$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/bb120513-c816-385c-a3d5-45ae6fdc2108.roa File: bb120513-c816-385c-a3d5-45ae6fdc2108.roa (raw, json) Hash identifier: hZc5WJmRVfnRQT1aofkGNVxfgD6mgH28tLIbJRpT47c= Subject key identifier: FC:89:34:19:93:B1:8F:9A:20:E7:B0:85:4A:AA:C3:AE:9B:BF:60:AC Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F4328584EB2B1C31C5AB3AEF46BAC4080 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/bb120513-c816-385c-a3d5-45ae6fdc2108.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 33724 IP address blocks: 64.136.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:c3:1c:5a:b3:ae:f4:6b:ac:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=24ff47bf-b500-452e-b7b1-6770663bcbce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b5:d3:8f:de:4c:c1:9d:b1:9b:75:d0:7f:a4: b8:ea:1f:a7:b8:89:cb:04:0b:87:d7:30:63:c9:82: 41:3f:d6:d9:31:ac:36:50:25:e7:96:f5:01:c3:81: 5d:92:72:0c:60:e8:76:c8:0f:a8:f9:44:f5:dd:52: 2c:67:e7:4d:b9:2b:c4:90:14:9c:28:ce:8f:07:d9: 60:fe:4d:d5:10:88:10:47:02:0c:a6:7c:05:de:48: 50:39:fa:a3:52:ff:1c:20:5e:05:e3:15:ba:4c:b9: e6:91:69:e1:c7:33:3c:5b:2c:be:12:97:93:88:3e: 26:d6:97:1c:a2:74:a0:ff:9a:eb:f4:40:90:5a:c4: 43:fa:bb:1f:9d:02:67:63:96:e1:db:5d:ed:96:e2: 87:20:64:c0:78:dc:4d:40:1e:16:b5:46:e0:95:8b: 6f:2d:3a:55:52:16:88:d8:4b:b6:cd:91:13:79:cf: 41:a6:54:a0:94:1c:7b:a5:c2:73:36:8f:16:b2:d8: f4:68:ab:93:94:47:36:d3:c9:c7:dc:98:fb:78:e4: 89:e5:bb:53:ac:2b:e6:5e:2b:5b:71:de:2f:5a:bf: 2a:18:77:16:fe:b4:3d:b3:ad:98:43:01:23:df:e8: 37:6b:1e:a1:51:5f:5b:3f:09:a3:8d:e7:74:5a:51: 3c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:89:34:19:93:B1:8F:9A:20:E7:B0:85:4A:AA:C3:AE:9B:BF:60:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/bb120513-c816-385c-a3d5-45ae6fdc2108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 64.136.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:bd:8b:92:cf:c5:ed:55:91:e3:5c:79:b5:69:51:49:87:48: b4:07:27:db:c2:d8:78:c0:0c:c9:e3:8b:82:04:49:fe:33:53: 24:4f:b3:08:1d:11:91:54:e3:fa:5a:d0:16:6b:b7:fe:1f:b0: 56:b9:ee:1d:ed:99:eb:11:07:34:05:cb:cf:21:df:f0:88:42: 90:73:4d:f9:0e:1a:3b:b0:e2:4d:d1:1a:67:6e:e8:74:d5:47: 8c:50:9a:3c:a0:87:98:95:d3:0b:5a:35:47:64:9f:cd:a0:07: f8:a4:c6:1d:fa:2e:8d:93:47:f0:10:d7:fb:11:88:5b:4d:8f: 2f:86:c8:5f:a0:ea:a4:f6:36:5f:cd:4a:5c:f1:fa:f3:ba:dd: 4f:d5:9e:b2:6c:89:bc:3c:cc:e2:0d:45:30:03:74:ea:53:2a: db:52:ab:a1:2b:53:ed:d3:04:99:3e:e0:a4:62:5a:22:9c:c2: 0c:ea:dc:41:d7:f6:4d:31:63:d9:30:fb:e3:4e:76:f0:8f:7b: 42:1e:b0:7f:13:6f:2e:35:7b:47:2a:16:7a:b5:cf:57:bc:fa: f8:16:d2:ca:a7:82:0f:c7:43:0e:14:b4:60:d2:2a:be:b0:ab: d9:e8:1d:33:0e:7d:5e:66:d0:4d:25:b1:17:e9:c6:da:17:ca: de:b3:c7:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yscMcWrOu9GusQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk MjRmZjQ3YmYtYjUwMC00NTJlLWI3YjEtNjc3MDY2M2JjYmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bXTj95MwZ2xm3XQf6S46h+nuInLBAuH1zBj yYJBP9bZMaw2UCXnlvUBw4FdknIMYOh2yA+o+UT13VIsZ+dNuSvEkBScKM6PB9lg /k3VEIgQRwIMpnwF3khQOfqjUv8cIF4F4xW6TLnmkWnhxzM8Wyy+EpeTiD4m1pcc onSg/5rr9ECQWsRD+rsfnQJnY5bh213tluKHIGTAeNxNQB4WtUbglYtvLTpVUhaI 2Eu2zZETec9BplSglBx7pcJzNo8Wstj0aKuTlEc208nH3Jj7eOSJ5btTrCvmXitb cd4vWr8qGHcW/rQ9s62YQwEj3+g3ax6hUV9bPwmjjed0WlE8gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyJNBmTsY+aIOewhUqqw66bv2CsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvYmIxMjA1MTMtYzgxNi0z ODVjLWEzZDUtNDVhZTZmZGMyMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQIhiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADe9i5LPxe1VkeNcebVpUUmHSLQHJ9vC2HjADMnji4IESf4zUyRPswgd EZFU4/pa0BZrt/4fsFa57h3tmesRBzQFy88h3/CIQpBzTfkOGjuw4k3RGmdu6HTV R4xQmjygh5iV0wtaNUdkn82gB/ikxh36Lo2TR/AQ1/sRiFtNjy+GyF+g6qT2Nl/N Slzx+vO63U/VnrJsibw8zOINRTADdOpTKttSq6ErU+3TBJk+4KRiWiKcwgzq3EHX 9k0xY9kw++NOdvCPe0IesH8Tby41e0cqFnq1z1e8+vgW0sqngg/HQw4UtGDSKr6w q9noHTMOfV5m0E0lsRfpxtoXyt6zxwA= -----END CERTIFICATE-----Generated at Sat Aug 22 00:53:21 2026 by rpki-client