$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/bef8b55b-d9b0-352f-b71b-1533e73df189.roa File: bef8b55b-d9b0-352f-b71b-1533e73df189.roa (raw, json) Hash identifier: MQZw2ZnSEqpTZ3eq1BaYIwjfxiruAxzaAk1DqpIv1lA= Subject key identifier: 43:E8:4D:FC:84:60:53:19:4D:55:74:A3:B5:C7:3C:C3:4A:CD:B2:58 Certificate issuer: /CN=2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1 Certificate serial: 010D0C9F4328584F0D6CFECE0FFDEF0EE650FE80 Authority key identifier: 08:D9:B1:28:83:75:D1:68:E2:43:7F:44:AD:9B:A9:76:06:4E:AD:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/bef8b55b-d9b0-352f-b71b-1533e73df189.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 55201 IP address blocks: 169.128.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:fe:ce:0f:fd:ef:0e:e6:50:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=fba45386-f0f5-494e-ad9a-7bb5cf87093b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9a:85:c2:40:22:e0:cc:81:ad:93:5c:7d:7f: cb:64:9c:5c:2d:ff:8b:5e:5d:d9:75:45:57:c0:f0: 09:3a:fa:1d:5a:1f:27:28:13:42:46:f6:f7:3c:c8: 97:a5:58:ef:60:ba:76:d7:ef:66:9b:8e:9d:06:9a: 1d:3b:50:1c:e4:2b:0b:c6:ba:7a:68:42:7f:50:04: 9e:5f:f7:11:64:f9:79:50:8b:5c:ef:ef:77:78:8e: b4:78:0d:e5:df:67:8b:23:57:d8:d7:16:bc:5f:29: 43:7a:42:64:1d:c4:00:77:70:61:eb:d2:1f:7a:4a: 04:77:09:39:b7:6b:2a:44:28:a1:28:26:17:87:b8: c1:7f:8a:6e:1f:19:26:40:2b:aa:7b:77:3b:f3:f8: 9f:ec:65:ff:cf:8e:1d:c1:d4:e3:de:bf:9e:cd:1a: ea:8f:0d:18:8c:70:74:c2:88:c9:2b:49:8c:c8:0d: b1:02:80:12:42:24:84:5b:ef:99:22:a6:4b:51:3e: e4:33:7f:4e:be:7f:0e:3c:1c:d5:33:68:c9:3c:ca: c4:16:d7:bd:27:62:2d:f4:10:ec:4f:df:a9:79:4f: d5:46:c4:a6:c2:ce:28:39:11:16:dc:f7:11:e7:d9: db:68:8b:b1:3e:56:be:20:66:e0:97:47:e2:4d:af: 25:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E8:4D:FC:84:60:53:19:4D:55:74:A3:B5:C7:3C:C3:4A:CD:B2:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/bef8b55b-d9b0-352f-b71b-1533e73df189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.crl X509v3 Authority Key Identifier: keyid:08:D9:B1:28:83:75:D1:68:E2:43:7F:44:AD:9B:A9:76:06:4E:AD:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.cer sbgp-ipAddrBlock: critical IPv4: 169.128.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:90:32:37:3d:7e:f0:7d:7f:3c:82:7d:5f:5f:16:af:bf:e6: ff:4f:7c:02:be:2a:6d:98:3a:80:fb:48:79:86:f2:25:9f:79: 2f:66:da:dd:ab:11:4a:74:e9:da:6a:a4:62:d8:40:48:8d:54: 07:d4:a4:34:2e:cf:04:90:b6:52:f5:df:cb:fa:6b:95:99:63: 11:ea:32:33:9e:3b:44:b1:d8:75:d4:95:71:29:af:73:84:93: c5:bf:eb:e2:08:ef:1e:4b:6f:22:dd:3a:4f:33:03:2a:6d:a3: cf:22:8e:83:84:c8:cd:db:e3:18:b0:ff:f2:4f:d0:28:a2:bf: bf:77:c6:2b:31:56:b2:64:3d:03:fa:fc:68:3e:e9:a5:3f:6b: 12:9d:e2:dc:fa:79:f4:9c:2c:60:95:d1:a1:ed:44:c2:f2:7f: b9:36:a0:12:3b:ae:5e:ea:22:8b:56:a7:df:1a:c3:ca:06:97: 88:56:59:72:33:82:b3:3a:b4:c8:be:f4:a4:06:46:14:22:63: bf:d1:86:a1:ae:f7:29:3e:e7:7f:8f:6a:75:b3:68:04:1e:5e: 82:6d:43:50:a5:0e:4f:5e:f6:1e:a9:a7:a7:2a:2d:b4:2d:eb: 17:9d:18:3c:6d:ea:9e:28:15:9f:96:29:91:0f:5c:bf:ee:30: bf:8f:14:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbP7OD/3vDuZQ/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJmOGM3NGEtZjhmMC00MmQzLTg0ZWUtZDlhMWUxYjQ2 ZmIxMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk ZmJhNDUzODYtZjBmNS00OTRlLWFkOWEtN2JiNWNmODcwOTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZqFwkAi4MyBrZNcfX/LZJxcLf+LXl3ZdUVX wPAJOvodWh8nKBNCRvb3PMiXpVjvYLp21+9mm46dBpodO1Ac5CsLxrp6aEJ/UASe X/cRZPl5UItc7+93eI60eA3l32eLI1fY1xa8XylDekJkHcQAd3Bh69IfekoEdwk5 t2sqRCihKCYXh7jBf4puHxkmQCuqe3c78/if7GX/z44dwdTj3r+ezRrqjw0YjHB0 wojJK0mMyA2xAoASQiSEW++ZIqZLUT7kM39Ovn8OPBzVM2jJPMrEFte9J2It9BDs T9+peU/VRsSmws4oOREW3PcR59nbaIuxPla+IGbgl0fiTa8l9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPoTfyEYFMZTVV0o7XHPMNKzbJYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yYmY4 Yzc0YS1mOGYwLTQyZDMtODRlZS1kOWExZTFiNDZmYjEvYmVmOGI1NWItZDliMC0z NTJmLWI3MWItMTUzM2U3M2RmMTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmJmOGM3NGEtZjhmMC00MmQzLTg0 ZWUtZDlhMWUxYjQ2ZmIxLzJiZjhjNzRhLWY4ZjAtNDJkMy04NGVlLWQ5YTFlMWI0 NmZiMS5jcmwwHwYDVR0jBBgwFoAUCNmxKIN10WjiQ39ErZupdgZOrf0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yYmY4Yzc0YS1mOGYwLTQyZDMtODRlZS1kOWEx ZTFiNDZmYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqYB8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKeQMjc9fvB9fzyCfV9fFq+/5v9PfAK+Km2YOoD7SHmG8iWfeS9m2t2r EUp06dpqpGLYQEiNVAfUpDQuzwSQtlL138v6a5WZYxHqMjOeO0Sx2HXUlXEpr3OE k8W/6+II7x5LbyLdOk8zAypto88ijoOEyM3b4xiw//JP0Ciiv793xisxVrJkPQP6 /Gg+6aU/axKd4tz6efScLGCV0aHtRMLyf7k2oBI7rl7qIotWp98aw8oGl4hWWXIz grM6tMi+9KQGRhQiY7/RhqGu9yk+53+PanWzaAQeXoJtQ1ClDk9e9h6pp6cqLbQt 6xedGDxt6p4oFZ+WKZEPXL/uML+PFGM= -----END CERTIFICATE-----Generated at Fri Sep 4 20:29:40 2026 by rpki-client