$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/8a11e0bb-7cfa-3a20-b2e0-b4e6fc710df2.roa File: 8a11e0bb-7cfa-3a20-b2e0-b4e6fc710df2.roa (raw, json) Hash identifier: leVwLLs+9ohxU8F/jQ5I3MIYTTA3EDspUZRRsm/ZD3Q= Subject key identifier: FE:31:8F:B9:05:12:4F:B6:D9:66:09:F0:AD:65:D3:C3:AF:D1:60:A3 Certificate issuer: /CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6 Certificate serial: 010D0C9F4328584F4975B4648D5F9DBE6F739D80 Authority key identifier: 7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/8a11e0bb-7cfa-3a20-b2e0-b4e6fc710df2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398090 IP address blocks: 104.171.200.0/22 maxlen: 24 192.222.48.0/20 maxlen: 24 198.145.39.0/24 maxlen: 24 209.20.156.0/22 maxlen: 24 2607:bb40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:b4:64:8d:5f:9d:be:6f:73:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7638bad8-4308-4204-bd03-1707f95f7559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:68:81:2b:95:50:ba:32:15:9e:8c:66:c5:e3: 9c:97:e3:7d:03:66:ae:6b:70:cc:51:ea:9f:8d:05: 90:15:55:32:21:db:81:8e:64:9c:f0:7a:e9:fa:40: 4d:7c:3b:2f:b3:11:73:c9:47:5a:d5:d0:c8:0f:db: 11:85:83:b0:1b:d1:3b:b9:76:75:ce:72:62:63:83: 78:6f:7a:12:42:d6:29:fd:9e:09:c0:da:60:7a:4b: 96:cf:21:6f:16:41:84:30:2c:62:d7:6b:82:b6:3e: d7:21:cb:d2:ab:13:53:3e:32:4d:d2:b8:0e:cc:12: 45:4d:9f:3b:f9:0f:87:ab:f8:39:ed:71:60:a4:81: 94:02:00:77:01:d7:9a:f6:4a:b3:3c:47:ad:04:1e: 20:dc:57:03:14:5c:5c:5d:37:4c:bb:f2:c1:e4:4e: 0f:42:12:b9:b7:3f:1f:f1:58:90:5b:ff:13:fd:8b: 1b:f8:f0:e7:88:ed:6e:b9:88:dc:88:80:0a:4d:4f: 8a:ea:e8:2c:0a:c1:4a:2f:53:f1:84:c5:d8:b9:ae: 5f:ce:c6:a4:4a:31:1d:84:cc:60:c5:7d:bb:08:73: 13:0c:5e:f3:51:6f:ad:0f:89:db:69:24:38:54:8d: 71:1c:86:39:c0:ee:11:c3:b1:0a:a1:3d:36:5e:5e: f3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:31:8F:B9:05:12:4F:B6:D9:66:09:F0:AD:65:D3:C3:AF:D1:60:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/8a11e0bb-7cfa-3a20-b2e0-b4e6fc710df2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl X509v3 Authority Key Identifier: keyid:7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer sbgp-ipAddrBlock: critical IPv4: 104.171.200.0/22 192.222.48.0/20 198.145.39.0/24 209.20.156.0/22 IPv6: 2607:bb40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:6d:f0:6b:d0:86:f6:89:05:e8:8d:f3:d6:bc:8d:7c:6e:cb: b5:a8:4d:f5:f0:cc:fe:0b:fe:a8:b5:7e:2d:1b:c6:8e:0b:0a: c8:c4:da:96:3e:d1:65:b0:63:06:87:50:c3:7a:e5:72:b6:85: a1:1b:8c:83:1e:d9:84:91:52:18:a7:49:b5:af:91:f7:4a:e6: 40:a8:cc:f2:00:b2:ff:6a:e3:96:cc:65:09:5b:fe:f2:17:ef: db:f1:21:c4:68:be:4a:a7:eb:b6:23:b7:f7:ba:dc:a1:6d:75: 29:d5:9f:e0:9c:e1:5e:2f:9f:ba:17:d1:88:a2:26:de:95:b3: 14:ee:05:4e:c5:51:f0:d2:ab:9e:63:3a:16:cb:31:2f:25:a4: 6b:51:d0:e0:c9:0d:6c:04:5a:0c:2c:84:c3:00:39:e4:b5:e8: e3:45:6b:ef:e4:89:0c:b2:d6:e9:6a:f5:f3:cb:53:cd:a8:b1: a2:c3:30:19:08:ac:a5:b3:44:0b:25:bc:08:70:ce:c4:a9:41: b9:eb:3b:27:93:7d:67:bf:2b:fb:8b:83:d7:9d:f1:66:ef:80: 8c:03:b8:0a:fa:23:f7:51:0b:8d:c1:74:96:56:5d:5c:ed:35: 2b:a9:5a:98:e6:33:41:c7:e0:c5:81:03:77:e8:57:55:64:16: 28:2a:7b:1a -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWE9JdbRkjV+dvm9znYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNiMzZhN2ItYmYzYy00YTgxLThjNWItYTQ4ZDFhNTdk MmQ2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzYzOGJhZDgtNDMwOC00MjA0LWJkMDMtMTcwN2Y5NWY3NTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WiBK5VQujIVnoxmxeOcl+N9A2aua3DMUeqf jQWQFVUyIduBjmSc8Hrp+kBNfDsvsxFzyUda1dDID9sRhYOwG9E7uXZ1znJiY4N4 b3oSQtYp/Z4JwNpgekuWzyFvFkGEMCxi12uCtj7XIcvSqxNTPjJN0rgOzBJFTZ87 +Q+Hq/g57XFgpIGUAgB3Adea9kqzPEetBB4g3FcDFFxcXTdMu/LB5E4PQhK5tz8f 8ViQW/8T/Ysb+PDniO1uuYjciIAKTU+K6ugsCsFKL1PxhMXYua5fzsakSjEdhMxg xX27CHMTDF7zUW+tD4nbaSQ4VI1xHIY5wO4Rw7EKoT02Xl7z9QIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFP4xj7kFEk+22WYJ8K1l08Ov0WCjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iY2Iz NmE3Yi1iZjNjLTRhODEtOGM1Yi1hNDhkMWE1N2QyZDYvOGExMWUwYmItN2NmYS0z YTIwLWIyZTAtYjRlNmZjNzEwZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmNiMzZhN2ItYmYzYy00YTgxLThj NWItYTQ4ZDFhNTdkMmQ2L2JjYjM2YTdiLWJmM2MtNGE4MS04YzViLWE0OGQxYTU3 ZDJkNi5jcmwwHwYDVR0jBBgwFoAUfPaBL9QJ/Qs44zusnpOitJm0xiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iY2IzNmE3Yi1iZjNjLTRhODEtOGM1Yi1hNDhk MWE1N2QyZDYuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCaKvIAwQE wN4wAwQAxpEnAwQC0RScMA0EAgACMAcDBQAmB7tAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD5t8GvQhvaJ BeiN89a8jXxuy7WoTfXwzP4L/qi1fi0bxo4LCsjE2pY+0WWwYwaHUMN65XK2haEb jIMe2YSRUhinSbWvkfdK5kCozPIAsv9q45bMZQlb/vIX79vxIcRovkqn67Yjt/e6 3KFtdSnVn+Cc4V4vn7oX0YiiJt6VsxTuBU7FUfDSq55jOhbLMS8lpGtR0ODJDWwE WgwshMMAOeS16ONFa+/kiQyy1ulq9fPLU82osaLDMBkIrKWzRAslvAhwzsSpQbnr OyeTfWe/K/uLg9ed8WbvgIwDuAr6I/dRC43BdJZWXVztNSupWpjmM0HH4MWBA3fo V1VkFigqexo= -----END CERTIFICATE-----Generated at Tue Sep 29 18:07:38 2026 by rpki-client