$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bfaa3884-e6da-33dc-9654-b160bb68c69a.roa File: bfaa3884-e6da-33dc-9654-b160bb68c69a.roa (raw, json) Hash identifier: 94GcMnaV0PIruT/POFrTcUk6zqjTcNpyzcdJf2JZVPA= Subject key identifier: 8B:59:CE:D0:9B:2E:07:C4:33:32:38:16:92:14:EC:FD:1C:B9:CE:93 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584F4988FA6D633469E492020500 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bfaa3884-e6da-33dc-9654-b160bb68c69a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9009 IP address blocks: 104.164.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:fa:6d:63:34:69:e4:92:02:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=33742411-2a1e-4710-a13a-080f2a64b45f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:54:52:fe:d3:52:45:a4:14:ca:86:c9:a1:15: a3:cb:bc:30:2a:1d:1e:b1:23:4f:c4:73:05:18:2f: dd:93:cd:2f:82:cc:31:99:bd:b1:5f:61:f3:26:4e: 54:fa:04:ee:24:68:6c:ad:1d:23:12:a2:52:34:36: 38:b0:a1:c7:51:ea:72:9b:9c:80:47:92:be:d2:5c: f4:67:d4:1a:49:03:8c:5b:e5:6f:ad:cc:43:fe:90: d7:16:45:5e:51:d7:b7:40:6b:60:c6:69:b6:b5:b3: b5:38:bc:23:26:dd:90:af:97:6c:71:84:3a:ec:ed: aa:63:25:22:8c:37:88:6f:99:74:e2:cb:17:3f:91: 70:21:53:86:90:26:df:67:37:a3:42:94:90:ff:77: dd:65:ab:f7:78:ea:a6:c1:e9:e7:3f:13:e4:fb:c8: 70:25:95:9e:f5:20:b7:70:2d:40:7c:c3:fa:fe:51: 20:f5:f3:7e:e2:0e:38:80:85:1e:17:9f:5c:da:d8: a3:65:fe:8b:b9:4a:1a:a4:f4:f0:ac:c2:f7:a7:82: e0:c0:67:56:c8:4d:81:58:94:78:07:72:2a:4e:6e: fb:70:d7:04:58:d7:01:ba:b4:ad:7c:29:42:cd:b1: e7:a8:93:ad:79:20:86:ed:81:9f:4a:31:d3:0a:55: 92:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:59:CE:D0:9B:2E:07:C4:33:32:38:16:92:14:EC:FD:1C:B9:CE:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bfaa3884-e6da-33dc-9654-b160bb68c69a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.164.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:4a:a2:aa:04:6b:67:4d:06:63:8f:69:28:a3:52:7b:90:9d: 51:8e:78:d4:bd:f1:fb:c8:0a:d4:6b:9f:76:06:82:61:63:51: 04:9d:d7:93:13:11:7f:2b:a4:2c:d6:a8:85:f5:47:23:29:9a: a9:c8:c0:f8:7a:48:38:9b:b7:b9:de:e4:bd:ca:f1:5a:c2:e9: 89:e1:69:d0:07:e2:c6:cd:31:78:67:68:a0:e7:48:c2:66:bf: 25:aa:90:db:02:41:07:89:a6:5a:5e:0a:ad:95:3d:80:37:8f: 3b:8c:31:d6:db:00:7b:dd:e5:58:94:d7:4c:af:20:86:2b:0e: 05:45:4e:b7:fc:93:6a:b2:a8:b0:5d:5c:c7:f2:66:c8:27:3e: 0b:bf:b0:c2:74:f2:10:bb:e7:30:1d:1c:87:54:86:44:0f:0f: 98:9d:31:1a:f5:14:b8:c4:6e:24:6c:52:a0:9c:31:25:6e:9a: 2d:3e:5b:2c:8b:cc:40:4a:3f:e4:75:a9:1f:d6:86:50:46:25: 3c:eb:6f:ca:5c:56:05:9f:1c:0c:91:4b:07:49:83:cc:44:d4: 14:b7:e3:e6:26:75:1a:c9:bf:96:77:71:3b:33:d4:d1:bf:2a: 24:46:ec:0b:5e:17:00:a6:43:c8:a3:98:c7:31:8c:d0:ab:61: 1d:f2:78:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiPptYzRp5JICBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzM3NDI0MTEtMmExZS00NzEwLWExM2EtMDgwZjJhNjRiNDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVRS/tNSRaQUyobJoRWjy7wwKh0esSNPxHMF GC/dk80vgswxmb2xX2HzJk5U+gTuJGhsrR0jEqJSNDY4sKHHUepym5yAR5K+0lz0 Z9QaSQOMW+VvrcxD/pDXFkVeUde3QGtgxmm2tbO1OLwjJt2Qr5dscYQ67O2qYyUi jDeIb5l04ssXP5FwIVOGkCbfZzejQpSQ/3fdZav3eOqmwennPxPk+8hwJZWe9SC3 cC1AfMP6/lEg9fN+4g44gIUeF59c2tijZf6LuUoapPTwrML3p4LgwGdWyE2BWJR4 B3IqTm77cNcEWNcBurStfClCzbHnqJOteSCG7YGfSjHTClWSFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItZztCbLgfEMzI4FpIU7P0cuc6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYmZhYTM4ODQtZTZkYS0z M2RjLTk2NTQtYjE2MGJiNjhjNjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKQVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtKoqoEa2dNBmOPaSijUnuQnVGOeNS98fvICtRrn3YGgmFjUQSd15MT EX8rpCzWqIX1RyMpmqnIwPh6SDibt7ne5L3K8VrC6YnhadAH4sbNMXhnaKDnSMJm vyWqkNsCQQeJplpeCq2VPYA3jzuMMdbbAHvd5ViU10yvIIYrDgVFTrf8k2qyqLBd XMfyZsgnPgu/sMJ08hC75zAdHIdUhkQPD5idMRr1FLjEbiRsUqCcMSVumi0+WyyL zEBKP+R1qR/WhlBGJTzrb8pcVgWfHAyRSwdJg8xE1BS34+YmdRrJv5Z3cTsz1NG/ KiRG7AteFwCmQ8ijmMcxjNCrYR3yeLE= -----END CERTIFICATE-----Generated at Mon Sep 28 00:29:33 2026 by rpki-client