$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/bfa17855-802a-32e9-b629-716363d8dec0.roa File: bfa17855-802a-32e9-b629-716363d8dec0.roa (raw, json) Hash identifier: g2Uf7CugDlEk/V24SuW14y6MoL5SOuK3T77J3gNq/Z4= Subject key identifier: 50:81:69:1A:E1:C1:BD:5B:4C:F2:92:09:64:F8:61:80:BB:9B:47:2E Certificate issuer: /CN=1cca3c9b-1147-4e91-8480-37ed1becb13e Certificate serial: 010D0C9F4328584EA79B2FA4BFC1DF8D0DBC0DC0 Authority key identifier: E5:94:82:D9:C4:5D:CB:E1:04:02:F2:BF:BF:5A:61:A7:8C:A2:2E:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/bfa17855-802a-32e9-b629-716363d8dec0.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20014 IP address blocks: 208.71.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:2f:a4:bf:c1:df:8d:0d:bc:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cca3c9b-1147-4e91-8480-37ed1becb13e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=fbaece2d-ccf2-4244-8325-72e563d01212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:39:d3:87:68:68:aa:86:1f:f2:7d:37:ea:73: cc:df:46:8d:67:c2:68:82:d9:53:1b:70:97:d0:15: 12:05:5c:f3:fc:86:c8:af:d2:14:b5:40:58:c1:85: bd:1f:70:3d:93:5c:29:b4:65:ac:31:4a:f3:b8:bc: 72:5e:0a:01:e6:37:05:8d:6a:a4:0a:a8:ce:37:f9: 4b:04:dd:d5:f3:48:1a:41:d6:85:71:ce:01:b9:30: 24:d9:2f:4d:3c:36:e7:92:40:80:14:da:d3:f6:01: a5:f7:82:65:92:0f:99:1c:8e:46:2e:a9:7a:39:40: 56:42:06:13:1d:4e:f7:b7:81:57:a0:85:1e:18:6b: f5:84:72:7e:c8:e6:ef:21:6a:ca:b8:7b:d6:38:d7: 35:55:5f:a4:d4:df:f6:0d:a5:40:d4:4c:5f:15:e5: ff:c5:2f:81:03:8d:cc:dd:43:4b:23:ee:bb:70:e1: 58:97:08:c8:65:ae:c9:19:99:17:09:a9:e2:61:5c: f5:18:23:c2:d2:62:82:e7:d2:e3:11:a4:4e:41:ef: 19:c9:7e:f4:3d:c3:5d:fb:0e:d5:c6:ef:e3:76:cd: 38:12:67:27:49:28:20:ad:03:23:74:c1:05:b4:31: f1:4b:ba:3e:b4:fd:55:36:f8:df:30:c9:a2:87:21: 7f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:81:69:1A:E1:C1:BD:5B:4C:F2:92:09:64:F8:61:80:BB:9B:47:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/bfa17855-802a-32e9-b629-716363d8dec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.crl X509v3 Authority Key Identifier: keyid:E5:94:82:D9:C4:5D:CB:E1:04:02:F2:BF:BF:5A:61:A7:8C:A2:2E:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer sbgp-ipAddrBlock: critical IPv4: 208.71.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:0e:4a:83:9b:57:ae:be:9d:74:63:7f:1d:9f:70:07:1f:a2: c1:03:a4:27:b0:fc:62:6a:96:75:32:13:0e:41:f7:17:26:65: 24:a9:0c:b1:31:11:df:73:84:d0:53:0c:f6:98:61:08:07:c4: 09:0a:c6:27:37:09:4a:3f:d4:b9:fa:ad:18:88:88:6d:ad:ca: 9f:16:4e:18:0a:08:b6:5e:d1:6b:ec:ac:2b:fc:e4:ec:20:bc: cf:d7:13:33:ea:b0:d5:59:84:eb:65:23:94:9e:50:89:cd:4d: 54:66:1b:63:15:e0:53:f3:13:a7:cd:43:fe:24:73:ed:73:23: fa:6b:6a:2f:5a:dd:e4:29:48:3e:7f:e2:ab:05:c0:aa:41:c5: fe:89:e6:38:25:d1:27:51:81:5f:f5:b9:ab:04:31:1a:35:35: fe:65:1f:74:94:11:fd:66:0e:7c:82:b8:9f:d2:7e:0c:39:05: 16:22:5b:a8:6d:05:dd:c2:64:ad:b6:3e:8b:f7:2e:b3:a7:11: 62:71:57:51:81:8b:d9:ff:d6:a7:af:56:c0:b7:6a:4c:31:da: 88:0c:b7:27:7c:6d:5f:f7:c1:d4:e6:a6:21:a8:56:40:46:95: e9:0a:61:d6:cf:aa:54:ce:1e:f0:ee:95:e5:5d:fc:0e:ca:b9: 14:a3:60:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmy+kv8HfjQ28DcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNjYTNjOWItMTE0Ny00ZTkxLTg0ODAtMzdlZDFiZWNi MTNlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZmJhZWNlMmQtY2NmMi00MjQ0LTgzMjUtNzJlNTYzZDAxMjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DnTh2hoqoYf8n036nPM30aNZ8JogtlTG3CX 0BUSBVzz/IbIr9IUtUBYwYW9H3A9k1wptGWsMUrzuLxyXgoB5jcFjWqkCqjON/lL BN3V80gaQdaFcc4BuTAk2S9NPDbnkkCAFNrT9gGl94Jlkg+ZHI5GLql6OUBWQgYT HU73t4FXoIUeGGv1hHJ+yObvIWrKuHvWONc1VV+k1N/2DaVA1ExfFeX/xS+BA43M 3UNLI+67cOFYlwjIZa7JGZkXCaniYVz1GCPC0mKC59LjEaROQe8ZyX70PcNd+w7V xu/jds04EmcnSSggrQMjdMEFtDHxS7o+tP1VNvjfMMmihyF/BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCBaRrhwb1bTPKSCWT4YYC7m0cuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xY2Nh M2M5Yi0xMTQ3LTRlOTEtODQ4MC0zN2VkMWJlY2IxM2UvYmZhMTc4NTUtODAyYS0z MmU5LWI2MjktNzE2MzYzZDhkZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWNjYTNjOWItMTE0Ny00ZTkxLTg0 ODAtMzdlZDFiZWNiMTNlLzFjY2EzYzliLTExNDctNGU5MS04NDgwLTM3ZWQxYmVj YjEzZS5jcmwwHwYDVR0jBBgwFoAU5ZSC2cRdy+EEAvK/v1php4yiLqIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xY2NhM2M5Yi0xMTQ3LTRlOTEtODQ4MC0zN2Vk MWJlY2IxM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMOSoObV66+nXRjfx2fcAcfosEDpCew/GJqlnUyEw5B9xcmZSSpDLEx Ed9zhNBTDPaYYQgHxAkKxic3CUo/1Ln6rRiIiG2typ8WThgKCLZe0WvsrCv85Owg vM/XEzPqsNVZhOtlI5SeUInNTVRmG2MV4FPzE6fNQ/4kc+1zI/prai9a3eQpSD5/ 4qsFwKpBxf6J5jgl0SdRgV/1uasEMRo1Nf5lH3SUEf1mDnyCuJ/Sfgw5BRYiW6ht Bd3CZK22Pov3LrOnEWJxV1GBi9n/1qevVsC3akwx2ogMtyd8bV/3wdTmpiGoVkBG lekKYdbPqlTOHvDuleVd/A7KuRSjYJI= -----END CERTIFICATE-----Generated at Wed Jul 29 13:33:21 2026 by rpki-client