$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/03e7082d-5945-3167-a58b-fa442b10ff4d.roa File: 03e7082d-5945-3167-a58b-fa442b10ff4d.roa (raw, json) Hash identifier: 2LuJOnPEpuBMBZY480unC4CBIlQjlyRdtH7eefc5cKA= Subject key identifier: 48:2B:84:9B:10:E1:96:14:AA:34:05:0D:40:4A:61:86:EA:AF:57:DA Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584EA786ED9387412FF4768C5B40 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/03e7082d-5945-3167-a58b-fa442b10ff4d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 46450 IP address blocks: 208.80.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:ed:93:87:41:2f:f4:76:8c:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=47045249-ebf1-4ff8-b51e-c69680fdc722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3a:f7:79:c9:15:69:21:a3:b5:e9:24:9d:de: a1:2a:33:aa:4c:7f:8a:46:af:1b:20:2a:ae:bf:ac: d4:13:f3:88:7d:10:f7:c1:62:bc:e9:01:26:71:3a: 5e:11:19:23:ab:44:e0:bf:78:4e:7d:68:0d:8e:28: 21:b2:44:3b:fc:15:67:fa:57:a7:de:40:8f:fb:22: b7:d8:c8:29:b9:57:b1:dd:65:10:a5:4b:da:93:8a: d4:e9:04:54:67:76:5b:84:66:df:a2:a8:fd:e1:f5: 86:0b:51:b1:3e:b7:0a:80:6f:1a:a5:d2:65:39:2a: 1a:e7:0a:91:cb:e2:f2:b3:3b:94:c0:21:1a:a9:a1: 74:23:17:3c:6b:6f:48:18:67:e1:33:34:10:3d:96: 0b:e7:82:81:dd:70:ca:da:2f:2a:76:bf:77:5b:db: d5:70:db:ca:9b:9f:ad:be:a7:b0:d9:7b:65:b5:c7: ea:96:1c:61:68:6d:dd:be:63:22:21:e8:81:9d:49: d0:74:74:38:e6:bd:3e:e6:2b:b6:dd:41:d8:bb:ee: 01:12:b2:a2:e7:7c:ec:0d:89:af:f8:87:1a:74:4e: 04:1f:b4:55:da:87:4e:41:51:2d:e8:fe:ac:04:4f: 7d:4d:d1:2b:ef:5a:cc:ba:6c:85:0f:4f:4f:c4:8d: 0d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:2B:84:9B:10:E1:96:14:AA:34:05:0D:40:4A:61:86:EA:AF:57:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/03e7082d-5945-3167-a58b-fa442b10ff4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 208.80.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:89:b6:df:65:48:3a:9b:af:07:83:cd:cb:50:3c:1a:fd:16: be:30:59:0d:01:29:23:f9:e5:b8:c6:13:80:d4:53:59:97:7c: aa:53:13:ee:30:e9:0c:e2:44:ee:b1:7d:ae:12:fa:37:f4:cd: e6:da:8d:09:b8:23:99:3c:5f:af:52:30:59:d9:50:30:e6:13: d0:3d:b4:a7:00:ad:ba:5e:f1:5d:13:4a:b8:da:d0:84:74:9b: f8:db:a8:94:5e:19:ef:39:38:85:ac:f0:17:1e:a4:0d:ea:53: 91:55:1c:11:28:c4:31:cb:18:96:68:55:6a:8e:3e:3f:52:ed: aa:87:9b:06:18:46:65:f3:fe:fe:30:9a:ed:c2:41:f4:97:de: 8f:c1:e4:58:93:01:95:57:d2:5e:b0:4b:1f:2c:32:61:ad:72: 53:fb:03:34:65:7e:83:7d:1b:40:32:c1:ef:68:93:a7:8c:4f: a7:42:34:54:0a:be:7f:64:34:d5:53:ce:45:19:93:8a:1d:28: f4:67:0f:89:dc:af:3f:b1:cd:a2:84:d0:b8:39:f8:ef:55:2e: 04:4c:7b:7d:2e:4b:78:c4:51:50:d2:f5:12:49:59:13:58:9a: 20:cf:05:02:6e:c3:6c:da:e5:29:c0:60:56:6c:1b:1f:d4:b2: 62:c9:44:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhu2Th0Ev9HaMW0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDcwNDUyNDktZWJmMS00ZmY4LWI1MWUtYzY5NjgwZmRjNzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTr3eckVaSGjtekknd6hKjOqTH+KRq8bICqu v6zUE/OIfRD3wWK86QEmcTpeERkjq0Tgv3hOfWgNjighskQ7/BVn+len3kCP+yK3 2MgpuVex3WUQpUvak4rU6QRUZ3ZbhGbfoqj94fWGC1GxPrcKgG8apdJlOSoa5wqR y+LyszuUwCEaqaF0Ixc8a29IGGfhMzQQPZYL54KB3XDK2i8qdr93W9vVcNvKm5+t vqew2XtltcfqlhxhaG3dvmMiIeiBnUnQdHQ45r0+5iu23UHYu+4BErKi53zsDYmv +IcadE4EH7RV2odOQVEt6P6sBE99TdEr71rMumyFD09PxI0NZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgrhJsQ4ZYUqjQFDUBKYYbqr1faMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvMDNlNzA4MmQtNTk0NS0z MTY3LWE1OGItZmE0NDJiMTBmZjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiJtt9lSDqbrweDzctQPBr9Fr4wWQ0BKSP55bjGE4DUU1mXfKpTE+4w 6QziRO6xfa4S+jf0zebajQm4I5k8X69SMFnZUDDmE9A9tKcArbpe8V0TSrja0IR0 m/jbqJReGe85OIWs8BcepA3qU5FVHBEoxDHLGJZoVWqOPj9S7aqHmwYYRmXz/v4w mu3CQfSX3o/B5FiTAZVX0l6wSx8sMmGtclP7AzRlfoN9G0Aywe9ok6eMT6dCNFQK vn9kNNVTzkUZk4odKPRnD4ncrz+xzaKE0Lg5+O9VLgRMe30uS3jEUVDS9RJJWRNY miDPBQJuw2za5SnAYFZsGx/UsmLJRO0= -----END CERTIFICATE-----Generated at Wed Jul 29 19:50:02 2026 by rpki-client