$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/bc44da72-679d-3329-b46f-ab96762b0790.roa File: bc44da72-679d-3329-b46f-ab96762b0790.roa (raw, json) Hash identifier: mnp54qmJ4YeF/IbQGuxYz9YUWPfkaZ89WFO4kNocL5U= Subject key identifier: E0:7B:AB:92:B4:DB:11:82:29:DF:B2:06:7F:D5:16:3A:26:1D:70:4F Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F4328584F49884D3B837D87F2C82E9980 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/bc44da72-679d-3329-b46f-ab96762b0790.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20365 IP address blocks: 208.98.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:4d:3b:83:7d:87:f2:c8:2e:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d8dffd7a-8472-41a6-8556-feb962319d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a2:c7:33:0c:50:56:ad:59:90:f6:e9:c8:0c: c7:b9:eb:2e:18:14:4b:68:95:b9:0e:d2:6c:65:33: 55:b6:25:12:19:d2:52:d5:64:ac:c7:02:dd:24:50: 58:fa:6d:bb:e8:e4:fe:e2:b8:1f:61:71:31:58:df: 64:da:72:f5:45:6c:bb:69:2a:24:04:54:e7:16:ea: 5a:7c:f5:7e:48:ba:23:db:0f:8c:c9:15:89:d2:e2: be:04:4b:4e:64:77:6e:f0:7b:da:49:b2:c2:df:16: d8:ca:07:e7:c4:a1:75:11:21:a5:e5:66:d6:15:72: 47:6e:c3:58:06:89:f3:da:ab:d5:58:38:40:6b:7e: 7e:8c:34:c7:18:05:4a:ac:e5:35:c1:67:0e:e5:e7: 11:05:12:b2:63:65:d3:d3:53:81:e5:8a:fc:54:47: a7:c0:ed:a3:1a:8a:2b:f4:1f:4f:46:ca:3e:f4:78: b9:d1:9f:30:19:b6:e0:2a:6c:4f:98:20:87:d7:ff: 06:77:7e:d4:34:49:7a:0e:ad:76:74:62:30:ba:ca: d9:62:8a:57:d6:f0:d0:06:a5:fa:7f:97:a3:ba:84: 26:93:80:09:a2:d1:ff:5e:00:c7:93:95:bd:9d:9e: dc:df:0e:e3:a7:79:37:ef:ea:a1:43:66:3e:d1:b9: 0b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7B:AB:92:B4:DB:11:82:29:DF:B2:06:7F:D5:16:3A:26:1D:70:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/bc44da72-679d-3329-b46f-ab96762b0790.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 208.98.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:b3:e0:21:22:7b:9e:64:f7:c7:d0:77:22:98:49:fe:b7:58: 3d:e8:61:69:08:73:c7:77:49:18:a1:e6:7b:c3:da:ae:4e:96: dc:8c:97:ce:5d:4e:c8:03:04:82:42:c7:5e:3c:06:3c:4f:3f: 56:55:44:ec:71:1c:df:09:3a:a0:ae:35:60:a8:50:3f:79:47: 1a:18:ef:88:0c:c6:30:6a:da:1f:9f:89:68:6a:cc:23:a7:23: ab:86:69:ac:4c:91:3f:7e:8d:e0:3a:66:87:25:bc:33:32:be: 38:04:d6:0b:fa:f2:3d:b6:13:3b:0b:8a:07:af:18:08:9a:41: 82:b2:ec:64:42:d2:36:c7:15:4d:bd:cb:a8:9a:a5:ee:04:7e: 26:82:c2:3d:d0:f3:49:fa:df:d2:0e:23:81:b8:25:6d:cb:2f: a0:48:5e:bd:95:ec:a0:0d:d0:1f:73:ad:94:33:22:d1:cb:fc: 40:10:d9:14:cb:87:99:62:50:d8:9c:e8:a6:df:4c:18:d8:02: f2:f7:3a:34:6f:7e:f0:1f:ea:70:f9:88:b2:21:58:5b:f6:5e: 32:cb:af:ce:de:1a:90:a3:43:7f:93:44:b9:eb:97:23:da:cc: 00:4a:ec:69:34:29:c9:a3:09:67:d6:42:f5:d0:89:3c:70:9c: 07:5f:f8:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiE07g32H8sgumYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDhkZmZkN2EtODQ3Mi00MWE2LTg1NTYtZmViOTYyMzE5ZDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaLHMwxQVq1ZkPbpyAzHuesuGBRLaJW5DtJs ZTNVtiUSGdJS1WSsxwLdJFBY+m276OT+4rgfYXExWN9k2nL1RWy7aSokBFTnFupa fPV+SLoj2w+MyRWJ0uK+BEtOZHdu8HvaSbLC3xbYygfnxKF1ESGl5WbWFXJHbsNY Bonz2qvVWDhAa35+jDTHGAVKrOU1wWcO5ecRBRKyY2XT01OB5Yr8VEenwO2jGoor 9B9PRso+9Hi50Z8wGbbgKmxPmCCH1/8Gd37UNEl6Dq12dGIwusrZYopX1vDQBqX6 f5ejuoQmk4AJotH/XgDHk5W9nZ7c3w7jp3k37+qhQ2Y+0bkLfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOB7q5K02xGCKd+yBn/VFjomHXBPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvYmM0NGRhNzItNjc5ZC0z MzI5LWI0NmYtYWI5Njc2MmIwNzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0GLeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSz4CEie55k98fQdyKYSf63WD3oYWkIc8d3SRih5nvD2q5OltyMl85d TsgDBIJCx148BjxPP1ZVROxxHN8JOqCuNWCoUD95RxoY74gMxjBq2h+fiWhqzCOn I6uGaaxMkT9+jeA6ZoclvDMyvjgE1gv68j22EzsLigevGAiaQYKy7GRC0jbHFU29 y6iape4EfiaCwj3Q80n639IOI4G4JW3LL6BIXr2V7KAN0B9zrZQzItHL/EAQ2RTL h5liUNic6KbfTBjYAvL3OjRvfvAf6nD5iLIhWFv2XjLLr87eGpCjQ3+TRLnrlyPa zABK7Gk0KcmjCWfWQvXQiTxwnAdf+PQ= -----END CERTIFICATE-----Generated at Mon Sep 28 05:56:40 2026 by rpki-client