$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/bf406c0e-bdc3-30b6-bc5e-f00987dd1d8f.roa File: bf406c0e-bdc3-30b6-bc5e-f00987dd1d8f.roa (raw, json) Hash identifier: anIo0UhXdt6PwnxbQ4fbtJjOQdO6Mgd85cQ6NfGrkcA= Subject key identifier: 8F:49:F9:48:61:C5:CF:F2:DA:5D:D7:19:1A:E8:2B:9B:70:EC:48:1C Certificate issuer: /CN=7b10d7ba-e273-4d34-8688-c7c1e38ab6da Certificate serial: 010D0C9F4328584EA7906EA729E6CD3D589B2B30 Authority key identifier: D6:45:D5:C1:6C:FB:39:78:63:09:8C:D9:84:C6:B1:13:16:72:9A:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/bf406c0e-bdc3-30b6-bc5e-f00987dd1d8f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 266777 IP address blocks: 142.249.120.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:6e:a7:29:e6:cd:3d:58:9b:2b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b10d7ba-e273-4d34-8688-c7c1e38ab6da Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c1c05063-4bed-41e9-8ca3-727a2aca9a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:53:e3:5a:a5:d1:3c:c3:3c:18:c4:23:f8:2b: 89:23:27:2d:0c:2f:53:e9:56:8d:45:73:71:3f:24: 30:52:57:f3:7f:5a:fd:6c:b6:84:6e:6d:0e:cc:ee: 2d:8e:b3:87:8b:31:60:09:fe:89:4a:ab:c6:b0:f9: 2e:fe:92:33:5a:be:17:5a:a3:02:06:4f:03:93:e6: ea:b0:b9:af:18:59:2d:52:26:44:64:ce:e2:87:6d: f3:e4:a1:50:9f:99:b6:e6:1b:4f:68:3d:57:96:7a: 7e:89:dc:f6:fd:81:dc:a2:8d:a2:06:67:91:37:d4: 50:9e:f9:f4:d9:c4:bd:23:cf:f4:8f:47:7f:0d:43: be:af:a8:d5:0e:0f:c2:62:9b:11:76:f4:14:85:09: c0:b8:10:6b:b0:3d:cc:c2:0a:70:0c:a5:e5:75:6f: 61:21:5d:36:68:04:1a:6c:6c:0a:c5:81:be:91:33: 3d:eb:de:13:56:16:8c:ca:7e:5d:db:0c:b3:8d:93: ee:7f:06:40:a1:a4:83:b7:e1:0a:82:20:a5:e8:1b: 78:32:9b:ce:97:8b:52:85:15:92:27:cb:12:ca:e9: ea:c6:32:b7:85:97:5e:ac:7f:e7:60:33:86:6c:5e: e5:92:1b:51:60:43:16:ee:86:00:dc:9b:64:38:d7: 89:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:49:F9:48:61:C5:CF:F2:DA:5D:D7:19:1A:E8:2B:9B:70:EC:48:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/bf406c0e-bdc3-30b6-bc5e-f00987dd1d8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.crl X509v3 Authority Key Identifier: keyid:D6:45:D5:C1:6C:FB:39:78:63:09:8C:D9:84:C6:B1:13:16:72:9A:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.cer sbgp-ipAddrBlock: critical IPv4: 142.249.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:31:23:cb:c4:92:7c:fe:df:9f:8f:46:b0:54:d9:78:7b:da: 48:07:50:ef:10:4a:fc:e8:59:cc:97:fd:2c:68:78:c2:41:2f: 5a:03:e1:ee:a9:69:f3:4f:97:52:0d:d6:08:c7:dc:7f:96:ba: 78:99:d5:a1:de:90:fc:7f:ef:e6:a1:54:1f:54:45:ec:e8:10: 10:7f:51:3e:a0:da:29:3d:2a:12:53:ab:bc:ac:50:11:20:e6: 1f:2e:05:29:f7:35:8d:87:09:d0:d3:16:04:c8:52:30:20:f5: 15:2e:3e:95:9c:fb:bf:91:d5:3d:14:e0:f6:74:57:97:99:25: 92:33:2f:b0:3d:b6:66:3e:b8:8d:b9:9b:33:14:c1:c1:08:6c: 62:71:5d:35:8c:6c:c6:55:d9:7d:20:ff:25:03:cb:93:2d:74: 01:7e:64:b3:24:2c:2c:66:0a:b1:81:cb:e2:47:79:14:ab:1f: b3:cf:f5:71:b8:a5:83:7f:a9:21:06:78:7d:88:24:01:ec:a3: 3b:61:5c:48:f2:e5:6a:d3:3a:aa:4b:a5:f7:0f:80:d4:c0:4d: 05:85:e8:90:e7:95:d2:3c:5a:c0:5f:62:d3:e9:6b:74:4a:61: 93:dd:e3:26:1e:76:c6:63:12:77:c2:78:4a:92:5e:0b:68:04: 26:9d:5f:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkG6nKebNPVibKzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IxMGQ3YmEtZTI3My00ZDM0LTg2ODgtYzdjMWUzOGFi NmRhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzFjMDUwNjMtNGJlZC00MWU5LThjYTMtNzI3YTJhY2E5YThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1PjWqXRPMM8GMQj+CuJIyctDC9T6VaNRXNx PyQwUlfzf1r9bLaEbm0OzO4tjrOHizFgCf6JSqvGsPku/pIzWr4XWqMCBk8Dk+bq sLmvGFktUiZEZM7ih23z5KFQn5m25htPaD1Xlnp+idz2/YHcoo2iBmeRN9RQnvn0 2cS9I8/0j0d/DUO+r6jVDg/CYpsRdvQUhQnAuBBrsD3MwgpwDKXldW9hIV02aAQa bGwKxYG+kTM9694TVhaMyn5d2wyzjZPufwZAoaSDt+EKgiCl6Bt4MpvOl4tShRWS J8sSyunqxjK3hZderH/nYDOGbF7lkhtRYEMW7oYA3JtkONeJSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9J+Uhhxc/y2l3XGRroK5tw7EgcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YjEw ZDdiYS1lMjczLTRkMzQtODY4OC1jN2MxZTM4YWI2ZGEvYmY0MDZjMGUtYmRjMy0z MGI2LWJjNWUtZjAwOTg3ZGQxZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2IxMGQ3YmEtZTI3My00ZDM0LTg2 ODgtYzdjMWUzOGFiNmRhLzdiMTBkN2JhLWUyNzMtNGQzNC04Njg4LWM3YzFlMzhh YjZkYS5jcmwwHwYDVR0jBBgwFoAU1kXVwWz7OXhjCYzZhMaxExZymo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83YjEwZDdiYS1lMjczLTRkMzQtODY4OC1jN2Mx ZTM4YWI2ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvl4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8xI8vEknz+35+PRrBU2Xh72kgHUO8QSvzoWcyX/SxoeMJBL1oD4e6p afNPl1IN1gjH3H+WuniZ1aHekPx/7+ahVB9URezoEBB/UT6g2ik9KhJTq7ysUBEg 5h8uBSn3NY2HCdDTFgTIUjAg9RUuPpWc+7+R1T0U4PZ0V5eZJZIzL7A9tmY+uI25 mzMUwcEIbGJxXTWMbMZV2X0g/yUDy5MtdAF+ZLMkLCxmCrGBy+JHeRSrH7PP9XG4 pYN/qSEGeH2IJAHsozthXEjy5WrTOqpLpfcPgNTATQWF6JDnldI8WsBfYtPpa3RK YZPd4yYedsZjEnfCeEqSXgtoBCadX9Y= -----END CERTIFICATE-----Generated at Wed Jul 29 16:10:58 2026 by rpki-client