$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63/2ee1a05e-c1fa-3df3-888b-21cab5b754f2.roa File: 2ee1a05e-c1fa-3df3-888b-21cab5b754f2.roa (raw, json) Hash identifier: cN9k2z1cJldp6i/uEmfrkhBENVgwrInVWmRr8ub6Mxk= Subject key identifier: 7A:E0:D6:55:85:60:7D:7A:27:C9:88:83:27:38:F5:38:E0:C5:F7:7A Certificate issuer: /CN=bfb929b2-4b54-4ef0-b768-f91fca64bd63 Certificate serial: 010D0C9F4328584F4DA28B7FF4529E3ACC6A8C80 Authority key identifier: D2:6E:28:DA:B0:97:CC:70:46:27:4F:DE:75:36:6A:C1:52:48:D4:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63/2ee1a05e-c1fa-3df3-888b-21cab5b754f2.roa Signing time: Sat 26 Sep 2026 13:00:12 +0000 ROA not before: Sat 26 Sep 2026 13:00:12 +0000 ROA not after: Fri 25 Dec 2026 14:00:12 +0000 asID: 5650 IP address blocks: 192.225.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63/bfb929b2-4b54-4ef0-b768-f91fca64bd63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63/bfb929b2-4b54-4ef0-b768-f91fca64bd63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4d:a2:8b:7f:f4:52:9e:3a:cc:6a:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb929b2-4b54-4ef0-b768-f91fca64bd63 Validity Not Before: Sep 26 13:00:12 2026 GMT Not After : Dec 25 14:00:12 2026 GMT Subject: CN=3f4f5ad8-23ab-4173-902f-873c5abb6c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f7:15:fd:75:46:b7:20:bb:b9:4b:a1:34:56: 24:a1:6a:7a:1b:77:f2:f7:37:0c:2e:fc:d2:b7:8c: 1a:39:0e:56:52:68:ad:c3:0d:df:83:85:72:88:41: 3a:7f:10:1c:10:46:79:88:49:5a:d5:22:2f:98:12: 82:36:9b:1b:f5:e0:81:c2:19:aa:c6:f0:c3:d6:6b: 6f:1b:e0:18:e1:81:81:ff:56:82:e3:98:1f:fa:46: 7d:6c:c3:d5:b2:5c:a5:66:b0:1f:2b:4c:a2:3c:88: 66:6d:5b:49:ac:c9:4d:9e:3c:56:0f:e3:17:33:73: a4:75:e8:4d:dd:8c:90:e8:6e:08:3c:51:71:cb:04: b6:c1:71:1b:54:3e:ea:a5:10:a3:ce:6a:25:8b:68: 46:e3:e0:7a:e1:b6:46:fd:5d:ee:4d:bb:b6:81:d3: bc:7d:a4:e8:17:ef:4c:76:e8:65:59:94:91:ea:3a: 0e:44:18:08:85:a6:50:3c:37:42:1d:27:4c:9a:26: f9:ee:b7:da:ee:2f:31:8c:12:0c:1d:30:25:04:d2: 37:78:87:68:32:05:ab:06:9a:11:53:ea:32:f1:ff: da:f6:da:1b:fb:a0:90:fa:4d:13:05:bf:25:15:86: e2:f6:f5:4c:96:12:1e:28:f7:50:99:c9:44:2d:b7: 9f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E0:D6:55:85:60:7D:7A:27:C9:88:83:27:38:F5:38:E0:C5:F7:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63/2ee1a05e-c1fa-3df3-888b-21cab5b754f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63/bfb929b2-4b54-4ef0-b768-f91fca64bd63.crl X509v3 Authority Key Identifier: keyid:D2:6E:28:DA:B0:97:CC:70:46:27:4F:DE:75:36:6A:C1:52:48:D4:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63.cer sbgp-ipAddrBlock: critical IPv4: 192.225.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:49:20:ff:75:c9:bd:06:ca:a3:03:88:39:89:c1:62:36:83: 74:7a:7f:da:63:94:09:62:20:e7:7a:c0:74:44:a6:7a:77:e5: 62:a9:1b:39:7a:b1:04:55:95:55:a8:d7:84:7c:90:c4:32:39: 82:3e:56:8d:f0:94:62:4a:01:fc:aa:7f:63:8b:5e:88:72:2a: 77:63:1f:06:f6:94:0d:c7:c4:bd:7c:61:f7:81:07:13:50:16: af:f9:a3:00:10:1b:23:69:87:07:1e:1c:1f:89:63:e4:7b:6d: f8:1c:1b:72:c7:d1:82:06:9f:1b:01:cc:73:ec:2b:5d:c5:d9: 1c:af:b0:20:09:a5:db:8f:d1:7a:dc:d3:78:0f:4e:73:2a:44: e8:08:54:2d:e8:20:cb:1c:af:d9:02:69:14:c8:12:c7:d3:cc: 79:c0:0e:fe:83:72:18:7e:ec:16:a0:b5:3b:a8:29:5f:01:d8: 18:01:2b:27:54:f5:cf:d0:89:e6:f5:56:5d:46:5f:33:3b:22: 62:71:bd:a8:81:37:fd:c1:a5:59:4c:70:7d:01:fe:db:4a:46: 98:57:66:62:01:f3:99:4e:6b:5c:d5:78:ad:3d:0f:2b:02:c0: 6c:91:e2:63:d1:a1:9d:76:e6:e1:67:55:71:c1:26:f2:70:07: 24:13:b1:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Noot/9FKeOsxqjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZiOTI5YjItNGI1NC00ZWYwLWI3NjgtZjkxZmNhNjRi ZDYzMB4XDTI2MDkyNjEzMDAxMloXDTI2MTIyNTE0MDAxMlowLzEtMCsGA1UEAxMk M2Y0ZjVhZDgtMjNhYi00MTczLTkwMmYtODczYzVhYmI2Yzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfcV/XVGtyC7uUuhNFYkoWp6G3fy9zcMLvzS t4waOQ5WUmitww3fg4VyiEE6fxAcEEZ5iEla1SIvmBKCNpsb9eCBwhmqxvDD1mtv G+AY4YGB/1aC45gf+kZ9bMPVslylZrAfK0yiPIhmbVtJrMlNnjxWD+MXM3OkdehN 3YyQ6G4IPFFxywS2wXEbVD7qpRCjzmoli2hG4+B64bZG/V3uTbu2gdO8faToF+9M duhlWZSR6joORBgIhaZQPDdCHSdMmib57rfa7i8xjBIMHTAlBNI3eIdoMgWrBpoR U+oy8f/a9tob+6CQ+k0TBb8lFYbi9vVMlhIeKPdQmclELbef5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrg1lWFYH16J8mIgyc49Tjgxfd6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iZmI5 MjliMi00YjU0LTRlZjAtYjc2OC1mOTFmY2E2NGJkNjMvMmVlMWEwNWUtYzFmYS0z ZGYzLTg4OGItMjFjYWI1Yjc1NGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmZiOTI5YjItNGI1NC00ZWYwLWI3 NjgtZjkxZmNhNjRiZDYzL2JmYjkyOWIyLTRiNTQtNGVmMC1iNzY4LWY5MWZjYTY0 YmQ2My5jcmwwHwYDVR0jBBgwFoAU0m4o2rCXzHBGJ0/edTZqwVJI1GwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iZmI5MjliMi00YjU0LTRlZjAtYjc2OC1mOTFm Y2E2NGJkNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwOHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtJIP91yb0GyqMDiDmJwWI2g3R6f9pjlAliIOd6wHREpnp35WKpGzl6 sQRVlVWo14R8kMQyOYI+Vo3wlGJKAfyqf2OLXohyKndjHwb2lA3HxL18YfeBBxNQ Fq/5owAQGyNphwceHB+JY+R7bfgcG3LH0YIGnxsBzHPsK13F2RyvsCAJpduP0Xrc 03gPTnMqROgIVC3oIMscr9kCaRTIEsfTzHnADv6Dchh+7BagtTuoKV8B2BgBKydU 9c/Qieb1Vl1GXzM7ImJxvaiBN/3BpVlMcH0B/ttKRphXZmIB85lOa1zVeK09DysC wGyR4mPRoZ125uFnVXHBJvJwByQTsbg= -----END CERTIFICATE-----Generated at Wed Oct 14 17:12:23 2026 by rpki-client