$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/bff59b2a-b7e8-33f0-8d55-72a1869e139e.roa File: bff59b2a-b7e8-33f0-8d55-72a1869e139e.roa (raw, json) Hash identifier: TKW14xi3ir+Ei7kxBz0WEH/EHtu4RMn/tvz0ZqCPHJ8= Subject key identifier: E2:6A:FF:74:56:D9:31:7A:7D:6A:EB:74:BE:00:3D:B8:24:E9:EE:5E Certificate issuer: /CN=42ce9d16-dc85-4007-a59d-6c18d1a42aa2 Certificate serial: 010D0C9F4328584F4C3D74C00731D9EE38A4CDC0 Authority key identifier: B6:6F:B4:68:9E:4A:59:AD:81:FA:69:34:12:82:04:39:33:1F:58:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/bff59b2a-b7e8-33f0-8d55-72a1869e139e.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 28931 IP address blocks: 199.201.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:74:c0:07:31:d9:ee:38:a4:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce9d16-dc85-4007-a59d-6c18d1a42aa2 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=5faa7d53-e483-4d93-a30d-b2d13aba00f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:89:be:b9:25:c7:ef:29:b0:0c:ff:2a:c4:12: d6:3e:e0:c7:0e:a6:85:46:e0:6e:f3:70:74:cc:a4: 62:9c:6a:c2:b4:fe:66:5f:8d:46:30:88:cd:af:d3: fa:1d:31:09:ad:a9:7c:6f:94:fa:17:1e:78:8d:db: d0:0a:78:27:62:bf:bc:0a:b9:9d:0e:2b:95:d6:26: ba:77:21:c1:3e:50:3f:e8:ab:8f:ee:9a:2b:04:5a: 62:34:0d:67:05:30:cc:20:9a:cb:16:ff:c5:0d:53: c8:64:a9:c8:2f:6d:67:f4:6d:fb:41:0c:1b:a4:9a: 3a:75:8f:50:54:3a:f2:22:ef:e5:dd:8d:46:93:b8: 38:9b:26:fc:f5:ea:20:63:7b:70:8e:28:ba:8b:16: 13:5b:c4:61:0a:fb:11:1b:2b:6f:19:cf:bd:17:9d: ae:16:26:88:8e:cc:cc:43:4d:69:1a:b3:b2:70:35: 8c:25:8d:2c:cf:50:99:b6:b7:e7:ac:df:7a:ef:1a: 87:a2:6f:18:72:fe:1c:78:46:23:00:91:9c:22:11: 18:d0:7e:7b:47:32:c2:c9:d3:7f:dc:91:96:e1:fb: 34:59:5b:25:f5:de:e5:1d:2c:20:47:08:57:46:59: e7:a2:b8:05:c5:c2:19:6c:20:b4:f4:2d:5d:27:6c: 09:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6A:FF:74:56:D9:31:7A:7D:6A:EB:74:BE:00:3D:B8:24:E9:EE:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/bff59b2a-b7e8-33f0-8d55-72a1869e139e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.crl X509v3 Authority Key Identifier: keyid:B6:6F:B4:68:9E:4A:59:AD:81:FA:69:34:12:82:04:39:33:1F:58:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer sbgp-ipAddrBlock: critical IPv4: 199.201.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:e2:ca:1f:85:d2:12:01:55:e8:84:44:f3:ed:f2:65:14:a1: a9:3a:62:2e:8e:b3:3f:e8:bc:f3:b3:9e:21:b1:dd:e3:17:02: 2a:0a:69:9d:cb:d5:dd:f1:26:61:51:ec:9a:ce:8b:ad:b8:3d: 67:9f:cc:10:a2:7e:59:4e:8d:c0:a6:7f:78:89:f1:6e:fa:28: 44:aa:bc:21:28:a8:aa:55:7a:34:5d:8a:fb:6b:f3:40:89:12: 91:92:7d:47:2e:90:08:b8:e2:cf:93:62:27:64:66:89:dc:b0: e2:25:1c:b5:49:46:34:14:ca:34:ac:ae:0d:6c:7c:98:0c:c1: ec:fa:a5:ad:bc:2e:44:95:53:dd:9e:d8:10:b4:80:85:6d:90: 4f:ea:f5:f8:ca:32:e4:8e:2a:41:20:5e:fd:f0:39:45:e8:bc: 32:aa:2e:e6:8a:48:7b:08:29:72:41:a7:6e:96:40:80:33:ed: a2:f7:26:0a:c4:13:f8:f8:22:a7:eb:75:6e:99:14:44:e5:97: f7:3e:e9:06:ec:15:9a:bb:9e:0a:20:b5:01:32:58:24:21:8c: fd:6c:ff:d5:5f:55:e5:bb:7b:76:b3:88:eb:35:9b:7a:cd:38: c9:dc:c9:47:3a:0b:3f:46:b3:71:b0:b9:57:32:d0:d9:98:08: d7:fb:62:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPXTABzHZ7jikzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJjZTlkMTYtZGM4NS00MDA3LWE1OWQtNmMxOGQxYTQy YWEyMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NWZhYTdkNTMtZTQ4My00ZDkzLWEzMGQtYjJkMTNhYmEwMGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkom+uSXH7ymwDP8qxBLWPuDHDqaFRuBu83B0 zKRinGrCtP5mX41GMIjNr9P6HTEJral8b5T6Fx54jdvQCngnYr+8CrmdDiuV1ia6 dyHBPlA/6KuP7porBFpiNA1nBTDMIJrLFv/FDVPIZKnIL21n9G37QQwbpJo6dY9Q VDryIu/l3Y1Gk7g4myb89eogY3twjii6ixYTW8RhCvsRGytvGc+9F52uFiaIjszM Q01pGrOycDWMJY0sz1CZtrfnrN967xqHom8Ycv4ceEYjAJGcIhEY0H57RzLCydN/ 3JGW4fs0WVsl9d7lHSwgRwhXRlnnorgFxcIZbCC09C1dJ2wJhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJq/3RW2TF6fWrrdL4APbgk6e5eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmNl OWQxNi1kYzg1LTQwMDctYTU5ZC02YzE4ZDFhNDJhYTIvYmZmNTliMmEtYjdlOC0z M2YwLThkNTUtNzJhMTg2OWUxMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDJjZTlkMTYtZGM4NS00MDA3LWE1 OWQtNmMxOGQxYTQyYWEyLzQyY2U5ZDE2LWRjODUtNDAwNy1hNTlkLTZjMThkMWE0 MmFhMi5jcmwwHwYDVR0jBBgwFoAUtm+0aJ5KWa2B+mk0EoIEOTMfWPwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmNlOWQxNi1kYzg1LTQwMDctYTU5ZC02YzE4 ZDFhNDJhYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8l1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADziyh+F0hIBVeiERPPt8mUUoak6Yi6Osz/ovPOzniGx3eMXAioKaZ3L 1d3xJmFR7JrOi624PWefzBCifllOjcCmf3iJ8W76KESqvCEoqKpVejRdivtr80CJ EpGSfUcukAi44s+TYidkZoncsOIlHLVJRjQUyjSsrg1sfJgMwez6pa28LkSVU92e 2BC0gIVtkE/q9fjKMuSOKkEgXv3wOUXovDKqLuaKSHsIKXJBp26WQIAz7aL3JgrE E/j4IqfrdW6ZFETll/c+6QbsFZq7ngogtQEyWCQhjP1s/9VfVeW7e3aziOs1m3rN OMncyUc6Cz9Gs3GwuVcy0NmYCNf7YgQ= -----END CERTIFICATE-----Generated at Sat Sep 26 16:37:42 2026 by rpki-client