$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878/bf5ecd12-9971-302d-8ef6-5d8b3b094c12.roa File: bf5ecd12-9971-302d-8ef6-5d8b3b094c12.roa (raw, json) Hash identifier: fZhxO4sf5/U66R+7OTkwoa+URDprjRKYPMCZQn4/y3Y= Subject key identifier: 14:ED:C8:88:70:56:C7:26:E9:9E:DD:AC:E8:94:35:56:B2:D8:83:81 Certificate issuer: /CN=f90be2e1-b57b-4e04-bd16-0b4a08488878 Certificate serial: 010D0C9F4328584EE6B30673E450EDF96E080500 Authority key identifier: 0E:48:E4:C3:2E:C0:3B:51:EE:4B:9B:6E:9C:60:C1:52:85:1B:78:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878/bf5ecd12-9971-302d-8ef6-5d8b3b094c12.roa Signing time: Thu 20 Aug 2026 16:05:09 +0000 ROA not before: Thu 20 Aug 2026 16:05:09 +0000 ROA not after: Wed 18 Nov 2026 17:05:09 +0000 asID: 32161 IP address blocks: 64.38.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878/f90be2e1-b57b-4e04-bd16-0b4a08488878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878/f90be2e1-b57b-4e04-bd16-0b4a08488878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e6:b3:06:73:e4:50:ed:f9:6e:08:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f90be2e1-b57b-4e04-bd16-0b4a08488878 Validity Not Before: Aug 20 16:05:09 2026 GMT Not After : Nov 18 17:05:09 2026 GMT Subject: CN=cd1a43b2-1e8e-4d63-9b62-006965e38b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1f:d1:e1:51:a1:4f:01:4b:34:3f:38:32:60: f5:69:48:13:46:7b:c8:ba:ef:f2:80:4c:3d:1b:28: 20:e8:2c:c6:5d:08:40:17:e6:2a:b2:fd:c2:8b:18: 80:b4:91:74:90:a8:8e:8d:8e:16:68:2f:92:bc:3b: 5f:15:68:c0:83:23:37:05:30:ab:15:3a:a9:ad:55: 5f:7d:ac:4b:b3:d0:0a:cd:b1:d6:98:c5:b2:e5:6b: 1f:57:b4:42:87:d1:31:6f:4c:13:00:51:5a:8b:12: 33:64:4e:ea:48:6b:79:44:a5:b4:a3:f8:2a:1d:ea: b3:e4:50:ac:f0:45:86:05:58:ba:3e:a2:0d:d2:1c: 44:62:d0:24:30:e2:99:4e:72:4c:77:ac:41:1d:23: 62:2d:6e:df:58:c1:5d:2b:2a:3c:29:c1:e3:c2:6d: 4e:2b:7f:94:41:10:55:53:82:c0:3f:dd:2d:da:17: 77:f8:e5:7a:55:81:b1:79:24:60:04:43:e5:66:83: cc:e8:06:aa:26:96:86:79:ef:1b:a7:2f:41:18:34: 65:06:0f:31:e4:c8:b3:9c:1f:21:ea:2e:44:83:a0: e5:87:98:6b:ef:20:a9:60:df:38:6f:d2:95:52:91: 65:11:e1:92:c6:04:94:94:db:16:ff:85:24:cb:0e: 62:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:ED:C8:88:70:56:C7:26:E9:9E:DD:AC:E8:94:35:56:B2:D8:83:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878/bf5ecd12-9971-302d-8ef6-5d8b3b094c12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878/f90be2e1-b57b-4e04-bd16-0b4a08488878.crl X509v3 Authority Key Identifier: keyid:0E:48:E4:C3:2E:C0:3B:51:EE:4B:9B:6E:9C:60:C1:52:85:1B:78:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878.cer sbgp-ipAddrBlock: critical IPv4: 64.38.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:f9:66:9f:88:dc:ee:1d:1c:8e:3b:5c:e9:e3:73:ff:7e:4e: 19:9c:22:47:77:43:f2:cd:d3:6b:e4:22:32:cc:ae:5e:26:13: 8c:9d:94:a5:7b:be:ea:cb:f5:f2:de:7a:26:1f:98:51:97:aa: 13:09:3e:20:ed:04:02:a6:38:cf:ba:57:0f:7b:65:11:5c:2d: 55:af:60:e6:17:d9:8c:36:3e:6f:d8:48:8e:4d:76:42:db:98: 0b:6d:42:1d:93:42:2e:65:3f:80:f3:11:6b:a8:0e:20:6a:30: 05:a2:1c:ac:1b:4a:05:16:fe:49:a3:1a:98:09:41:e7:69:6f: b1:b6:3e:3a:db:a2:7a:dc:9d:0a:96:d8:b2:18:ff:02:de:73: f1:90:18:67:ce:25:4c:e1:88:48:fc:98:af:7a:35:9a:73:77: 2c:80:10:27:47:f7:31:9e:b7:96:a6:61:cc:6f:4f:f4:5d:92: a9:99:fc:de:3d:d7:2b:66:d2:f8:62:43:c3:f8:8f:eb:b6:11: 3b:2a:07:eb:75:f4:17:19:1c:4b:18:9b:47:f4:0b:0f:39:89: 75:95:04:8a:9a:18:6d:79:ca:4d:71:f5:c9:d1:b9:e0:7c:c6: 92:d7:be:14:af:c6:a7:9a:ed:91:2c:dc:be:21:c0:c0:89:92: c4:b0:d1:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7mswZz5FDt+W4IBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjkwYmUyZTEtYjU3Yi00ZTA0LWJkMTYtMGI0YTA4NDg4 ODc4MB4XDTI2MDgyMDE2MDUwOVoXDTI2MTExODE3MDUwOVowLzEtMCsGA1UEAxMk Y2QxYTQzYjItMWU4ZS00ZDYzLTliNjItMDA2OTY1ZTM4YjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh/R4VGhTwFLND84MmD1aUgTRnvIuu/ygEw9 Gygg6CzGXQhAF+Yqsv3CixiAtJF0kKiOjY4WaC+SvDtfFWjAgyM3BTCrFTqprVVf faxLs9AKzbHWmMWy5WsfV7RCh9Exb0wTAFFaixIzZE7qSGt5RKW0o/gqHeqz5FCs 8EWGBVi6PqIN0hxEYtAkMOKZTnJMd6xBHSNiLW7fWMFdKyo8KcHjwm1OK3+UQRBV U4LAP90t2hd3+OV6VYGxeSRgBEPlZoPM6AaqJpaGee8bpy9BGDRlBg8x5MiznB8h 6i5Eg6Dlh5hr7yCpYN84b9KVUpFlEeGSxgSUlNsW/4Ukyw5i3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTtyIhwVscm6Z7drOiUNVay2IOBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mOTBi ZTJlMS1iNTdiLTRlMDQtYmQxNi0wYjRhMDg0ODg4NzgvYmY1ZWNkMTItOTk3MS0z MDJkLThlZjYtNWQ4YjNiMDk0YzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjkwYmUyZTEtYjU3Yi00ZTA0LWJk MTYtMGI0YTA4NDg4ODc4L2Y5MGJlMmUxLWI1N2ItNGUwNC1iZDE2LTBiNGEwODQ4 ODg3OC5jcmwwHwYDVR0jBBgwFoAUDkjkwy7AO1HuS5tunGDBUoUbeI8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mOTBiZTJlMS1iNTdiLTRlMDQtYmQxNi0wYjRh MDg0ODg4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQCbUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIH5Zp+I3O4dHI47XOnjc/9+ThmcIkd3Q/LN02vkIjLMrl4mE4ydlKV7 vurL9fLeeiYfmFGXqhMJPiDtBAKmOM+6Vw97ZRFcLVWvYOYX2Yw2Pm/YSI5NdkLb mAttQh2TQi5lP4DzEWuoDiBqMAWiHKwbSgUW/kmjGpgJQedpb7G2PjrbonrcnQqW 2LIY/wLec/GQGGfOJUzhiEj8mK96NZpzdyyAECdH9zGet5amYcxvT/RdkqmZ/N49 1ytm0vhiQ8P4j+u2ETsqB+t19BcZHEsYm0f0Cw85iXWVBIqaGG15yk1x9cnRueB8 xpLXvhSvxqea7ZEs3L4hwMCJksSw0Zk= -----END CERTIFICATE-----Generated at Wed Aug 26 10:14:59 2026 by rpki-client