$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/bfae38a7-ec79-38f1-8257-8b1b3c10ac5b.roa File: bfae38a7-ec79-38f1-8257-8b1b3c10ac5b.roa (raw, json) Hash identifier: PjVoX6JABiAV1JNBp4tDanjBmwkoLrb0/vJyBxY5yMc= Subject key identifier: 04:41:CC:B3:F9:61:11:AA:4F:81:7B:71:E9:AE:ED:BA:67:FB:2F:EA Certificate issuer: /CN=f2bc6b7a-b8f5-4109-b7af-8975e2444d75 Certificate serial: 010D0C9F4328584F497645C44EC289F79D3C4C00 Authority key identifier: 58:74:A0:D7:3F:5C:F6:7C:EA:E0:36:90:47:16:07:B8:01:5B:F8:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/bfae38a7-ec79-38f1-8257-8b1b3c10ac5b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15296 IP address blocks: 204.209.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:45:c4:4e:c2:89:f7:9d:3c:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2bc6b7a-b8f5-4109-b7af-8975e2444d75 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=eda5e4b3-6838-4c1c-a54a-dadd514afef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:25:0d:88:12:56:b1:6b:a0:3e:06:68:6f:57: 1f:1e:0a:db:5e:0f:1e:dc:e7:e6:e3:5c:27:32:7d: b6:f6:10:e8:93:95:bc:c1:b2:57:9e:eb:9d:74:a4: ee:c0:50:5a:2d:e8:31:d0:da:5e:a9:ee:e3:17:1e: 10:2a:65:0b:fe:57:fd:27:6b:95:de:64:0c:96:dc: 3d:0f:d2:24:82:21:15:72:a1:7d:d9:0e:a9:38:c7: 1e:a9:55:3e:ea:1d:f1:6b:16:8a:af:e2:ac:bb:bc: 29:ed:47:dc:57:8b:ee:e5:ba:9f:3c:13:62:a7:c8: 77:ca:c7:68:46:58:79:88:4c:42:fe:92:74:43:75: 8a:46:15:58:21:ac:9c:81:c5:b9:1b:bd:9a:3d:f2: 61:79:dd:58:52:0b:5f:f1:88:08:01:3c:41:7a:55: 60:af:b9:de:60:9a:19:92:cf:45:a2:f3:2f:ae:85: da:c7:59:c4:77:84:62:b9:1d:4f:fd:94:59:33:81: 49:86:f8:23:26:76:55:ac:f6:65:bd:2d:ae:03:b4: 9a:32:3e:16:31:74:d4:ab:d2:e7:ba:04:46:f6:00: 68:c7:7b:18:da:a0:ac:77:12:40:aa:7f:37:d2:b6: cb:1d:e4:f1:a9:7c:e5:95:18:0a:4c:73:a2:87:d4: a2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:41:CC:B3:F9:61:11:AA:4F:81:7B:71:E9:AE:ED:BA:67:FB:2F:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/bfae38a7-ec79-38f1-8257-8b1b3c10ac5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.crl X509v3 Authority Key Identifier: keyid:58:74:A0:D7:3F:5C:F6:7C:EA:E0:36:90:47:16:07:B8:01:5B:F8:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer sbgp-ipAddrBlock: critical IPv4: 204.209.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:31:4a:eb:89:a4:90:59:cd:0e:bc:c8:84:6d:8b:02:cb:f4: d5:36:80:e3:77:83:1e:b5:42:8e:9c:63:77:c4:51:de:b7:0a: 03:2e:91:ad:6c:a2:29:91:8e:db:b3:1c:bd:8d:9a:03:a6:8a: a2:8e:8d:bd:7f:5c:08:be:d5:6d:db:91:07:a5:f1:82:9c:ab: 97:17:1a:2e:bd:b8:5e:0f:c5:1a:53:e2:8d:47:32:55:26:c6: 26:22:6e:f5:ae:17:d1:7c:3e:d1:0d:2b:42:07:67:b8:dd:4e: 8b:52:9e:3c:ac:21:1e:74:f0:ab:07:be:41:c1:9b:a1:92:28: 4f:6a:e5:75:2f:68:48:32:94:1a:0c:e1:72:ca:09:ae:df:f4: 37:48:b9:28:ff:ab:43:31:3f:53:8c:b3:cb:00:cd:9d:79:aa: b4:56:13:40:14:e6:93:f4:77:7a:4f:75:49:8d:fe:d2:0b:fc: 07:49:9e:b7:76:90:c5:ab:78:d9:bc:3b:a0:ca:93:2a:b6:0e: 0c:8d:52:a7:94:8b:c0:e1:16:ed:9c:b7:47:7e:5c:fa:e0:b2: f2:c9:99:7b:9d:7a:20:a0:30:a7:08:50:db:dc:26:e9:52:cd: ff:cc:61:42:3e:81:f9:74:14:01:59:57:2f:5a:2d:c6:ca:2e: 6f:fc:e5:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdkXETsKJ9508TAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJiYzZiN2EtYjhmNS00MTA5LWI3YWYtODk3NWUyNDQ0 ZDc1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWRhNWU0YjMtNjgzOC00YzFjLWE1NGEtZGFkZDUxNGFmZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriUNiBJWsWugPgZob1cfHgrbXg8e3Ofm41wn Mn229hDok5W8wbJXnuuddKTuwFBaLegx0Npeqe7jFx4QKmUL/lf9J2uV3mQMltw9 D9IkgiEVcqF92Q6pOMceqVU+6h3xaxaKr+Ksu7wp7UfcV4vu5bqfPBNip8h3ysdo Rlh5iExC/pJ0Q3WKRhVYIaycgcW5G72aPfJhed1YUgtf8YgIATxBelVgr7neYJoZ ks9FovMvroXax1nEd4RiuR1P/ZRZM4FJhvgjJnZVrPZlvS2uA7SaMj4WMXTUq9Ln ugRG9gBox3sY2qCsdxJAqn830rbLHeTxqXzllRgKTHOih9SiFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARBzLP5YRGqT4F7cemu7bpn+y/qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mMmJj NmI3YS1iOGY1LTQxMDktYjdhZi04OTc1ZTI0NDRkNzUvYmZhZTM4YTctZWM3OS0z OGYxLTgyNTctOGIxYjNjMTBhYzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjJiYzZiN2EtYjhmNS00MTA5LWI3 YWYtODk3NWUyNDQ0ZDc1L2YyYmM2YjdhLWI4ZjUtNDEwOS1iN2FmLTg5NzVlMjQ0 NGQ3NS5jcmwwHwYDVR0jBBgwFoAUWHSg1z9c9nzq4DaQRxYHuAFb+KUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mMmJjNmI3YS1iOGY1LTQxMDktYjdhZi04OTc1 ZTI0NDRkNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNE6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMxSuuJpJBZzQ68yIRtiwLL9NU2gON3gx61Qo6cY3fEUd63CgMuka1s oimRjtuzHL2NmgOmiqKOjb1/XAi+1W3bkQel8YKcq5cXGi69uF4PxRpT4o1HMlUm xiYibvWuF9F8PtENK0IHZ7jdTotSnjysIR508KsHvkHBm6GSKE9q5XUvaEgylBoM 4XLKCa7f9DdIuSj/q0MxP1OMs8sAzZ15qrRWE0AU5pP0d3pPdUmN/tIL/AdJnrd2 kMWreNm8O6DKkyq2DgyNUqeUi8DhFu2ct0d+XPrgsvLJmXudeiCgMKcIUNvcJulS zf/MYUI+gfl0FAFZVy9aLcbKLm/85aI= -----END CERTIFICATE-----Generated at Sun Oct 25 12:33:26 2026 by rpki-client