$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa/bf53fb28-10fb-3cc3-95b0-8285e8e7bf5d.roa File: bf53fb28-10fb-3cc3-95b0-8285e8e7bf5d.roa (raw, json) Hash identifier: t4PKP9ismJWh9PG56/MGPMCb5B72BxMw5sfuMNOKFYQ= Subject key identifier: 90:7E:CC:4B:AD:F3:ED:D5:87:16:B2:07:09:32:55:F7:B3:61:F3:5A Certificate issuer: /CN=22d9aa3d-d04f-4144-9ccf-9c76068e7cfa Certificate serial: 010D0C9F4328584FAAE516A506A3FAA0087C0700 Authority key identifier: 20:B2:83:BF:40:27:09:EB:3B:DA:12:2E:D0:BE:9E:E8:7A:6C:5B:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa/bf53fb28-10fb-3cc3-95b0-8285e8e7bf5d.roa Signing time: Thu 29 Oct 2026 22:44:27 +0000 ROA not before: Thu 29 Oct 2026 22:44:27 +0000 ROA not after: Wed 27 Jan 2027 23:44:27 +0000 asID: 19707 IP address blocks: 205.236.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:aa:e5:16:a5:06:a3:fa:a0:08:7c:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22d9aa3d-d04f-4144-9ccf-9c76068e7cfa Validity Not Before: Oct 29 22:44:27 2026 GMT Not After : Jan 27 23:44:27 2027 GMT Subject: CN=a42b0181-5613-4e7b-9a6e-d11ada170df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:89:65:e3:6f:41:ba:6f:ca:ca:3b:25:82:05: 82:bb:c0:48:96:46:2f:5b:23:f0:96:ea:16:d3:2c: 9d:86:bf:0a:a2:58:52:a6:57:32:85:55:9d:ad:41: 38:f2:05:9e:59:66:b0:ac:c8:8a:38:79:99:af:fd: 44:cd:fb:bd:32:f4:16:b6:34:10:5d:ad:fd:7c:60: bd:08:83:cc:22:07:b3:93:28:30:9a:19:88:16:9f: 24:e3:a1:5e:40:23:b6:4b:50:41:31:5e:ae:3c:39: 1f:47:d4:78:be:dd:f9:29:ba:df:be:53:1b:49:44: cc:39:c2:7b:3c:39:99:4a:16:3f:4e:e0:16:c7:8f: 27:89:d4:12:c4:5a:9c:4c:b9:7e:3b:1e:44:d8:4b: aa:1c:e1:3b:78:d1:f5:a1:bf:30:b3:3f:14:5c:2b: 6a:ae:03:82:f0:ce:f3:c3:31:21:87:79:d3:30:41: 75:34:17:40:87:52:0a:91:7a:4a:91:cb:ac:62:1f: b9:bb:c9:f7:c2:29:95:d5:08:2a:3f:59:ce:53:5d: a1:0c:78:9f:ee:b6:74:da:66:b3:4f:4b:b9:55:1b: 21:93:0e:01:ad:d5:09:15:35:38:ea:b4:45:92:5a: 8f:95:e6:1a:dd:95:b7:a8:a7:2b:4a:18:8c:ef:3a: a5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:7E:CC:4B:AD:F3:ED:D5:87:16:B2:07:09:32:55:F7:B3:61:F3:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa/bf53fb28-10fb-3cc3-95b0-8285e8e7bf5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa.crl X509v3 Authority Key Identifier: keyid:20:B2:83:BF:40:27:09:EB:3B:DA:12:2E:D0:BE:9E:E8:7A:6C:5B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/22d9aa3d-d04f-4144-9ccf-9c76068e7cfa.cer sbgp-ipAddrBlock: critical IPv4: 205.236.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:5c:96:88:4e:95:cf:be:ee:ad:a2:1e:67:39:4c:cd:b1:5c: c1:95:20:92:8b:2e:5f:d7:20:3d:b7:6f:d9:10:20:bf:cd:5c: 9d:a9:5b:40:68:20:2f:c0:2b:38:f1:3a:99:16:84:ae:86:ac: f4:92:a2:26:50:fc:c8:5e:cb:96:aa:cb:11:15:b1:ae:c1:48: 11:f9:85:f1:46:fd:b0:0d:e7:00:61:ad:be:98:f2:ee:96:1c: f1:e8:e1:47:a5:6f:6d:eb:7d:67:28:e8:87:7b:84:a2:0d:2a: 21:06:da:02:ab:4b:07:98:58:90:00:0e:ee:6c:98:ef:5a:4e: 35:23:46:8d:93:04:43:c6:de:25:ec:fb:ce:89:13:15:0f:75: db:34:7c:82:32:0a:77:fc:e0:1f:41:2b:30:94:f7:d0:bf:5b: 78:84:03:7a:ed:56:f3:13:45:53:78:cf:56:62:05:45:ef:cc: 8b:59:c0:e2:84:da:fb:93:71:9f:f7:ce:c9:78:4c:da:42:88: d8:3c:ce:71:04:74:10:6f:89:78:46:b3:f3:24:84:db:8c:8e: 3b:b1:e3:6a:13:3b:f5:b7:90:ec:f6:e4:03:8f:c5:f1:dc:49: 5c:59:ce:61:cf:a0:3a:1e:f7:79:5b:47:09:31:f1:96:22:57: 74:d2:db:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+q5RalBqP6oAh8BwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJkOWFhM2QtZDA0Zi00MTQ0LTljY2YtOWM3NjA2OGU3 Y2ZhMB4XDTI2MTAyOTIyNDQyN1oXDTI3MDEyNzIzNDQyN1owLzEtMCsGA1UEAxMk YTQyYjAxODEtNTYxMy00ZTdiLTlhNmUtZDExYWRhMTcwZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoll429Bum/KyjslggWCu8BIlkYvWyPwluoW 0yydhr8KolhSplcyhVWdrUE48gWeWWawrMiKOHmZr/1Ezfu9MvQWtjQQXa39fGC9 CIPMIgezkygwmhmIFp8k46FeQCO2S1BBMV6uPDkfR9R4vt35KbrfvlMbSUTMOcJ7 PDmZShY/TuAWx48nidQSxFqcTLl+Ox5E2EuqHOE7eNH1ob8wsz8UXCtqrgOC8M7z wzEhh3nTMEF1NBdAh1IKkXpKkcusYh+5u8n3wimV1QgqP1nOU12hDHif7rZ02maz T0u5VRshkw4BrdUJFTU46rRFklqPleYa3ZW3qKcrShiM7zql+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJB+zEut8+3VhxayBwkyVfezYfNaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi8yMmQ5 YWEzZC1kMDRmLTQxNDQtOWNjZi05Yzc2MDY4ZTdjZmEvYmY1M2ZiMjgtMTBmYi0z Y2MzLTk1YjAtODI4NWU4ZTdiZjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzc1MjZhMC1m ZTRlLTQ3NDEtYjM5Yi0zMjMzNTNhMWViZjIvMjJkOWFhM2QtZDA0Zi00MTQ0LTlj Y2YtOWM3NjA2OGU3Y2ZhLzIyZDlhYTNkLWQwNGYtNDE0NC05Y2NmLTljNzYwNjhl N2NmYS5jcmwwHwYDVR0jBBgwFoAUILKDv0AnCes72hIu0L6e6HpsW08wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0 MS1iMzliLTMyMzM1M2ExZWJmMi8yMmQ5YWEzZC1kMDRmLTQxNDQtOWNjZi05Yzc2 MDY4ZTdjZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzewAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhclohOlc++7q2iHmc5TM2xXMGVIJKLLl/XID23b9kQIL/NXJ2pW0Bo IC/AKzjxOpkWhK6GrPSSoiZQ/Mhey5aqyxEVsa7BSBH5hfFG/bAN5wBhrb6Y8u6W HPHo4Uelb23rfWco6Id7hKINKiEG2gKrSweYWJAADu5smO9aTjUjRo2TBEPG3iXs +86JExUPdds0fIIyCnf84B9BKzCU99C/W3iEA3rtVvMTRVN4z1ZiBUXvzItZwOKE 2vuTcZ/3zsl4TNpCiNg8znEEdBBviXhGs/MkhNuMjjux42oTO/W3kOz25AOPxfHc SVxZzmHPoDoe93lbRwkx8ZYiV3TS2zE= -----END CERTIFICATE-----Generated at Mon Nov 2 13:03:18 2026 by rpki-client