$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa File: 8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa (raw, json) Hash identifier: 178liymxhSKow/m+1sPpniZ8sA23+Jx23p5+Jh6K0e8= Subject key identifier: E9:DA:89:99:1A:25:77:9D:2E:05:3B:60:AB:AF:F6:89:D1:33:21:01 Certificate issuer: /CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Certificate serial: 010D0C9F4328584EA787D1C8AC2F9ABD5A212E60 Authority key identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 40867 IP address blocks: 74.114.72.0/21 maxlen: 21 172.86.240.0/21 maxlen: 21 208.90.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:d1:c8:ac:2f:9a:bd:5a:21:2e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e6229052-9777-4d5b-ab5e-90771f0ee63e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:71:06:f5:cf:1f:72:9f:1c:7b:77:a2:dd:6a: b4:83:ad:e8:54:3c:f6:d0:dd:54:bb:da:58:d2:ab: 4a:13:21:35:e6:d3:08:9c:5f:18:dc:b3:b8:e5:ec: 1c:c2:9a:9d:23:10:28:2c:fd:40:80:f7:ad:2b:dc: 66:1f:18:22:fc:59:f7:1e:82:09:89:a2:82:43:15: bd:95:9b:86:4f:48:f4:87:ed:e2:9f:6f:ab:89:43: 5c:11:b8:20:64:ea:c3:27:ec:0f:9c:7b:be:61:d8: 49:11:47:ed:80:08:26:f8:ab:80:05:d6:15:b2:fe: ca:43:64:ab:3f:7a:4e:83:01:f0:62:51:02:0c:d2: cb:8d:6e:00:77:1e:f8:fc:2c:c4:0b:67:c0:7d:19: a9:9d:66:c1:61:92:88:bf:52:c3:31:10:48:d3:dc: 04:a7:02:83:bc:67:ff:c2:da:d0:0d:e4:2c:86:70: fe:25:fe:66:9a:10:c4:d3:63:4d:8f:da:02:66:5c: 7d:dc:44:81:53:33:52:eb:c4:a7:c7:d2:34:8a:ff: b1:29:dc:da:ef:b4:88:2c:35:23:7f:fa:9e:4d:e9: a7:90:c8:1d:5d:27:dc:fe:00:2a:eb:fb:da:a1:5f: 3b:a1:66:30:dd:92:e8:39:ce:37:10:75:a6:11:27: 09:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DA:89:99:1A:25:77:9D:2E:05:3B:60:AB:AF:F6:89:D1:33:21:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl X509v3 Authority Key Identifier: keyid:BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer sbgp-ipAddrBlock: critical IPv4: 74.114.72.0/21 172.86.240.0/21 208.90.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:0f:53:5f:0c:c4:d0:dc:b6:9d:37:fd:5b:79:db:92:c0:7f: 24:ae:27:17:f7:b1:96:b4:9b:12:d7:d2:80:ae:71:33:87:1f: 15:45:63:8f:58:09:88:e2:47:b5:53:11:14:06:d3:ff:3c:23: cc:d3:ca:eb:9f:47:b3:32:23:1c:10:78:3f:0b:84:ab:81:29: bd:c2:0e:95:87:e2:c0:d6:a0:1b:e0:fb:9b:5c:d1:a8:34:78: 6d:58:7f:c8:c6:a2:34:c4:a3:aa:3a:8b:69:4e:b5:30:f7:77: a2:bb:c3:ad:77:f5:80:f5:b7:48:ba:06:88:a5:2d:24:a5:a6: 47:2f:00:e5:52:ad:6e:2a:86:05:23:5d:52:10:80:d5:27:e2: 6c:18:0b:1f:3e:c1:e3:e8:10:b1:ab:b7:7b:79:ec:e5:5f:53: 5e:cc:35:7d:60:41:44:1f:a5:f3:28:5a:69:b2:1d:b3:10:11: 61:29:ca:be:c9:a1:8b:35:a3:7a:a6:17:66:a9:e6:67:37:d2: f1:5e:b9:f2:5d:55:c9:4a:53:33:90:96:9a:d6:d5:c3:6c:93: 6b:50:1d:44:0b:00:d6:6d:9f:a6:ca:8d:7b:45:3d:c2:23:4a: 7c:36:fc:48:04:30:b7:c9:12:83:1a:be:f6:dc:b7:6e:2c:16: 10:46:c9:de -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE6nh9HIrC+avVohLmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYzYzNiZDUtM2I5NC00N2UyLTgxZmMtZjQ5MDA4MTRl NDk0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTYyMjkwNTItOTc3Ny00ZDViLWFiNWUtOTA3NzFmMGVlNjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3EG9c8fcp8ce3ei3Wq0g63oVDz20N1Uu9pY 0qtKEyE15tMInF8Y3LO45ewcwpqdIxAoLP1AgPetK9xmHxgi/Fn3HoIJiaKCQxW9 lZuGT0j0h+3in2+riUNcEbggZOrDJ+wPnHu+YdhJEUftgAgm+KuABdYVsv7KQ2Sr P3pOgwHwYlECDNLLjW4Adx74/CzEC2fAfRmpnWbBYZKIv1LDMRBI09wEpwKDvGf/ wtrQDeQshnD+Jf5mmhDE02NNj9oCZlx93ESBUzNS68Snx9I0iv+xKdza77SILDUj f/qeTemnkMgdXSfc/gAq6/vaoV87oWYw3ZLoOc43EHWmEScJ1wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFOnaiZkaJXedLgU7YKuv9onRMyEBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNj M2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkwMDgxNGU0OTQvOGI1YjNmNjAtZDk0ZC0z Yjk2LWJkNTEtN2VjZWY5MTlhMDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYzYzNiZDUtM2I5NC00N2UyLTgx ZmMtZjQ5MDA4MTRlNDk0L2JmM2MzYmQ1LTNiOTQtNDdlMi04MWZjLWY0OTAwODE0 ZTQ5NC5jcmwwHwYDVR0jBBgwFoAUv27gzbQvdJZGDC7Ndgx/FlpcgW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNjM2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkw MDgxNGU0OTQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDSnJIAwQD rFbwAwQD0FpgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGcPU18MxNDctp03/Vt525LAfySuJxf3sZa0mxLX 0oCucTOHHxVFY49YCYjiR7VTERQG0/88I8zTyuufR7MyIxwQeD8LhKuBKb3CDpWH 4sDWoBvg+5tc0ag0eG1Yf8jGojTEo6o6i2lOtTD3d6K7w6139YD1t0i6BoilLSSl pkcvAOVSrW4qhgUjXVIQgNUn4mwYCx8+wePoELGrt3t57OVfU17MNX1gQUQfpfMo WmmyHbMQEWEpyr7JoYs1o3qmF2ap5mc30vFeufJdVclKUzOQlprW1cNsk2tQHUQL ANZtn6bKjXtFPcIjSnw2/EgEMLfJEoMavvbct24sFhBGyd4= -----END CERTIFICATE-----Generated at Thu Aug 27 03:14:05 2026 by rpki-client