$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/bfa17855-802a-32e9-b629-716363d8dec0.roa File: bfa17855-802a-32e9-b629-716363d8dec0.roa (raw, json) Hash identifier: 5em7yuZZI1SgsoSij9DSBZ2zryzWPMxANLcOSbqCwa4= Subject key identifier: E8:90:DC:94:6E:7E:9A:22:7E:DE:07:56:3C:5D:69:33:9F:68:1F:69 Certificate issuer: /CN=1cca3c9b-1147-4e91-8480-37ed1becb13e Certificate serial: 010D0C9F4328584F498994A2D8E74354CC544000 Authority key identifier: E5:94:82:D9:C4:5D:CB:E1:04:02:F2:BF:BF:5A:61:A7:8C:A2:2E:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/bfa17855-802a-32e9-b629-716363d8dec0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20014 IP address blocks: 208.71.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:94:a2:d8:e7:43:54:cc:54:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cca3c9b-1147-4e91-8480-37ed1becb13e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d37b1203-5326-4964-b69f-00d9e529c718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d2:1b:5c:ce:73:1b:86:9a:b4:20:a8:f0:80: ee:df:ff:3f:46:b9:09:ba:d0:06:ea:89:0a:55:30: b6:ca:8f:83:ab:9f:f3:de:88:ae:e1:23:f4:5d:19: 02:be:04:57:90:67:4b:a8:04:6e:e4:fe:79:fd:32: 96:17:83:e6:d1:f6:fc:d2:4a:d8:00:1c:ee:16:ea: 9a:a1:0c:9d:ce:c0:19:da:df:cc:34:cb:8a:94:41: 03:6c:db:21:83:70:76:15:44:2d:33:9f:8d:d2:9b: fd:31:1e:2d:26:66:a2:87:6c:5d:e1:2a:2b:86:cd: 39:47:0d:8e:f5:68:42:5a:7f:eb:32:84:d4:c2:62: 13:21:20:1f:d1:80:51:f6:eb:aa:1e:32:5d:d0:fb: d2:6b:1c:65:9f:ae:2d:7d:e5:de:09:53:7f:83:ac: 73:24:21:c2:2a:5a:71:26:d5:05:8f:f3:5d:b9:96: 3a:22:37:41:49:d8:23:e4:21:12:4b:85:31:c8:85: 90:8b:a9:46:7a:8f:16:1f:30:bb:5f:89:1c:e5:08: 63:44:ee:9e:36:88:f7:b9:19:a6:b3:04:3d:c7:88: 6d:59:5f:24:92:d0:70:c1:f0:eb:77:5c:a4:6c:81: 11:cf:a5:d9:3d:7f:9e:35:a6:9d:36:cb:ad:f5:d3: 1f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:90:DC:94:6E:7E:9A:22:7E:DE:07:56:3C:5D:69:33:9F:68:1F:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/bfa17855-802a-32e9-b629-716363d8dec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.crl X509v3 Authority Key Identifier: keyid:E5:94:82:D9:C4:5D:CB:E1:04:02:F2:BF:BF:5A:61:A7:8C:A2:2E:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer sbgp-ipAddrBlock: critical IPv4: 208.71.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:47:51:ea:aa:cf:9f:5a:28:4c:c1:5f:53:90:d1:9a:29:73: c4:5d:90:92:38:1d:8f:d5:c1:8c:b4:b4:ca:01:80:02:f0:ee: 77:79:ef:63:88:82:c6:37:18:51:58:08:bd:c5:a2:96:28:e7: 57:d0:b0:34:12:b9:7e:be:b4:b0:9f:88:ee:09:98:8d:c6:81: c9:ad:ef:16:3b:74:7d:e4:94:3c:7e:d6:0e:a0:fd:cc:15:e7: 76:63:da:eb:89:78:56:54:6d:ae:3b:8e:19:f4:e5:7e:11:c0: 6c:be:8e:e6:87:2e:ef:d2:83:b6:d7:3d:cf:3d:a4:0f:b6:ec: 7e:bf:1a:56:c6:bd:25:73:16:61:3d:ed:da:06:bc:4f:b9:42: 62:70:15:f4:64:54:3c:6b:0d:b8:8d:70:ed:3a:a8:38:e1:c6: 54:07:bb:d7:40:90:9c:7d:49:09:83:77:a3:8a:59:53:aa:f4: 47:4a:ee:7c:d4:d0:10:10:d8:3d:4e:95:45:df:33:25:32:0c: 2b:9e:45:18:40:c6:7a:57:e4:cb:ea:2d:47:ae:fd:33:97:de: 0e:39:53:b3:77:e4:ab:48:47:81:2a:4f:73:89:ab:ca:dd:7a: 37:01:f7:17:29:65:86:06:29:c8:3e:56:ee:df:85:f3:c5:91: 3f:9a:13:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiZSi2OdDVMxUQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNjYTNjOWItMTE0Ny00ZTkxLTg0ODAtMzdlZDFiZWNi MTNlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDM3YjEyMDMtNTMyNi00OTY0LWI2OWYtMDBkOWU1MjljNzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdIbXM5zG4aatCCo8IDu3/8/RrkJutAG6okK VTC2yo+Dq5/z3oiu4SP0XRkCvgRXkGdLqARu5P55/TKWF4Pm0fb80krYABzuFuqa oQydzsAZ2t/MNMuKlEEDbNshg3B2FUQtM5+N0pv9MR4tJmaih2xd4Sorhs05Rw2O 9WhCWn/rMoTUwmITISAf0YBR9uuqHjJd0PvSaxxln64tfeXeCVN/g6xzJCHCKlpx JtUFj/NduZY6IjdBSdgj5CESS4UxyIWQi6lGeo8WHzC7X4kc5QhjRO6eNoj3uRmm swQ9x4htWV8kktBwwfDrd1ykbIERz6XZPX+eNaadNsut9dMfBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiQ3JRufpoift4HVjxdaTOfaB9pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xY2Nh M2M5Yi0xMTQ3LTRlOTEtODQ4MC0zN2VkMWJlY2IxM2UvYmZhMTc4NTUtODAyYS0z MmU5LWI2MjktNzE2MzYzZDhkZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWNjYTNjOWItMTE0Ny00ZTkxLTg0 ODAtMzdlZDFiZWNiMTNlLzFjY2EzYzliLTExNDctNGU5MS04NDgwLTM3ZWQxYmVj YjEzZS5jcmwwHwYDVR0jBBgwFoAU5ZSC2cRdy+EEAvK/v1php4yiLqIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xY2NhM2M5Yi0xMTQ3LTRlOTEtODQ4MC0zN2Vk MWJlY2IxM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItHUeqqz59aKEzBX1OQ0Zopc8RdkJI4HY/VwYy0tMoBgALw7nd572OI gsY3GFFYCL3FopYo51fQsDQSuX6+tLCfiO4JmI3Ggcmt7xY7dH3klDx+1g6g/cwV 53Zj2uuJeFZUba47jhn05X4RwGy+juaHLu/Sg7bXPc89pA+27H6/GlbGvSVzFmE9 7doGvE+5QmJwFfRkVDxrDbiNcO06qDjhxlQHu9dAkJx9SQmDd6OKWVOq9EdK7nzU 0BAQ2D1OlUXfMyUyDCueRRhAxnpX5MvqLUeu/TOX3g45U7N35KtIR4EqT3OJq8rd ejcB9xcpZYYGKcg+Vu7fhfPFkT+aE5E= -----END CERTIFICATE-----Generated at Sat Oct 10 22:28:49 2026 by rpki-client