$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/a2c64d3d-ff58-37e5-877f-f1b13ea31106.roa File: a2c64d3d-ff58-37e5-877f-f1b13ea31106.roa (raw, json) Hash identifier: mWCjeDEnFi5OSfA3RQ8k4pbd0SvgVIkKgdOLWamw02w= Subject key identifier: 2A:52:A1:D1:E6:FF:A4:6A:A3:11:10:3C:2D:F0:AA:05:00:9D:DA:DB Certificate issuer: /CN=bc061f95-a504-48f1-88f1-fae53628511e Certificate serial: 010D0C9F4328584F498A68435951FBC10EDD3D00 Authority key identifier: 14:50:15:A2:CB:AD:07:77:38:CC:81:8B:92:AD:A3:2E:51:4A:F3:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/a2c64d3d-ff58-37e5-877f-f1b13ea31106.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398885 IP address blocks: 204.107.12.0/24 maxlen: 24 204.107.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/bc061f95-a504-48f1-88f1-fae53628511e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/bc061f95-a504-48f1-88f1-fae53628511e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:68:43:59:51:fb:c1:0e:dd:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc061f95-a504-48f1-88f1-fae53628511e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=822cca1e-2a09-44a2-9b66-d359cc43f6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:71:40:04:60:69:33:32:2b:91:6c:2b:6c:7c: 99:94:73:aa:94:60:ee:0c:a4:92:e6:93:0f:44:3e: d3:54:89:ac:dc:83:06:3a:bc:6b:0c:b9:74:9b:ce: 77:dd:c4:ca:c5:c6:27:39:22:05:1a:f2:ca:d0:06: 91:48:95:b2:50:5a:29:8d:e0:01:80:c3:1b:4f:15: 86:a9:e3:a4:bc:f1:52:0f:88:9d:7d:aa:d1:9d:0d: 15:98:5e:b9:9e:c5:67:39:20:a4:87:9f:c0:7a:75: 49:81:07:92:27:e6:0b:9e:e8:3a:d6:d6:49:19:88: 51:7b:16:6d:0d:2d:ef:50:b9:82:46:e9:6b:44:05: f3:9d:8a:72:76:22:72:e6:f7:05:ac:20:52:ea:4d: 13:a9:be:f4:d5:12:fc:a4:12:7d:57:76:c1:74:a4: 80:6d:de:97:67:0a:93:e4:f1:e5:83:cc:fd:11:94: 3f:81:a6:5b:81:9e:09:30:ac:5e:37:15:09:53:1c: 75:ce:62:05:a7:be:80:c3:72:40:82:e7:91:16:bb: cf:28:56:38:b4:22:b8:3a:90:fd:46:d9:69:f2:b1: 67:63:ea:a2:4c:62:c3:e6:02:75:a1:a9:49:93:fb: 3c:45:ad:96:4b:c0:1e:89:3e:73:96:3e:56:b4:86: cc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:52:A1:D1:E6:FF:A4:6A:A3:11:10:3C:2D:F0:AA:05:00:9D:DA:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/a2c64d3d-ff58-37e5-877f-f1b13ea31106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/bc061f95-a504-48f1-88f1-fae53628511e.crl X509v3 Authority Key Identifier: keyid:14:50:15:A2:CB:AD:07:77:38:CC:81:8B:92:AD:A3:2E:51:4A:F3:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e.cer sbgp-ipAddrBlock: critical IPv4: 204.107.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:84:e0:dd:5e:c3:60:55:39:b6:8a:f2:77:12:44:33:29:63: a7:ed:5d:61:c7:0e:f6:23:7b:fd:6a:ab:51:f8:2e:eb:05:d9: b2:81:d8:65:30:b8:4e:c9:ba:b8:07:e5:eb:ca:06:d6:40:ae: 4d:0c:17:60:68:b1:ad:cd:3d:6f:1f:47:50:fb:2a:42:48:00: 91:cf:3e:7d:9d:bd:eb:05:60:da:19:1c:9d:83:f2:02:95:5f: 0c:61:7b:b2:e7:a9:e5:dc:a0:a7:1e:28:2b:b7:bd:0d:2f:0b: 22:13:36:5f:ee:57:32:16:e5:e7:c9:70:53:a5:a0:6b:90:8d: 77:01:bc:f7:d7:73:95:cb:5e:16:f3:d2:74:34:ec:76:b4:71: 49:35:bd:6b:1f:eb:4c:fd:67:32:b9:ce:78:f5:07:7f:89:04: bd:bc:8a:c7:5b:1e:8e:a9:16:a9:9a:f4:bf:a2:78:22:4f:cb: 76:25:82:e4:f7:b8:18:b5:1a:c3:d9:1c:09:bd:d6:59:ae:ae: 32:1c:60:be:ea:63:45:40:23:ed:2a:02:d7:c5:22:f6:97:fd: 2a:cf:25:d2:44:fb:c5:5a:4a:ee:fb:cb:a5:85:21:b4:54:86: d3:91:2a:00:4d:d8:c5:e6:6c:7d:07:91:bd:84:f1:29:c5:67: 5b:68:fc:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JimhDWVH7wQ7dPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMwNjFmOTUtYTUwNC00OGYxLTg4ZjEtZmFlNTM2Mjg1 MTFlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODIyY2NhMWUtMmEwOS00NGEyLTliNjYtZDM1OWNjNDNmNmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHFABGBpMzIrkWwrbHyZlHOqlGDuDKSS5pMP RD7TVIms3IMGOrxrDLl0m8533cTKxcYnOSIFGvLK0AaRSJWyUFopjeABgMMbTxWG qeOkvPFSD4idfarRnQ0VmF65nsVnOSCkh5/AenVJgQeSJ+YLnug61tZJGYhRexZt DS3vULmCRulrRAXznYpydiJy5vcFrCBS6k0Tqb701RL8pBJ9V3bBdKSAbd6XZwqT 5PHlg8z9EZQ/gaZbgZ4JMKxeNxUJUxx1zmIFp76Aw3JAgueRFrvPKFY4tCK4OpD9 Rtlp8rFnY+qiTGLD5gJ1oalJk/s8Ra2WS8AeiT5zlj5WtIbMIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpSodHm/6RqoxEQPC3wqgUAndrbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYzA2 MWY5NS1hNTA0LTQ4ZjEtODhmMS1mYWU1MzYyODUxMWUvYTJjNjRkM2QtZmY1OC0z N2U1LTg3N2YtZjFiMTNlYTMxMTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmMwNjFmOTUtYTUwNC00OGYxLTg4 ZjEtZmFlNTM2Mjg1MTFlL2JjMDYxZjk1LWE1MDQtNDhmMS04OGYxLWZhZTUzNjI4 NTExZS5jcmwwHwYDVR0jBBgwFoAUFFAVosutB3c4zIGLkq2jLlFK84EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYzA2MWY5NS1hNTA0LTQ4ZjEtODhmMS1mYWU1 MzYyODUxMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzGsMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGE4N1ew2BVObaK8ncSRDMpY6ftXWHHDvYje/1qq1H4LusF2bKB2GUw uE7JurgH5evKBtZArk0MF2Bosa3NPW8fR1D7KkJIAJHPPn2dvesFYNoZHJ2D8gKV Xwxhe7LnqeXcoKceKCu3vQ0vCyITNl/uVzIW5efJcFOloGuQjXcBvPfXc5XLXhbz 0nQ07Ha0cUk1vWsf60z9ZzK5znj1B3+JBL28isdbHo6pFqma9L+ieCJPy3YlguT3 uBi1GsPZHAm91lmurjIcYL7qY0VAI+0qAtfFIvaX/SrPJdJE+8VaSu77y6WFIbRU htORKgBN2MXmbH0Hkb2E8SnFZ1to/Ds= -----END CERTIFICATE-----Generated at Sun Oct 11 21:04:49 2026 by rpki-client