$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/91574ab1-ab04-3e09-a6a3-9ce142d46e27.roa File: 91574ab1-ab04-3e09-a6a3-9ce142d46e27.roa (raw, json) Hash identifier: TKQ7g5M7l7usx3uaU7Dm5ZN1t0Fv0dgJ3p3EX+VZs0Q= Subject key identifier: B5:89:FE:A2:61:EE:CA:6A:83:EF:7D:F7:55:13:6C:C0:A3:1B:46:4C Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584EED5243BA6D8E8F3E2E1E2300 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/91574ab1-ab04-3e09-a6a3-9ce142d46e27.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 46450 IP address blocks: 209.178.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:43:ba:6d:8e:8f:3e:2e:1e:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=89f5efec-2a95-4e03-9537-ba6b59d16832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b0:f6:cd:56:eb:d7:47:4b:e9:ac:bb:90:0f: 30:cb:7b:75:27:5e:10:6b:c5:96:9f:5c:60:5f:69: 97:c8:0b:3c:ed:9c:64:12:59:e3:68:a8:be:99:cc: 2c:08:e1:1d:37:60:a7:e1:af:ba:a5:c4:ce:e7:16: ff:31:2b:f3:ef:97:be:dc:a6:c4:85:18:f2:1e:8c: a5:bf:55:48:82:6c:87:74:08:65:d4:2d:3b:ac:13: b6:fe:74:f5:b9:10:87:1c:5b:f6:90:91:6c:df:9a: 0f:99:25:7c:a2:76:c9:15:d3:f1:33:22:2b:13:fc: 86:f9:39:5c:f3:66:7b:57:16:b8:29:6f:c5:e8:49: 92:42:cd:82:9b:f9:41:f3:3d:1c:66:15:0e:3f:57: 9c:e2:08:cd:44:bf:52:c8:77:57:bf:de:ae:60:3f: f7:9b:0f:31:6a:33:4d:e8:30:95:39:49:f0:f9:b6: b1:35:4d:cc:16:a9:bc:5f:78:4b:ce:8a:e4:c0:c0: e0:7d:7c:1c:58:4b:61:e8:87:01:62:5b:df:b0:a3: c6:29:89:22:a2:16:c8:a0:84:a1:50:e5:3c:8f:2c: 26:f1:44:4f:91:0a:4f:d2:63:1f:4e:a3:a9:9b:ea: 29:9c:56:68:cb:6d:da:27:19:38:69:db:2b:7f:39: 6c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:89:FE:A2:61:EE:CA:6A:83:EF:7D:F7:55:13:6C:C0:A3:1B:46:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/91574ab1-ab04-3e09-a6a3-9ce142d46e27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 209.178.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:43:69:07:c4:11:33:fc:db:c0:5b:49:f5:61:9e:73:f6:57: d9:5c:b2:c9:3f:59:55:80:6d:07:5c:f4:dc:91:f1:5b:85:af: 20:9d:12:e8:fd:cf:45:09:db:1d:d9:34:5a:2d:c1:75:00:9b: a1:c3:43:3b:21:bd:99:49:19:67:fb:9a:a8:34:60:33:8f:4b: fd:dd:74:b5:32:ac:65:09:22:81:b6:18:b0:0e:98:51:50:7c: a6:07:0a:f5:fa:72:23:d5:9b:e3:b8:f0:6c:46:b5:55:de:0b: b2:2f:63:8f:f0:64:c9:0f:20:f6:91:9b:ec:46:7d:15:f1:79: 27:9b:40:4b:2d:8a:ec:8f:a4:30:19:25:ed:67:42:1a:d4:cf: c4:1f:72:83:b5:61:74:71:31:26:a8:39:b1:1d:98:54:d9:79: 6b:a6:f7:70:50:3e:53:18:9b:06:1c:40:10:3c:ca:83:33:a0: c5:9a:27:9b:85:09:d8:9e:f6:2f:0b:96:cd:77:6d:e6:7c:73: 77:c9:b0:53:cf:be:02:e1:de:7d:0d:42:22:70:42:86:30:7f: 85:bb:33:bd:db:a4:bf:b2:3d:75:61:01:e2:80:a6:5a:e1:08: 4f:de:f3:8f:27:70:ec:e2:59:c7:0e:0e:0a:4a:f8:3e:dd:15: 5b:ee:f1:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUkO6bY6PPi4eIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk ODlmNWVmZWMtMmE5NS00ZTAzLTk1MzctYmE2YjU5ZDE2ODMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrD2zVbr10dL6ay7kA8wy3t1J14Qa8WWn1xg X2mXyAs87ZxkElnjaKi+mcwsCOEdN2Cn4a+6pcTO5xb/MSvz75e+3KbEhRjyHoyl v1VIgmyHdAhl1C07rBO2/nT1uRCHHFv2kJFs35oPmSV8onbJFdPxMyIrE/yG+Tlc 82Z7Vxa4KW/F6EmSQs2Cm/lB8z0cZhUOP1ec4gjNRL9SyHdXv96uYD/3mw8xajNN 6DCVOUnw+baxNU3MFqm8X3hLzorkwMDgfXwcWEth6IcBYlvfsKPGKYkiohbIoISh UOU8jywm8URPkQpP0mMfTqOpm+opnFZoy23aJxk4adsrfzlsLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWJ/qJh7spqg+9991UTbMCjG0ZMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvOTE1NzRhYjEtYWIwNC0z ZTA5LWE2YTMtOWNlMTQyZDQ2ZTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0bLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtDaQfEETP828BbSfVhnnP2V9lcssk/WVWAbQdc9NyR8VuFryCdEuj9 z0UJ2x3ZNFotwXUAm6HDQzshvZlJGWf7mqg0YDOPS/3ddLUyrGUJIoG2GLAOmFFQ fKYHCvX6ciPVm+O48GxGtVXeC7IvY4/wZMkPIPaRm+xGfRXxeSebQEstiuyPpDAZ Je1nQhrUz8QfcoO1YXRxMSaoObEdmFTZeWum93BQPlMYmwYcQBA8yoMzoMWaJ5uF Cdie9i8Lls13beZ8c3fJsFPPvgLh3n0NQiJwQoYwf4W7M73bpL+yPXVhAeKAplrh CE/e848ncOziWccODgpK+D7dFVvu8bk= -----END CERTIFICATE-----Generated at Sun Sep 13 08:50:49 2026 by rpki-client