$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/84890823-5c5d-352d-8be0-e616158bef5c.roa File: 84890823-5c5d-352d-8be0-e616158bef5c.roa (raw, json) Hash identifier: QtzHT3NrZ6T9mfhlkHhVNEHTOhMBwZFW8HRAoy3ewa8= Subject key identifier: FC:4F:49:35:80:47:6F:51:4C:6E:EC:D6:89:75:D6:F8:69:1B:F5:47 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584F20F7BB39258CC926CBCBD300 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/84890823-5c5d-352d-8be0-e616158bef5c.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 4213 IP address blocks: 67.198.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:bb:39:25:8c:c9:26:cb:cb:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=bd03df18-3e20-4f24-9f52-6711ff629176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4d:0d:18:f3:ea:0a:5c:89:af:cc:bb:a3:2c: 72:92:84:aa:26:23:1e:23:03:d7:70:97:bd:f8:bf: 2d:cf:af:d7:19:a4:7d:c9:d6:e9:f8:8c:d6:bc:95: fe:64:2f:b2:41:90:6f:48:3a:97:e0:b6:ce:a2:72: 4c:b6:bc:b1:c3:f9:61:0e:a9:89:c2:28:a2:46:e4: 13:6f:56:cc:7e:ca:7c:26:55:aa:60:be:e1:8d:95: fe:ac:00:a0:b8:19:fe:45:c2:f8:de:1c:f8:51:4c: 5d:17:98:a7:61:7e:64:73:20:6d:80:f2:27:e4:1d: ed:da:b1:56:48:60:79:58:8f:20:e2:8d:03:60:eb: ad:2e:1e:7d:82:bb:5d:32:90:54:79:c9:49:20:ef: 87:51:ca:0e:a5:39:c7:86:41:6d:ad:b1:79:cc:69: 3a:25:df:03:53:9c:7a:41:bf:0e:a3:6d:4d:20:81: 10:81:61:92:61:2a:4f:ce:f2:6c:9b:06:d6:a7:d1: fa:9d:6f:bc:a8:cd:70:0b:f8:d7:92:b7:66:5d:f0: fa:03:f6:a8:9b:69:53:aa:3b:22:bf:99:6f:76:8a: 12:52:bd:74:66:d6:ae:ad:f7:65:32:68:1d:ba:69: 81:09:68:ae:57:3d:3e:6e:33:05:25:19:5f:4d:8b: 7c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:4F:49:35:80:47:6F:51:4C:6E:EC:D6:89:75:D6:F8:69:1B:F5:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/84890823-5c5d-352d-8be0-e616158bef5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 67.198.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ea:41:18:48:c6:19:97:81:b4:66:f2:88:b0:c5:29:34:32: 1f:fe:d2:b5:a3:23:10:80:66:cb:70:ac:8e:3f:9c:13:c0:10: f9:13:e9:06:4d:7f:34:df:f1:4d:42:bd:ef:34:48:70:c9:8e: 12:d1:f2:91:8c:94:0b:8d:d5:c8:0b:23:a9:7f:f7:50:85:d9: 0e:51:8e:67:df:5e:64:c5:f8:b2:cb:a9:6f:75:82:75:60:84: 4c:e0:6d:d5:7e:1d:25:27:31:b1:38:fd:3b:c8:75:f2:59:cd: e9:57:6a:1b:a8:59:a4:c4:44:46:19:9f:a0:2a:29:f0:8e:5f: 4e:8c:24:2a:f9:e8:d6:e1:e7:86:45:37:37:06:97:62:08:a9: a5:20:39:47:9f:3b:5b:e3:ea:dd:06:89:91:9b:cd:86:6b:fe: 59:8f:2c:2a:53:71:c0:36:19:22:f7:54:b5:14:69:d8:82:af: 52:20:f7:6c:da:c6:9c:9e:29:cc:cc:d2:b4:61:98:59:43:53: 70:99:8d:38:29:39:27:5c:d9:21:0c:cf:66:58:d7:e5:de:b2: dc:72:97:2d:ca:69:0d:8d:70:74:5a:45:d6:cb:0a:53:24:c9: ef:41:ee:a5:92:e1:d8:d5:ff:2e:9d:b4:2b:4e:64:fd:b8:3e: 77:f4:b0:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97s5JYzJJsvL0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk YmQwM2RmMTgtM2UyMC00ZjI0LTlmNTItNjcxMWZmNjI5MTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE0NGPPqClyJr8y7oyxykoSqJiMeIwPXcJe9 +L8tz6/XGaR9ydbp+IzWvJX+ZC+yQZBvSDqX4LbOonJMtryxw/lhDqmJwiiiRuQT b1bMfsp8JlWqYL7hjZX+rACguBn+RcL43hz4UUxdF5inYX5kcyBtgPIn5B3t2rFW SGB5WI8g4o0DYOutLh59grtdMpBUeclJIO+HUcoOpTnHhkFtrbF5zGk6Jd8DU5x6 Qb8Oo21NIIEQgWGSYSpPzvJsmwbWp9H6nW+8qM1wC/jXkrdmXfD6A/aom2lTqjsi v5lvdooSUr10ZtaurfdlMmgdummBCWiuVz0+bjMFJRlfTYt8PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxPSTWAR29RTG7s1ol11vhpG/VHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvODQ4OTA4MjMtNWM1ZC0z NTJkLThiZTAtZTYxNjE1OGJlZjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ8bVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETqQRhIxhmXgbRm8oiwxSk0Mh/+0rWjIxCAZstwrI4/nBPAEPkT6QZN fzTf8U1Cve80SHDJjhLR8pGMlAuN1cgLI6l/91CF2Q5RjmffXmTF+LLLqW91gnVg hEzgbdV+HSUnMbE4/TvIdfJZzelXahuoWaTEREYZn6AqKfCOX06MJCr56Nbh54ZF NzcGl2IIqaUgOUefO1vj6t0GiZGbzYZr/lmPLCpTccA2GSL3VLUUadiCr1Ig92za xpyeKczM0rRhmFlDU3CZjTgpOSdc2SEMz2ZY1+Xestxyly3KaQ2NcHRaRdbLClMk ye9B7qWS4djV/y6dtCtOZP24Pnf0sKM= -----END CERTIFICATE-----Generated at Mon Sep 21 17:57:20 2026 by rpki-client