$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/bcf3ed6f-88a6-3d8a-afd1-b7e75ff57c66.roa File: bcf3ed6f-88a6-3d8a-afd1-b7e75ff57c66.roa (raw, json) Hash identifier: c4EsXjke8/eoM91unJi3qh9GQMR5XTLGq7Wr62sZyok= Subject key identifier: 36:8C:15:50:24:B6:E9:92:EA:DA:02:13:1E:BF:E7:36:3F:53:49:8B Certificate issuer: /CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Certificate serial: 010D0C9F4328584ECA6C6962BF879AE15840AF80 Authority key identifier: BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/bcf3ed6f-88a6-3d8a-afd1-b7e75ff57c66.roa Signing time: Mon 10 Aug 2026 13:00:12 +0000 ROA not before: Mon 10 Aug 2026 13:00:12 +0000 ROA not after: Sun 08 Nov 2026 14:00:12 +0000 asID: 153371 IP address blocks: 142.249.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:6c:69:62:bf:87:9a:e1:58:40:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Validity Not Before: Aug 10 13:00:12 2026 GMT Not After : Nov 8 14:00:12 2026 GMT Subject: CN=f6df668f-c1d0-4b89-b82e-11566b581c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:07:bc:25:67:4d:89:54:a3:d7:78:57:6d:fd: 40:c1:7f:fa:6f:eb:a2:20:3a:15:4a:5c:4a:83:bf: 2b:5e:bd:ef:24:22:0a:4f:68:38:c8:bc:c9:c0:47: 08:a4:eb:17:a0:72:91:8d:93:e4:62:ce:8a:12:e4: b0:c2:1c:06:c9:ae:35:60:6f:f8:19:b0:af:26:03: 08:e8:72:d8:a4:92:ed:e4:5b:e9:1e:a5:5e:b5:ea: 3e:e3:df:a9:a8:3d:f4:fa:e0:67:18:71:9a:7a:40: 74:05:47:f6:c2:d4:fa:ce:3f:76:0f:87:b9:d5:23: ac:52:74:64:54:16:23:32:38:1e:55:24:17:f8:66: 01:94:ca:83:b4:3c:4b:31:6b:dc:51:81:7a:d7:a1: fe:6f:fb:6f:60:30:db:c0:2e:a2:69:be:3c:4f:fa: 49:f8:c6:99:9e:1a:53:f5:71:f2:e1:b2:f2:f6:95: 39:ee:c6:cd:44:53:ac:a4:e8:de:e5:4c:7c:79:a3: c9:30:b2:61:9c:60:12:bc:a6:4d:28:b2:3c:3c:17: 6e:7c:f6:de:8e:3f:3f:a8:8d:03:c7:08:e4:8d:eb: 1c:f5:66:87:3f:25:03:01:48:8b:c2:cd:3f:b6:88: 03:af:cd:6d:95:f5:ac:c8:e2:46:8d:b6:7c:2c:11: 9d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8C:15:50:24:B6:E9:92:EA:DA:02:13:1E:BF:E7:36:3F:53:49:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/bcf3ed6f-88a6-3d8a-afd1-b7e75ff57c66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl X509v3 Authority Key Identifier: keyid:BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer sbgp-ipAddrBlock: critical IPv4: 142.249.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:e7:2e:a1:e6:86:a8:51:bf:34:3b:b6:01:7e:e6:a1:26:17: 7b:18:1e:7d:44:4e:e5:02:a4:6d:93:7a:7c:25:92:f9:e0:ed: 91:37:c6:d1:27:4c:78:ef:f5:b6:9d:86:dd:d8:27:d9:2c:1e: 6a:1b:8d:18:40:79:98:fa:90:aa:63:0d:19:24:05:20:34:bd: 3d:11:c9:cd:25:90:bb:b4:de:ea:88:75:8e:f4:54:84:c7:a8: 52:f2:00:5f:68:0c:eb:8f:5b:30:5f:66:b7:8a:8d:a9:5f:2b: 32:55:4c:6c:db:95:bb:97:60:9e:4a:d0:13:7d:28:9b:4a:b7: f2:6d:9e:e1:77:37:be:05:d8:5e:72:d7:32:ab:22:b5:bf:31: 1c:68:96:5d:80:ed:02:7f:f6:d4:48:72:30:e8:c2:c3:0f:aa: c1:fd:73:33:c9:80:58:64:67:30:e4:1c:62:b5:22:62:e4:85: d1:c4:93:e2:49:61:62:d3:3c:cb:08:b7:a8:4e:5f:29:30:fe: b2:16:2f:c3:2b:57:33:14:fe:28:21:bc:e0:86:cb:a6:2f:1f: 44:ff:bc:ac:19:1a:8d:34:07:16:a2:b3:6f:e4:c5:57:48:cd: af:9d:bd:f8:2a:b7:75:a9:4f:02:a3:1d:97:e9:de:f4:d7:f6: 89:5a:66:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbGliv4ea4VhAr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU0YTFkZmEtODg2Ny00YWVmLWEyZTYtMTMxZTkzYWRk OWY5MB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk ZjZkZjY2OGYtYzFkMC00Yjg5LWI4MmUtMTE1NjZiNTgxYzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAe8JWdNiVSj13hXbf1AwX/6b+uiIDoVSlxK g78rXr3vJCIKT2g4yLzJwEcIpOsXoHKRjZPkYs6KEuSwwhwGya41YG/4GbCvJgMI 6HLYpJLt5FvpHqVeteo+49+pqD30+uBnGHGaekB0BUf2wtT6zj92D4e51SOsUnRk VBYjMjgeVSQX+GYBlMqDtDxLMWvcUYF616H+b/tvYDDbwC6iab48T/pJ+MaZnhpT 9XHy4bLy9pU57sbNRFOspOje5Ux8eaPJMLJhnGASvKZNKLI8PBdufPbejj8/qI0D xwjkjesc9WaHPyUDAUiLws0/togDr81tlfWsyOJGjbZ8LBGdCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaMFVAktumS6toCEx6/5zY/U0mLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRh MWRmYS04ODY3LTRhZWYtYTJlNi0xMzFlOTNhZGQ5ZjkvYmNmM2VkNmYtODhhNi0z ZDhhLWFmZDEtYjdlNzVmZjU3YzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGU0YTFkZmEtODg2Ny00YWVmLWEy ZTYtMTMxZTkzYWRkOWY5L2RlNGExZGZhLTg4NjctNGFlZi1hMmU2LTEzMWU5M2Fk ZDlmOS5jcmwwHwYDVR0jBBgwFoAUvthWMuuMpErA6gOYoNHxLymRA8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRhMWRmYS04ODY3LTRhZWYtYTJlNi0xMzFl OTNhZGQ5ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvkkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/nLqHmhqhRvzQ7tgF+5qEmF3sYHn1ETuUCpG2Tenwlkvng7ZE3xtEn THjv9badht3YJ9ksHmobjRhAeZj6kKpjDRkkBSA0vT0Ryc0lkLu03uqIdY70VITH qFLyAF9oDOuPWzBfZreKjalfKzJVTGzblbuXYJ5K0BN9KJtKt/JtnuF3N74F2F5y 1zKrIrW/MRxoll2A7QJ/9tRIcjDowsMPqsH9czPJgFhkZzDkHGK1ImLkhdHEk+JJ YWLTPMsIt6hOXykw/rIWL8MrVzMU/ighvOCGy6YvH0T/vKwZGo00Bxais2/kxVdI za+dvfgqt3WpTwKjHZfp3vTX9olaZo8= -----END CERTIFICATE-----Generated at Sat Sep 5 00:28:05 2026 by rpki-client