$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa File: be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa (raw, json) Hash identifier: L8xMiZu8JKoB1tdfakWEOuaa1P8Gzfhro+J+EaTBoi0= Subject key identifier: F0:DC:A1:11:60:D0:89:6E:05:57:11:E0:D8:5F:1C:31:B9:39:07:C6 Certificate issuer: /CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5 Certificate serial: 010D0C9F4328584EA787D860D19B0F728F981B80 Authority key identifier: 00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14041 IP address blocks: 198.59.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 11 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:d8:60:d1:9b:0f:72:8f:98:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=389a37a2-c09e-4925-ac34-0dedb8addd31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d6:2a:a5:e4:ec:d9:42:d8:5d:0e:ad:ea:e7: ad:28:93:53:4c:a0:ea:f4:2e:7f:a6:6c:ee:7c:79: 61:48:71:45:33:c4:21:72:e4:d9:00:92:31:92:bb: 3d:3a:91:26:f7:0c:9d:96:68:ca:69:7a:08:8d:e7: f6:ae:75:78:a3:94:83:a3:fe:c6:61:60:3f:95:5d: f8:e8:f9:af:b3:83:9e:89:fd:67:e5:91:56:83:c4: fb:6a:35:0d:ae:d6:6a:3a:bf:26:00:cc:1c:f2:40: e7:8b:d2:89:50:e5:e5:e9:98:04:11:68:86:fe:86: 18:a5:97:ed:0a:c6:a8:00:63:91:40:82:24:d5:17: 36:9d:93:10:11:33:dd:6b:8f:2f:67:7c:cf:6f:ba: 3f:75:63:b5:77:78:91:a9:24:5d:8a:7a:56:82:07: 01:b8:2e:47:ca:d0:dd:78:dd:4e:8e:c0:66:24:50: 5d:b8:99:16:d1:d7:4d:63:13:cc:93:6d:56:e2:da: 4c:98:99:e3:99:ef:87:21:53:1e:78:c2:18:5b:22: b6:b1:a4:83:30:f7:c8:08:27:90:42:45:73:7c:3a: 21:9e:ce:52:8d:27:fc:45:16:ac:4d:2b:56:d1:7b: 39:09:1b:dc:01:62:85:8c:86:d2:53:3d:ef:96:fe: 80:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DC:A1:11:60:D0:89:6E:05:57:11:E0:D8:5F:1C:31:B9:39:07:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl X509v3 Authority Key Identifier: keyid:00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer sbgp-ipAddrBlock: critical IPv4: 198.59.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:1b:60:3a:ad:42:f3:cc:e1:27:20:37:53:94:30:75:20:f6: c1:60:90:f0:25:f6:a7:bc:de:07:7c:9a:fe:0f:8d:48:ce:fc: a0:46:2b:c4:d3:3a:98:8f:a4:2e:e4:9d:bd:e1:a4:5d:85:a4: 87:24:ad:2b:09:49:ec:d5:1b:4e:cc:c2:09:e3:d5:1a:11:2e: ad:9d:76:8a:8a:36:3a:02:35:4a:ae:ff:cd:4d:d1:f7:6f:96: d6:f3:dc:c3:82:91:59:4c:ae:e9:3a:85:f4:8a:ad:8f:08:8c: c5:db:f5:da:9b:02:4f:5e:ed:a3:c2:ff:91:df:b7:2a:d2:d7: 39:e0:45:f4:b9:71:00:70:a1:be:ea:0d:1a:11:bb:49:2c:b4: 24:4e:fa:4f:20:73:94:dc:1d:9b:e3:90:23:2e:19:9d:0b:53: 6c:53:2a:e1:ec:d5:6b:85:d9:3c:24:f8:4b:78:dd:da:b5:53: 4a:96:18:28:ba:03:ce:2a:52:4f:f2:b7:49:be:ca:91:62:a8: fd:07:6b:3f:e6:43:f4:20:fe:9c:4e:07:71:2b:29:1f:7f:03: 8d:42:a0:62:96:65:20:6a:1f:65:86:fb:94:d5:47:58:6e:01: db:d0:3f:7b:6d:f7:99:a6:93:be:cf:7b:b3:4d:5f:d0:c4:0d: 5c:51:82:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh9hg0ZsPco+YG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzOTUxZWMtMGY4YS00OWQyLWJlYzctNDFhOTY1N2U4 N2Y1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Mzg5YTM3YTItYzA5ZS00OTI1LWFjMzQtMGRlZGI4YWRkZDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49YqpeTs2ULYXQ6t6uetKJNTTKDq9C5/pmzu fHlhSHFFM8QhcuTZAJIxkrs9OpEm9wydlmjKaXoIjef2rnV4o5SDo/7GYWA/lV34 6Pmvs4Oeif1n5ZFWg8T7ajUNrtZqOr8mAMwc8kDni9KJUOXl6ZgEEWiG/oYYpZft CsaoAGORQIIk1Rc2nZMQETPda48vZ3zPb7o/dWO1d3iRqSRdinpWggcBuC5HytDd eN1OjsBmJFBduJkW0ddNYxPMk21W4tpMmJnjme+HIVMeeMIYWyK2saSDMPfICCeQ QkVzfDohns5SjSf8RRasTStW0Xs5CRvcAWKFjIbSUz3vlv6A5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDcoRFg0IluBVcR4NhfHDG5OQfGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5 NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5NjU3ZTg3ZjUvYmU0MDA1NDQtMTlmMC0z ZWQxLWJmM2MtZTVmOWFiMzczMGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmMzOTUxZWMtMGY4YS00OWQyLWJl YzctNDFhOTY1N2U4N2Y1L2JjMzk1MWVjLTBmOGEtNDlkMi1iZWM3LTQxYTk2NTdl ODdmNS5jcmwwHwYDVR0jBBgwFoAUAJbdmRPkwQDKZnxWpp8vQbnUXDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5 NjU3ZTg3ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGxjvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkbYDqtQvPM4ScgN1OUMHUg9sFgkPAl9qe83gd8mv4PjUjO/KBGK8TT OpiPpC7knb3hpF2FpIckrSsJSezVG07Mwgnj1RoRLq2ddoqKNjoCNUqu/81N0fdv ltbz3MOCkVlMruk6hfSKrY8IjMXb9dqbAk9e7aPC/5HftyrS1zngRfS5cQBwob7q DRoRu0kstCRO+k8gc5TcHZvjkCMuGZ0LU2xTKuHs1WuF2Twk+Et43dq1U0qWGCi6 A84qUk/yt0m+ypFiqP0Haz/mQ/Qg/pxOB3ErKR9/A41CoGKWZSBqH2WG+5TVR1hu AdvQP3tt95mmk77Pe7NNX9DEDVxRgpE= -----END CERTIFICATE-----Generated at Mon Aug 10 12:36:09 2026 by rpki-client