$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bf89dd3a-457a-3a4b-ac3c-c409a42c3f76.roa File: bf89dd3a-457a-3a4b-ac3c-c409a42c3f76.roa (raw, json) Hash identifier: EjXPY+ccGR/zmnSg91PZPUtwf4WdvD2N+BGh5U9U1Is= Subject key identifier: 1E:73:CB:FA:67:E5:75:85:E5:A8:AB:ED:B0:44:F2:4F:C3:4B:36:D4 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F612D7091379016EE300C9200 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bf89dd3a-457a-3a4b-ac3c-c409a42c3f76.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 396362 IP address blocks: 173.208.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:70:91:37:90:16:ee:30:0c:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=25baf027-95f7-41b4-a1d8-85c6893e38d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a0:76:b2:87:1a:9a:ba:1c:cb:25:c8:7a:cd: a9:0b:15:ad:c7:3f:60:ed:16:89:0e:97:2e:fc:08: 36:5b:46:63:37:c3:ea:69:a4:aa:c2:76:f1:13:8f: 6c:45:71:95:f2:cc:9b:ab:66:29:3f:b0:7b:a6:cb: ba:de:49:05:02:52:06:b9:1e:67:1e:a8:c0:38:bd: 8a:55:9c:f5:62:f8:f4:d8:1e:e2:5a:1f:47:39:7f: b1:3f:a7:f6:65:4f:5c:b2:df:da:c3:76:44:2d:ae: ff:ad:5d:fe:66:ef:2a:69:77:41:9f:95:f7:4d:ad: 37:56:ce:c8:70:c6:b5:3a:2b:1a:df:2d:95:81:58: 41:76:bc:d1:af:d1:ff:5c:82:c6:2f:69:4c:59:8a: d5:34:52:bd:2a:18:c8:3e:10:5e:38:0e:12:97:83: 76:9f:2c:d4:35:39:9a:a2:c1:1d:2f:cd:55:e0:81: 9f:85:e6:e3:b7:69:1e:9a:75:6f:f9:71:9e:f4:c4: 9c:51:1f:6a:59:38:c7:1c:b4:8d:31:b5:b8:f3:56: ce:84:59:59:1b:fc:6e:a0:32:c6:16:cb:e5:b1:09: a8:ec:23:4e:e7:fb:2d:47:ae:d1:b0:f7:b3:e3:a3: 70:0d:b6:5d:39:e7:d5:cc:0c:3f:5f:78:66:b1:de: 1b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:73:CB:FA:67:E5:75:85:E5:A8:AB:ED:B0:44:F2:4F:C3:4B:36:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bf89dd3a-457a-3a4b-ac3c-c409a42c3f76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 173.208.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:85:28:4c:13:c9:c7:00:99:f7:79:3d:d5:37:97:87:16:c1: fd:39:5e:4b:50:2d:a7:45:f8:a4:b5:7d:f8:12:0f:15:6e:a0: 30:bd:bc:d0:ac:1c:ae:25:07:92:be:2a:fd:c1:7d:a4:fe:e1: a2:ea:39:66:d0:28:6a:79:94:6e:8d:54:f3:e3:7b:9d:17:99: 38:b6:c7:4f:36:8f:22:96:ba:c7:06:d0:1b:d6:ae:ca:52:d6: 0e:32:6f:9a:09:57:5c:45:8e:42:30:24:28:05:a1:80:95:3f: cf:44:5a:99:44:35:36:3a:63:11:d4:8c:18:93:4a:9d:99:26: a9:14:05:26:aa:b2:b4:4d:a9:10:cf:8a:e1:90:26:17:b5:cd: b0:c8:8c:ff:90:da:ce:0d:a6:37:1b:9c:f5:dd:be:93:25:6c: 7c:d0:8c:74:fe:d8:9e:e7:6a:5c:45:b6:f0:39:fb:e5:79:59: 01:36:12:ac:1a:d6:e7:10:f8:e6:5e:36:23:46:68:30:ad:51: 0b:12:7b:4a:74:81:af:b8:d5:16:d4:62:0e:e0:54:e2:52:26: 47:69:29:b8:49:c1:62:35:85:a0:5f:aa:5e:4f:07:04:71:ee: 69:db:d9:62:ce:6a:f6:6a:0d:b6:49:dd:46:92:98:89:13:6d: 81:b1:44:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLXCRN5AW7jAMkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk MjViYWYwMjctOTVmNy00MWI0LWExZDgtODVjNjg5M2UzOGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqB2socamrocyyXIes2pCxWtxz9g7RaJDpcu /Ag2W0ZjN8PqaaSqwnbxE49sRXGV8sybq2YpP7B7psu63kkFAlIGuR5nHqjAOL2K VZz1Yvj02B7iWh9HOX+xP6f2ZU9cst/aw3ZELa7/rV3+Zu8qaXdBn5X3Ta03Vs7I cMa1Oisa3y2VgVhBdrzRr9H/XILGL2lMWYrVNFK9KhjIPhBeOA4Sl4N2nyzUNTma osEdL81V4IGfhebjt2kemnVv+XGe9MScUR9qWTjHHLSNMbW481bOhFlZG/xuoDLG FsvlsQmo7CNO5/stR67RsPez46NwDbZdOefVzAw/X3hmsd4bCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5zy/pn5XWF5air7bBE8k/DSzbUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYmY4OWRkM2EtNDU3YS0z YTRiLWFjM2MtYzQwOWE0MmMzZjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrdBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeFKEwTyccAmfd5PdU3l4cWwf05XktQLadF+KS1ffgSDxVuoDC9vNCs HK4lB5K+Kv3BfaT+4aLqOWbQKGp5lG6NVPPje50XmTi2x082jyKWuscG0BvWrspS 1g4yb5oJV1xFjkIwJCgFoYCVP89EWplENTY6YxHUjBiTSp2ZJqkUBSaqsrRNqRDP iuGQJhe1zbDIjP+Q2s4NpjcbnPXdvpMlbHzQjHT+2J7nalxFtvA5++V5WQE2Eqwa 1ucQ+OZeNiNGaDCtUQsSe0p0ga+41RbUYg7gVOJSJkdpKbhJwWI1haBfql5PBwRx 7mnb2WLOavZqDbZJ3UaSmIkTbYGxRKQ= -----END CERTIFICATE-----Generated at Sun Oct 4 13:43:03 2026 by rpki-client