$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/86b1302f-bbd8-3dd5-bea6-b46eaec452f4.roa File: 86b1302f-bbd8-3dd5-bea6-b46eaec452f4.roa (raw, json) Hash identifier: /OpDrkRpKsqxlJIybnCrrcb8hmTWZbmG1nU18xdrFY8= Subject key identifier: F7:C4:D3:E9:9D:9F:B3:D7:F7:C3:EB:F0:3F:14:41:03:5D:4C:00:31 Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584B25FC3EDC0ADDBE3407226400 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/86b1302f-bbd8-3dd5-bea6-b46eaec452f4.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 46450 IP address blocks: 199.34.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:3e:dc:0a:dd:be:34:07:22:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=bf5b3330-561e-4884-a232-8f211368c729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c5:8d:12:42:83:b9:bc:99:be:fb:6a:24:f6: a8:09:d5:d6:bf:4d:13:63:ce:50:7a:e5:63:08:11: 9d:f7:4c:9b:52:82:df:57:1c:8a:c4:fa:d2:22:d1: 46:16:dc:fd:48:43:d6:82:31:44:0f:f0:20:ef:e2: 89:cc:01:c7:41:30:8a:fc:ba:5e:7c:36:69:f6:dd: 6f:bf:27:6b:e2:9b:d4:e9:c6:2c:93:cc:30:e6:d3: 84:1d:78:2f:dd:a0:73:0c:1c:75:b5:44:4e:cd:66: b2:73:29:17:57:64:4f:d5:7c:54:ba:6c:7a:61:01: 45:ac:5c:13:a4:56:d7:23:64:7b:fb:be:4c:54:87: c8:42:eb:9d:dd:21:4d:bd:a6:0e:17:d7:4a:9d:00: 81:75:d4:be:b6:49:bd:45:a7:30:87:5a:33:62:b0: 5c:b9:69:f2:f0:40:3d:cd:8e:a8:e1:6d:55:cf:12: 0d:a7:5f:e9:7f:a1:22:35:a1:30:c3:db:f3:c1:2c: 3e:7c:ab:99:fd:05:30:8b:f8:10:ec:f5:e3:db:d5: ab:41:0a:27:e4:c2:dd:6e:4b:3e:88:73:ca:39:c8: 79:c5:85:6f:db:f5:b0:b0:ad:28:d7:ab:f7:c7:16: 53:ee:c5:17:0a:48:a9:f4:03:91:89:86:48:06:b5: 69:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C4:D3:E9:9D:9F:B3:D7:F7:C3:EB:F0:3F:14:41:03:5D:4C:00:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/86b1302f-bbd8-3dd5-bea6-b46eaec452f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 199.34.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:bc:06:7e:38:f1:37:55:ea:cc:f8:0b:e4:6b:14:73:1b:95: e9:40:41:b9:c2:51:13:83:59:6a:b2:68:58:22:43:6a:91:02: 5d:d0:d7:e9:3e:e6:a3:ab:22:f0:d9:23:f0:88:7f:51:46:48: 4c:95:87:a7:35:ee:45:e8:96:7c:dd:05:ef:54:e9:2e:e7:59: bc:15:8a:77:5a:11:e2:39:c0:97:3b:65:0e:1c:91:56:6b:7d: 85:9a:80:04:83:fb:5e:5e:c1:d3:f3:6b:34:ee:ff:0c:c6:1a: 6a:ec:04:48:d9:97:96:36:a9:db:af:54:fa:03:14:31:5f:f2: f3:d3:b4:ca:39:ec:25:32:9b:cd:f8:65:2e:d7:28:96:17:c5: 56:2b:70:2b:49:d5:5d:9d:6b:41:1e:cb:a5:1c:8f:b0:a7:2a: 6d:6f:62:62:5d:d3:72:a3:81:27:34:72:59:2e:20:6e:93:52: 08:0b:df:cb:f1:7c:47:5f:cd:54:b2:e4:77:7c:d8:59:33:51: 87:91:4b:9d:6a:b4:60:6d:be:78:3c:c6:98:b2:75:aa:ac:d2: a8:36:a0:12:2f:75:ab:0f:f2:b1:34:4f:82:0f:fe:45:f0:cb: 3f:3c:c1:2d:86:ac:e8:f0:5d:84:ca:90:75:85:3a:4c:cf:8f: 6a:c8:e4:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/D7cCt2+NAciZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk YmY1YjMzMzAtNTYxZS00ODg0LWEyMzItOGYyMTEzNjhjNzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsWNEkKDubyZvvtqJPaoCdXWv00TY85QeuVj CBGd90ybUoLfVxyKxPrSItFGFtz9SEPWgjFED/Ag7+KJzAHHQTCK/LpefDZp9t1v vydr4pvU6cYsk8ww5tOEHXgv3aBzDBx1tUROzWaycykXV2RP1XxUumx6YQFFrFwT pFbXI2R7+75MVIfIQuud3SFNvaYOF9dKnQCBddS+tkm9Racwh1ozYrBcuWny8EA9 zY6o4W1VzxINp1/pf6EiNaEww9vzwSw+fKuZ/QUwi/gQ7PXj29WrQQon5MLdbks+ iHPKOch5xYVv2/WwsK0o16v3xxZT7sUXCkip9AORiYZIBrVpjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfE0+mdn7PX98Pr8D8UQQNdTAAxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvODZiMTMwMmYtYmJkOC0z ZGQ1LWJlYTYtYjQ2ZWFlYzQ1MmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyL0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAG8Bn448TdV6sz4C+RrFHMblelAQbnCURODWWqyaFgiQ2qRAl3Q1+k+ 5qOrIvDZI/CIf1FGSEyVh6c17kXolnzdBe9U6S7nWbwVindaEeI5wJc7ZQ4ckVZr fYWagASD+15ewdPzazTu/wzGGmrsBEjZl5Y2qduvVPoDFDFf8vPTtMo57CUym834 ZS7XKJYXxVYrcCtJ1V2da0Eey6Ucj7CnKm1vYmJd03KjgSc0clkuIG6TUggL38vx fEdfzVSy5Hd82FkzUYeRS51qtGBtvng8xpiydaqs0qg2oBIvdasP8rE0T4IP/kXw yz88wS2GrOjwXYTKkHWFOkzPj2rI5PI= -----END CERTIFICATE-----Generated at Tue Oct 21 01:42:30 2025 by rpki-client