$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/23575ff1-f0ab-3503-a703-a3e1df2b0aff.roa File: 23575ff1-f0ab-3503-a703-a3e1df2b0aff.roa (raw, json) Hash identifier: DblsKomWtdlorMwyW13ThBbtpriYp87hDBEWqRTUhvM= Subject key identifier: 27:77:E9:8F:AB:A4:5C:51:F0:5F:2E:AE:49:5F:CD:93:8F:81:67:D9 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584F20F7C0C3D07599EE0E09AA00 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/23575ff1-f0ab-3503-a703-a3e1df2b0aff.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 35908 IP address blocks: 67.229.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:c0:c3:d0:75:99:ee:0e:09:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=4e3125c1-a790-4a89-8dee-45af524667ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e4:8e:3c:83:7f:47:44:de:55:37:54:b8:33: c4:b4:e4:e0:88:4b:6d:92:3d:d4:9e:46:e0:19:60: e3:1a:d5:49:a7:a1:45:ea:6e:68:aa:ab:2c:f1:cb: db:96:67:5c:b2:e1:bd:b1:9e:4f:3e:dd:62:25:6e: 50:c7:36:45:0e:a5:61:03:2b:05:04:58:62:40:80: 20:19:82:f3:25:c2:62:90:43:06:00:e3:6e:d4:05: 16:13:0b:16:56:f5:da:dc:dc:2f:25:30:88:fd:15: c5:ff:7e:4d:da:12:98:c6:f3:33:63:5d:75:e7:44: d8:02:fc:18:5c:4a:31:a0:e4:38:fb:d5:61:7d:b2: 1d:bd:b1:89:c0:1d:71:72:b9:e0:da:6e:9e:7f:7a: 24:52:1c:cf:f7:3a:e4:6f:dc:98:0b:c6:5e:a8:c3: 15:09:5b:35:46:31:26:17:22:b8:c0:ad:3c:99:ad: 20:54:5e:c9:3a:ac:b8:41:1e:b7:5c:fd:81:12:b8: a7:86:c5:c2:1e:37:29:d1:b2:a3:42:39:a7:c2:e3: f6:91:a7:3c:c8:28:16:1d:36:c3:72:ea:46:18:68: 77:b1:b7:57:0d:d3:a8:5a:d9:fb:72:3c:67:aa:9f: 34:cb:e9:73:95:91:1c:db:8a:ac:41:8f:18:87:88: 8e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:77:E9:8F:AB:A4:5C:51:F0:5F:2E:AE:49:5F:CD:93:8F:81:67:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/23575ff1-f0ab-3503-a703-a3e1df2b0aff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 67.229.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:44:fd:fe:1a:bc:5e:81:ef:78:e9:ad:0a:77:6a:2f:82:83: a3:78:18:31:3a:e0:f0:6d:e6:63:aa:7f:83:20:c9:24:b4:23: f8:f4:48:b3:67:4f:6b:d1:16:2e:f2:04:ec:d3:41:9e:a0:c3: 6c:4a:0a:f8:d5:54:b7:a2:76:9f:09:41:33:e4:c4:2a:b2:48: fb:90:6c:55:88:b7:6b:8d:53:fa:2e:8d:b8:ae:f5:19:72:b1: 2b:b8:14:59:c4:0a:44:8a:e8:40:b5:f0:92:9e:e5:f1:b0:2d: 3e:7e:76:11:a7:61:bc:9c:4b:29:78:b2:f1:0a:93:9a:96:25: 1f:58:b8:5b:f2:ce:1a:6a:99:b4:3a:7d:ee:c0:fc:97:39:40: 5b:8c:9c:25:75:37:38:fd:b1:a8:ec:3e:a6:93:7d:01:91:eb: 6d:d0:cb:9f:86:d3:4e:e3:1e:9d:60:a4:64:fa:23:81:ad:e9: 57:17:79:b3:3a:2f:4d:93:c6:93:3e:c9:75:63:92:2d:77:a7: 33:d8:24:d7:5c:8d:09:d1:01:7d:a1:e0:58:8f:8d:9c:ba:5a: 60:6c:c6:55:f4:89:9b:42:d3:7e:b2:73:9d:98:85:3f:6b:a5: 15:52:2c:52:8b:eb:bb:10:1a:b3:5f:a7:f9:3a:b0:cf:79:ba: d0:f1:a9:26 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8g98DD0HWZ7g4JqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NGUzMTI1YzEtYTc5MC00YTg5LThkZWUtNDVhZjUyNDY2N2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuSOPIN/R0TeVTdUuDPEtOTgiEttkj3Unkbg GWDjGtVJp6FF6m5oqqss8cvblmdcsuG9sZ5PPt1iJW5QxzZFDqVhAysFBFhiQIAg GYLzJcJikEMGAONu1AUWEwsWVvXa3NwvJTCI/RXF/35N2hKYxvMzY11150TYAvwY XEoxoOQ4+9VhfbIdvbGJwB1xcrng2m6ef3okUhzP9zrkb9yYC8ZeqMMVCVs1RjEm FyK4wK08ma0gVF7JOqy4QR63XP2BErinhsXCHjcp0bKjQjmnwuP2kac8yCgWHTbD cupGGGh3sbdXDdOoWtn7cjxnqp80y+lzlZEc24qsQY8Yh4iO+QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCd36Y+rpFxR8F8urklfzZOPgWfZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvMjM1NzVmZjEtZjBhYi0z NTAzLWE3MDMtYTNlMWRmMmIwYWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQ+UwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAsUT9/hq8XoHveOmtCndqL4KDo3gYMTrg8G3mY6p/gyDJJLQj+PRIs2dP a9EWLvIE7NNBnqDDbEoK+NVUt6J2nwlBM+TEKrJI+5BsVYi3a41T+i6NuK71GXKx K7gUWcQKRIroQLXwkp7l8bAtPn52EadhvJxLKXiy8QqTmpYlH1i4W/LOGmqZtDp9 7sD8lzlAW4ycJXU3OP2xqOw+ppN9AZHrbdDLn4bTTuMenWCkZPojga3pVxd5szov TZPGkz7JdWOSLXenM9gk11yNCdEBfaHgWI+NnLpaYGzGVfSJm0LTfrJznZiFP2ul FVIsUovruxAas1+n+Tqwz3m60PGpJg== -----END CERTIFICATE-----Generated at Fri Sep 25 18:37:51 2026 by rpki-client