$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bc26a11d-0291-3839-ac26-6aa8c1c974a1.roa File: bc26a11d-0291-3839-ac26-6aa8c1c974a1.roa (raw, json) Hash identifier: 7lWWQe8uSP7v6uis3fLfXSHdAYfP7PDDuAS9PB4RaYs= Subject key identifier: E1:BE:55:10:6E:1B:4C:EA:8E:75:64:C4:00:FE:71:1A:FB:56:C4:63 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584ECA6C88D23B8E0183C3E790C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bc26a11d-0291-3839-ac26-6aa8c1c974a1.roa Signing time: Mon 10 Aug 2026 13:00:12 +0000 ROA not before: Mon 10 Aug 2026 13:00:12 +0000 ROA not after: Sun 08 Nov 2026 14:00:12 +0000 asID: 9304 IP address blocks: 65.86.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:6c:88:d2:3b:8e:01:83:c3:e7:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 10 13:00:12 2026 GMT Not After : Nov 8 14:00:12 2026 GMT Subject: CN=473e4d03-8056-4767-a939-59caebce69ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b0:f5:44:db:ab:1d:7e:d9:c9:4c:54:99:77: 2a:83:f7:9f:1b:60:50:a5:a2:8c:dd:a3:4d:13:e9: 3a:0d:d9:6f:e7:c8:97:64:4a:42:93:82:2d:d2:ea: 98:39:a7:51:17:d5:aa:d6:80:03:34:25:f7:ec:29: 4e:b2:ce:cc:d5:23:63:ef:e2:f2:64:a2:6e:26:72: 56:c9:f2:ee:7d:e5:cb:7f:80:12:2a:69:96:92:9c: 05:e4:1f:40:e7:2c:d8:c1:19:cf:5a:d0:98:ac:22: 1f:0d:58:64:c7:c7:b1:31:b5:0d:b5:3c:4c:96:e8: f3:0c:be:6e:c4:4d:04:ca:b7:a5:cf:25:d0:72:3f: 1c:62:20:08:f7:6a:16:00:e0:37:58:8f:45:c0:4d: ff:d0:a4:23:54:fd:94:27:5f:fc:64:6b:f8:fc:a6: 5a:49:2f:91:bc:9e:09:9c:09:ca:1b:5c:8d:42:ee: 38:f4:f7:c7:80:8c:25:5d:25:ef:73:28:bd:8c:90: f2:6c:d1:11:32:3d:a2:6a:a8:ea:26:06:33:e2:3c: 29:6e:ff:78:76:1b:79:8b:5e:d4:8d:dd:b1:0c:45: 72:6c:2d:5a:f7:92:4d:09:25:e2:66:9d:64:5d:bf: 0b:31:e0:45:3f:60:2c:78:b5:6f:b5:99:ea:15:8b: 5e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:BE:55:10:6E:1B:4C:EA:8E:75:64:C4:00:FE:71:1A:FB:56:C4:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bc26a11d-0291-3839-ac26-6aa8c1c974a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:f5:fb:bf:9f:66:4f:5d:14:9b:f1:f8:28:a4:0e:e9:df:54: d1:3d:80:e2:e6:36:31:2c:06:a5:b7:a6:20:09:4b:88:64:f0: 48:ce:31:92:c6:c8:ea:f9:a7:0b:90:87:15:34:80:1b:2d:7b: 7f:2a:00:b0:19:48:7b:39:8d:7e:4c:46:d4:10:b1:a9:d4:e7: 88:9c:5b:fe:29:b2:e7:c9:e9:ed:cf:d7:7f:aa:83:1b:be:bb: d3:01:44:16:1a:1a:ed:f1:e4:e1:3b:ea:18:64:a2:5e:6d:d1: f7:69:9f:e0:0d:ca:6f:68:5e:02:c5:3a:67:cf:62:37:80:53: 10:06:b9:80:3d:ae:a8:41:68:14:0a:8d:38:03:98:93:7d:6d: 2a:c7:9c:6a:66:f3:bd:20:4b:ee:31:72:b1:58:eb:59:d8:ca: b7:50:30:63:2a:41:99:1a:fb:0d:9b:9b:ff:d9:67:f0:06:e1: b5:fb:dd:9c:eb:b5:00:a6:87:4c:f6:d5:0b:ec:6d:05:3e:37: fd:b4:53:6a:1d:f5:59:58:ef:56:56:3e:f0:27:d1:15:ce:e9: 89:13:8d:89:4e:f6:a9:48:78:aa:69:f0:a4:dc:d2:1e:e2:56: 87:f2:ab:77:8c:e7:36:7a:6a:a0:60:b6:48:ab:65:49:0d:6c: 4f:9d:00:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbIjSO44Bg8PnkMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk NDczZTRkMDMtODA1Ni00NzY3LWE5MzktNTljYWViY2U2OWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLD1RNurHX7ZyUxUmXcqg/efG2BQpaKM3aNN E+k6Ddlv58iXZEpCk4It0uqYOadRF9Wq1oADNCX37ClOss7M1SNj7+LyZKJuJnJW yfLufeXLf4ASKmmWkpwF5B9A5yzYwRnPWtCYrCIfDVhkx8exMbUNtTxMlujzDL5u xE0EyrelzyXQcj8cYiAI92oWAOA3WI9FwE3/0KQjVP2UJ1/8ZGv4/KZaSS+RvJ4J nAnKG1yNQu449PfHgIwlXSXvcyi9jJDybNERMj2iaqjqJgYz4jwpbv94dht5i17U jd2xDEVybC1a95JNCSXiZp1kXb8LMeBFP2AseLVvtZnqFYtegQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOG+VRBuG0zqjnVkxAD+cRr7VsRjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmMyNmExMWQtMDI5MS0z ODM5LWFjMjYtNmFhOGMxYzk3NGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQVaWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACz1+7+fZk9dFJvx+CikDunfVNE9gOLmNjEsBqW3piAJS4hk8EjOMZLG yOr5pwuQhxU0gBste38qALAZSHs5jX5MRtQQsanU54icW/4psufJ6e3P13+qgxu+ u9MBRBYaGu3x5OE76hhkol5t0fdpn+ANym9oXgLFOmfPYjeAUxAGuYA9rqhBaBQK jTgDmJN9bSrHnGpm870gS+4xcrFY61nYyrdQMGMqQZka+w2bm//ZZ/AG4bX73Zzr tQCmh0z21QvsbQU+N/20U2od9VlY71ZWPvAn0RXO6YkTjYlO9qlIeKpp8KTc0h7i Vofyq3eM5zZ6aqBgtkirZUkNbE+dAJA= -----END CERTIFICATE-----Generated at Tue Sep 1 01:45:52 2026 by rpki-client