$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/8095ccdf-f60f-36d8-b2ee-6622e2bfac7a.roa File: 8095ccdf-f60f-36d8-b2ee-6622e2bfac7a.roa (raw, json) Hash identifier: R07Xb8Fm5zjVagWOZKDwbwyX7W9d1gKWGMTIuKO9ySY= Subject key identifier: 3E:46:02:3C:63:3E:01:5B:44:F9:CF:FE:E0:96:6F:8B:03:7D:59:17 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584F5E62F66358D0E05EE5241980 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/8095ccdf-f60f-36d8-b2ee-6622e2bfac7a.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 16509 IP address blocks: 31.99.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:f6:63:58:d0:e0:5e:e5:24:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=58a1a94f-e16a-42d3-a0d8-7e721746648c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f1:aa:79:26:7a:57:4a:02:9f:f7:c8:d2:23: 5d:24:2d:9d:f4:6a:d6:9f:98:ff:17:9f:62:9c:00: 0b:73:5e:24:f5:5f:7a:c9:fe:e6:7c:d1:20:bc:39: b2:4f:71:5d:97:4f:68:47:dd:ce:e1:01:37:9f:e4: 1b:44:06:f8:49:a7:77:03:4a:8c:f2:43:af:b7:83: fa:e9:05:41:52:55:b6:40:cd:26:fc:d3:d6:11:1d: ca:49:2b:11:8d:58:cb:00:6d:7a:72:56:8c:9f:68: 84:ae:35:61:0e:a4:ea:d9:19:2c:22:b4:60:89:6e: 6c:a0:f1:f5:0a:af:1d:cf:66:59:7a:8e:fe:98:1e: ab:61:69:a6:2b:e1:01:8f:29:0f:21:8b:eb:73:96: b4:63:4a:a0:5b:95:d2:dd:50:c4:7f:32:89:e4:be: 5b:ef:a5:3e:dd:d0:f2:33:07:c0:a7:5c:78:0b:15: 1f:90:f0:fa:61:b1:46:6d:48:37:08:36:ae:4f:b6: 11:d7:1c:a8:20:2b:3c:70:1a:ba:00:1b:22:e3:ca: 77:ab:2a:8c:8e:29:10:72:d6:09:e6:ad:13:10:d9: fe:b5:8a:b6:b3:47:1b:40:c3:de:20:cd:4f:d3:1b: 77:a3:73:2e:38:af:f4:20:98:f8:7e:dc:c9:08:7a: 75:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:46:02:3C:63:3E:01:5B:44:F9:CF:FE:E0:96:6F:8B:03:7D:59:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/8095ccdf-f60f-36d8-b2ee-6622e2bfac7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 31.99.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:c9:af:1e:51:9d:53:06:c6:84:8f:c0:e5:1f:5d:e3:51:cc: 3a:69:03:97:43:9e:19:76:1a:35:ba:af:db:26:97:62:60:eb: 74:3e:35:8c:80:09:dd:5d:d3:97:2e:17:76:9a:1b:78:0a:30: af:4f:b5:1e:de:a0:ea:12:bd:38:1c:ca:fd:c6:87:ca:68:92: f9:66:5d:2d:50:ac:71:e7:0e:e2:0c:71:27:ce:14:77:17:ee: 76:59:cd:63:16:32:fe:5b:3d:ff:05:e7:fe:b6:b0:15:7d:de: 2a:ef:d4:86:45:ff:28:30:30:0c:90:c0:50:d7:08:79:bb:3c: ac:fb:40:ef:05:52:75:bc:40:dd:20:b7:41:35:a1:40:9e:3c: c2:49:94:a4:cd:7b:5d:93:9e:7f:a7:51:46:7f:74:91:e4:7a: 27:15:a1:47:cc:c6:cb:73:86:33:02:18:f4:04:90:8f:d2:95: cf:96:39:75:4a:56:1e:53:49:71:b1:32:c5:f5:5e:e1:06:b8: c3:41:ad:d4:9d:2c:f7:74:6e:79:4a:a6:dc:51:e6:81:11:4c: 37:2c:99:1d:e3:62:9c:e5:66:66:2e:2f:7f:fb:6b:69:44:a9: d1:ef:23:5e:d0:d6:f8:56:9e:60:da:fb:67:71:57:3c:16:61: fb:12:c2:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYvZjWNDgXuUkGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk NThhMWE5NGYtZTE2YS00MmQzLWEwZDgtN2U3MjE3NDY2NDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfGqeSZ6V0oCn/fI0iNdJC2d9GrWn5j/F59i nAALc14k9V96yf7mfNEgvDmyT3Fdl09oR93O4QE3n+QbRAb4Sad3A0qM8kOvt4P6 6QVBUlW2QM0m/NPWER3KSSsRjVjLAG16claMn2iErjVhDqTq2RksIrRgiW5soPH1 Cq8dz2ZZeo7+mB6rYWmmK+EBjykPIYvrc5a0Y0qgW5XS3VDEfzKJ5L5b76U+3dDy MwfAp1x4CxUfkPD6YbFGbUg3CDauT7YR1xyoICs8cBq6ABsi48p3qyqMjikQctYJ 5q0TENn+tYq2s0cbQMPeIM1P0xt3o3MuOK/0IJj4ftzJCHp18wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5GAjxjPgFbRPnP/uCWb4sDfVkXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvODA5NWNjZGYtZjYwZi0z NmQ4LWIyZWUtNjYyMmUyYmZhYzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEH2OAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHJrx5RnVMGxoSPwOUfXeNRzDppA5dDnhl2GjW6r9sml2Jg63Q+NYyA Cd1d05cuF3aaG3gKMK9PtR7eoOoSvTgcyv3Gh8pokvlmXS1QrHHnDuIMcSfOFHcX 7nZZzWMWMv5bPf8F5/62sBV93irv1IZF/ygwMAyQwFDXCHm7PKz7QO8FUnW8QN0g t0E1oUCePMJJlKTNe12Tnn+nUUZ/dJHkeicVoUfMxstzhjMCGPQEkI/Slc+WOXVK Vh5TSXGxMsX1XuEGuMNBrdSdLPd0bnlKptxR5oERTDcsmR3jYpzlZmYuL3/7a2lE qdHvI17Q1vhWnmDa+2dxVzwWYfsSwsA= -----END CERTIFICATE-----Generated at Sat Oct 10 01:06:15 2026 by rpki-client