$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/1245fbda-82e8-328a-989f-a03ee9dd9615.roa File: 1245fbda-82e8-328a-989f-a03ee9dd9615.roa (raw, json) Hash identifier: H5kSCl2Eom/hlRFGcfaTjRGk51AudYGbZe5o8iUy8Zk= Subject key identifier: 46:30:CD:B9:B0:C9:C6:97:88:1A:4B:92:46:9E:1C:77:01:FC:C0:A2 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584F5E62DFE8F6A4D96D4E42D800 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/1245fbda-82e8-328a-989f-a03ee9dd9615.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 16509 IP address blocks: 31.99.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:df:e8:f6:a4:d9:6d:4e:42:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=35e1c57c-22b3-4daf-bff1-8906444ea75a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:94:1f:57:d3:4d:16:9e:eb:36:23:1d:8b:81: ba:1f:1a:fa:48:71:f7:db:09:4c:a9:48:d3:8e:d5: 7c:3e:fa:e7:03:12:d7:98:14:7e:3c:30:37:77:77: d7:f0:f5:89:70:c1:f5:2f:22:ef:71:9f:31:7f:21: fd:15:30:cc:07:a3:f1:e7:43:47:9b:0f:8a:9f:b7: ae:40:a4:f5:d4:c2:d6:3f:8c:58:bf:69:d8:22:7d: 57:7d:36:77:e6:ab:ec:d3:1b:f3:5e:23:47:44:a5: 90:84:60:e6:03:01:e3:1e:a6:a5:39:7d:14:66:90: 1b:78:02:3f:43:1f:24:09:89:9a:1c:80:a6:97:ac: e5:55:81:54:ce:86:48:52:11:84:83:ec:48:ea:a3: 27:db:ee:54:78:7f:63:8c:85:1f:7c:ce:d7:96:43: 15:9f:26:94:26:c2:6b:cc:32:8d:7d:1c:f4:66:3e: ad:74:49:cd:1f:f6:dd:1c:35:5d:47:04:3e:fe:40: 31:23:44:f0:93:1b:01:e5:96:1d:b7:62:71:21:06: d0:cd:48:39:3a:0b:b2:76:e8:25:26:9d:48:85:1b: a1:65:6d:33:ed:27:ad:13:a7:1c:38:0a:ca:28:5e: 00:3e:87:af:04:15:a6:76:c5:40:a2:6b:bc:e8:91: 03:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:30:CD:B9:B0:C9:C6:97:88:1A:4B:92:46:9E:1C:77:01:FC:C0:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/1245fbda-82e8-328a-989f-a03ee9dd9615.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 31.99.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:1f:48:77:55:6c:9e:7d:27:a0:25:1f:87:ae:6e:f3:1f:73: 3b:5a:88:c1:d9:2a:49:d6:cc:ee:37:ff:6d:5f:ba:b2:5c:b7: c8:45:e4:43:15:33:68:45:27:de:0c:68:b8:84:03:2f:e2:6c: c6:a5:7b:1d:0b:8d:7c:2f:96:3e:e0:05:c1:9e:75:ab:ba:ae: 4a:d1:d3:2d:88:92:82:5c:a4:21:32:8b:fd:dd:d6:b8:9e:da: d1:c7:d7:61:08:90:bc:50:b6:99:43:7b:3c:4c:ae:fb:08:b5: fa:f8:5d:06:26:1a:90:84:0b:bf:5a:9c:15:30:eb:9c:0c:ec: 7d:58:21:15:ab:85:9c:30:d2:24:67:a9:4f:fa:6f:73:19:1d: 54:95:d1:02:32:6a:c7:75:a6:06:df:56:b2:74:02:9d:81:35: bb:98:a7:9c:bb:f0:4a:56:e9:24:44:49:51:a2:f0:3e:0a:13: db:e8:44:c0:69:f8:48:7b:27:a9:86:68:5d:b8:56:6b:78:5b: e5:ea:85:91:aa:63:97:78:7a:61:21:37:ba:7c:63:3e:0d:15: 26:e2:1b:b0:f1:eb:ac:2c:ed:b1:f4:ff:28:2e:11:bb:59:c4: 5a:5f:5b:cf:86:5f:08:32:31:7b:cc:08:d4:94:28:4d:f5:61: c9:bd:a6:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYt/o9qTZbU5C2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk MzVlMWM1N2MtMjJiMy00ZGFmLWJmZjEtODkwNjQ0NGVhNzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZQfV9NNFp7rNiMdi4G6Hxr6SHH32wlMqUjT jtV8PvrnAxLXmBR+PDA3d3fX8PWJcMH1LyLvcZ8xfyH9FTDMB6Px50NHmw+Kn7eu QKT11MLWP4xYv2nYIn1XfTZ35qvs0xvzXiNHRKWQhGDmAwHjHqalOX0UZpAbeAI/ Qx8kCYmaHICml6zlVYFUzoZIUhGEg+xI6qMn2+5UeH9jjIUffM7XlkMVnyaUJsJr zDKNfRz0Zj6tdEnNH/bdHDVdRwQ+/kAxI0TwkxsB5ZYdt2JxIQbQzUg5Oguydugl Jp1IhRuhZW0z7SetE6ccOArKKF4APoevBBWmdsVAomu86JED2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYwzbmwycaXiBpLkkaeHHcB/MCiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvMTI0NWZiZGEtODJlOC0z MjhhLTk4OWYtYTAzZWU5ZGQ5NjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH2OYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcfSHdVbJ59J6AlH4eubvMfcztaiMHZKknWzO43/21furJct8hF5EMV M2hFJ94MaLiEAy/ibMalex0LjXwvlj7gBcGedau6rkrR0y2IkoJcpCEyi/3d1rie 2tHH12EIkLxQtplDezxMrvsItfr4XQYmGpCEC79anBUw65wM7H1YIRWrhZww0iRn qU/6b3MZHVSV0QIyasd1pgbfVrJ0Ap2BNbuYp5y78EpW6SRESVGi8D4KE9voRMBp +Eh7J6mGaF24Vmt4W+XqhZGqY5d4emEhN7p8Yz4NFSbiG7Dx66ws7bH0/yguEbtZ xFpfW8+GXwgyMXvMCNSUKE31Ycm9pgs= -----END CERTIFICATE-----Generated at Sun Oct 11 14:58:45 2026 by rpki-client