$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bdd570f9-f8f6-3a64-a971-860dedaf000e.roa File: bdd570f9-f8f6-3a64-a971-860dedaf000e.roa (raw, json) Hash identifier: jCqH5ZJtRcpEcOsJrQlx4UQLvZ/ce79qZLg00WFnNJg= Subject key identifier: 08:4F:6F:7F:04:A4:F8:74:B7:84:8C:2B:EC:2C:99:1C:93:B8:20:74 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584F9E989FA48D99C08E48C7E740 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bdd570f9-f8f6-3a64-a971-860dedaf000e.roa Signing time: Sun 25 Oct 2026 13:00:13 +0000 ROA not before: Sun 25 Oct 2026 13:00:13 +0000 ROA not after: Sat 23 Jan 2027 14:00:13 +0000 asID: 25645 IP address blocks: 209.42.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:98:9f:a4:8d:99:c0:8e:48:c7:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Oct 25 13:00:13 2026 GMT Not After : Jan 23 14:00:13 2027 GMT Subject: CN=77125d03-41fc-40cc-9c75-cec71e2acc93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b0:c3:c6:8d:89:92:74:58:ca:8b:91:7d:cd: 73:55:98:fd:df:ee:13:90:ea:35:3b:54:87:63:35: 67:76:11:be:7c:88:15:ec:97:54:5e:8b:34:47:97: 62:b6:10:c4:8d:50:25:c1:5d:5b:c9:a1:2d:54:fe: ed:78:cf:1a:1a:5a:23:2a:bf:42:ae:32:d7:c2:f2: be:d6:e1:55:3b:c4:65:61:14:f8:27:67:a8:be:d9: d7:ff:41:a9:26:72:6d:cd:3a:00:dc:63:84:22:c0: 5c:cd:b3:42:05:12:29:a7:c1:b4:4d:a0:16:dd:35: 7a:c6:f5:db:7c:4f:ed:c0:11:f1:eb:f0:b0:21:98: 21:d4:ca:ca:64:bf:00:56:2d:bf:3d:ba:07:2d:cd: 14:c8:7c:2b:31:be:d0:f0:d0:4a:78:4b:55:74:d1: a1:7f:2c:e4:f6:fa:aa:4a:bb:af:77:47:4f:e1:5d: 4b:c1:3b:c5:d3:58:8d:22:f6:84:4a:81:fa:bd:6d: 8c:0e:9e:33:79:b4:c9:a7:e6:da:30:26:9c:a9:ae: 4c:27:2d:5a:50:e8:55:da:6e:50:35:72:5a:fc:8e: 97:5c:02:10:55:b8:be:b3:df:4d:56:70:f4:5a:50: a0:c8:eb:3f:fc:41:08:8d:4b:b0:17:28:fe:a5:25: 45:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4F:6F:7F:04:A4:F8:74:B7:84:8C:2B:EC:2C:99:1C:93:B8:20:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bdd570f9-f8f6-3a64-a971-860dedaf000e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.42.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:22:2e:5b:9b:b2:06:bc:48:69:0f:b9:c8:fa:f1:01:61:a0: ed:eb:fc:2c:1e:58:b6:67:87:5a:12:8b:4b:a8:dc:31:36:75: 74:53:cc:41:75:e9:29:59:59:64:42:66:93:7b:e9:98:88:0a: b3:f5:6a:87:4b:4b:5c:31:56:1b:5b:d8:27:c4:8f:5a:4d:dc: 38:18:d7:08:56:25:57:04:47:0f:48:b2:e9:99:23:88:ae:8e: 00:d7:34:6d:11:a0:64:83:a9:c2:ec:4a:cd:b2:65:f5:3e:48: b0:1f:43:e3:23:75:44:5d:bc:b6:4c:66:fc:83:46:f1:9e:41: 48:ce:f1:03:23:24:54:a9:24:3c:2d:5a:f6:00:b2:6f:e8:47: 46:54:ec:19:35:49:bd:bb:50:d2:3b:20:64:4d:99:31:c1:97: 3f:20:1e:93:54:57:32:9a:95:a2:19:50:33:68:f2:2e:bc:c4: 2b:03:47:b0:e3:a8:03:d7:af:4c:c0:9d:7e:43:a2:34:38:ab: 4b:fb:92:ee:37:f6:90:04:c3:c5:54:83:04:67:f6:5c:af:8a: bf:d2:be:a0:76:c5:80:bb:69:b2:18:ba:0d:cf:00:b0:2d:0d: 5e:85:b4:8d:a2:cf:12:38:6f:8c:6d:c4:52:05:e6:8e:84:d2: 64:7f:67:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+emJ+kjZnAjkjH50AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk NzcxMjVkMDMtNDFmYy00MGNjLTljNzUtY2VjNzFlMmFjYzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbDDxo2JknRYyouRfc1zVZj93+4TkOo1O1SH YzVndhG+fIgV7JdUXos0R5dithDEjVAlwV1byaEtVP7teM8aGlojKr9CrjLXwvK+ 1uFVO8RlYRT4J2eovtnX/0GpJnJtzToA3GOEIsBczbNCBRIpp8G0TaAW3TV6xvXb fE/twBHx6/CwIZgh1MrKZL8AVi2/PboHLc0UyHwrMb7Q8NBKeEtVdNGhfyzk9vqq Sruvd0dP4V1LwTvF01iNIvaESoH6vW2MDp4zebTJp+baMCacqa5MJy1aUOhV2m5Q NXJa/I6XXAIQVbi+s99NVnD0WlCgyOs//EEIjUuwFyj+pSVFgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhPb38EpPh0t4SMK+wsmRyTuCB0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvYmRkNTcwZjktZjhmNi0z YTY0LWE5NzEtODYwZGVkYWYwMDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SqzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoiLlubsga8SGkPucj68QFhoO3r/CweWLZnh1oSi0uo3DE2dXRTzEF1 6SlZWWRCZpN76ZiICrP1aodLS1wxVhtb2CfEj1pN3DgY1whWJVcERw9IsumZI4iu jgDXNG0RoGSDqcLsSs2yZfU+SLAfQ+MjdURdvLZMZvyDRvGeQUjO8QMjJFSpJDwt WvYAsm/oR0ZU7Bk1Sb27UNI7IGRNmTHBlz8gHpNUVzKalaIZUDNo8i68xCsDR7Dj qAPXr0zAnX5DojQ4q0v7ku439pAEw8VUgwRn9lyvir/SvqB2xYC7abIYug3PALAt DV6FtI2izxI4b4xtxFIF5o6E0mR/Z3Q= -----END CERTIFICATE-----Generated at Wed Oct 28 19:56:46 2026 by rpki-client