$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/bdc3244e-4ea8-3a24-8894-2a79f0924702.roa File: bdc3244e-4ea8-3a24-8894-2a79f0924702.roa (raw, json) Hash identifier: CgkqfhA2F6Nm7kRMDCby2Sd+VLk5smm3JZlwo9GveN8= Subject key identifier: C2:39:14:3E:0D:9D:40:15:6A:60:B5:26:99:8F:A3:BF:63:54:97:74 Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584EE7BCB8DDF870863FAAFCDA00 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/bdc3244e-4ea8-3a24-8894-2a79f0924702.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 32181 IP address blocks: 69.65.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:b8:dd:f8:70:86:3f:aa:fc:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=5b59e385-0203-4165-95e5-5ea6be760457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a0:e1:b5:29:ea:a2:aa:bf:04:d4:cf:17:89: 32:55:d4:1b:67:57:f2:5a:b0:c5:95:31:3a:22:62: 73:0f:4d:6d:aa:5f:b7:c4:00:2d:d6:55:3b:55:f9: f9:90:4b:da:9a:6a:70:9b:a4:94:ac:d5:b5:18:4c: 8b:a8:15:df:32:8b:90:4b:76:72:e2:10:fd:e6:01: b4:b6:ca:42:26:d4:c1:5a:39:6d:9f:2c:8f:48:b2: 54:3a:4c:87:95:88:f7:e6:a5:a8:b0:44:65:77:1b: e1:48:ac:6f:82:57:5e:3a:6b:75:0e:f7:82:7d:72: 2e:95:a1:25:cd:bd:23:d0:0a:42:4b:de:a5:29:bc: e5:21:b7:99:7a:c7:0e:e4:3c:26:b2:b6:bc:a8:66: bd:28:fb:e7:24:6e:82:49:6e:52:e6:e4:2c:87:f4: 5e:33:4b:a4:1a:4a:c1:89:3d:b8:11:6e:7a:10:ac: a0:b5:cb:6d:22:a0:fd:d3:7d:36:9f:21:44:05:f8: 00:96:8d:2e:8a:c4:10:31:1a:64:8e:3a:f9:78:f7: 5e:73:5a:8e:7a:21:d0:07:88:43:37:0c:da:20:f5: 64:cf:a5:dd:ab:f2:d4:92:d1:4a:d2:95:14:c6:e4: f3:ea:37:04:dd:e1:1b:d3:09:2a:3b:58:07:bf:05: b2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:39:14:3E:0D:9D:40:15:6A:60:B5:26:99:8F:A3:BF:63:54:97:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/bdc3244e-4ea8-3a24-8894-2a79f0924702.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 69.65.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:38:60:2e:05:77:56:40:cf:d6:74:f2:ef:bf:ad:9f:10:72: c1:74:52:7c:6d:d0:14:35:b9:b3:db:90:a3:8f:ec:90:9c:6f: ef:40:90:27:87:54:d8:f8:d1:6d:2b:d8:88:11:35:29:13:8d: f2:01:82:42:12:3f:42:fa:1a:81:59:bb:08:9f:be:38:23:25: 33:81:d0:80:d7:1b:ef:8a:e2:83:4e:18:6a:bd:a0:a0:b0:30: 5d:47:73:a7:66:37:86:a7:9d:c2:87:03:3a:0f:a8:c0:6c:42: ab:45:f8:70:e1:a6:03:67:5f:89:0d:3c:a0:e2:83:ba:0b:25: 13:09:b5:82:63:25:97:74:89:65:32:70:85:fd:c1:62:9e:65: d4:53:ff:26:36:3e:34:84:fe:51:1a:e7:a9:58:98:8f:81:3c: a2:f9:44:f2:fb:ba:91:24:eb:45:38:2a:42:9e:37:33:fb:57: 59:57:a0:d4:2e:91:68:74:a1:9d:00:a8:f5:59:f9:f1:5f:48: b8:8e:f7:3f:b4:f4:ef:41:5c:a2:2d:b4:b0:95:97:c2:86:ea: 87:38:b2:70:2e:ea:06:98:f1:64:33:64:25:0e:c7:b8:7e:23: 4b:e9:8b:0f:77:4e:bb:b8:10:d5:01:c8:38:be:6f:61:58:26: ae:4d:e7:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvLjd+HCGP6r82gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk NWI1OWUzODUtMDIwMy00MTY1LTk1ZTUtNWVhNmJlNzYwNDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKDhtSnqoqq/BNTPF4kyVdQbZ1fyWrDFlTE6 ImJzD01tql+3xAAt1lU7Vfn5kEvammpwm6SUrNW1GEyLqBXfMouQS3Zy4hD95gG0 tspCJtTBWjltnyyPSLJUOkyHlYj35qWosERldxvhSKxvgldeOmt1DveCfXIulaEl zb0j0ApCS96lKbzlIbeZescO5Dwmsra8qGa9KPvnJG6CSW5S5uQsh/ReM0ukGkrB iT24EW56EKygtcttIqD90302nyFEBfgAlo0uisQQMRpkjjr5ePdec1qOeiHQB4hD NwzaIPVkz6Xdq/LUktFK0pUUxuTz6jcE3eEb0wkqO1gHvwWyVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMI5FD4NnUAVamC1JpmPo79jVJd0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvYmRjMzI0NGUtNGVhOC0z YTI0LTg4OTQtMmE3OWYwOTI0NzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRUEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGA4YC4Fd1ZAz9Z08u+/rZ8QcsF0Unxt0BQ1ubPbkKOP7JCcb+9AkCeH VNj40W0r2IgRNSkTjfIBgkISP0L6GoFZuwifvjgjJTOB0IDXG++K4oNOGGq9oKCw MF1Hc6dmN4anncKHAzoPqMBsQqtF+HDhpgNnX4kNPKDig7oLJRMJtYJjJZd0iWUy cIX9wWKeZdRT/yY2PjSE/lEa56lYmI+BPKL5RPL7upEk60U4KkKeNzP7V1lXoNQu kWh0oZ0AqPVZ+fFfSLiO9z+09O9BXKIttLCVl8KG6oc4snAu6gaY8WQzZCUOx7h+ I0vpiw93Tru4ENUByDi+b2FYJq5N5yA= -----END CERTIFICATE-----Generated at Thu Sep 10 10:11:03 2026 by rpki-client