$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0/795e35c7-74bf-3f59-839a-450438e81357.roa File: 795e35c7-74bf-3f59-839a-450438e81357.roa (raw, json) Hash identifier: Ln3mGOVnUMvoswElPprqa5T5H+KTT2ga5WR6H4xhBGQ= Subject key identifier: 99:9C:70:41:65:C8:1F:39:8C:92:13:55:8E:1D:02:16:53:2C:05:D4 Certificate issuer: /CN=bc8c9e11-62a7-43d6-880c-f7147230bfa0 Certificate serial: 010D0C9F4328584EBB11C3D4431CE20FD3E21980 Authority key identifier: B7:B0:8A:4C:E3:E0:AA:1A:06:48:C7:D4:A1:EE:3C:B4:4B:A8:A0:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0/795e35c7-74bf-3f59-839a-450438e81357.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 8075 IP address blocks: 142.249.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0/bc8c9e11-62a7-43d6-880c-f7147230bfa0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0/bc8c9e11-62a7-43d6-880c-f7147230bfa0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:c3:d4:43:1c:e2:0f:d3:e2:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc8c9e11-62a7-43d6-880c-f7147230bfa0 Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=6ae74530-f8b3-42d7-b63b-1e4fafe9322e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5b:ea:38:71:53:1a:95:0f:06:a6:9d:1d:0c: 43:fa:40:35:75:97:ed:8f:7e:e8:4e:be:69:d4:46: 6e:b3:41:40:0f:61:b2:6b:c3:f0:28:d8:60:8b:2b: d1:21:c9:49:bb:9f:38:54:c6:4c:7e:91:0d:8e:1c: 5a:02:48:61:94:b7:d9:93:d5:cf:e8:de:76:ae:df: 90:91:28:a3:5e:b1:93:ef:0b:57:c3:f5:44:e0:99: ea:47:39:c2:e9:76:30:11:ca:4c:ff:21:67:2c:da: 45:cc:69:c6:d4:da:fa:9c:a6:78:a8:a8:a5:bd:18: 5c:8d:5a:77:f6:97:8d:99:92:f2:17:ff:b0:e2:0e: f4:84:ec:42:c9:6e:4d:3c:38:7d:77:45:c4:c2:8e: 7c:4d:13:49:97:24:29:48:ef:b4:86:54:fa:2a:45: 43:9a:37:4d:7b:18:bf:65:52:1e:25:2d:c2:3e:ce: 6d:43:23:1b:df:78:9a:be:ba:3b:62:43:26:ea:0a: 63:69:d2:70:51:3b:42:fb:3b:cb:b0:81:e0:15:6c: 5a:e4:47:99:60:80:9a:ca:66:0a:78:cf:bc:4b:91: 79:06:c7:d5:96:ff:ad:eb:5b:17:af:bd:b4:57:e3: a6:d5:2a:6a:40:8b:fd:08:75:66:87:98:40:be:2b: 8c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9C:70:41:65:C8:1F:39:8C:92:13:55:8E:1D:02:16:53:2C:05:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0/795e35c7-74bf-3f59-839a-450438e81357.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0/bc8c9e11-62a7-43d6-880c-f7147230bfa0.crl X509v3 Authority Key Identifier: keyid:B7:B0:8A:4C:E3:E0:AA:1A:06:48:C7:D4:A1:EE:3C:B4:4B:A8:A0:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0.cer sbgp-ipAddrBlock: critical IPv4: 142.249.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:15:97:d3:d3:c9:6c:b4:63:6a:df:db:59:14:5c:1d:e4:c0: 1d:dc:a5:8f:a6:b4:b0:12:4e:5f:44:89:bd:c5:8d:2f:fc:30: a5:87:b3:63:97:38:cc:3c:87:29:59:aa:ce:58:03:11:f3:1e: 9a:2e:07:21:24:8e:0b:40:ea:b2:e7:5b:18:c4:6e:21:a3:0e: 35:89:39:8c:4f:24:2b:94:d7:c5:7a:53:e3:74:66:09:69:1e: 73:e6:12:60:72:93:ab:6f:c0:7d:5a:63:f0:80:0b:62:55:c8: 0a:6f:35:bb:79:bc:fd:00:a1:4a:13:6a:07:76:e0:82:94:ed: 49:4f:56:15:12:fa:24:a9:39:24:c7:cb:70:c9:65:f1:43:fd: 9d:d8:37:82:48:ea:42:1c:0f:a6:c6:15:5f:88:d3:e9:53:10: 8d:29:bf:de:8a:4a:15:53:ca:92:d0:23:35:cd:e9:5e:40:a4: e5:6f:b5:04:ee:2c:42:f7:c2:70:11:86:fb:a0:ed:08:2e:12: a0:52:85:89:c7:2a:4c:ae:f1:0d:3c:5b:81:b0:52:f5:e3:63: f5:b7:6f:84:9c:10:b5:3c:f3:31:18:4b:01:9a:a3:cc:38:d6: 1a:31:8e:5f:15:86:62:2a:a4:a2:7a:c5:3a:f1:f6:5d:6f:28: e6:34:0c:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EcPUQxziD9PiGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmM4YzllMTEtNjJhNy00M2Q2LTg4MGMtZjcxNDcyMzBi ZmEwMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk NmFlNzQ1MzAtZjhiMy00MmQ3LWI2M2ItMWU0ZmFmZTkzMjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFvqOHFTGpUPBqadHQxD+kA1dZftj37oTr5p 1EZus0FAD2Gya8PwKNhgiyvRIclJu584VMZMfpENjhxaAkhhlLfZk9XP6N52rt+Q kSijXrGT7wtXw/VE4JnqRznC6XYwEcpM/yFnLNpFzGnG1Nr6nKZ4qKilvRhcjVp3 9peNmZLyF/+w4g70hOxCyW5NPDh9d0XEwo58TRNJlyQpSO+0hlT6KkVDmjdNexi/ ZVIeJS3CPs5tQyMb33iavro7YkMm6gpjadJwUTtC+zvLsIHgFWxa5EeZYICaymYK eM+8S5F5BsfVlv+t61sXr720V+Om1SpqQIv9CHVmh5hAviuMMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmccEFlyB85jJITVY4dAhZTLAXUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYzhj OWUxMS02MmE3LTQzZDYtODgwYy1mNzE0NzIzMGJmYTAvNzk1ZTM1YzctNzRiZi0z ZjU5LTgzOWEtNDUwNDM4ZTgxMzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmM4YzllMTEtNjJhNy00M2Q2LTg4 MGMtZjcxNDcyMzBiZmEwL2JjOGM5ZTExLTYyYTctNDNkNi04ODBjLWY3MTQ3MjMw YmZhMC5jcmwwHwYDVR0jBBgwFoAUt7CKTOPgqhoGSMfUoe48tEuooHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYzhjOWUxMS02MmE3LTQzZDYtODgwYy1mNzE0 NzIzMGJmYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvlfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQVl9PTyWy0Y2rf21kUXB3kwB3cpY+mtLASTl9Eib3FjS/8MKWHs2OX OMw8hylZqs5YAxHzHpouByEkjgtA6rLnWxjEbiGjDjWJOYxPJCuU18V6U+N0Zglp HnPmEmByk6tvwH1aY/CAC2JVyApvNbt5vP0AoUoTagd24IKU7UlPVhUS+iSpOSTH y3DJZfFD/Z3YN4JI6kIcD6bGFV+I0+lTEI0pv96KShVTypLQIzXN6V5ApOVvtQTu LEL3wnARhvug7QguEqBShYnHKkyu8Q08W4GwUvXjY/W3b4ScELU88zEYSwGao8w4 1hoxjl8VhmIqpKJ6xTrx9l1vKOY0DI0= -----END CERTIFICATE-----Generated at Fri Sep 4 22:42:15 2026 by rpki-client