$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/86b1302f-bbd8-3dd5-bea6-b46eaec452f4.roa File: 86b1302f-bbd8-3dd5-bea6-b46eaec452f4.roa (raw, json) Hash identifier: 3axPBE1EoSoQdHDiatOBLlD5la9ChVKOIkZZpwX5c0U= Subject key identifier: A0:FD:27:FD:82:F4:20:ED:2C:9E:06:70:CA:85:D5:C2:C5:FB:13:BC Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584EA786ED8827114755EF317480 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/86b1302f-bbd8-3dd5-bea6-b46eaec452f4.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 46450 IP address blocks: 199.34.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:ed:88:27:11:47:55:ef:31:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3c3a4813-46d2-4cc3-89ba-d3999eb35294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:60:25:ed:c5:18:73:6f:6c:f6:34:c4:7c:1c: 73:39:ef:d6:8d:1d:19:62:99:3a:62:5e:02:a1:9b: 75:75:39:d7:8e:31:d3:e8:ca:68:46:d5:8f:df:d9: 12:46:c9:75:11:80:09:62:83:11:90:f3:78:46:0f: 67:4b:98:1d:27:55:f2:fd:5e:ee:72:55:9c:dd:f0: 9f:21:ca:53:a8:16:77:25:8e:e8:25:1f:02:5e:23: e5:88:c5:12:36:b8:82:7c:98:aa:75:d7:f8:33:a0: 60:31:3a:90:5f:fb:a0:bc:44:23:af:8e:1f:40:ae: 20:6e:f9:24:cd:3f:c2:2b:0f:4b:be:21:b4:d7:d3: 85:c9:66:23:6a:fc:4a:15:e4:ec:a3:0e:c5:91:9d: 77:c5:35:b7:8e:1c:b7:84:c3:11:db:a5:9b:0c:cc: 6c:73:f8:9e:87:d5:72:4f:68:e0:e3:bf:94:d8:de: c1:8a:16:e1:9b:d1:e2:6a:15:e1:2f:17:c4:85:ab: 3e:bc:92:58:e9:0b:c0:fa:79:ff:ff:1b:8d:7c:50: a0:18:21:d8:6e:04:54:87:e1:cd:c1:d3:c0:fa:e6: 8a:e2:e6:82:c0:68:a4:f9:a7:2b:b5:26:24:f2:f7: ca:67:e1:31:be:72:a2:fd:9f:43:98:5d:e8:ab:b5: 9b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FD:27:FD:82:F4:20:ED:2C:9E:06:70:CA:85:D5:C2:C5:FB:13:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/86b1302f-bbd8-3dd5-bea6-b46eaec452f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 199.34.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:f4:94:04:70:35:88:c2:50:3c:e6:72:28:ad:54:57:86:ed: 79:79:48:7d:8c:f8:a7:b0:d3:63:14:be:3b:a4:72:c4:ad:c4: 38:03:3b:c5:32:38:29:b2:a9:b6:52:60:ea:67:6e:99:4b:17: 22:75:01:d6:77:2b:01:c5:78:1c:57:75:20:b9:db:b3:20:ad: 85:c9:a8:57:57:08:79:c2:a4:0b:e2:76:61:a1:62:af:61:fb: 11:37:8d:d1:ca:0d:84:7b:df:3c:ed:f9:49:8a:01:c6:27:d4: 37:de:01:0a:3c:aa:f4:94:42:2e:db:97:7d:79:9d:39:3d:22: f4:17:ea:05:47:55:02:0d:f0:73:e3:51:69:50:b2:8f:27:47: 3a:e7:3f:72:34:d0:b8:9b:b9:03:95:78:83:08:07:27:4f:d3: ed:18:4b:20:5b:2e:7e:3e:81:76:82:62:4d:70:cb:ae:66:4e: cc:43:ec:27:78:15:6c:80:7b:ca:00:f8:c1:88:be:21:b7:96: a0:81:8c:fc:f8:ef:79:27:2b:60:d3:6d:a2:1f:5a:a5:71:0c: ee:56:7e:dd:f9:69:f7:02:57:7c:55:ad:90:38:1d:d1:96:98: d3:d4:69:88:7b:a8:58:78:0e:03:01:ad:bc:b5:d5:aa:71:cd: b9:dc:94:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhu2IJxFHVe8xdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2MzYTQ4MTMtNDZkMi00Y2MzLTg5YmEtZDM5OTllYjM1Mjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWAl7cUYc29s9jTEfBxzOe/WjR0ZYpk6Yl4C oZt1dTnXjjHT6MpoRtWP39kSRsl1EYAJYoMRkPN4Rg9nS5gdJ1Xy/V7uclWc3fCf IcpTqBZ3JY7oJR8CXiPliMUSNriCfJiqddf4M6BgMTqQX/ugvEQjr44fQK4gbvkk zT/CKw9LviG019OFyWYjavxKFeTsow7FkZ13xTW3jhy3hMMR26WbDMxsc/ieh9Vy T2jg47+U2N7Bihbhm9HiahXhLxfEhas+vJJY6QvA+nn//xuNfFCgGCHYbgRUh+HN wdPA+uaK4uaCwGik+acrtSYk8vfKZ+ExvnKi/Z9DmF3oq7WbBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKD9J/2C9CDtLJ4GcMqF1cLF+xO8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvODZiMTMwMmYtYmJkOC0z ZGQ1LWJlYTYtYjQ2ZWFlYzQ1MmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyL0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALr0lARwNYjCUDzmciitVFeG7Xl5SH2M+Kew02MUvjukcsStxDgDO8Uy OCmyqbZSYOpnbplLFyJ1AdZ3KwHFeBxXdSC527MgrYXJqFdXCHnCpAvidmGhYq9h +xE3jdHKDYR73zzt+UmKAcYn1DfeAQo8qvSUQi7bl315nTk9IvQX6gVHVQIN8HPj UWlQso8nRzrnP3I00LibuQOVeIMIBydP0+0YSyBbLn4+gXaCYk1wy65mTsxD7Cd4 FWyAe8oA+MGIviG3lqCBjPz473knK2DTbaIfWqVxDO5Wft35afcCV3xVrZA4HdGW mNPUaYh7qFh4DgMBrby11apxzbnclAU= -----END CERTIFICATE-----Generated at Wed Jul 29 19:49:56 2026 by rpki-client