$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/bcb675ae-285c-35df-9170-d65297df0a1f.roa File: bcb675ae-285c-35df-9170-d65297df0a1f.roa (raw, json) Hash identifier: kPEwPfXLF0engw+727u4Hj28EDCWbkr96SFJDEiwU0g= Subject key identifier: E2:29:9C:94:3D:63:FA:9B:29:D1:EF:62:4C:00:D2:5A:AE:E7:B4:99 Certificate issuer: /CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Certificate serial: 010D0C9F4328584EF2E75BB9286C72B818CFB0CC Authority key identifier: 92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/bcb675ae-285c-35df-9170-d65297df0a1f.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 92 IP address blocks: 128.153.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:5b:b9:28:6c:72:b8:18:cf:b0:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=72880bc3-1aca-4628-af90-2012089c1093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f6:b6:19:95:d5:5a:91:fa:c0:16:80:b9:ac: f7:56:da:bd:5f:66:40:06:cf:4a:8b:2f:9e:1d:e3: 1d:7a:46:32:c2:2c:fe:57:d3:85:64:c9:93:67:75: a8:ec:14:43:57:0e:17:4f:1d:42:07:ff:2a:3b:42: d8:e8:1c:b9:0e:3f:a7:d5:c2:67:42:58:4c:23:f7: d9:3f:70:c1:01:1b:b9:50:1d:d8:34:cb:e3:0d:29: d8:37:ce:6f:fc:6b:8e:83:ed:17:06:73:1f:81:91: 65:1c:9b:47:25:dc:94:4e:0b:07:f5:12:05:29:9b: 47:72:e6:4d:39:b4:e4:6b:80:53:89:ff:8e:bc:52: b9:2e:23:09:99:f8:c0:0e:2a:eb:67:9d:9d:bc:16: eb:27:54:d1:dd:bf:08:7a:38:0f:0f:fd:3e:ff:6c: b3:cc:32:eb:f9:6b:e8:3e:f9:82:c6:01:f8:84:73: 88:3d:a0:d1:a6:1f:6b:a8:bf:20:52:3d:ec:16:5e: 39:f7:e5:da:c7:de:8f:f8:f2:09:9d:a6:e1:7e:8a: 58:ed:61:da:30:a8:ed:cb:f3:17:df:12:2c:9a:5b: 89:dc:bb:2d:44:9d:16:6b:54:35:02:73:05:d3:1c: 40:19:0c:d0:10:40:2e:d3:ce:f7:f0:7c:63:09:11: 4b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:29:9C:94:3D:63:FA:9B:29:D1:EF:62:4C:00:D2:5A:AE:E7:B4:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/bcb675ae-285c-35df-9170-d65297df0a1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl X509v3 Authority Key Identifier: keyid:92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer sbgp-ipAddrBlock: critical IPv4: 128.153.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:ea:17:05:3b:f1:cd:42:06:a5:74:1c:eb:59:3a:40:f0:73: fe:83:c6:ca:b1:b0:11:3d:e1:cb:a0:61:85:03:0b:5f:ff:fb: 24:6c:2a:55:c6:7d:ba:2f:18:27:10:ec:e4:48:ed:c0:39:b6: 45:b4:d3:41:c3:81:c5:26:ca:05:18:68:02:97:c6:3f:1c:b1: 29:09:7d:5d:04:31:39:45:93:f8:24:41:ed:81:0a:28:03:16: a1:d3:27:9d:ae:7e:26:b7:bf:1e:5e:a5:2e:ee:a8:48:d8:e9: c0:51:c1:98:0d:65:fd:81:46:da:c8:9e:dc:2c:50:31:60:a8: e0:a4:4e:b0:4d:bd:2b:03:0b:37:53:b9:19:fb:0b:eb:02:5b: c2:97:6a:c4:18:7e:f0:63:a0:b8:6b:05:e7:01:58:03:1b:5f: 56:82:6f:03:1b:72:9c:08:ee:23:7e:a0:ff:dc:04:8d:f9:20: a4:2b:8d:a4:e2:00:aa:e6:b9:6b:4f:90:e3:75:05:6a:43:96: 18:9a:11:ad:99:77:d2:01:e4:2d:77:c5:04:cd:2e:c4:e8:eb: b0:d4:3c:52:be:05:d9:3e:61:b1:00:33:33:e0:fb:ec:76:83: ca:f9:97:3c:34:e0:07:a8:9a:45:ff:0f:79:a6:98:d0:4b:a1: 43:43:d6:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y51u5KGxyuBjPsMwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAwOGFmYjgtYzkxMy00MjZmLWE3MmQtZWE3NDFhYjFl YjdhMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk NzI4ODBiYzMtMWFjYS00NjI4LWFmOTAtMjAxMjA4OWMxMDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPa2GZXVWpH6wBaAuaz3Vtq9X2ZABs9Kiy+e HeMdekYywiz+V9OFZMmTZ3Wo7BRDVw4XTx1CB/8qO0LY6By5Dj+n1cJnQlhMI/fZ P3DBARu5UB3YNMvjDSnYN85v/GuOg+0XBnMfgZFlHJtHJdyUTgsH9RIFKZtHcuZN ObTka4BTif+OvFK5LiMJmfjADirrZ52dvBbrJ1TR3b8IejgPD/0+/2yzzDLr+Wvo PvmCxgH4hHOIPaDRph9rqL8gUj3sFl459+Xax96P+PIJnabhfopY7WHaMKjty/MX 3xIsmluJ3LstRJ0Wa1Q1AnMF0xxAGQzQEEAu08738HxjCRFLxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIpnJQ9Y/qbKdHvYkwA0lqu57SZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4 YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0MWFiMWViN2EvYmNiNjc1YWUtMjg1Yy0z NWRmLTkxNzAtZDY1Mjk3ZGYwYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjAwOGFmYjgtYzkxMy00MjZmLWE3 MmQtZWE3NDFhYjFlYjdhLzYwMDhhZmI4LWM5MTMtNDI2Zi1hNzJkLWVhNzQxYWIx ZWI3YS5jcmwwHwYDVR0jBBgwFoAUkkya7J2xWNrUBrBWHjmf0mFJSvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0 MWFiMWViN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgJlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLqFwU78c1CBqV0HOtZOkDwc/6DxsqxsBE94cugYYUDC1//+yRsKlXG fbovGCcQ7ORI7cA5tkW000HDgcUmygUYaAKXxj8csSkJfV0EMTlFk/gkQe2BCigD FqHTJ52ufia3vx5epS7uqEjY6cBRwZgNZf2BRtrIntwsUDFgqOCkTrBNvSsDCzdT uRn7C+sCW8KXasQYfvBjoLhrBecBWAMbX1aCbwMbcpwI7iN+oP/cBI35IKQrjaTi AKrmuWtPkON1BWpDlhiaEa2Zd9IB5C13xQTNLsTo67DUPFK+Bdk+YbEAMzPg++x2 g8r5lzw04AeomkX/D3mmmNBLoUND1hI= -----END CERTIFICATE-----Generated at Wed Aug 26 22:37:40 2026 by rpki-client