$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dea844a7-b0dc-3a33-b7c0-6a32266f1c1a.roa File: dea844a7-b0dc-3a33-b7c0-6a32266f1c1a.roa (raw, json) Hash identifier: n4qOEPMmVkNG5gUTu2mc3dQCS7i6vvQkO5qPwHNo/6c= Subject key identifier: A4:9D:8F:8A:41:8C:A9:BE:1E:BF:50:10:8F:BE:1A:BB:0F:DB:F5:9F Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584F4974BE4B2F5DFA592F449500 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dea844a7-b0dc-3a33-b7c0-6a32266f1c1a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 170.139.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:be:4b:2f:5d:fa:59:2f:44:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=aeec802e-9d9e-4dbf-b292-7f8a2f133ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:84:a6:e8:4b:94:ba:e6:10:f7:fa:46:75:ec: 54:71:48:97:92:74:a8:0c:a3:d3:b6:86:b4:d7:81: de:f7:88:f2:30:56:6a:07:26:f8:fc:44:50:e3:5c: fc:d2:63:5f:0f:15:2b:48:07:bd:b8:75:d8:d7:e6: 8e:d5:35:4e:8e:0b:54:f7:26:f2:8c:9a:c6:b4:e8: 4e:1f:1e:89:cd:53:8a:a9:57:24:e2:ff:44:77:ac: 6f:96:a2:bb:6e:f8:4b:2c:bf:6c:57:a0:2c:2a:37: 9e:e1:74:2a:e8:4f:84:4b:eb:85:53:a1:b1:b6:6c: aa:66:60:5d:da:b8:78:63:34:e7:01:bf:94:48:a7: 68:06:84:b7:9c:09:ec:e9:00:73:e8:51:eb:55:59: 9d:41:6d:be:11:b9:13:d0:74:3c:3a:da:e0:cf:6e: 2c:b4:e4:b9:e1:91:04:df:63:cb:2b:a5:ea:e0:54: 22:13:96:21:4a:56:9a:e2:62:82:1e:5f:22:06:f5: 63:b8:11:22:b8:09:d2:cd:ae:d2:ca:36:ba:eb:e7: 47:66:ba:14:24:92:fd:a6:c9:c5:32:d8:e3:f0:9e: c2:e4:b4:14:0a:a7:5d:c6:46:42:34:03:a6:85:1c: ad:10:09:3e:46:08:b4:9c:f9:a5:e0:3e:fe:72:3f: 26:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9D:8F:8A:41:8C:A9:BE:1E:BF:50:10:8F:BE:1A:BB:0F:DB:F5:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dea844a7-b0dc-3a33-b7c0-6a32266f1c1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 170.139.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:46:90:63:b2:51:76:84:6f:93:71:20:c8:86:37:cc:c3:09: 17:b1:1d:73:6f:33:ea:5d:94:6c:64:52:c0:a1:86:e4:ea:a6: ab:45:c4:da:e4:f4:82:c7:01:e1:c5:67:5f:7c:ed:e8:0c:56: b7:64:f8:38:9a:16:8a:e3:c4:f1:c3:c3:ec:86:22:ce:20:84: 0c:3e:fa:3f:1a:18:ce:1d:6f:40:66:ad:fb:e3:e1:31:2f:54: 5e:da:10:a0:bc:dc:a9:6a:16:d6:39:70:65:0f:e7:58:07:ca: 72:7e:e2:2f:46:f3:12:61:8e:a1:2b:0a:ef:a6:a0:80:d9:92: ff:6d:44:87:f1:08:0f:9e:b2:60:be:93:a2:d3:8e:e8:bb:ca: c6:79:68:21:cf:6c:ec:2b:50:38:14:be:00:6e:1e:2f:75:e5: 42:aa:65:02:7e:f5:dc:20:e0:4f:be:32:0a:d7:82:8d:60:a9: f5:00:fe:55:33:94:ae:ca:f8:be:45:17:21:c8:1b:6a:37:58: 76:29:6d:5f:92:8c:1e:f3:ee:d6:01:2f:24:25:93:b0:46:d7: f1:51:f0:5a:96:58:db:b1:d4:0e:79:1e:8e:08:a3:f9:d9:d7: 16:4e:e6:ab:06:63:84:7e:ce:8d:df:e6:6b:8f:5d:25:10:1f: 0b:9c:e3:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdL5LL136WS9ElQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWVlYzgwMmUtOWQ5ZS00ZGJmLWIyOTItN2Y4YTJmMTMzY2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiISm6EuUuuYQ9/pGdexUcUiXknSoDKPTtoa0 14He94jyMFZqByb4/ERQ41z80mNfDxUrSAe9uHXY1+aO1TVOjgtU9ybyjJrGtOhO Hx6JzVOKqVck4v9Ed6xvlqK7bvhLLL9sV6AsKjee4XQq6E+ES+uFU6GxtmyqZmBd 2rh4YzTnAb+USKdoBoS3nAns6QBz6FHrVVmdQW2+EbkT0HQ8Otrgz24stOS54ZEE 32PLK6Xq4FQiE5YhSlaa4mKCHl8iBvVjuBEiuAnSza7Syja66+dHZroUJJL9psnF Mtjj8J7C5LQUCqddxkZCNAOmhRytEAk+Rgi0nPml4D7+cj8mAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSdj4pBjKm+Hr9QEI++GrsP2/WfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvZGVhODQ0YTctYjBkYy0z YTMzLWI3YzAtNmEzMjI2NmYxYzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHqosAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANNGkGOyUXaEb5NxIMiGN8zDCRexHXNvM+pdlGxkUsChhuTqpqtFxNrk 9ILHAeHFZ1987egMVrdk+DiaForjxPHDw+yGIs4ghAw++j8aGM4db0Bmrfvj4TEv VF7aEKC83KlqFtY5cGUP51gHynJ+4i9G8xJhjqErCu+moIDZkv9tRIfxCA+esmC+ k6LTjui7ysZ5aCHPbOwrUDgUvgBuHi915UKqZQJ+9dwg4E++MgrXgo1gqfUA/lUz lK7K+L5FFyHIG2o3WHYpbV+SjB7z7tYBLyQlk7BG1/FR8FqWWNux1A55Ho4Io/nZ 1xZO5qsGY4R+zo3f5muPXSUQHwuc4+g= -----END CERTIFICATE-----Generated at Sat Sep 26 07:03:37 2026 by rpki-client