$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f/4582e0f2-2e29-381f-9a84-205b3c6396bc.roa File: 4582e0f2-2e29-381f-9a84-205b3c6396bc.roa (raw, json) Hash identifier: BrXy0wo/sxzaO/SujBLaURKmnQjWNvxNwo1bfciddfk= Subject key identifier: AE:AA:DC:5F:B0:B5:F9:56:3D:87:83:DE:14:58:59:42:69:D5:2B:55 Certificate issuer: /CN=bff279fd-d394-4080-81b8-6c481e38a07f Certificate serial: 010D0C9F4328584F49898D444DA3DA4F1DCC43C0 Authority key identifier: 9B:C6:26:41:7A:37:C8:87:AD:20:34:85:31:1A:20:9C:09:B8:9F:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f/4582e0f2-2e29-381f-9a84-205b3c6396bc.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 18849 IP address blocks: 72.19.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f/bff279fd-d394-4080-81b8-6c481e38a07f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f/bff279fd-d394-4080-81b8-6c481e38a07f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:8d:44:4d:a3:da:4f:1d:cc:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bff279fd-d394-4080-81b8-6c481e38a07f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=79b4818c-de30-45b2-842b-0478e5e514d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5a:db:8c:f1:b7:9c:e5:67:ab:9c:df:0d:62: 73:c8:43:25:26:7f:25:56:6a:03:a4:62:8a:39:71: eb:5c:40:0a:2f:05:70:7d:d9:41:11:b6:51:b1:f1: 4c:49:3f:e3:d6:21:c2:c5:96:4a:d7:b3:b4:b2:05: e6:40:a2:1f:d8:04:a1:c8:2e:b1:85:c8:cc:59:fe: 09:e1:b0:2d:bf:8f:8b:64:65:4e:83:ed:da:5e:3c: be:38:4e:e1:70:c1:16:dd:5c:ca:2f:94:48:30:c3: 19:e7:ed:2b:38:c9:3a:8a:f7:3c:d2:f0:fe:5a:86: cb:0f:0f:38:ea:88:82:39:b7:e0:bd:3e:22:b9:53: 3c:d7:35:5e:12:b7:13:6e:3e:98:45:9b:9a:94:a4: b1:69:1e:e3:f9:c4:27:ba:0b:3b:e3:91:1b:6a:70: e6:5f:ab:40:a3:4e:6a:f8:0f:08:be:f6:6f:f0:2b: e3:60:33:c2:72:1c:7b:dc:f4:9d:d3:85:58:fa:1d: 93:ab:65:38:2e:02:98:bd:84:c2:0a:1e:8b:dc:e7: d1:f1:bd:80:5a:99:70:f0:b6:8d:6e:3d:95:34:96: cd:c0:c3:2f:58:c0:9c:dd:0b:a7:f3:2b:47:1e:49: 49:e1:f7:e1:be:73:db:5f:26:9c:f2:64:08:bd:eb: 5a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AA:DC:5F:B0:B5:F9:56:3D:87:83:DE:14:58:59:42:69:D5:2B:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f/4582e0f2-2e29-381f-9a84-205b3c6396bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f/bff279fd-d394-4080-81b8-6c481e38a07f.crl X509v3 Authority Key Identifier: keyid:9B:C6:26:41:7A:37:C8:87:AD:20:34:85:31:1A:20:9C:09:B8:9F:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bff279fd-d394-4080-81b8-6c481e38a07f.cer sbgp-ipAddrBlock: critical IPv4: 72.19.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:82:a1:f6:b5:91:7f:c3:ab:2d:35:97:13:24:12:8b:66:9c: fd:74:fb:cd:de:ab:a9:f5:4f:64:91:00:44:f2:d5:25:32:1e: 15:f6:42:4c:ed:6d:15:ae:d9:8f:9e:6f:27:b5:1d:aa:04:43: 5d:bd:61:99:a3:13:82:cd:25:c4:91:34:50:69:0c:4e:63:fd: 03:a3:3f:32:11:0e:e5:f4:db:d8:9d:98:91:07:ac:5a:32:03: 9f:45:0c:01:d9:87:63:8c:26:f5:4c:8a:04:6b:57:40:e7:1b: 44:f4:45:8a:a5:b3:c0:62:3c:3a:02:88:7f:71:74:a2:61:df: 20:02:ac:9b:21:07:3a:8b:71:3a:4d:4a:e0:af:7c:4f:64:7a: 80:23:d0:e4:e4:1e:f2:72:b0:35:4e:80:d7:c4:88:fe:ef:f3: 48:c4:ab:d3:21:ed:2e:bc:e2:e1:03:33:3b:d9:a2:1e:06:dc: 28:0b:94:76:f0:26:e3:0e:37:0e:b6:ef:45:90:a5:1c:be:fd: 67:85:e3:95:c8:77:ff:d0:53:a9:c1:5f:fa:1f:ba:17:52:ca: 14:0f:b9:91:c8:54:81:7f:e8:75:00:ac:a0:d8:9a:d9:7c:30: d5:d9:14:ff:b0:fd:5f:f3:92:a0:fc:dd:b7:a1:38:3b:1d:17: 14:ce:6b:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiY1ETaPaTx3MQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZmMjc5ZmQtZDM5NC00MDgwLTgxYjgtNmM0ODFlMzhh MDdmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzliNDgxOGMtZGUzMC00NWIyLTg0MmItMDQ3OGU1ZTUxNGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVrbjPG3nOVnq5zfDWJzyEMlJn8lVmoDpGKK OXHrXEAKLwVwfdlBEbZRsfFMST/j1iHCxZZK17O0sgXmQKIf2AShyC6xhcjMWf4J 4bAtv4+LZGVOg+3aXjy+OE7hcMEW3VzKL5RIMMMZ5+0rOMk6ivc80vD+WobLDw84 6oiCObfgvT4iuVM81zVeErcTbj6YRZualKSxaR7j+cQnugs745EbanDmX6tAo05q +A8IvvZv8CvjYDPCchx73PSd04VY+h2Tq2U4LgKYvYTCCh6L3OfR8b2AWplw8LaN bj2VNJbNwMMvWMCc3Qun8ytHHklJ4ffhvnPbXyac8mQIvetaJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6q3F+wtflWPYeD3hRYWUJp1StVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iZmYy NzlmZC1kMzk0LTQwODAtODFiOC02YzQ4MWUzOGEwN2YvNDU4MmUwZjItMmUyOS0z ODFmLTlhODQtMjA1YjNjNjM5NmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYmZmMjc5ZmQtZDM5NC00MDgwLTgx YjgtNmM0ODFlMzhhMDdmL2JmZjI3OWZkLWQzOTQtNDA4MC04MWI4LTZjNDgxZTM4 YTA3Zi5jcmwwHwYDVR0jBBgwFoAUm8YmQXo3yIetIDSFMRognAm4n3IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iZmYyNzlmZC1kMzk0LTQwODAtODFiOC02YzQ4 MWUzOGEwN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBMLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKCofa1kX/Dqy01lxMkEotmnP10+83eq6n1T2SRAETy1SUyHhX2Qkzt bRWu2Y+ebye1HaoEQ129YZmjE4LNJcSRNFBpDE5j/QOjPzIRDuX029idmJEHrFoy A59FDAHZh2OMJvVMigRrV0DnG0T0RYqls8BiPDoCiH9xdKJh3yACrJshBzqLcTpN SuCvfE9keoAj0OTkHvJysDVOgNfEiP7v80jEq9Mh7S684uEDMzvZoh4G3CgLlHbw JuMONw6270WQpRy+/WeF45XId//QU6nBX/ofuhdSyhQPuZHIVIF/6HUArKDYmtl8 MNXZFP+w/V/zkqD83behODsdFxTOa4Y= -----END CERTIFICATE-----Generated at Sun Oct 11 15:00:51 2026 by rpki-client