$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dd3401dc-00d9-31c3-aea8-4150a87f1e96.roa File: dd3401dc-00d9-31c3-aea8-4150a87f1e96.roa (raw, json) Hash identifier: /PkyZA4+X+ntyO5FGnA2WD/Zqi5RhxsvqUpAUsJ1kZo= Subject key identifier: 80:C4:1D:96:D1:62:C0:CD:9F:12:83:27:A0:CC:2F:EF:9E:AF:0A:5F Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584EB8471B85415C364DE18C83C0 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dd3401dc-00d9-31c3-aea8-4150a87f1e96.roa Signing time: Tue 04 Aug 2026 01:00:12 +0000 ROA not before: Tue 04 Aug 2026 01:00:12 +0000 ROA not after: Mon 02 Nov 2026 02:00:12 +0000 asID: 32870 IP address blocks: 136.147.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:47:1b:85:41:5c:36:4d:e1:8c:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Aug 4 01:00:12 2026 GMT Not After : Nov 2 02:00:12 2026 GMT Subject: CN=69442e7d-9ab3-40d5-a893-64bcceb12ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:07:4a:34:b3:ac:e1:1e:37:f6:43:89:08:be: 8d:f9:d3:bd:71:d8:34:80:59:72:9a:b0:d1:61:c1: 62:77:27:a4:1d:d6:1f:64:99:ce:d8:0d:c8:6f:d4: bf:a2:ce:08:97:7f:bd:d8:5c:48:0f:39:b7:8b:fc: d6:2b:27:3d:eb:d1:a5:d4:9d:e8:19:d2:d9:b3:8e: 2e:2a:42:9b:6f:80:07:e2:73:6c:89:15:2d:2e:5a: 28:bd:d7:10:05:89:36:8a:51:f9:7f:fb:fc:a1:97: a3:0a:e0:96:e8:7b:41:ab:a5:6c:61:95:7b:77:e7: be:94:c9:75:e5:79:8b:14:88:8e:a3:a3:20:22:5b: b0:c8:fd:e6:0c:d3:c5:d9:a4:fc:b7:58:7b:84:5c: 44:50:f3:f4:86:56:0b:d0:4c:70:35:6f:7f:a9:86: 53:32:ac:b2:c5:93:b8:a4:4d:85:70:9d:75:89:39: 31:5f:3b:c1:5c:21:26:09:30:67:b8:8b:78:57:0e: a4:b0:98:9d:95:4d:cf:5f:ee:0c:1d:66:d2:cb:39: ba:c8:64:2b:41:a6:4f:ba:74:3d:bc:6a:47:a2:a1: f8:ff:b7:0b:32:74:5b:ad:6f:e2:5d:c4:dc:43:b9: 21:f6:ef:f9:68:16:3a:57:92:03:d3:0d:32:23:3f: d5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C4:1D:96:D1:62:C0:CD:9F:12:83:27:A0:CC:2F:EF:9E:AF:0A:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dd3401dc-00d9-31c3-aea8-4150a87f1e96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 136.147.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:3b:08:a6:b2:66:9e:24:51:34:41:b5:98:f5:f1:0c:3e:0b: d0:0e:56:2f:9a:3e:60:2d:79:a6:29:09:fa:ed:b0:85:2b:ed: 34:70:a2:36:e9:a1:c5:db:51:e2:9c:12:e9:e8:d2:fd:a3:6a: 55:b2:08:1f:56:55:f1:13:57:ff:77:8c:35:48:c5:29:1d:82: 45:94:89:76:ff:5e:da:9c:25:c2:7f:7d:d1:2f:06:4c:32:9f: ff:f7:94:08:ee:12:d4:2b:fe:80:b3:22:27:91:f5:a2:10:1a: 8e:e8:ae:16:91:43:ea:eb:72:0d:41:bb:5f:5b:96:b3:99:9c: 43:04:26:c3:46:65:9f:3c:a3:29:84:0b:cf:e8:ec:f0:64:8e: a6:9a:67:9d:dc:d6:c0:2a:e1:35:85:4e:e3:e3:0b:b1:a6:c0: aa:fd:67:10:d1:21:0d:59:28:6b:90:47:5a:42:38:5d:32:76: 76:2d:88:a6:ab:9e:1f:32:46:78:73:c9:eb:86:24:98:77:4e: f5:91:f2:08:84:16:d0:48:fb:4c:2b:1b:06:05:4a:a8:65:6a: 78:b1:dd:38:75:42:e4:95:29:cf:ba:49:7b:30:d4:fb:b2:c5: 93:20:90:2b:ee:34:f1:9a:10:85:22:1e:75:f1:22:b2:f5:9a: 38:05:c9:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64RxuFQVw2TeGMg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk Njk0NDJlN2QtOWFiMy00MGQ1LWE4OTMtNjRiY2NlYjEyZWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgdKNLOs4R439kOJCL6N+dO9cdg0gFlymrDR YcFidyekHdYfZJnO2A3Ib9S/os4Il3+92FxIDzm3i/zWKyc969Gl1J3oGdLZs44u KkKbb4AH4nNsiRUtLloovdcQBYk2ilH5f/v8oZejCuCW6HtBq6VsYZV7d+e+lMl1 5XmLFIiOo6MgIluwyP3mDNPF2aT8t1h7hFxEUPP0hlYL0ExwNW9/qYZTMqyyxZO4 pE2FcJ11iTkxXzvBXCEmCTBnuIt4Vw6ksJidlU3PX+4MHWbSyzm6yGQrQaZPunQ9 vGpHoqH4/7cLMnRbrW/iXcTcQ7kh9u/5aBY6V5ID0w0yIz/VCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDEHZbRYsDNnxKDJ6DML++erwpfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvZGQzNDAxZGMtMDBkOS0z MWMzLWFlYTgtNDE1MGE4N2YxZTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiJOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN07CKayZp4kUTRBtZj18Qw+C9AOVi+aPmAteaYpCfrtsIUr7TRwojbp ocXbUeKcEuno0v2jalWyCB9WVfETV/93jDVIxSkdgkWUiXb/XtqcJcJ/fdEvBkwy n//3lAjuEtQr/oCzIieR9aIQGo7orhaRQ+rrcg1Bu19blrOZnEMEJsNGZZ88oymE C8/o7PBkjqaaZ53c1sAq4TWFTuPjC7GmwKr9ZxDRIQ1ZKGuQR1pCOF0ydnYtiKar nh8yRnhzyeuGJJh3TvWR8giEFtBI+0wrGwYFSqhlanix3Th1QuSVKc+6SXsw1Puy xZMgkCvuNPGaEIUiHnXxIrL1mjgFyYY= -----END CERTIFICATE-----Generated at Sun Aug 16 00:39:29 2026 by rpki-client