$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfd60500-7296-3573-94c5-f9474c6b5ef5.roa File: bfd60500-7296-3573-94c5-f9474c6b5ef5.roa (raw, json) Hash identifier: WG8Y5jXelpVHLZMb28OgX4+l/MpacE7Q5G93ENTDC+0= Subject key identifier: 47:14:BF:D6:59:29:CC:FB:42:8E:F4:19:A7:51:0F:02:99:C0:E2:FD Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F4C3DE31D47082D9B315A7F00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfd60500-7296-3573-94c5-f9474c6b5ef5.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 31898 IP address blocks: 148.116.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e3:1d:47:08:2d:9b:31:5a:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=f2540d8e-8b1f-4f51-80d4-4db1db7a5de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b3:31:8c:3d:47:1b:63:04:bb:83:c0:ac:31: d3:01:0c:3b:00:c3:78:ed:39:ab:58:f3:64:79:c6: bd:e7:5d:f5:56:c1:12:2e:c0:6a:9c:77:9d:67:5a: b4:42:b5:7a:80:7d:a4:08:91:bc:59:e7:97:64:e0: aa:2f:12:f9:5a:bf:a3:79:3b:02:16:2f:77:e1:82: c3:0c:da:f0:c9:de:e3:42:b7:1a:46:ba:75:4d:59: 87:c2:a0:d7:28:fe:5b:fb:73:a5:eb:3a:47:59:0e: 10:28:1f:24:f4:a5:49:a5:9d:c4:8d:84:08:35:4f: fb:02:7f:84:ec:8c:d7:9b:84:65:1c:37:c7:8d:93: 80:f4:ff:34:f1:be:87:82:3e:54:61:ef:4f:c5:c6: 7f:c2:bc:b5:8d:f3:90:af:30:58:40:a4:fc:d7:7b: 62:62:10:4b:66:9b:df:d9:16:a7:5a:9f:7a:fe:33: 54:28:0e:b3:00:f7:54:f3:bd:0f:4b:8e:ea:bf:5d: 0a:b9:e3:3d:19:fb:bd:f8:2f:a0:a4:6c:f7:66:75: 25:9a:29:28:73:8e:20:48:b3:3b:08:8c:c8:3d:cf: 2f:da:2e:42:66:43:8e:14:6b:9e:28:1c:87:79:7d: 46:96:a5:53:e9:92:b0:82:9c:1a:93:0e:dc:99:ea: d7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:14:BF:D6:59:29:CC:FB:42:8E:F4:19:A7:51:0F:02:99:C0:E2:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfd60500-7296-3573-94c5-f9474c6b5ef5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 148.116.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ed:e8:54:2b:51:b8:a6:20:af:a4:13:79:c1:02:4e:3a:c1: db:d0:59:1f:1b:23:8f:11:cd:54:a6:10:98:a1:c8:da:3a:c1: d6:8b:22:9a:23:c1:e9:a6:1c:20:bc:85:38:9f:ab:86:54:d2: 50:9b:b2:1d:52:ca:1e:6e:d2:d8:96:62:f6:cc:85:6e:ed:ed: a5:dd:01:d3:eb:3b:eb:3f:4d:f0:e4:82:98:68:49:92:3b:e1: bf:ba:b2:5d:ed:3f:77:e5:f7:ca:e3:01:2e:b2:77:4f:c4:15: b2:82:a1:6f:8f:0e:5b:b6:f2:e2:79:e4:25:86:ad:ce:4f:27: 3c:11:74:e0:3a:37:5b:77:c3:7c:a4:f0:e2:f5:a6:e0:36:8d: e7:0d:f7:94:32:14:7b:d6:03:29:c3:44:1c:93:bb:2b:e1:26: d0:2b:92:e1:3c:78:2a:74:e1:35:54:86:79:1a:25:c5:8e:fb: 83:f6:0a:25:7a:b7:f4:6c:e5:c1:64:96:e7:87:c1:e3:9f:42: 73:87:b6:ab:bc:9f:30:08:06:97:65:e5:8b:b4:7b:7a:09:fb: 37:46:93:ca:27:4c:98:74:7b:f5:8d:95:4b:be:5a:68:e0:d4: 78:4d:d1:2a:be:59:93:e3:e7:77:31:93:15:a5:96:15:66:c0: 27:6c:25:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPeMdRwgtmzFafwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZjI1NDBkOGUtOGIxZi00ZjUxLTgwZDQtNGRiMWRiN2E1ZGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLMxjD1HG2MEu4PArDHTAQw7AMN47TmrWPNk eca95131VsESLsBqnHedZ1q0QrV6gH2kCJG8WeeXZOCqLxL5Wr+jeTsCFi934YLD DNrwyd7jQrcaRrp1TVmHwqDXKP5b+3Ol6zpHWQ4QKB8k9KVJpZ3EjYQINU/7An+E 7IzXm4RlHDfHjZOA9P808b6Hgj5UYe9PxcZ/wry1jfOQrzBYQKT813tiYhBLZpvf 2RanWp96/jNUKA6zAPdU870PS47qv10KueM9Gfu9+C+gpGz3ZnUlmikoc44gSLM7 CIzIPc8v2i5CZkOOFGueKByHeX1GlqVT6ZKwgpwakw7cmerXRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcUv9ZZKcz7Qo70GadRDwKZwOL9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmZkNjA1MDAtNzI5Ni0z NTczLTk0YzUtZjk0NzRjNmI1ZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlHQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjt6FQrUbimIK+kE3nBAk46wdvQWR8bI48RzVSmEJihyNo6wdaLIpoj wemmHCC8hTifq4ZU0lCbsh1Syh5u0tiWYvbMhW7t7aXdAdPrO+s/TfDkgphoSZI7 4b+6sl3tP3fl98rjAS6yd0/EFbKCoW+PDlu28uJ55CWGrc5PJzwRdOA6N1t3w3yk 8OL1puA2jecN95QyFHvWAynDRByTuyvhJtArkuE8eCp04TVUhnkaJcWO+4P2CiV6 t/Rs5cFklueHweOfQnOHtqu8nzAIBpdl5Yu0e3oJ+zdGk8onTJh0e/WNlUu+Wmjg 1HhN0Sq+WZPj53cxkxWllhVmwCdsJd0= -----END CERTIFICATE-----Generated at Sun Oct 4 18:38:18 2026 by rpki-client