$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/081c7b9f-cf15-3994-bbae-d0d40e4bf9e1.roa File: 081c7b9f-cf15-3994-bbae-d0d40e4bf9e1.roa (raw, json) Hash identifier: Qp7ZmQS6OS+ZOQJuXcffp4/O9fiCMZNDQrgl7fuA2GM= Subject key identifier: D0:CD:D9:0D:15:23:DB:E1:AF:60:CE:2C:4A:54:33:17:FD:AC:75:8B Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584EF1822E6818B6923FA5FA6180 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/081c7b9f-cf15-3994-bbae-d0d40e4bf9e1.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 396982 IP address blocks: 129.77.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:82:2e:68:18:b6:92:3f:a5:fa:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=3ec686e7-8dbb-4933-b17d-a2671145f8a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0f:63:26:45:3d:8e:52:32:0a:88:6a:cb:1e: 5b:a6:5a:2a:b3:a6:d3:f6:98:ad:c2:c4:9e:9e:7d: 7c:20:e5:f2:ae:82:67:0f:1e:c6:d2:08:89:25:7e: fa:f4:3a:72:43:99:3b:8d:b7:66:1d:89:0e:4c:7b: ef:b5:34:c9:bd:0b:98:e7:f6:40:30:19:cf:40:4a: 4d:d4:76:ce:58:8f:c3:2d:01:d2:20:c9:da:5d:da: 00:da:a5:e3:83:d7:9a:08:e1:9d:e3:9b:44:1f:61: c6:88:f3:cc:e3:b5:e7:1c:5a:80:2d:66:9c:db:4d: b5:4a:17:1b:1a:03:f7:45:b5:21:bb:b2:f6:e8:c3: 8a:19:6a:6f:4a:f0:1c:48:86:e0:a6:3e:c8:f0:65: 0e:98:0a:18:d7:46:ba:19:84:d6:f2:14:62:9f:16: 7b:5f:3e:1c:5c:ff:6f:b1:6d:6b:c8:2c:6a:72:f1: fc:95:0f:a7:1f:ab:3c:15:fe:5e:0d:b2:69:66:55: c3:bd:57:38:ad:c5:7e:6c:b6:34:c5:f8:7a:8e:13: 0c:3e:da:af:f5:f6:fb:0c:64:32:d8:d5:4e:b3:4e: 8a:5e:25:36:0e:5f:f1:91:e2:91:4b:0b:9a:a2:4f: fa:af:2e:b7:08:06:a7:01:89:de:5c:5a:74:80:c2: 72:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CD:D9:0D:15:23:DB:E1:AF:60:CE:2C:4A:54:33:17:FD:AC:75:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/081c7b9f-cf15-3994-bbae-d0d40e4bf9e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 129.77.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:5a:6c:c0:71:ad:84:47:1b:68:60:2e:85:21:b8:34:4b:6c: 30:85:11:00:f1:a6:ec:c2:87:2b:48:f3:d4:08:ab:b8:8b:aa: e8:40:5e:6b:df:8d:35:4c:28:e7:c9:cb:d1:1d:fb:ff:f6:ec: c1:73:30:1a:3b:b0:60:5b:bc:08:05:eb:0f:f8:18:4e:5f:25: 27:dd:5c:fb:f7:57:20:a9:db:f6:65:f0:5b:17:44:fe:1c:36: 23:87:19:a4:f8:e1:c9:62:2b:61:54:60:0a:62:2d:cd:17:78: 52:0f:ed:e6:31:d4:00:07:f0:c4:b5:c0:6a:da:ed:a8:86:62: e0:84:73:cc:97:a7:b1:e1:54:91:e4:ff:23:e1:e7:5e:7b:77: 36:70:e6:bf:c8:74:64:3d:67:56:16:40:5e:db:64:a6:16:40: 90:b1:01:a1:8d:f3:71:3e:14:27:5e:6d:cd:69:b7:14:0d:b4: e7:6f:ca:34:04:c5:c0:8e:27:3f:18:51:a3:d2:df:e2:f8:14: d8:72:cf:35:f5:66:f3:49:79:f5:2b:a8:54:ca:42:46:70:25: c7:44:44:63:8c:b9:f1:11:fc:e4:a3:83:d1:5a:06:92:f6:89: d7:88:1b:62:7a:27:41:f9:70:54:0a:d4:1c:b5:91:f2:c7:9f: f6:bf:6b:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xgi5oGLaSP6X6YYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk M2VjNjg2ZTctOGRiYi00OTMzLWIxN2QtYTI2NzExNDVmOGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw9jJkU9jlIyCohqyx5bploqs6bT9pitwsSe nn18IOXyroJnDx7G0giJJX769DpyQ5k7jbdmHYkOTHvvtTTJvQuY5/ZAMBnPQEpN 1HbOWI/DLQHSIMnaXdoA2qXjg9eaCOGd45tEH2HGiPPM47XnHFqALWac2021Shcb GgP3RbUhu7L26MOKGWpvSvAcSIbgpj7I8GUOmAoY10a6GYTW8hRinxZ7Xz4cXP9v sW1ryCxqcvH8lQ+nH6s8Ff5eDbJpZlXDvVc4rcV+bLY0xfh6jhMMPtqv9fb7DGQy 2NVOs06KXiU2Dl/xkeKRSwuaok/6ry63CAanAYneXFp0gMJyjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDN2Q0VI9vhr2DOLEpUMxf9rHWLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvMDgxYzdiOWYtY2YxNS0z OTk0LWJiYWUtZDBkNDBlNGJmOWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgU0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1abMBxrYRHG2hgLoUhuDRLbDCFEQDxpuzChytI89QIq7iLquhAXmvf jTVMKOfJy9Ed+//27MFzMBo7sGBbvAgF6w/4GE5fJSfdXPv3VyCp2/Zl8FsXRP4c NiOHGaT44cliK2FUYApiLc0XeFIP7eYx1AAH8MS1wGra7aiGYuCEc8yXp7HhVJHk /yPh5157dzZw5r/IdGQ9Z1YWQF7bZKYWQJCxAaGN83E+FCdebc1ptxQNtOdvyjQE xcCOJz8YUaPS3+L4FNhyzzX1ZvNJefUrqFTKQkZwJcdERGOMufER/OSjg9FaBpL2 ideIG2J6J0H5cFQK1By1kfLHn/a/a3A= -----END CERTIFICATE-----Generated at Sat Sep 26 08:34:31 2026 by rpki-client