$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e0855eb8-1253-3e7e-8618-6e46d6450121.roa File: e0855eb8-1253-3e7e-8618-6e46d6450121.roa (raw, json) Hash identifier: m7bU1upOG3jwCaBGa7fU8nGU1bzSCoW9F9YMndyM/nk= Subject key identifier: 4E:10:68:FD:E1:99:09:D4:FA:4E:88:F5:6F:07:38:9B:CC:63:62:16 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584F4986DFDDE798E719118FD9A0 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e0855eb8-1253-3e7e-8618-6e46d6450121.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 170.139.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:df:dd:e7:98:e7:19:11:8f:d9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c6b0c15c-c3c5-4fc2-9f55-b12fc6ff59e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:71:cd:55:74:7e:23:d0:b7:9d:8e:93:aa: 89:2d:8b:44:f0:94:9d:81:ff:d7:f8:1d:60:95:9c: 9d:7f:5d:3d:30:ce:ab:29:b7:97:8e:99:9e:fe:e9: 40:89:3a:ad:fc:ed:67:7e:0d:de:7a:58:29:7d:4e: fc:d9:7b:55:05:47:d7:e9:ae:43:64:cc:0e:ce:e5: 99:34:a4:96:9a:bd:d2:de:65:e4:29:f3:bc:5b:4c: 02:28:53:d9:02:34:7f:ed:4e:f8:5a:d8:98:13:84: dd:27:0b:2b:60:55:61:d3:b6:a4:85:26:34:64:5a: 55:f4:a1:08:e8:05:c9:dc:e7:1d:b9:29:e4:d5:73: ef:96:44:95:9d:82:e7:5e:6f:bd:5c:74:9e:fa:87: b7:fb:4c:d2:72:25:7a:bc:d7:0e:3c:75:1b:83:1f: 1a:91:fc:26:6a:e9:9d:9c:1c:af:18:62:f3:46:b6: 39:1e:00:3d:98:db:b8:6e:43:6d:94:cc:a5:fb:66: 40:d1:84:8a:3e:1e:d8:29:e3:ca:b4:7b:25:4a:0a: 3f:0a:da:0b:79:00:fc:41:6a:45:14:c1:83:e6:48: 51:e9:5e:6e:40:8c:65:9b:9f:ce:b6:50:92:fd:b8: 54:79:9b:6c:ed:69:61:af:1f:5c:0f:34:ea:88:25: e1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:10:68:FD:E1:99:09:D4:FA:4E:88:F5:6F:07:38:9B:CC:63:62:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e0855eb8-1253-3e7e-8618-6e46d6450121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 170.139.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:2c:81:9a:a1:65:c9:e1:1c:7f:a9:10:59:73:c4:c7:5b:da: 91:86:3a:1b:f4:17:75:e2:d1:4a:35:37:e7:b3:7e:a2:a3:c2: 59:39:e2:86:3e:84:da:66:31:3b:02:45:e8:e5:97:5a:ca:61: 42:8f:99:62:f0:0d:bd:f0:9c:a1:0d:11:15:12:14:b5:69:77: 56:44:3e:f0:87:53:2e:64:b2:c9:83:f0:f3:d9:80:e0:e2:7f: 0f:55:a7:9a:72:c9:08:3a:e8:46:75:79:26:81:82:f2:8d:de: 47:14:6c:6a:d1:da:04:8f:df:9b:38:25:59:2f:cc:86:31:f0: 1d:ee:6e:62:64:00:a5:d7:2d:2d:35:66:52:70:d9:0f:fb:d7: cc:a9:53:f9:d0:fa:37:5e:f7:53:eb:ab:2d:44:2f:43:f4:b0: 1e:49:18:3b:c7:9b:7f:36:85:06:ed:35:bf:e9:4d:d7:dd:d0: e7:af:9d:1a:7d:8d:e7:d0:73:ad:60:19:86:88:dc:71:39:56: bf:d8:c2:0f:63:e3:5b:97:43:be:9d:63:1b:29:bd:c4:26:95: 9b:ca:ec:dc:67:17:47:93:08:c6:38:bd:49:cf:21:e7:6f:03: 87:e5:74:3b:d1:5f:7c:0a:48:77:74:14:f4:d0:01:ab:86:0a: 70:a9:f9:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jht/d55jnGRGP2aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzZiMGMxNWMtYzNjNS00ZmMyLTlmNTUtYjEyZmM2ZmY1OWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXFxzVV0fiPQt52Ok6qJLYtE8JSdgf/X+B1g lZydf109MM6rKbeXjpme/ulAiTqt/O1nfg3eelgpfU782XtVBUfX6a5DZMwOzuWZ NKSWmr3S3mXkKfO8W0wCKFPZAjR/7U74WtiYE4TdJwsrYFVh07akhSY0ZFpV9KEI 6AXJ3OcduSnk1XPvlkSVnYLnXm+9XHSe+oe3+0zSciV6vNcOPHUbgx8akfwmaumd nByvGGLzRrY5HgA9mNu4bkNtlMyl+2ZA0YSKPh7YKePKtHslSgo/CtoLeQD8QWpF FMGD5khR6V5uQIxlm5/OtlCS/bhUeZts7Wlhrx9cDzTqiCXhMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4QaP3hmQnU+k6I9W8HOJvMY2IWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvZTA4NTVlYjgtMTI1My0z ZTdlLTg2MTgtNmU0NmQ2NDUwMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqovgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4sgZqhZcnhHH+pEFlzxMdb2pGGOhv0F3Xi0Uo1N+ezfqKjwlk54oY+ hNpmMTsCRejll1rKYUKPmWLwDb3wnKENERUSFLVpd1ZEPvCHUy5kssmD8PPZgODi fw9Vp5pyyQg66EZ1eSaBgvKN3kcUbGrR2gSP35s4JVkvzIYx8B3ubmJkAKXXLS01 ZlJw2Q/718ypU/nQ+jde91Prqy1EL0P0sB5JGDvHm382hQbtNb/pTdfd0OevnRp9 jefQc61gGYaI3HE5Vr/Ywg9j41uXQ76dYxspvcQmlZvK7NxnF0eTCMY4vUnPIedv A4fldDvRX3wKSHd0FPTQAauGCnCp+f0= -----END CERTIFICATE-----Generated at Sun Oct 11 07:04:45 2026 by rpki-client