$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/bef8b55b-d9b0-352f-b71b-1533e73df189.roa File: bef8b55b-d9b0-352f-b71b-1533e73df189.roa (raw, json) Hash identifier: d7t1jqMDfehZoO7YjpxxA7AfABF9/P+2HIADPqlwhyc= Subject key identifier: B7:15:38:B5:4D:11:39:DA:21:77:2E:15:17:D4:F5:BA:9E:C2:A5:AD Certificate issuer: /CN=2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1 Certificate serial: 010D0C9F4328584E6B5DFC12A25A0A15281E71C0 Authority key identifier: 08:D9:B1:28:83:75:D1:68:E2:43:7F:44:AD:9B:A9:76:06:4E:AD:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/bef8b55b-d9b0-352f-b71b-1533e73df189.roa Signing time: Tue 07 Jul 2026 11:49:22 +0000 ROA not before: Tue 07 Jul 2026 11:49:22 +0000 ROA not after: Mon 05 Oct 2026 11:49:22 +0000 asID: 55201 IP address blocks: 169.128.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:5d:fc:12:a2:5a:0a:15:28:1e:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1 Validity Not Before: Jul 7 11:49:22 2026 GMT Not After : Oct 5 11:49:22 2026 GMT Subject: CN=02d00454-1063-49d6-9a0b-801e2252f48d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:00:e5:8e:11:fa:57:06:cd:00:6c:61:f2:9e: 6b:9b:f1:d9:9c:31:db:b1:6d:4c:24:4b:63:b4:c4: 7a:4a:0d:52:f3:67:47:4b:47:8d:f8:b1:e8:4c:87: 3f:54:26:74:1c:b2:4c:9f:6f:f3:c3:3e:fd:23:ac: 37:cc:50:c7:d0:74:db:cd:0f:b2:9e:22:b3:8f:5b: 28:f8:d2:e0:a2:60:4b:71:f9:f7:d3:67:3e:e0:76: 5b:59:ba:06:88:51:66:d7:54:8d:88:57:d6:9d:3b: de:ff:ea:7c:97:ea:16:2b:79:f8:c7:c8:54:ee:a4: d8:d0:79:88:61:12:99:41:14:2f:ad:49:17:53:86: ef:9b:15:e0:a5:c9:e6:20:44:62:df:ba:e4:3f:0f: 35:6f:86:a0:5a:e9:e7:b2:a1:81:b5:a7:0f:27:ed: bf:43:07:de:9d:45:77:d5:62:c9:8b:92:3f:45:ae: be:6f:03:47:f5:4f:5e:e6:dc:ea:59:46:9c:71:ca: b9:13:dd:9a:d0:27:7d:ee:6a:7a:d1:36:37:d7:41: 93:57:89:4d:73:e6:4b:bf:78:a8:b0:fc:ec:2e:0c: f8:5e:0a:51:71:b9:cd:c6:37:aa:8d:d9:6b:80:2d: a0:27:a6:33:45:f0:bd:60:ee:23:58:db:40:1e:7d: cd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:15:38:B5:4D:11:39:DA:21:77:2E:15:17:D4:F5:BA:9E:C2:A5:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/bef8b55b-d9b0-352f-b71b-1533e73df189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.crl X509v3 Authority Key Identifier: keyid:08:D9:B1:28:83:75:D1:68:E2:43:7F:44:AD:9B:A9:76:06:4E:AD:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bf8c74a-f8f0-42d3-84ee-d9a1e1b46fb1.cer sbgp-ipAddrBlock: critical IPv4: 169.128.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:cc:cc:95:53:ec:f8:c3:19:f0:2c:d1:a1:5f:1e:c4:fa:48: d5:00:38:b4:da:ab:ed:bd:a5:e0:9b:0c:5c:d1:54:ad:83:7e: b6:f3:44:c2:12:f9:32:49:cc:43:29:7c:f1:4a:36:cc:f5:3f: 13:0d:dd:7b:88:44:a4:2d:93:e5:f5:f2:a5:e5:65:69:d2:4c: 30:23:3a:84:33:cf:5d:1f:7a:38:80:f9:ec:7f:06:6f:6a:64: fe:30:83:78:f6:b4:22:d6:db:6c:e6:ab:63:26:51:54:74:18: 17:b2:18:e7:d9:15:d0:d9:92:9c:42:24:91:fd:5c:b0:fa:88: cb:e9:9c:76:c3:0e:68:5c:b0:37:6c:e6:43:db:20:23:89:bb: f4:a6:5b:41:15:2d:b3:48:27:8b:80:c8:13:92:9e:28:1a:38: 25:f4:2e:a2:5e:d8:bf:fd:bb:a7:56:01:e1:8d:7d:ef:0b:20: 95:34:83:a6:12:40:e9:94:fc:3e:b2:2e:43:d6:11:94:86:03: c5:37:d1:f2:6b:a8:e1:5c:47:82:0e:cd:0e:81:8a:ca:8a:d2: b3:2d:66:bd:b0:69:89:75:32:9d:ba:a3:00:6b:33:f7:66:3c: e1:8d:ab:86:a0:2d:73:5c:2b:66:a8:1a:cb:17:da:04:42:d5: 7e:6b:90:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rXfwSoloKFSgeccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJmOGM3NGEtZjhmMC00MmQzLTg0ZWUtZDlhMWUxYjQ2 ZmIxMB4XDTI2MDcwNzExNDkyMloXDTI2MTAwNTExNDkyMlowLzEtMCsGA1UEAxMk MDJkMDA0NTQtMTA2My00OWQ2LTlhMGItODAxZTIyNTJmNDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQDljhH6VwbNAGxh8p5rm/HZnDHbsW1MJEtj tMR6Sg1S82dHS0eN+LHoTIc/VCZ0HLJMn2/zwz79I6w3zFDH0HTbzQ+yniKzj1so +NLgomBLcfn302c+4HZbWboGiFFm11SNiFfWnTve/+p8l+oWK3n4x8hU7qTY0HmI YRKZQRQvrUkXU4bvmxXgpcnmIERi37rkPw81b4agWunnsqGBtacPJ+2/QwfenUV3 1WLJi5I/Ra6+bwNH9U9e5tzqWUacccq5E92a0Cd97mp60TY310GTV4lNc+ZLv3io sPzsLgz4XgpRcbnNxjeqjdlrgC2gJ6YzRfC9YO4jWNtAHn3N4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcVOLVNETnaIXcuFRfU9bqewqWtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yYmY4 Yzc0YS1mOGYwLTQyZDMtODRlZS1kOWExZTFiNDZmYjEvYmVmOGI1NWItZDliMC0z NTJmLWI3MWItMTUzM2U3M2RmMTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmJmOGM3NGEtZjhmMC00MmQzLTg0 ZWUtZDlhMWUxYjQ2ZmIxLzJiZjhjNzRhLWY4ZjAtNDJkMy04NGVlLWQ5YTFlMWI0 NmZiMS5jcmwwHwYDVR0jBBgwFoAUCNmxKIN10WjiQ39ErZupdgZOrf0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yYmY4Yzc0YS1mOGYwLTQyZDMtODRlZS1kOWEx ZTFiNDZmYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqYB8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTMzJVT7PjDGfAs0aFfHsT6SNUAOLTaq+29peCbDFzRVK2DfrbzRMIS +TJJzEMpfPFKNsz1PxMN3XuIRKQtk+X18qXlZWnSTDAjOoQzz10fejiA+ex/Bm9q ZP4wg3j2tCLW22zmq2MmUVR0GBeyGOfZFdDZkpxCJJH9XLD6iMvpnHbDDmhcsDds 5kPbICOJu/SmW0EVLbNIJ4uAyBOSnigaOCX0LqJe2L/9u6dWAeGNfe8LIJU0g6YS QOmU/D6yLkPWEZSGA8U30fJrqOFcR4IOzQ6BisqK0rMtZr2waYl1Mp26owBrM/dm POGNq4agLXNcK2aoGssX2gRC1X5rkHE= -----END CERTIFICATE-----Generated at Tue Jul 21 14:06:28 2026 by rpki-client