$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa File: bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa (raw, json) Hash identifier: KaDvGdDboahaNF6J8BeznymYtQ1h1igrVvjrLASfik8= Subject key identifier: 87:B2:65:66:40:E6:F6:D1:14:9A:A6:1B:5C:36:E7:90:DF:8F:E7:8F Certificate issuer: /CN=9f75e8d7-e45f-4767-8939-a2c5394c1e7c Certificate serial: 010D0C9F4328584F6292DAF13AB7CF5F1FEBA780 Authority key identifier: C8:7F:33:58:08:83:C2:E0:C2:0A:69:84:92:0A:25:FA:2C:BF:3E:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 54334 IP address blocks: 52.119.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:da:f1:3a:b7:cf:5f:1f:eb:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f75e8d7-e45f-4767-8939-a2c5394c1e7c Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=3f89d74d-b3cc-485d-b0b2-27c178351dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:34:e7:bd:87:0b:68:dc:86:78:e3:cf:81:39: 81:d4:94:bb:88:b3:19:cb:a4:17:0e:75:f6:f4:b8: 91:fe:fd:2e:07:6a:90:94:38:5f:cb:60:58:98:f9: f3:64:b8:40:90:0a:f7:7a:8d:94:72:80:41:53:fb: f2:89:8f:31:5a:dc:85:5f:b5:48:a7:d6:8f:3d:1c: 48:a3:be:03:3e:4c:71:2c:b6:d8:b6:d3:8a:31:bd: eb:67:05:e0:92:3e:ab:28:33:22:b5:36:f5:ab:48: ef:25:37:22:ae:d1:17:3f:8b:24:33:58:f4:18:90: 43:65:29:cf:62:6d:96:51:c1:8d:2d:cb:08:11:9f: 8f:dd:e8:77:59:c9:c3:61:12:cb:a7:28:83:48:fa: 3c:c9:e4:10:ac:25:77:70:92:e1:09:f4:2b:1d:80: 15:9d:15:c9:45:68:1e:1f:25:f8:b3:5a:f3:b9:02: 1e:14:03:25:aa:60:84:f4:bb:ec:7e:6b:9f:e2:3d: fd:d5:e7:b9:80:34:bb:34:38:d7:d6:8b:5c:ea:82: 32:cb:ee:a2:51:a0:89:11:17:fe:31:d2:2e:0f:23: 8e:e7:a0:15:c5:6f:33:44:4e:8d:01:c9:56:7e:b0: 6e:e3:76:41:28:b5:05:7e:e1:97:d1:5f:7f:87:da: f8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B2:65:66:40:E6:F6:D1:14:9A:A6:1B:5C:36:E7:90:DF:8F:E7:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl X509v3 Authority Key Identifier: keyid:C8:7F:33:58:08:83:C2:E0:C2:0A:69:84:92:0A:25:FA:2C:BF:3E:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer sbgp-ipAddrBlock: critical IPv4: 52.119.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:17:d2:1b:11:18:ef:dc:70:e8:1f:aa:d7:c2:f1:3c:e2:52: 7b:fd:40:2f:f5:1b:8d:7a:60:7a:9f:b0:07:aa:ed:bc:d9:33: 73:fd:cd:f2:97:83:6a:c3:e3:ec:b5:74:ed:92:7e:40:8e:7f: 3c:d8:1a:f3:dd:56:7e:8d:ed:20:1b:b7:90:a5:bf:bd:dd:b1: c0:17:e7:c8:a5:63:f6:05:cf:73:e9:ff:80:1e:47:12:84:9c: 43:71:3f:d7:5e:f3:73:09:82:eb:4a:dc:37:30:af:76:58:3c: 89:db:4b:ab:c0:7a:2b:a6:20:3f:51:99:dd:f5:6f:21:de:81: c2:6f:43:7a:cf:cc:a3:55:9b:a0:5f:b4:1b:78:e9:7d:6d:6c: ff:be:40:33:ba:c7:6d:4d:9e:8e:99:f8:dd:f5:91:7e:08:0a: 10:7e:09:f5:de:4c:27:6e:5c:d4:ee:26:11:78:f4:b9:d8:73: 6e:30:8e:ad:d3:bc:ac:85:61:4c:e1:9c:49:97:4f:04:a1:64: 4f:5f:6f:51:37:e8:29:bc:0f:02:e3:6f:fa:1c:4e:84:76:38: 28:be:ba:f1:15:80:c1:d5:a2:f4:d1:b9:ab:11:be:a7:77:16: e9:c0:3f:4b:12:52:c6:9b:27:45:c8:b3:c6:50:80:e4:f1:b1: 3b:cf:d5:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iktrxOrfPXx/rp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY3NWU4ZDctZTQ1Zi00NzY3LTg5MzktYTJjNTM5NGMx ZTdjMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk M2Y4OWQ3NGQtYjNjYy00ODVkLWIwYjItMjdjMTc4MzUxZGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTTnvYcLaNyGeOPPgTmB1JS7iLMZy6QXDnX2 9LiR/v0uB2qQlDhfy2BYmPnzZLhAkAr3eo2UcoBBU/vyiY8xWtyFX7VIp9aPPRxI o74DPkxxLLbYttOKMb3rZwXgkj6rKDMitTb1q0jvJTcirtEXP4skM1j0GJBDZSnP Ym2WUcGNLcsIEZ+P3eh3WcnDYRLLpyiDSPo8yeQQrCV3cJLhCfQrHYAVnRXJRWge HyX4s1rzuQIeFAMlqmCE9Lvsfmuf4j391ee5gDS7NDjX1otc6oIyy+6iUaCJERf+ MdIuDyOO56AVxW8zRE6NAclWfrBu43ZBKLUFfuGX0V9/h9r4oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeyZWZA5vbRFJqmG1w255Dfj+ePMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85Zjc1 ZThkNy1lNDVmLTQ3NjctODkzOS1hMmM1Mzk0YzFlN2MvYmY5YThlMTctOGE4Zi0z ODlhLTgwYjQtOGFiZjgyYTg1ZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWY3NWU4ZDctZTQ1Zi00NzY3LTg5 MzktYTJjNTM5NGMxZTdjLzlmNzVlOGQ3LWU0NWYtNDc2Ny04OTM5LWEyYzUzOTRj MWU3Yy5jcmwwHwYDVR0jBBgwFoAUyH8zWAiDwuDCCmmEkgol+iy/Pu8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85Zjc1ZThkNy1lNDVmLTQ3NjctODkzOS1hMmM1 Mzk0YzFlN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHcBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgX0hsRGO/ccOgfqtfC8TziUnv9QC/1G416YHqfsAeq7bzZM3P9zfKX g2rD4+y1dO2SfkCOfzzYGvPdVn6N7SAbt5Clv73dscAX58ilY/YFz3Pp/4AeRxKE nENxP9de83MJgutK3Dcwr3ZYPInbS6vAeiumID9Rmd31byHegcJvQ3rPzKNVm6Bf tBt46X1tbP++QDO6x21Nno6Z+N31kX4IChB+CfXeTCduXNTuJhF49LnYc24wjq3T vKyFYUzhnEmXTwShZE9fb1E36Cm8DwLjb/ocToR2OCi+uvEVgMHVovTRuasRvqd3 FunAP0sSUsabJ0XIs8ZQgOTxsTvP1Ss= -----END CERTIFICATE-----Generated at Tue Oct 13 08:14:03 2026 by rpki-client