$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63/f2cb7021-f89f-3d83-8f76-e49fe6153b1a.roa File: f2cb7021-f89f-3d83-8f76-e49fe6153b1a.roa (raw, json) Hash identifier: eRGegU20mShWnZ50i14QefG1azYC6VA3+jwzGdvqHWY= Subject key identifier: AF:D0:68:41:7E:5D:11:10:02:9B:0D:9C:6F:42:D3:49:45:E3:AE:8E Certificate issuer: /CN=bfb929b2-4b54-4ef0-b768-f91fca64bd63 Certificate serial: 010D0C9F4328584E76A3D8743BFE770F6071FB80 Authority key identifier: D2:6E:28:DA:B0:97:CC:70:46:27:4F:DE:75:36:6A:C1:52:48:D4:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63/f2cb7021-f89f-3d83-8f76-e49fe6153b1a.roa Signing time: Sat 11 Jul 2026 12:44:02 +0000 ROA not before: Sat 11 Jul 2026 12:44:02 +0000 ROA not after: Fri 09 Oct 2026 12:44:02 +0000 asID: 402384 IP address blocks: 192.225.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63/bfb929b2-4b54-4ef0-b768-f91fca64bd63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63/bfb929b2-4b54-4ef0-b768-f91fca64bd63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:a3:d8:74:3b:fe:77:0f:60:71:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb929b2-4b54-4ef0-b768-f91fca64bd63 Validity Not Before: Jul 11 12:44:02 2026 GMT Not After : Oct 9 12:44:02 2026 GMT Subject: CN=dce7e8c0-e8cd-4718-8198-69bc57fdcee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:36:4a:82:ce:be:be:4d:6c:4a:3d:39:1b:57: a7:76:d2:52:fb:e5:40:95:7f:9b:12:79:0e:6d:f6: 4f:7d:63:46:3c:15:7c:ca:cd:20:57:55:0c:75:7e: 21:58:db:99:ca:e7:ba:3a:29:7c:75:db:ca:7d:fb: c2:9e:41:bc:b5:22:34:79:b6:f6:dd:60:66:e8:ce: 0f:db:01:6b:30:59:dd:31:5d:01:5f:e8:a5:d4:05: 13:34:00:50:d1:e6:ff:5d:14:56:88:2f:78:2d:59: 3d:b7:ba:a4:5c:e0:b7:62:bb:1e:50:c6:61:1e:2b: c4:43:5a:d8:cb:a2:96:64:e3:c3:5b:c8:18:bb:32: d1:3e:6f:57:b8:48:81:47:fe:3b:03:38:2c:54:73: 9d:32:a2:cd:c0:7f:89:49:5e:19:89:48:1a:7f:33: 07:7f:d5:f6:6d:3d:62:f8:a6:77:49:50:45:09:c8: 70:50:6a:36:ea:e0:39:12:4c:5d:ec:63:3d:ea:7a: 40:72:f4:c0:2d:15:d4:54:68:4f:cb:6b:1e:f0:45: 34:52:d7:38:09:03:c1:18:25:43:8d:0c:e8:db:eb: 92:d1:59:1e:6b:4b:b7:21:db:39:52:63:ec:07:c7: 38:48:c6:83:97:c7:d8:35:3f:76:cd:a2:a2:56:f5: 6a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D0:68:41:7E:5D:11:10:02:9B:0D:9C:6F:42:D3:49:45:E3:AE:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63/f2cb7021-f89f-3d83-8f76-e49fe6153b1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63/bfb929b2-4b54-4ef0-b768-f91fca64bd63.crl X509v3 Authority Key Identifier: keyid:D2:6E:28:DA:B0:97:CC:70:46:27:4F:DE:75:36:6A:C1:52:48:D4:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfb929b2-4b54-4ef0-b768-f91fca64bd63.cer sbgp-ipAddrBlock: critical IPv4: 192.225.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:d7:06:ed:72:60:4c:f9:9b:84:f6:48:b2:a0:8d:3f:57:fc: 1b:2d:31:45:92:83:bc:3a:5d:bf:69:fe:ed:07:24:87:2b:4a: db:f4:f7:95:6e:c2:82:c1:9c:4c:28:15:dc:8b:f6:8a:ac:90: 8a:b3:7f:7b:44:56:a8:50:df:6e:9d:5e:c5:a8:49:36:6a:33: ec:87:ea:e0:d9:ee:77:4b:14:09:9a:28:e5:8b:e3:84:b0:29: ba:07:48:f4:20:f6:62:12:b2:6c:4e:81:56:19:35:d6:1a:14: 2b:35:c3:75:1f:a4:7d:f9:86:96:c1:ad:d4:a4:c4:a5:03:a5: cf:c7:b3:e9:37:73:52:3f:23:28:e4:8c:58:a6:be:5b:17:ea: ff:d8:06:b5:95:d7:36:0f:47:44:78:79:66:54:b8:5f:c5:ac: e2:6f:dd:36:f8:ab:e8:38:66:11:fc:7f:61:06:84:1e:66:e3: 1f:d9:f7:d0:a7:48:68:c7:9f:ab:50:8e:c4:c9:38:9a:71:c4: 13:11:65:a6:c7:e7:ef:fa:68:ab:93:01:9b:5d:1c:1d:44:f0: df:94:0a:0b:7a:53:49:f5:e3:89:78:08:42:8a:90:e0:2b:a4: 0b:38:50:4a:e8:02:d6:89:f6:0a:fd:6a:61:6a:a9:b0:c4:50: 0d:66:51:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52o9h0O/53D2Bx+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZiOTI5YjItNGI1NC00ZWYwLWI3NjgtZjkxZmNhNjRi ZDYzMB4XDTI2MDcxMTEyNDQwMloXDTI2MTAwOTEyNDQwMlowLzEtMCsGA1UEAxMk ZGNlN2U4YzAtZThjZC00NzE4LTgxOTgtNjliYzU3ZmRjZWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jZKgs6+vk1sSj05G1endtJS++VAlX+bEnkO bfZPfWNGPBV8ys0gV1UMdX4hWNuZyue6Oil8ddvKffvCnkG8tSI0ebb23WBm6M4P 2wFrMFndMV0BX+il1AUTNABQ0eb/XRRWiC94LVk9t7qkXOC3YrseUMZhHivEQ1rY y6KWZOPDW8gYuzLRPm9XuEiBR/47AzgsVHOdMqLNwH+JSV4ZiUgafzMHf9X2bT1i +KZ3SVBFCchwUGo26uA5Ekxd7GM96npAcvTALRXUVGhPy2se8EU0Utc4CQPBGCVD jQzo2+uS0Vkea0u3Ids5UmPsB8c4SMaDl8fYNT92zaKiVvVqdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/QaEF+XREQApsNnG9C00lF466OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iZmI5 MjliMi00YjU0LTRlZjAtYjc2OC1mOTFmY2E2NGJkNjMvZjJjYjcwMjEtZjg5Zi0z ZDgzLThmNzYtZTQ5ZmU2MTUzYjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmZiOTI5YjItNGI1NC00ZWYwLWI3 NjgtZjkxZmNhNjRiZDYzL2JmYjkyOWIyLTRiNTQtNGVmMC1iNzY4LWY5MWZjYTY0 YmQ2My5jcmwwHwYDVR0jBBgwFoAU0m4o2rCXzHBGJ0/edTZqwVJI1GwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iZmI5MjliMi00YjU0LTRlZjAtYjc2OC1mOTFm Y2E2NGJkNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwOHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMHXBu1yYEz5m4T2SLKgjT9X/BstMUWSg7w6Xb9p/u0HJIcrStv095Vu woLBnEwoFdyL9oqskIqzf3tEVqhQ326dXsWoSTZqM+yH6uDZ7ndLFAmaKOWL44Sw KboHSPQg9mISsmxOgVYZNdYaFCs1w3UfpH35hpbBrdSkxKUDpc/Hs+k3c1I/Iyjk jFimvlsX6v/YBrWV1zYPR0R4eWZUuF/FrOJv3Tb4q+g4ZhH8f2EGhB5m4x/Z99Cn SGjHn6tQjsTJOJpxxBMRZabH5+/6aKuTAZtdHB1E8N+UCgt6U0n144l4CEKKkOAr pAs4UEroAtaJ9gr9amFqqbDEUA1mUew= -----END CERTIFICATE-----Generated at Fri Jul 24 10:24:46 2026 by rpki-client