$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bf68cea1-df56-3c65-9a93-f1ec4ea39bcb.roa File: bf68cea1-df56-3c65-9a93-f1ec4ea39bcb.roa (raw, json) Hash identifier: k5zTuP6uOdjfg0r0GBIqQvUdIlxKvGeo2FKqovdA7zQ= Subject key identifier: 57:7D:9B:C0:DE:BA:91:C1:24:2D:49:BE:C1:74:AF:F3:38:5F:1A:6C Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584F374D4F43EE80D6761C772B80 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bf68cea1-df56-3c65-9a93-f1ec4ea39bcb.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 54113 IP address blocks: 199.232.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:4f:43:ee:80:d6:76:1c:77:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=3b1d8164-1c97-4d1e-bf6c-b4d6e35c934e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:67:30:ca:a2:ff:72:11:bf:01:28:bf:93:4f: 55:3e:fd:79:f6:77:c8:55:9a:6c:70:84:64:b9:5a: eb:1c:23:1d:73:4d:a1:79:ea:cf:62:5d:31:8b:73: 99:b2:ec:3a:4c:85:56:fb:76:0a:3a:36:bd:be:65: 14:d3:34:e9:d3:54:b0:b0:b0:27:00:a4:d2:1a:80: be:3e:04:e0:a5:06:8c:ca:91:0c:09:49:5e:1d:15: ed:c7:3a:9a:ef:a7:bf:5f:c7:07:5a:06:26:81:75: 45:79:c1:7c:a4:bc:dd:25:5e:de:f0:aa:46:36:d1: 2f:a1:52:fd:32:d8:fe:98:ec:05:53:ef:47:25:e4: 92:a0:7e:47:c8:83:18:14:b1:27:f5:be:aa:22:a8: 74:9c:b0:03:3b:e1:a1:32:2f:12:c1:67:07:5b:b8: cd:7e:c8:e5:10:a2:2c:67:d3:bc:41:45:4a:42:55: 7e:34:26:b1:ee:23:9b:c7:56:8b:d8:ca:91:f3:c3: 42:bd:da:9a:f0:fe:94:eb:17:7a:9e:b0:13:4c:70: 9c:d9:80:1b:2f:80:80:a4:94:7c:a1:f7:25:3c:f8: b1:03:10:86:51:9b:a5:fc:b3:08:85:1e:b8:79:ce: 94:9e:c8:7a:77:02:a0:6b:10:e2:f8:25:86:5a:30: b5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7D:9B:C0:DE:BA:91:C1:24:2D:49:BE:C1:74:AF:F3:38:5F:1A:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bf68cea1-df56-3c65-9a93-f1ec4ea39bcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 199.232.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:b8:a6:4d:b3:35:3f:c4:41:86:4f:79:c0:8c:0c:6e:c0:f7: 87:3d:55:2d:0f:8d:0e:76:4e:71:0e:67:d0:6c:98:52:1d:a7: d4:72:4a:53:85:a3:5b:27:a3:b7:7a:f5:fc:d3:5e:7c:53:02: 05:a5:5d:c4:33:84:0a:85:82:af:ae:d4:b6:f2:0d:e1:5f:fb: 3b:1b:db:fb:f0:46:48:c1:e9:4c:10:37:d6:a7:7c:6e:6a:00: ec:07:0b:50:6e:7b:b9:af:95:24:59:ae:52:54:ab:18:ec:83: 84:77:4e:4c:36:38:04:f1:cd:91:29:66:5c:52:15:3e:00:bf: 4b:43:76:0d:73:4e:c9:c8:2c:1a:90:66:46:b0:72:e5:dd:b7: 6a:5a:27:d6:23:90:09:88:68:c0:42:b6:ec:ee:53:ba:da:1c: f0:7a:34:50:99:ba:55:55:b8:79:f3:bf:9a:72:f6:a0:dc:4f: 6b:96:91:3d:a8:e3:cd:9d:22:27:a5:c9:fd:ee:a9:f6:26:80: c4:10:b3:dc:7e:cf:83:87:3d:91:12:b1:33:c7:ec:b3:27:d9: ac:9d:4c:91:f7:8d:ed:12:3d:8e:f8:bf:53:c1:77:11:54:e5: 87:21:e3:fd:ac:ea:ad:7f:d6:97:8f:fb:be:f8:6e:a7:f5:29: 49:44:e4:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TU9D7oDWdhx3K4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk M2IxZDgxNjQtMWM5Ny00ZDFlLWJmNmMtYjRkNmUzNWM5MzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2cwyqL/chG/ASi/k09VPv159nfIVZpscIRk uVrrHCMdc02heerPYl0xi3OZsuw6TIVW+3YKOja9vmUU0zTp01SwsLAnAKTSGoC+ PgTgpQaMypEMCUleHRXtxzqa76e/X8cHWgYmgXVFecF8pLzdJV7e8KpGNtEvoVL9 Mtj+mOwFU+9HJeSSoH5HyIMYFLEn9b6qIqh0nLADO+GhMi8SwWcHW7jNfsjlEKIs Z9O8QUVKQlV+NCax7iObx1aL2MqR88NCvdqa8P6U6xd6nrATTHCc2YAbL4CApJR8 ofclPPixAxCGUZul/LMIhR64ec6Unsh6dwKgaxDi+CWGWjC1AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFd9m8DeupHBJC1JvsF0r/M4XxpsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYmY2OGNlYTEtZGY1Ni0z YzY1LTlhOTMtZjFlYzRlYTM5YmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+hcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEm4pk2zNT/EQYZPecCMDG7A94c9VS0PjQ52TnEOZ9BsmFIdp9RySlOF o1sno7d69fzTXnxTAgWlXcQzhAqFgq+u1LbyDeFf+zsb2/vwRkjB6UwQN9anfG5q AOwHC1Bue7mvlSRZrlJUqxjsg4R3Tkw2OATxzZEpZlxSFT4Av0tDdg1zTsnILBqQ ZkawcuXdt2paJ9YjkAmIaMBCtuzuU7raHPB6NFCZulVVuHnzv5py9qDcT2uWkT2o 482dIielyf3uqfYmgMQQs9x+z4OHPZESsTPH7LMn2aydTJH3je0SPY74v1PBdxFU 5Ych4/2s6q1/1peP+774bqf1KUlE5IU= -----END CERTIFICATE-----Generated at Sat Sep 26 22:49:43 2026 by rpki-client