$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bca291d0-d607-33d2-a2ce-47c04785d564.roa File: bca291d0-d607-33d2-a2ce-47c04785d564.roa (raw, json) Hash identifier: VxitO6FKe2tXbMOoCaVOsX+aRhVGDB6GpybELDpxM4s= Subject key identifier: F9:D7:D2:01:74:00:B1:E3:72:11:1D:5C:EA:7D:5D:B5:FF:1E:98:38 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973C6D65214FD3B36488A80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bca291d0-d607-33d2-a2ce-47c04785d564.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 852 IP address blocks: 209.107.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:c6:d6:52:14:fd:3b:36:48:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=27a12600-8f56-4b4a-86bb-74cd4a071057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:43:fe:17:e2:dd:3a:37:30:3d:98:27:9c:c9: a6:64:dd:fb:06:02:89:7b:fa:69:fa:ff:92:b1:ba: 47:f9:ff:2a:59:ec:c6:7b:3c:ba:f7:fa:c7:a3:02: c2:41:01:8a:db:8c:1a:16:37:8b:83:57:73:08:2d: d2:a2:7f:d7:25:5f:ba:61:e2:8b:64:bd:0e:58:26: 6b:0e:35:7c:e9:a4:42:cd:70:26:28:2f:77:c3:fd: db:6b:3e:fc:49:bf:11:ff:7a:fd:22:c9:ef:dc:d3: 5d:c8:44:a2:3d:4f:ca:d0:39:9e:21:ce:38:95:a2: 40:7b:e6:9b:b0:e3:d4:79:95:b0:9b:4b:c8:7d:06: 65:d0:d5:51:15:17:52:2f:85:5f:b0:77:4e:fa:43: 1f:f8:d9:35:ce:f1:a5:b8:2c:d0:36:96:c8:39:1b: 4e:08:29:b4:72:31:75:f0:2a:eb:cc:6a:bf:b0:fb: 7c:f6:4e:e4:7d:39:df:9b:5f:e7:40:4a:f7:bb:f4: 9c:1a:09:be:a1:f2:06:fb:08:98:4b:95:04:0b:3f: e8:1b:81:d0:fa:a4:5e:61:30:09:fb:19:24:ea:8f: 5e:14:00:e8:88:1d:28:b5:5d:48:5e:21:79:94:36: c2:da:f2:4e:85:58:17:1f:07:33:36:6f:cf:52:a0: dd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D7:D2:01:74:00:B1:E3:72:11:1D:5C:EA:7D:5D:B5:FF:1E:98:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bca291d0-d607-33d2-a2ce-47c04785d564.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.107.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:fc:e5:2a:34:b5:7e:67:8d:aa:09:d8:74:90:39:77:41:01: 89:5e:37:a4:3c:6c:dc:a1:10:7f:28:0d:72:61:11:d0:51:ba: 5a:d6:2c:e6:6b:58:d6:47:8c:3c:da:5c:47:bd:5e:b5:00:56: 1d:54:43:63:06:84:9b:53:40:9a:10:2d:17:92:e2:bc:df:31: 68:38:b8:b1:94:5b:48:58:0f:12:95:e0:7d:99:b4:ef:7e:bd: 0f:8a:dc:36:5b:d0:5d:10:95:7f:07:4b:4a:a4:ed:a0:e2:af: 7a:7c:ae:8d:f2:f6:36:79:d7:0e:81:1d:4e:f0:70:aa:75:a0: 68:59:5c:f5:57:62:43:ae:19:ab:f2:6f:cc:78:4f:f2:15:84: 37:51:69:79:c6:b1:23:f8:2f:7e:2d:cc:ba:6f:43:c6:b4:95: 81:93:1e:ec:4f:da:0e:55:95:58:03:fa:c0:c3:7d:7a:db:d3: 35:53:02:78:dc:78:4d:56:d4:98:00:f1:2c:8f:14:eb:7e:42: 69:b6:89:6a:b2:3d:c0:d0:46:b3:b3:f4:d7:f6:b6:f3:34:9e: 66:2e:98:a3:46:1b:9f:e4:18:d1:49:92:65:a1:8c:b7:3b:bb: 65:d4:79:19:ba:02:9a:5d:a0:b7:0c:2f:e8:62:41:2a:e5:8d: 49:78:fe:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc8bWUhT9OzZIioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjdhMTI2MDAtOGY1Ni00YjRhLTg2YmItNzRjZDRhMDcxMDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UP+F+LdOjcwPZgnnMmmZN37BgKJe/pp+v+S sbpH+f8qWezGezy69/rHowLCQQGK24waFjeLg1dzCC3Son/XJV+6YeKLZL0OWCZr DjV86aRCzXAmKC93w/3baz78Sb8R/3r9Isnv3NNdyESiPU/K0DmeIc44laJAe+ab sOPUeZWwm0vIfQZl0NVRFRdSL4VfsHdO+kMf+Nk1zvGluCzQNpbIORtOCCm0cjF1 8CrrzGq/sPt89k7kfTnfm1/nQEr3u/ScGgm+ofIG+wiYS5UECz/oG4HQ+qReYTAJ +xkk6o9eFADoiB0otV1IXiF5lDbC2vJOhVgXHwczNm/PUqDdfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnX0gF0ALHjchEdXOp9XbX/Hpg4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYmNhMjkxZDAtZDYwNy0z M2QyLWEyY2UtNDdjMDQ3ODVkNTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0WtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK785So0tX5njaoJ2HSQOXdBAYleN6Q8bNyhEH8oDXJhEdBRulrWLOZr WNZHjDzaXEe9XrUAVh1UQ2MGhJtTQJoQLReS4rzfMWg4uLGUW0hYDxKV4H2ZtO9+ vQ+K3DZb0F0QlX8HS0qk7aDir3p8ro3y9jZ51w6BHU7wcKp1oGhZXPVXYkOuGavy b8x4T/IVhDdRaXnGsSP4L34tzLpvQ8a0lYGTHuxP2g5VlVgD+sDDfXrb0zVTAnjc eE1W1JgA8SyPFOt+Qmm2iWqyPcDQRrOz9Nf2tvM0nmYumKNGG5/kGNFJkmWhjLc7 u2XUeRm6AppdoLcML+hiQSrljUl4/vQ= -----END CERTIFICATE-----Generated at Mon Nov 2 19:12:46 2026 by rpki-client