$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf0f3317-f832-3f27-9c50-54bdcaf8eb3f.roa File: bf0f3317-f832-3f27-9c50-54bdcaf8eb3f.roa (raw, json) Hash identifier: Kt9EtvAdxn+7goBBhdQoiUvpUQosUBRBvZD0LhzB3To= Subject key identifier: A8:E8:7C:A0:4C:A4:89:73:07:D0:B8:2C:64:69:9E:4C:8B:E5:DB:1B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ECBD1C31649EEDD19CC6A7700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf0f3317-f832-3f27-9c50-54bdcaf8eb3f.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 396588 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:c3:16:49:ee:dd:19:cc:6a:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=5edf3f29-cd75-425e-84ab-e3e61cdc8c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ed:71:43:29:7d:c9:aa:a2:e8:13:8a:5b:28: 29:77:94:8e:47:ee:d7:1a:2a:9c:0c:1f:ea:b3:96: da:50:de:62:cd:c4:a7:d7:ce:23:c3:2f:30:d1:93: 0d:17:67:ed:46:18:5e:70:1a:f5:44:a4:6d:47:80: 2a:d2:3e:72:88:50:50:86:b1:a7:94:9a:0c:00:dd: f4:18:50:2b:4e:5d:65:af:69:5f:29:06:25:f7:8a: 1a:6c:6b:79:93:b9:70:bd:dd:39:bc:80:88:9f:e8: cd:f5:59:b2:81:14:7d:06:f7:02:4f:a5:e2:5b:1a: aa:bd:ff:15:fc:56:3a:8e:37:76:f5:af:4b:e7:7b: 33:72:ec:25:73:3e:0e:a5:54:56:57:60:64:02:4c: c5:18:1b:95:82:54:03:b6:58:67:a7:76:9a:13:52: 86:e0:32:11:ad:62:b9:43:3b:69:51:22:dd:36:f3: 7b:70:a6:88:8a:1a:fc:a1:30:ed:dd:33:b1:e7:db: 5e:68:84:c5:dc:20:94:7d:6a:14:92:75:97:c4:0f: ae:ca:5c:95:3c:40:93:80:4f:de:41:78:06:2c:0a: e3:84:76:c6:95:75:0a:d5:e6:63:26:76:ac:69:72: 9b:72:f3:83:29:24:b5:de:64:e7:64:ef:76:5c:08: 5a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E8:7C:A0:4C:A4:89:73:07:D0:B8:2C:64:69:9E:4C:8B:E5:DB:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf0f3317-f832-3f27-9c50-54bdcaf8eb3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:b5:50:56:32:bf:68:41:18:53:a9:ba:a6:bc:04:2d:2a:e6: 18:38:95:38:93:7e:22:c7:87:45:91:52:b7:5e:e2:ae:58:94: fe:36:0f:75:b4:17:d1:da:01:c8:ad:8e:5e:6e:33:3a:1b:63: b8:40:ba:22:04:24:66:f7:fc:16:60:b1:ce:02:82:50:be:35: 21:20:c5:b3:42:3a:dc:14:ed:39:e0:3f:31:06:9b:92:5f:62: 86:bc:43:15:6d:08:59:a4:6d:ad:39:be:99:74:3b:da:e4:bd: d5:45:04:d9:9c:f8:77:b2:94:7a:af:e1:61:4d:55:81:25:1a: d9:4e:2d:b7:d4:89:1f:97:53:7b:c7:39:0a:7c:f1:8f:06:9b: 85:63:02:71:36:55:fc:14:04:a4:81:ad:be:8c:5e:8e:a7:a3: 47:02:40:d2:5d:f4:3e:3b:f7:79:61:a1:a7:58:7d:85:2b:fa: a0:f0:44:29:a7:30:89:98:bb:9f:cc:ba:c8:c6:8f:ee:20:d1: af:cd:35:d0:8a:fe:86:10:2b:fa:7c:36:d9:20:40:5b:c8:d5: 23:8f:ab:8e:33:43:a7:37:5d:7b:85:0c:a1:2c:9c:df:3a:e2: 74:b7:04:ba:c1:03:b6:13:02:83:8d:67:29:80:e9:40:19:0e: f6:5d:d8:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0cMWSe7dGcxqdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk NWVkZjNmMjktY2Q3NS00MjVlLTg0YWItZTNlNjFjZGM4YzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+1xQyl9yaqi6BOKWygpd5SOR+7XGiqcDB/q s5baUN5izcSn184jwy8w0ZMNF2ftRhhecBr1RKRtR4Aq0j5yiFBQhrGnlJoMAN30 GFArTl1lr2lfKQYl94oabGt5k7lwvd05vICIn+jN9VmygRR9BvcCT6XiWxqqvf8V /FY6jjd29a9L53szcuwlcz4OpVRWV2BkAkzFGBuVglQDtlhnp3aaE1KG4DIRrWK5 QztpUSLdNvN7cKaIihr8oTDt3TOx59teaITF3CCUfWoUknWXxA+uylyVPECTgE/e QXgGLArjhHbGlXUK1eZjJnasaXKbcvODKSS13mTnZO92XAha/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjofKBMpIlzB9C4LGRpnkyL5dsbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmYwZjMzMTctZjgzMi0z ZjI3LTljNTAtNTRiZGNhZjhlYjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADe1UFYyv2hBGFOpuqa8BC0q5hg4lTiTfiLHh0WRUrde4q5YlP42D3W0 F9HaAcitjl5uMzobY7hAuiIEJGb3/BZgsc4CglC+NSEgxbNCOtwU7TngPzEGm5Jf Yoa8QxVtCFmkba05vpl0O9rkvdVFBNmc+HeylHqv4WFNVYElGtlOLbfUiR+XU3vH OQp88Y8Gm4VjAnE2VfwUBKSBrb6MXo6no0cCQNJd9D4793lhoadYfYUr+qDwRCmn MImYu5/MusjGj+4g0a/NNdCK/oYQK/p8NtkgQFvI1SOPq44zQ6c3XXuFDKEsnN86 4nS3BLrBA7YTAoONZymA6UAZDvZd2LY= -----END CERTIFICATE-----Generated at Wed Aug 19 20:34:14 2026 by rpki-client