$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/df882eef-1faf-3541-8255-366c9e2451b2.roa File: df882eef-1faf-3541-8255-366c9e2451b2.roa (raw, json) Hash identifier: 3lMRrstArqK1eF/DN4GaqbSRai5bS2WpU9if8nFNE0U= Subject key identifier: 26:F3:B0:E7:32:D4:D2:9C:DD:CD:AB:9A:0C:C7:E5:7C:0D:38:2E:9F Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584F0ED23672F4885EE4416ACB60 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/df882eef-1faf-3541-8255-366c9e2451b2.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 4213 IP address blocks: 174.139.126.0/23 maxlen: 24 174.139.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:36:72:f4:88:5e:e4:41:6a:cb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=1d3cff61-29ab-4e90-ac4b-7529c2628372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0b:22:8f:95:17:3d:07:09:d6:03:4c:36:a5: 23:46:66:51:db:0d:47:6f:fa:74:8c:45:e3:44:41: 3a:f4:46:30:06:24:ba:18:44:f1:b3:0f:27:80:c0: 13:55:28:01:84:d8:90:6b:7a:84:16:42:dd:44:25: 31:db:ad:f1:73:b3:1d:2a:b4:26:78:4c:4d:56:cb: b1:76:0c:d1:70:4c:23:d7:60:7d:4d:17:51:f0:d4: 60:7e:74:49:87:4c:e8:3f:eb:5a:68:db:c4:84:0e: ea:90:27:a2:ab:29:34:94:67:ad:b6:2c:5b:9a:ef: 89:ad:54:e8:02:9b:51:04:c9:55:e2:62:38:87:2f: 69:44:58:b5:96:a4:0d:01:06:2d:1e:4d:86:91:e3: 33:2a:5b:98:af:19:7a:a8:f9:3a:4a:79:41:88:b9: e7:7e:18:66:bf:8c:a7:8c:1a:3e:e4:98:93:b2:58: a3:dc:7d:0e:a3:40:5a:10:d1:df:2f:67:e5:eb:2f: 89:97:4f:d1:60:34:3b:fd:08:fa:16:92:7b:12:5d: 95:31:ad:ed:79:83:e4:1e:c6:05:e9:dd:ba:c6:7c: 33:00:a3:23:d1:91:3b:d1:e9:7a:66:95:90:ad:4d: ff:d1:f4:14:a7:4b:8a:a2:4b:4f:59:2f:b1:83:bd: c2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F3:B0:E7:32:D4:D2:9C:DD:CD:AB:9A:0C:C7:E5:7C:0D:38:2E:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/df882eef-1faf-3541-8255-366c9e2451b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 174.139.126.0/23 174.139.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:ed:06:8c:97:4e:25:9e:a1:85:96:02:26:a9:54:5e:dd:3c: 50:db:37:e7:49:6b:ab:06:22:69:cb:80:0a:14:9f:17:51:17: ab:aa:bf:02:43:c7:6f:da:7f:32:71:cd:7a:15:34:01:b1:79: d1:cd:d7:13:e8:f3:c7:39:dd:c0:c6:95:9c:11:84:e8:0d:de: 92:35:06:cd:26:93:bb:d1:0a:2f:00:f5:73:4c:cd:7d:3b:40: 7f:4a:ff:57:95:f0:df:ad:e9:5b:58:92:54:bf:49:e9:e3:fa: 47:d4:b5:42:5e:77:e4:63:23:5f:b6:10:7e:6a:e3:e0:94:c8: 1b:a4:c9:89:15:5a:3b:34:d0:48:6a:c0:b3:6b:22:d8:46:58: 87:72:bc:7b:f5:5d:25:d7:25:d5:8c:9f:b6:e4:03:a0:eb:99: 86:56:7a:91:1a:b5:ef:e6:54:9e:e4:e4:31:7c:ac:ec:9f:ea: 21:d1:b8:e9:ec:dc:ac:2c:e7:00:06:33:62:c0:69:9b:d8:f2: dd:32:74:49:33:0f:49:4b:b3:b6:c8:03:99:4c:d5:f0:d3:60: 7e:78:3f:03:dd:18:43:68:20:e2:ed:7e:6c:b4:bd:82:cb:58: dc:19:dd:20:fa:af:c4:18:4e:1f:86:0e:3b:e3:34:7a:6a:a6: 8a:1c:16:05 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8O0jZy9Ihe5EFqy2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk MWQzY2ZmNjEtMjlhYi00ZTkwLWFjNGItNzUyOWMyNjI4MzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAsij5UXPQcJ1gNMNqUjRmZR2w1Hb/p0jEXj REE69EYwBiS6GETxsw8ngMATVSgBhNiQa3qEFkLdRCUx263xc7MdKrQmeExNVsux dgzRcEwj12B9TRdR8NRgfnRJh0zoP+taaNvEhA7qkCeiqyk0lGettixbmu+JrVTo AptRBMlV4mI4hy9pRFi1lqQNAQYtHk2GkeMzKluYrxl6qPk6SnlBiLnnfhhmv4yn jBo+5JiTslij3H0Oo0BaENHfL2fl6y+Jl0/RYDQ7/Qj6FpJ7El2VMa3teYPkHsYF 6d26xnwzAKMj0ZE70el6ZpWQrU3/0fQUp0uKoktPWS+xg73ChwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCbzsOcy1NKc3c2rmgzH5XwNOC6fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZGY4ODJlZWYtMWZhZi0z NTQxLTgyNTUtMzY2YzllMjQ1MWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBrot+AwQA rouJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAL7tBoyXTiWeoYWWAiapVF7dPFDbN+dJa6sGImnLgAoUnxdR F6uqvwJDx2/afzJxzXoVNAGxedHN1xPo88c53cDGlZwRhOgN3pI1Bs0mk7vRCi8A 9XNMzX07QH9K/1eV8N+t6VtYklS/Senj+kfUtUJed+RjI1+2EH5q4+CUyBukyYkV Wjs00EhqwLNrIthGWIdyvHv1XSXXJdWMn7bkA6DrmYZWepEate/mVJ7k5DF8rOyf 6iHRuOns3Kws5wAGM2LAaZvY8t0ydEkzD0lLs7bIA5lM1fDTYH54PwPdGENoIOLt fmy0vYLLWNwZ3SD6r8QYTh+GDjvjNHpqpoocFgU= -----END CERTIFICATE-----Generated at Tue Sep 22 14:34:40 2026 by rpki-client