$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa File: 8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa (raw, json) Hash identifier: 19ydMx/ec0ub+DhX6sq3aSi2dorlQn0Z1POzuWHR6+U= Subject key identifier: 57:C5:6F:EF:47:FA:C3:C5:01:19:1F:25:5E:79:C2:66:15:92:9D:D6 Certificate issuer: /CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Certificate serial: 010D0C9F4328584F4973A9741C2BB3792C1243E0 Authority key identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40867 IP address blocks: 74.114.72.0/21 maxlen: 21 172.86.240.0/21 maxlen: 21 208.90.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:a9:74:1c:2b:b3:79:2c:12:43:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6bc0028e-cd4c-4694-b84e-c7464ae6fbd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:46:f3:4a:7a:83:de:0b:84:bf:2c:6a:76:a5: 9b:41:75:21:cc:aa:30:f0:ae:8f:45:57:22:a0:46: b6:52:0c:f3:08:0c:8c:fd:49:21:fa:3b:f0:20:57: 74:ab:04:b1:a3:a5:c4:1b:15:c9:7f:1e:e1:10:46: 55:74:49:38:2a:99:8c:ae:2a:dd:b8:30:d1:ae:eb: 61:a4:15:ce:e5:df:fc:ac:25:4d:0e:dc:3a:f5:c8: 4f:60:38:3e:56:7c:34:ef:26:20:e1:86:4b:6e:84: 15:67:1b:d2:d1:18:52:05:30:bd:3e:f3:75:90:0f: af:bb:95:54:8a:3a:9e:d0:e4:be:96:97:83:40:5e: 8b:69:41:d8:2a:72:5e:1a:0f:21:d7:3a:f7:14:ab: 68:11:b6:b1:92:6a:98:e1:c4:a3:eb:f9:84:52:98: 52:28:44:96:84:9f:70:47:69:c1:f4:58:be:df:9a: e1:4b:ee:6a:49:35:79:f8:a8:fa:f6:40:69:1b:18: f2:5b:90:03:68:d6:e9:cc:47:6b:79:48:9f:e6:b6: 4f:1f:0d:54:44:4f:9e:0f:b0:50:b2:82:f6:22:98: 96:15:a7:1b:9d:c3:25:a1:54:b3:23:6d:4d:18:a5: db:34:6f:d0:07:d1:fe:5b:02:7e:e0:92:ee:87:4e: 89:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C5:6F:EF:47:FA:C3:C5:01:19:1F:25:5E:79:C2:66:15:92:9D:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl X509v3 Authority Key Identifier: keyid:BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer sbgp-ipAddrBlock: critical IPv4: 74.114.72.0/21 172.86.240.0/21 208.90.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:79:5d:53:75:80:03:e6:30:44:c5:88:a7:c3:94:9c:13:d2: 72:79:6a:1b:63:68:60:0d:0a:ba:44:a8:7a:03:da:5c:54:9e: 18:70:15:6e:15:a4:70:98:41:cd:c0:3b:db:ce:01:a1:df:ff: 0c:dd:8b:0b:eb:a4:98:50:73:19:eb:db:aa:72:b4:e7:82:3e: b2:0b:18:34:52:41:6c:45:6b:2d:03:44:fc:f4:df:5c:0f:16: 02:d3:f1:c4:5c:f2:87:8e:8d:b9:53:52:31:23:e8:e7:ee:89: 64:19:f9:7a:fd:50:06:b0:61:39:fc:0d:c4:75:c1:f3:e3:96: e3:9f:55:1e:96:2f:e5:fd:f7:a4:02:c5:91:f7:ae:e5:6f:9b: 72:cb:7e:8e:50:54:88:a0:b7:8b:bd:83:1e:64:a3:e7:31:12: 2c:f4:2b:da:4d:f3:d7:93:c0:5e:33:93:11:cb:5f:f3:cc:73: 60:50:16:0b:94:7b:98:d9:4f:7d:08:c1:e3:4d:db:99:bb:c3: ab:d0:4d:8d:91:8a:13:80:83:42:0b:d0:a9:20:9d:c9:55:ae: 15:74:80:52:a0:4a:19:ab:d2:fb:21:c6:f0:5e:1d:a4:1b:15: 8f:08:10:57:5f:c0:4c:87:c7:e5:2a:c4:2c:a8:14:a0:24:ea: 57:62:73:32 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9Jc6l0HCuzeSwSQ+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYzYzNiZDUtM2I5NC00N2UyLTgxZmMtZjQ5MDA4MTRl NDk0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmJjMDAyOGUtY2Q0Yy00Njk0LWI4NGUtYzc0NjRhZTZmYmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEbzSnqD3guEvyxqdqWbQXUhzKow8K6PRVci oEa2UgzzCAyM/Ukh+jvwIFd0qwSxo6XEGxXJfx7hEEZVdEk4KpmMrirduDDRruth pBXO5d/8rCVNDtw69chPYDg+Vnw07yYg4YZLboQVZxvS0RhSBTC9PvN1kA+vu5VU ijqe0OS+lpeDQF6LaUHYKnJeGg8h1zr3FKtoEbaxkmqY4cSj6/mEUphSKESWhJ9w R2nB9Fi+35rhS+5qSTV5+Kj69kBpGxjyW5ADaNbpzEdreUif5rZPHw1URE+eD7BQ soL2IpiWFacbncMloVSzI21NGKXbNG/QB9H+WwJ+4JLuh06JTQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFFfFb+9H+sPFARkfJV55wmYVkp3WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNj M2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkwMDgxNGU0OTQvOGI1YjNmNjAtZDk0ZC0z Yjk2LWJkNTEtN2VjZWY5MTlhMDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYzYzNiZDUtM2I5NC00N2UyLTgx ZmMtZjQ5MDA4MTRlNDk0L2JmM2MzYmQ1LTNiOTQtNDdlMi04MWZjLWY0OTAwODE0 ZTQ5NC5jcmwwHwYDVR0jBBgwFoAUv27gzbQvdJZGDC7Ndgx/FlpcgW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNjM2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkw MDgxNGU0OTQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDSnJIAwQD rFbwAwQD0FpgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAIV5XVN1gAPmMETFiKfDlJwT0nJ5ahtjaGANCrpE qHoD2lxUnhhwFW4VpHCYQc3AO9vOAaHf/wzdiwvrpJhQcxnr26pytOeCPrILGDRS QWxFay0DRPz031wPFgLT8cRc8oeOjblTUjEj6OfuiWQZ+Xr9UAawYTn8DcR1wfPj luOfVR6WL+X996QCxZH3ruVvm3LLfo5QVIigt4u9gx5ko+cxEiz0K9pN89eTwF4z kxHLX/PMc2BQFguUe5jZT30IweNN25m7w6vQTY2RihOAg0IL0KkgnclVrhV0gFKg Shmr0vshxvBeHaQbFY8IEFdfwEyHx+UqxCyoFKAk6ldiczI= -----END CERTIFICATE-----Generated at Sun Oct 11 10:54:40 2026 by rpki-client