$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/00ab9988-b83a-3e42-aaff-72c4f05f5b11.roa File: 00ab9988-b83a-3e42-aaff-72c4f05f5b11.roa (raw, json) Hash identifier: D6rtmpcrt9dxMbmT2zu0G86TxBI6ydzSWf3oWCQbWeA= Subject key identifier: D5:DA:E9:88:0E:44:24:00:AF:82:A2:B7:1D:3A:7E:25:58:A0:6A:58 Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584F189796F7B0C8B626B3C80600 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/00ab9988-b83a-3e42-aaff-72c4f05f5b11.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 46450 IP address blocks: 64.112.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:96:f7:b0:c8:b6:26:b3:c8:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=d49e953b-65c1-4900-9591-9691fe6fcd20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:34:f5:32:37:0c:bc:82:05:e0:9a:26:30:5d: 2b:61:d7:c5:c8:54:3e:85:1b:48:16:cd:7a:30:5a: 72:d1:fe:4e:a9:c0:f8:b0:a2:89:55:e5:53:4e:bc: ac:14:f2:56:a7:03:1d:24:6d:73:3d:6e:04:cc:8b: fb:d8:f6:69:f4:0f:84:49:79:23:8c:db:11:c9:a5: 70:1d:15:b5:10:5f:4d:76:3c:f5:59:72:52:48:08: c3:95:93:6b:01:5e:f1:f9:7f:fc:e5:bf:eb:cc:20: ed:88:14:56:1a:59:cd:78:01:93:7f:80:90:49:a7: 5f:f8:da:1e:61:17:1b:f3:0d:3d:85:57:2e:2e:e7: e1:91:db:ca:d1:ee:b9:f6:50:f6:d6:b1:ab:97:24: 0d:7a:49:42:74:70:3a:94:f9:6a:6e:38:cf:4f:ba: bd:35:c1:d0:d9:5f:ba:4a:a9:f4:9d:90:4c:8c:b7: 17:93:46:ae:2c:fb:64:42:07:f0:15:e3:18:38:ec: a3:7e:dc:d3:96:14:f2:c8:28:3b:bd:d8:ea:69:b3: 3c:66:90:a2:d7:03:ee:10:16:0d:36:f4:32:b7:8e: 50:db:2a:10:f2:4e:fa:4f:a9:32:52:94:41:d9:c0: ec:8b:68:39:c4:30:e3:b5:40:7d:0d:a7:95:4a:98: f8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DA:E9:88:0E:44:24:00:AF:82:A2:B7:1D:3A:7E:25:58:A0:6A:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/00ab9988-b83a-3e42-aaff-72c4f05f5b11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 64.112.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:a4:00:c9:de:79:90:a4:7a:65:59:65:93:3d:db:15:25:20: 73:3a:33:2d:42:c1:a5:95:72:2b:37:ae:ff:0b:3c:b0:2f:31: 3d:de:7f:6e:06:44:01:59:fe:43:ba:78:56:16:24:02:ef:b4: 85:da:ea:51:2e:6b:5d:4b:d5:5e:e0:d1:82:0c:3e:71:b0:c2: 71:73:58:37:a3:0a:a8:a9:e5:84:e9:02:70:b3:19:d3:af:c0: dc:5b:fd:0a:b1:23:a6:07:e2:45:ce:8a:06:29:9c:3f:14:79: 54:47:89:95:a6:e5:85:fe:89:34:43:37:17:17:c3:47:da:d2: 0b:03:85:35:49:8c:78:55:18:e9:d3:04:b4:cd:6e:59:91:0d: 99:57:4c:d8:b3:70:3b:2c:c2:ac:9b:b7:8b:c8:9a:e9:81:d6: 49:02:1b:f7:20:b5:e2:11:02:4b:07:e9:60:82:48:1e:cb:42: b4:91:2f:db:35:ca:3b:d7:1e:c5:85:91:3e:b9:16:b7:ae:87: 55:98:da:a5:31:30:a3:d8:1f:cf:17:c0:af:ba:39:f2:a4:5e: 54:20:81:e1:06:46:28:de:01:2a:ce:62:b3:0f:1c:64:7e:30: d8:7e:cc:7f:aa:7f:13:f9:22:d7:f3:ea:ad:be:11:df:67:12: 6d:99:48:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl5b3sMi2JrPIBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZDQ5ZTk1M2ItNjVjMS00OTAwLTk1OTEtOTY5MWZlNmZjZDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozT1MjcMvIIF4JomMF0rYdfFyFQ+hRtIFs16 MFpy0f5OqcD4sKKJVeVTTrysFPJWpwMdJG1zPW4EzIv72PZp9A+ESXkjjNsRyaVw HRW1EF9Ndjz1WXJSSAjDlZNrAV7x+X/85b/rzCDtiBRWGlnNeAGTf4CQSadf+Noe YRcb8w09hVcuLufhkdvK0e659lD21rGrlyQNeklCdHA6lPlqbjjPT7q9NcHQ2V+6 Sqn0nZBMjLcXk0auLPtkQgfwFeMYOOyjftzTlhTyyCg7vdjqabM8ZpCi1wPuEBYN NvQyt45Q2yoQ8k76T6kyUpRB2cDsi2g5xDDjtUB9DaeVSpj4kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXa6YgORCQAr4Kitx06fiVYoGpYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvMDBhYjk5ODgtYjgzYS0z ZTQyLWFhZmYtNzJjNGYwNWY1YjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQHDkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALOkAMneeZCkemVZZZM92xUlIHM6My1CwaWVcis3rv8LPLAvMT3ef24G RAFZ/kO6eFYWJALvtIXa6lEua11L1V7g0YIMPnGwwnFzWDejCqip5YTpAnCzGdOv wNxb/QqxI6YH4kXOigYpnD8UeVRHiZWm5YX+iTRDNxcXw0fa0gsDhTVJjHhVGOnT BLTNblmRDZlXTNizcDsswqybt4vImumB1kkCG/cgteIRAksH6WCCSB7LQrSRL9s1 yjvXHsWFkT65Freuh1WY2qUxMKPYH88XwK+6OfKkXlQggeEGRijeASrOYrMPHGR+ MNh+zH+qfxP5Itfz6q2+Ed9nEm2ZSBE= -----END CERTIFICATE-----Generated at Sun Sep 13 08:50:40 2026 by rpki-client