$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/bbbf91b9-718d-3adc-8f53-92010dd213b9.roa File: bbbf91b9-718d-3adc-8f53-92010dd213b9.roa (raw, json) Hash identifier: zTLfs8arnZ2/V1GuHq8fLxKG9qJMPSV4ew7e9uZKAiM= Subject key identifier: 32:BF:CB:01:A9:8C:AA:B1:5B:C9:9E:E0:AE:0B:94:5C:72:10:5A:2C Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F4328584EED51FAAC7C364BDA40C017C0 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/bbbf91b9-718d-3adc-8f53-92010dd213b9.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 397423 IP address blocks: 147.124.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:51:fa:ac:7c:36:4b:da:40:c0:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=3f8e93ad-f311-4bb3-b938-ec04bdaa26de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:cf:39:8c:64:dc:3a:b8:64:0f:ba:3b:e0:c0: 94:4f:03:09:4d:4b:3b:3d:6b:79:4c:da:7b:ff:7c: 35:2b:66:6e:72:a9:80:7c:b6:34:87:a6:48:25:12: 9c:5f:3b:ac:68:53:92:d7:a4:89:e1:6f:5b:52:b7: 85:98:d8:57:4a:76:e8:39:ed:5e:8b:aa:7c:a8:7c: 36:8b:dd:1f:d0:0c:48:17:ab:ad:3a:13:47:3b:18: fa:68:fe:f3:2b:7b:7c:20:d7:4d:93:9b:c2:ac:76: 4f:2c:4f:03:77:11:b5:2a:e7:56:39:11:eb:7a:8e: 5a:64:d4:d3:16:18:95:e9:2c:80:cb:f0:c9:96:0d: 1d:05:13:15:db:a9:c5:e5:6b:9d:51:c4:14:a5:be: 3b:52:1b:7d:68:95:27:b4:b4:91:2a:c2:46:ef:03: 47:50:3e:43:9d:9d:97:f4:6a:60:e4:79:a5:0d:1b: 54:36:b5:ba:ea:e5:9c:8d:7a:32:2e:cc:c8:75:02: c5:7e:2a:de:7e:cb:bb:fc:29:8a:95:6a:a9:0a:ec: 51:4f:c2:d0:29:3b:cc:a8:cc:a3:a2:d7:ad:a4:9e: c6:78:db:2a:7f:71:0c:fa:23:3b:ab:64:fe:a3:b7: 4e:47:cd:1c:29:cf:51:84:a6:f8:6a:35:70:35:94: 60:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BF:CB:01:A9:8C:AA:B1:5B:C9:9E:E0:AE:0B:94:5C:72:10:5A:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/bbbf91b9-718d-3adc-8f53-92010dd213b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 147.124.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:9d:25:3a:0f:13:8f:b3:7d:fb:67:88:77:27:89:69:8d:f7: 32:66:2f:b6:25:1f:5d:5e:93:bb:a4:dd:29:a8:d2:22:88:d3: ae:39:d2:05:32:f2:a8:a1:80:80:31:0b:86:18:87:6f:d7:db: 0e:ba:47:31:c4:bb:ff:9c:24:9f:d2:51:54:1a:6f:17:6a:9f: 7e:59:66:0f:f0:91:72:ef:0d:df:3e:a7:48:08:ec:65:4c:fb: ee:68:f8:9c:ef:96:78:ed:1c:ad:9a:07:19:9b:eb:2e:d1:45: c8:ee:6d:90:55:21:bb:1e:64:38:68:10:ed:c4:b4:35:67:f1: ae:0e:3d:04:81:22:4d:93:87:67:1f:37:9c:03:8e:e5:39:e9: 77:60:51:12:97:0f:4f:85:54:3c:59:49:e3:a6:58:b6:6b:d4: d4:6b:a7:42:0b:85:f0:2b:cd:86:0a:d4:b4:d9:ad:63:b0:a5: 8c:38:bd:23:f9:b3:c0:b1:4b:9e:e0:2d:14:2b:d2:cb:2c:cb: 2c:5b:12:42:20:9b:3b:84:b5:c2:b3:6e:ff:69:f2:b3:78:ce: 65:db:a4:df:2c:b2:a9:73:4c:a1:12:36:cc:fd:db:3c:f9:1f: 5d:76:aa:17:b4:99:be:b2:9b:22:31:bc:ff:4e:e0:65:d0:0c: ec:05:1b:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUfqsfDZL2kDAF8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk M2Y4ZTkzYWQtZjMxMS00YmIzLWI5MzgtZWMwNGJkYWEyNmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5M85jGTcOrhkD7o74MCUTwMJTUs7PWt5TNp7 /3w1K2ZucqmAfLY0h6ZIJRKcXzusaFOS16SJ4W9bUreFmNhXSnboOe1ei6p8qHw2 i90f0AxIF6utOhNHOxj6aP7zK3t8INdNk5vCrHZPLE8DdxG1KudWORHreo5aZNTT FhiV6SyAy/DJlg0dBRMV26nF5WudUcQUpb47Uht9aJUntLSRKsJG7wNHUD5DnZ2X 9Gpg5HmlDRtUNrW66uWcjXoyLszIdQLFfirefsu7/CmKlWqpCuxRT8LQKTvMqMyj otetpJ7GeNsqf3EM+iM7q2T+o7dOR80cKc9RhKb4ajVwNZRgYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDK/ywGpjKqxW8me4K4LlFxyEFosMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvYmJiZjkxYjktNzE4ZC0z YWRjLThmNTMtOTIwMTBkZDIxM2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk3zAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2dJToPE4+zfftniHcniWmN9zJmL7YlH11ek7uk3Smo0iKI06450gUy 8qihgIAxC4YYh2/X2w66RzHEu/+cJJ/SUVQabxdqn35ZZg/wkXLvDd8+p0gI7GVM ++5o+JzvlnjtHK2aBxmb6y7RRcjubZBVIbseZDhoEO3EtDVn8a4OPQSBIk2Th2cf N5wDjuU56XdgURKXD0+FVDxZSeOmWLZr1NRrp0ILhfArzYYK1LTZrWOwpYw4vSP5 s8CxS57gLRQr0sssyyxbEkIgmzuEtcKzbv9p8rN4zmXbpN8ssqlzTKESNsz92zz5 H112qhe0mb6ymyIxvP9O4GXQDOwFGxQ= -----END CERTIFICATE-----Generated at Fri Sep 11 02:56:31 2026 by rpki-client