$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bdccab16-a20e-43ba-a454-705ada07e8c5/bffcf19a-0db5-318b-a60b-08483680f6f1.roa File: bffcf19a-0db5-318b-a60b-08483680f6f1.roa (raw, json) Hash identifier: XsoJirkFwLA/C/Xeo5Cc/HXHng72EF+WUSJ2N1jkzpw= Subject key identifier: 63:22:E3:8F:C5:EF:84:E8:1A:C5:B0:C6:C0:78:D9:65:A5:B0:A5:DB Certificate issuer: /CN=bdccab16-a20e-43ba-a454-705ada07e8c5 Certificate serial: 010D0C9F4328584F92F2E3C28FFCFE4FCC58BE80 Authority key identifier: 50:66:7E:80:04:91:FD:A0:18:60:B1:C6:4F:2F:71:A0:1C:86:99:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bdccab16-a20e-43ba-a454-705ada07e8c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bdccab16-a20e-43ba-a454-705ada07e8c5/bffcf19a-0db5-318b-a60b-08483680f6f1.roa Signing time: Wed 21 Oct 2026 08:52:52 +0000 ROA not before: Wed 21 Oct 2026 08:52:52 +0000 ROA not after: Tue 19 Jan 2027 09:52:52 +0000 asID: 11649 IP address blocks: 147.222.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bdccab16-a20e-43ba-a454-705ada07e8c5/bdccab16-a20e-43ba-a454-705ada07e8c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bdccab16-a20e-43ba-a454-705ada07e8c5/bdccab16-a20e-43ba-a454-705ada07e8c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bdccab16-a20e-43ba-a454-705ada07e8c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:92:f2:e3:c2:8f:fc:fe:4f:cc:58:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdccab16-a20e-43ba-a454-705ada07e8c5 Validity Not Before: Oct 21 08:52:52 2026 GMT Not After : Jan 19 09:52:52 2027 GMT Subject: CN=c349e775-3e5c-472d-839f-d528dd70fc2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:29:5c:95:18:95:cd:09:05:2e:b6:a2:c5:e6: 7a:29:ee:48:dc:05:64:e3:44:2a:a2:3a:92:f5:cf: 52:66:4d:ef:58:99:00:17:e4:22:be:49:32:5d:2e: a0:3d:b7:46:95:ce:5f:dc:44:bd:e6:31:84:19:58: 2e:bf:ce:2a:3e:9f:4d:ab:f2:15:d8:15:88:a1:e9: ce:8a:6d:ed:41:03:c9:1a:59:db:79:b1:2f:4a:72: 73:0e:a0:55:5d:16:db:a6:e7:a3:7d:a4:1c:cc:15: d6:0d:d1:c3:db:2e:e3:a7:56:3c:59:9f:43:fb:bd: 5c:65:ec:6e:80:93:a1:59:74:db:0d:59:dd:df:7d: 8f:23:53:4b:01:a9:d1:10:fd:03:2a:92:01:88:76: 97:aa:dc:8d:9e:c6:6a:a3:a9:cb:0c:7b:4d:4b:f1: 65:02:a4:16:e2:1c:cb:f1:af:44:80:86:8f:6e:75: ac:8a:8e:30:1f:c3:15:62:5b:77:cd:ac:77:52:20: c9:fc:bd:f0:5c:ba:ca:65:91:a9:94:5d:63:9a:57: 2c:27:4e:8a:38:24:4e:73:5f:85:5b:81:32:31:3f: 39:27:ee:ee:9d:1f:40:58:14:a2:0d:ba:46:90:c3: d4:20:dc:0a:a2:e3:c6:c9:87:39:cb:2c:28:ca:8f: 92:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:22:E3:8F:C5:EF:84:E8:1A:C5:B0:C6:C0:78:D9:65:A5:B0:A5:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bdccab16-a20e-43ba-a454-705ada07e8c5/bffcf19a-0db5-318b-a60b-08483680f6f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bdccab16-a20e-43ba-a454-705ada07e8c5/bdccab16-a20e-43ba-a454-705ada07e8c5.crl X509v3 Authority Key Identifier: keyid:50:66:7E:80:04:91:FD:A0:18:60:B1:C6:4F:2F:71:A0:1C:86:99:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bdccab16-a20e-43ba-a454-705ada07e8c5.cer sbgp-ipAddrBlock: critical IPv4: 147.222.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:e2:bf:66:e5:2b:89:40:f0:fa:2a:50:b1:a6:5f:50:9b:30: 5b:0b:cc:6f:54:ce:5f:96:21:10:a9:52:d2:c7:2b:c5:cf:46: 0c:34:94:8f:04:0f:7c:77:40:c2:28:98:79:90:9c:92:07:04: 58:e1:70:7b:8a:82:69:21:08:07:d1:8e:54:bb:f0:8b:d4:47: 10:bb:4c:50:9c:5b:01:53:78:87:3b:a8:67:b7:f4:86:5d:af: d6:d1:61:ae:db:45:dc:35:84:24:2e:05:4e:91:39:16:36:24: e6:90:0e:fa:f9:02:7c:2f:98:4d:db:01:2a:83:f5:31:8c:4d: 36:ce:f9:54:4a:fe:25:96:72:c6:c6:ce:7e:9e:02:44:15:12: 45:6b:2f:67:aa:0d:4e:c9:6a:ca:43:a7:be:3b:7c:47:0d:11: 32:52:47:6a:bb:ad:cf:21:ff:e0:55:e5:68:1c:25:36:35:7e: 7f:64:12:0b:af:1d:29:44:c5:c1:05:3e:0d:f8:1f:89:40:7b: a9:a5:91:35:5d:3d:36:08:53:a4:77:9e:23:11:0b:95:18:2e: d4:98:fa:fd:2b:7f:2b:e8:7a:7e:d8:84:b5:53:3e:73:e7:5c: cb:f2:8f:63:93:e2:c0:76:75:99:6b:36:ef:69:bf:73:6f:f5: d2:71:dc:42 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+S8uPCj/z+T8xYvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRjY2FiMTYtYTIwZS00M2JhLWE0NTQtNzA1YWRhMDdl OGM1MB4XDTI2MTAyMTA4NTI1MloXDTI3MDExOTA5NTI1MlowLzEtMCsGA1UEAxMk YzM0OWU3NzUtM2U1Yy00NzJkLTgzOWYtZDUyOGRkNzBmYzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnylclRiVzQkFLraixeZ6Ke5I3AVk40QqojqS 9c9SZk3vWJkAF+QivkkyXS6gPbdGlc5f3ES95jGEGVguv84qPp9Nq/IV2BWIoenO im3tQQPJGlnbebEvSnJzDqBVXRbbpuejfaQczBXWDdHD2y7jp1Y8WZ9D+71cZexu gJOhWXTbDVnd332PI1NLAanREP0DKpIBiHaXqtyNnsZqo6nLDHtNS/FlAqQW4hzL 8a9EgIaPbnWsio4wH8MVYlt3zax3UiDJ/L3wXLrKZZGplF1jmlcsJ06KOCROc1+F W4EyMT85J+7unR9AWBSiDbpGkMPUINwKouPGyYc5yywoyo+SAQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGMi44/F74ToGsWwxsB42WWlsKXbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iZGNj YWIxNi1hMjBlLTQzYmEtYTQ1NC03MDVhZGEwN2U4YzUvYmZmY2YxOWEtMGRiNS0z MThiLWE2MGItMDg0ODM2ODBmNmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYmRjY2FiMTYtYTIwZS00M2JhLWE0 NTQtNzA1YWRhMDdlOGM1L2JkY2NhYjE2LWEyMGUtNDNiYS1hNDU0LTcwNWFkYTA3 ZThjNS5jcmwwHwYDVR0jBBgwFoAUUGZ+gASR/aAYYLHGTy9xoByGmdYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iZGNjYWIxNi1hMjBlLTQzYmEtYTQ1NC03MDVh ZGEwN2U4YzUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk94wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAGuK/ZuUriUDw+ipQsaZfUJswWwvMb1TOX5YhEKlS0scrxc9GDDSUjwQP fHdAwiiYeZCckgcEWOFwe4qCaSEIB9GOVLvwi9RHELtMUJxbAVN4hzuoZ7f0hl2v 1tFhrttF3DWEJC4FTpE5FjYk5pAO+vkCfC+YTdsBKoP1MYxNNs75VEr+JZZyxsbO fp4CRBUSRWsvZ6oNTslqykOnvjt8Rw0RMlJHarutzyH/4FXlaBwlNjV+f2QSC68d KUTFwQU+DfgfiUB7qaWRNV09NghTpHeeIxELlRgu1Jj6/St/K+h6ftiEtVM+c+dc y/KPY5PiwHZ1mWs272m/c2/10nHcQg== -----END CERTIFICATE-----Generated at Sun Oct 25 09:13:14 2026 by rpki-client