$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/bfa85c3a-da14-3b0f-85f0-747d639f186d.roa File: bfa85c3a-da14-3b0f-85f0-747d639f186d.roa (raw, json) Hash identifier: zRisYwt/mqsNtA9MIqfbSKHiiowW3D92+F1BrO2mXQU= Subject key identifier: 35:5C:2E:83:3D:EA:FD:EB:FB:F2:B8:89:7F:8C:22:B4:C9:00:45:95 Certificate issuer: /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e Certificate serial: 010D0C9F4328584F49736D7DFDDC3E9FF74D8580 Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/bfa85c3a-da14-3b0f-85f0-747d639f186d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 29873 IP address blocks: 66.235.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:6d:7d:fd:dc:3e:9f:f7:4d:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d2095049-5663-40d9-a291-2fccf62adf65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bc:78:5f:ce:47:8f:83:8c:ee:8a:18:b2:ff: b3:14:4e:82:eb:ff:67:a6:70:f9:81:25:09:88:cd: 39:0d:6e:7f:91:2c:b7:e2:74:6c:5a:2d:b5:69:4a: d7:28:bd:61:8b:a5:0b:13:9c:a3:27:fd:12:6c:8f: cd:6c:f1:54:d6:08:24:b0:74:77:e1:82:1b:36:82: cb:d8:c3:e8:46:e4:73:d7:87:b0:39:8c:11:7f:bb: 25:4f:13:4e:c8:79:6a:56:a6:fb:ea:9e:61:76:82: 10:64:57:ea:b0:5f:b1:f7:6d:48:53:6f:6a:96:11: ff:3b:9d:d8:1e:e0:df:d7:16:0d:71:40:cb:eb:51: cc:dc:d4:0c:c8:76:50:39:0a:a9:5c:d5:e4:76:76: 4f:f7:42:1c:87:36:13:c2:b9:1a:62:34:9e:ae:82: 83:c8:68:60:e9:77:76:a2:ab:0e:c9:bb:55:6d:dd: 12:d2:f0:81:af:70:a6:7e:b3:43:94:39:40:4d:57: d5:00:61:a1:1d:df:ff:58:05:3d:ff:1e:a8:66:7a: 76:a3:c1:ab:97:b6:79:29:6b:0a:ec:f0:32:92:27: 8f:54:1b:65:f3:da:ad:9f:31:40:b2:7a:d5:22:c9: 00:b4:20:ed:8d:59:a7:1c:ca:df:71:b9:6f:5f:55: a7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5C:2E:83:3D:EA:FD:EB:FB:F2:B8:89:7F:8C:22:B4:C9:00:45:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/bfa85c3a-da14-3b0f-85f0-747d639f186d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl X509v3 Authority Key Identifier: keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer sbgp-ipAddrBlock: critical IPv4: 66.235.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:95:50:94:9c:80:54:9f:66:d5:dd:e2:87:ab:e8:e5:a5:29: 69:cc:95:b8:2a:7c:6b:64:10:81:bd:be:84:03:d2:ce:56:a7: fd:ab:ce:8d:2f:e8:d6:0e:c8:ec:24:8a:c6:05:49:db:df:cd: b3:da:6f:4d:c1:f9:75:10:7e:8f:14:92:60:aa:21:87:b4:5c: e4:64:44:8b:2f:4d:f9:73:6a:19:4e:3b:91:e1:04:15:bc:41: c8:11:91:3b:96:92:9b:61:67:df:4a:b2:6c:d5:47:b5:f9:7f: 4a:a4:9f:7c:28:a8:83:27:bc:c7:4f:25:2f:6b:67:07:55:0f: 9b:40:7a:0b:8e:37:25:3e:98:1f:fd:d0:2c:1d:b4:39:ec:0c: eb:f3:c7:cd:cf:2d:95:a4:3e:fb:b5:09:b7:e5:95:6b:54:d1: 58:29:33:95:1b:d3:a5:8f:30:ec:7d:c7:66:f5:8e:f3:4e:10: f5:01:b2:d7:61:60:42:8e:13:09:1f:c5:48:2c:4a:42:46:a5: cd:a1:e8:63:4b:93:ee:25:b4:31:08:6c:c6:0c:22:85:22:9f: 1c:71:60:f7:eb:6f:16:00:cc:28:17:44:37:96:86:0d:c4:0d: 1c:c0:8b:17:d6:a6:3b:9d:47:20:b1:8f:f5:d9:c5:4a:15:43: 2b:14:1b:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc219/dw+n/dNhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTBmMzc3NWYtN2E2Yi00YjkyLWI1ZGYtODJkODE1NjJi MDhlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDIwOTUwNDktNTY2My00MGQ5LWEyOTEtMmZjY2Y2MmFkZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrx4X85Hj4OM7ooYsv+zFE6C6/9npnD5gSUJ iM05DW5/kSy34nRsWi21aUrXKL1hi6ULE5yjJ/0SbI/NbPFU1ggksHR34YIbNoLL 2MPoRuRz14ewOYwRf7slTxNOyHlqVqb76p5hdoIQZFfqsF+x921IU29qlhH/O53Y HuDf1xYNcUDL61HM3NQMyHZQOQqpXNXkdnZP90IchzYTwrkaYjSeroKDyGhg6Xd2 oqsOybtVbd0S0vCBr3CmfrNDlDlATVfVAGGhHd//WAU9/x6oZnp2o8Grl7Z5KWsK 7PAykiePVBtl89qtnzFAsnrVIskAtCDtjVmnHMrfcblvX1WnrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVcLoM96v3r+/K4iX+MIrTJAEWVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYz Nzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4MTU2MmIwOGUvYmZhODVjM2EtZGExNC0z YjBmLTg1ZjAtNzQ3ZDYzOWYxODZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTBmMzc3NWYtN2E2Yi00YjkyLWI1 ZGYtODJkODE1NjJiMDhlL2UwZjM3NzVmLTdhNmItNGI5Mi1iNWRmLTgyZDgxNTYy YjA4ZS5jcmwwHwYDVR0jBBgwFoAUCUtXkuMVh55WqGUJuWfdMHF6F1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYzNzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4 MTU2MmIwOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQuvEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKVUJScgFSfZtXd4oer6OWlKWnMlbgqfGtkEIG9voQD0s5Wp/2rzo0v 6NYOyOwkisYFSdvfzbPab03B+XUQfo8UkmCqIYe0XORkRIsvTflzahlOO5HhBBW8 QcgRkTuWkpthZ99KsmzVR7X5f0qkn3woqIMnvMdPJS9rZwdVD5tAeguONyU+mB/9 0CwdtDnsDOvzx83PLZWkPvu1CbfllWtU0VgpM5Ub06WPMOx9x2b1jvNOEPUBstdh YEKOEwkfxUgsSkJGpc2h6GNLk+4ltDEIbMYMIoUinxxxYPfrbxYAzCgXRDeWhg3E DRzAixfWpjudRyCxj/XZxUoVQysUG3k= -----END CERTIFICATE-----Generated at Sun Oct 4 07:56:25 2026 by rpki-client