:98:7f:19:bc:5e:ec:88:ae:f6:87:71: e3:99:9b:5e:2c:89:2f:23:7e:f9:2e:f3:9a:6b:d9: f0:c7:86:a3:76:27:b3:f5:b5:14:a5:51:a7:24:04: 19:d3:1f:83:44:eb:9d:89:9e:eb:b7:40:f2:01:f5: 23:96:9d:96:6b:49:d1:8d:f0:c3:df:7f:a1:23:86: d7:7c:ef:11:b5:ab:5b:f0:f2:57:fb:5d:12:34:df: 5d:9b:18:be:c9:d4:c2:67:c8:ea:3c:99:4c:cd:be: d4:be:0f:a8:a8:bb:6a:70:09:5e:5f:c7:b1:29:0c: fc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:05:2A:C8:FB:1F:8D:F0:B2:05:83:CD:26:BE:BF:75:0A:60:E1:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/9611be9e-b000-3cb4-9a06-a14f04291ad4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 155.226.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:9f:79:29:9b:a5:5c:f4:2d:95:6e:60:77:53:ed:63:aa:b3: a9:54:0b:37:16:9b:9d:88:3a:0a:52:1a:95:f9:d8:56:97:49: cc:79:57:46:d7:0d:dd:8e:e9:ab:62:ff:d0:c6:58:e9:35:0d: 4a:f6:3b:45:a1:20:9d:56:bf:ac:b5:08:f8:56:22:dc:5d:4b: 52:94:51:62:57:66:d5:75:ac:8b:ac:e9:0f:d0:78:2c:69:4c: 6f:86:30:22:d9:cb:dc:6c:31:59:65:04:52:f8:bc:0e:04:b7: 82:0e:6f:6a:e8:dc:ca:45:bb:b5:7b:32:96:e7:04:60:b2:3e: 38:03:04:eb:6d:b2:04:78:2b:a1:4b:58:8b:31:9e:62:31:9b: 29:2b:3c:48:ad:93:b9:7a:c4:3d:6d:cb:34:cc:35:d7:b2:92: ef:0f:a1:d8:7c:17:17:a6:92:04:95:3b:21:ff:21:3f:24:ce: 89:d4:39:38:35:47:82:67:46:08:c3:04:3a:f3:00:de:d0:99: c0:f5:c3:1e:fa:06:6e:ef:e8:63:00:db:8f:83:9d:33:f8:54: 56:50:40:55:92:12:21:cb:2b:6d:d4:bc:03:fd:7b:23:06:5f: 1b:ce:0e:a6:71:99:ad:9b:1c:3b:b6:b9:ae:12:b8:12:ad:35: dd:e2:a6:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnWPYC7zi+k2708AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NDc5NDgwYjItYTRmZS00MzQyLThiNDQtYjAxMjZiOTY1OTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncU8rLQIT+ZBADUAKrhUJTJ8GGs7GxBt+DSD lHXoGJKaLbFw8JzOoUsV8EPYhbHmAS5Ktx468zq5bGO+JADNbCvbARJXwPCu8zFv FONpajjd5cQmA+TKWfZKf+fTtVn16VVKDE9pI1ub3dObgT3KykzKtKvmI+QblFVP IsAsQpmGJA6xnW72vEXomH8ZvF7siK72h3HjmZteLIkvI375LvOaa9nwx4ajdiez 9bUUpVGnJAQZ0x+DROudiZ7rt0DyAfUjlp2Wa0nRjfDD33+hI4bXfO8Rtatb8PJX +10SNN9dmxi+ydTCZ8jqPJlMzb7Uvg+oqLtqcAleX8exKQz8WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcFKsj7H43wsgWDzSa+v3UKYOFtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvOTYxMWJlOWUtYjAwMC0z Y2I0LTlhMDYtYTE0ZjA0MjkxYWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm+KAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALqfeSmbpVz0LZVuYHdT7WOqs6lUCzcWm52IOgpSGpX52FaXScx5V0bX Dd2O6ati/9DGWOk1DUr2O0WhIJ1Wv6y1CPhWItxdS1KUUWJXZtV1rIus6Q/QeCxp TG+GMCLZy9xsMVllBFL4vA4Et4IOb2ro3MpFu7V7MpbnBGCyPjgDBOttsgR4K6FL WIsxnmIxmykrPEitk7l6xD1tyzTMNdeyku8Podh8FxemkgSVOyH/IT8kzonUOTg1 R4JnRgjDBDrzAN7QmcD1wx76Bm7v6GMA24+DnTP4VFZQQFWSEiHLK23UvAP9eyMG XxvODqZxma2bHDu2ua4SuBKtNd3ipsk= -----END CERTIFICATE-----Generated at Sun Oct 11 02:57:31 2026 by rpki-client