$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bcc7fd24-80a7-3173-86e9-464eea055319.roa File: bcc7fd24-80a7-3173-86e9-464eea055319.roa (raw, json) Hash identifier: 94afDm7+IBUiDPxGxgdVtW4ssZzWnBareSxfUvixAYY= Subject key identifier: E2:92:EE:4A:E0:34:8A:55:A1:6D:11:C7:E6:79:AF:D8:E0:BD:31:AD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4984B77749D4740C614E7280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bcc7fd24-80a7-3173-86e9-464eea055319.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 108.59.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:b7:77:49:d4:74:0c:61:4e:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9ae515d3-f777-4487-a18c-62b849ffb7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cb:42:f1:09:c2:6f:41:96:88:e2:82:fb:59: 1a:26:5f:0a:28:3f:cb:d4:84:26:b5:f2:01:c3:e9: 09:a7:d2:da:36:5d:0d:3d:8c:82:ab:ea:67:99:65: 42:63:5e:af:df:86:33:43:9d:a1:7f:7c:c2:40:47: cd:ae:27:0b:45:65:25:22:5c:98:22:b3:7f:2d:67: d6:b5:73:8f:b8:79:e2:89:69:45:c5:1d:85:b7:a6: 65:b4:2a:25:2e:ae:a5:35:54:5d:0f:ee:f0:66:4b: 4e:bb:ee:7e:c0:7c:16:68:f0:a2:8f:7e:53:71:f4: eb:5c:db:1b:3f:26:e6:4f:94:b0:5b:91:1d:3e:e7: 9e:5d:6a:4a:6c:d5:04:d2:5d:4e:0e:04:7d:9e:a4: b8:68:72:aa:be:a2:e4:09:ca:92:e7:f5:4e:3b:4c: 8b:e1:87:34:25:f8:a5:b2:d5:09:a4:8e:10:8f:02: d0:8d:43:6b:05:c7:cf:5f:ea:5e:c3:c0:e0:a9:a5: a5:20:20:60:bb:d5:26:89:b3:c9:bf:75:61:ba:4a: 20:5b:01:e9:4a:95:42:36:4c:10:19:c3:d8:4d:2d: 12:0e:0c:62:2a:86:dd:a1:ff:75:03:b2:33:8b:35: d2:1a:cc:93:4d:dd:1c:10:77:5c:33:a6:bf:12:19: 09:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:92:EE:4A:E0:34:8A:55:A1:6D:11:C7:E6:79:AF:D8:E0:BD:31:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bcc7fd24-80a7-3173-86e9-464eea055319.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 108.59.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:fc:f6:41:e1:ec:eb:e1:48:ae:fc:a3:a2:71:1a:c5:b3:61: 48:fc:94:bd:40:a2:88:6f:20:55:31:e0:e0:de:8d:10:e2:44: 9a:7d:27:0f:61:5d:7d:81:d2:e4:1f:1c:ab:04:3e:62:e1:4d: 78:4a:48:77:7d:59:c9:2d:8b:4a:f8:bf:92:e6:00:3d:80:b2: 2f:88:63:4f:aa:b8:b9:68:9b:e0:8a:5a:1a:13:02:36:69:62: 77:64:15:4e:f4:6e:d2:d0:79:fe:72:82:17:a5:dd:bf:d8:ad: 0b:1d:ee:76:0e:a2:88:b7:8b:1d:50:1c:7a:ac:6c:5c:a6:44: c3:7d:e6:38:28:cb:7f:ac:57:fe:60:18:ad:c6:e4:7f:fe:ab: 78:73:e5:06:16:2a:7f:a6:e5:75:91:1a:32:0e:07:11:85:c4: bc:84:fb:67:6a:10:c2:1b:4a:bc:f9:c1:70:a3:22:3f:ba:b2: bc:a6:e2:4d:d9:e0:77:35:72:bc:af:bc:7a:06:07:ae:f7:c6: eb:08:81:a1:0b:85:82:cc:65:10:56:2a:8e:79:0d:75:38:cd: e0:dc:e6:07:ca:56:d1:e2:82:04:38:7e:a1:8f:9b:4c:29:2e: 7f:55:77:5f:82:27:c5:f9:49:17:20:57:1f:d1:9a:45:e5:68: 95:82:fd:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhLd3SdR0DGFOcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWFlNTE1ZDMtZjc3Ny00NDg3LWExOGMtNjJiODQ5ZmZiN2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzctC8QnCb0GWiOKC+1kaJl8KKD/L1IQmtfIB w+kJp9LaNl0NPYyCq+pnmWVCY16v34YzQ52hf3zCQEfNricLRWUlIlyYIrN/LWfW tXOPuHniiWlFxR2Ft6ZltColLq6lNVRdD+7wZktOu+5+wHwWaPCij35TcfTrXNsb PybmT5SwW5EdPueeXWpKbNUE0l1ODgR9nqS4aHKqvqLkCcqS5/VOO0yL4Yc0Jfil stUJpI4QjwLQjUNrBcfPX+pew8DgqaWlICBgu9UmibPJv3VhukogWwHpSpVCNkwQ GcPYTS0SDgxiKobdof91A7IzizXSGsyTTd0cEHdcM6a/EhkJnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKS7krgNIpVoW0Rx+Z5r9jgvTGtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmNjN2ZkMjQtODBhNy0z MTczLTg2ZTktNDY0ZWVhMDU1MzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDtZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHL89kHh7OvhSK78o6JxGsWzYUj8lL1AoohvIFUx4ODejRDiRJp9Jw9h XX2B0uQfHKsEPmLhTXhKSHd9Wckti0r4v5LmAD2Asi+IY0+quLlom+CKWhoTAjZp YndkFU70btLQef5yghel3b/YrQsd7nYOooi3ix1QHHqsbFymRMN95jgoy3+sV/5g GK3G5H/+q3hz5QYWKn+m5XWRGjIOBxGFxLyE+2dqEMIbSrz5wXCjIj+6srym4k3Z 4Hc1cryvvHoGB673xusIgaELhYLMZRBWKo55DXU4zeDc5gfKVtHiggQ4fqGPm0wp Ln9Vd1+CJ8X5SRcgVx/RmkXlaJWC/Rw= -----END CERTIFICATE-----Generated at Tue Sep 29 20:37:56 2026 by rpki-client