$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/3cf4e6b1-4ee0-339c-bb5e-ba569af0282f.roa File: 3cf4e6b1-4ee0-339c-bb5e-ba569af0282f.roa (raw, json) Hash identifier: am8RfsK7cQ6oPdC7aIcxlpWftsCUGwk/ucFYKT6DKTU= Subject key identifier: 04:39:4E:27:BA:1D:19:7A:D8:03:51:A2:16:A9:84:DC:9B:E7:8B:6C Certificate issuer: /CN=bf862f27-363f-42ce-ab7e-31739b3660a0 Certificate serial: 010D0C9F4328584F5BDD65DA74CC1D0028B8A680 Authority key identifier: FC:C9:FE:DA:2C:4E:20:D6:E2:7B:36:27:5C:01:34:62:A4:64:DA:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/3cf4e6b1-4ee0-339c-bb5e-ba569af0282f.roa Signing time: Thu 01 Oct 2026 15:20:06 +0000 ROA not before: Thu 01 Oct 2026 15:20:06 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 53264 IP address blocks: 205.153.96.0/22 maxlen: 22 216.38.228.0/24 maxlen: 24 216.38.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:dd:65:da:74:cc:1d:00:28:b8:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf862f27-363f-42ce-ab7e-31739b3660a0 Validity Not Before: Oct 1 15:20:06 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=1784128d-d7c7-4d5a-90c6-e9aad71eb9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:95:08:f6:15:f5:be:14:98:aa:df:99:3b:72: 90:20:66:b9:0b:5a:89:2b:e1:90:99:55:0b:39:b9: 27:81:79:17:46:b3:b8:02:3d:a2:aa:d9:62:e9:bf: 29:6c:be:d5:55:22:43:2a:98:7b:67:b1:5c:87:c6: e1:6f:81:b2:0c:a7:9f:64:22:c1:50:df:7a:a4:a9: 5e:1c:9b:65:81:72:86:58:c3:6e:79:d2:13:c6:a6: c5:3f:c1:85:a8:90:00:41:06:c6:8a:82:e8:60:fb: 0f:20:33:5d:a1:1a:00:5c:99:a0:55:fb:42:b1:2a: 8a:f7:1d:a0:a1:e9:5d:56:c3:86:91:64:88:73:2f: 2e:75:11:9d:f8:e4:f8:54:2a:ea:56:32:23:af:e1: d3:15:2d:fa:06:eb:d6:ba:89:3e:00:a4:77:1f:d0: 14:b1:6f:b8:da:30:84:2f:d5:58:c1:52:43:d7:a9: 31:93:44:52:a7:73:ba:e4:00:62:b0:b4:cf:9e:3a: fb:2f:98:80:7b:67:61:35:1c:0d:ac:af:bc:8e:b3: 38:1d:73:0b:a7:37:65:5a:38:fe:e2:10:9a:ea:6e: c6:49:30:36:11:6d:fd:f6:04:5a:0f:ab:ee:7c:1f: 2f:ef:9d:6c:2d:cb:d8:dd:9b:f3:c8:ee:73:5b:16: 61:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:39:4E:27:BA:1D:19:7A:D8:03:51:A2:16:A9:84:DC:9B:E7:8B:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/3cf4e6b1-4ee0-339c-bb5e-ba569af0282f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.crl X509v3 Authority Key Identifier: keyid:FC:C9:FE:DA:2C:4E:20:D6:E2:7B:36:27:5C:01:34:62:A4:64:DA:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer sbgp-ipAddrBlock: critical IPv4: 205.153.96.0/22 216.38.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:33:5e:bd:14:11:54:60:d7:88:a5:c6:8e:f8:15:34:64:f8: 0a:7f:0b:29:f3:ee:88:f8:cc:20:4d:52:b3:2c:50:dc:12:5f: 46:b9:43:cd:4e:15:21:51:f0:ad:3f:21:14:bd:a9:c1:6d:bd: 0c:9e:a8:7e:56:47:ba:11:61:73:fe:54:7c:6c:0d:be:ee:18: b8:7c:3b:41:36:8f:99:8b:61:2c:f7:c2:42:7f:79:bf:8d:66: c4:4a:54:fc:b3:c6:7b:03:07:12:69:bd:4e:31:0b:8b:a6:37: 66:69:7a:00:f9:d9:3d:63:30:1d:59:a5:5b:b8:67:4d:8c:dd: 02:36:45:1e:a0:26:14:91:d7:2f:42:04:7d:c3:b9:82:6d:63: 68:18:71:c8:3f:21:fa:61:40:f8:c7:07:2d:80:76:47:65:52: 38:48:a2:81:ba:dc:66:66:46:8b:26:23:92:f6:f4:88:26:36: e2:13:86:83:a6:b4:d6:0c:04:96:b3:05:7d:b5:a1:2d:a7:55: b0:15:9d:da:52:0b:d4:a5:33:24:e6:fe:0a:cb:27:1f:5e:6e: 64:10:29:cb:9b:18:b0:4e:0f:cb:ea:20:78:5c:17:a7:d2:97: 2e:f7:1d:fc:54:d2:f2:b4:51:7b:76:77:ba:d2:c7:57:90:82: 42:5f:73:f1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9b3WXadMwdACi4poAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY4NjJmMjctMzYzZi00MmNlLWFiN2UtMzE3MzliMzY2 MGEwMB4XDTI2MTAwMTE1MjAwNloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk MTc4NDEyOGQtZDdjNy00ZDVhLTkwYzYtZTlhYWQ3MWViOWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJUI9hX1vhSYqt+ZO3KQIGa5C1qJK+GQmVUL ObkngXkXRrO4Aj2iqtli6b8pbL7VVSJDKph7Z7Fch8bhb4GyDKefZCLBUN96pKle HJtlgXKGWMNuedITxqbFP8GFqJAAQQbGioLoYPsPIDNdoRoAXJmgVftCsSqK9x2g oeldVsOGkWSIcy8udRGd+OT4VCrqVjIjr+HTFS36BuvWuok+AKR3H9AUsW+42jCE L9VYwVJD16kxk0RSp3O65ABisLTPnjr7L5iAe2dhNRwNrK+8jrM4HXMLpzdlWjj+ 4hCa6m7GSTA2EW399gRaD6vufB8v751sLcvY3ZvzyO5zWxZhCwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAQ5Tie6HRl62ANRohaphNyb54tsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjg2 MmYyNy0zNjNmLTQyY2UtYWI3ZS0zMTczOWIzNjYwYTAvM2NmNGU2YjEtNGVlMC0z MzljLWJiNWUtYmE1NjlhZjAyODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmY4NjJmMjctMzYzZi00MmNlLWFi N2UtMzE3MzliMzY2MGEwL2JmODYyZjI3LTM2M2YtNDJjZS1hYjdlLTMxNzM5YjM2 NjBhMC5jcmwwHwYDVR0jBBgwFoAU/Mn+2ixOINbiezYnXAE0YqRk2m8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjg2MmYyNy0zNjNmLTQyY2UtYWI3ZS0zMTcz OWIzNjYwYTAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCzZlgAwQB 2CbkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKQzXr0UEVRg14ilxo74FTRk+Ap/Cynz7oj4zCBNUrMsUNwS X0a5Q81OFSFR8K0/IRS9qcFtvQyeqH5WR7oRYXP+VHxsDb7uGLh8O0E2j5mLYSz3 wkJ/eb+NZsRKVPyzxnsDBxJpvU4xC4umN2ZpegD52T1jMB1ZpVu4Z02M3QI2RR6g JhSR1y9CBH3DuYJtY2gYccg/IfphQPjHBy2AdkdlUjhIooG63GZmRosmI5L29Igm NuIThoOmtNYMBJazBX21oS2nVbAVndpSC9SlMyTm/grLJx9ebmQQKcubGLBOD8vq IHhcF6fSly73HfxU0vK0UXt2d7rSx1eQgkJfc/E= -----END CERTIFICATE-----Generated at Mon Oct 5 12:45:17 2026 by rpki-client