$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/f4eb3f45-23aa-397c-a750-8446a726a135.roa File: f4eb3f45-23aa-397c-a750-8446a726a135.roa (raw, json) Hash identifier: MhYZjyUi4hB2wHoItIwIuGfLHepePFGQd7/x1FJr4Uc= Subject key identifier: FD:FB:15:8A:63:47:76:5F:DF:82:3E:D9:30:1F:AE:E2:52:6D:CE:0C Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584F0ED23865BABF222983430080 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/f4eb3f45-23aa-397c-a750-8446a726a135.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 4213 IP address blocks: 66.186.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:38:65:ba:bf:22:29:83:43:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=bb84f61b-d2e9-4f2b-b509-9f5d0ca02c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:63:46:5b:c9:4a:0b:b4:b6:df:1d:7c:07:13: 11:72:e0:aa:3d:80:38:2f:c8:73:20:c6:53:a7:e3: d5:d1:d0:62:91:a7:07:20:09:f8:2e:78:ac:9b:d0: c7:d4:cd:01:83:1e:b8:14:8b:43:25:7d:f6:c5:9e: a7:ea:d3:ac:d2:96:73:e9:ba:31:11:8f:44:2f:5b: c6:66:f3:b6:d0:1e:f8:6b:05:9e:fd:3a:20:8c:16: 59:3a:a3:32:b0:51:9b:2e:ad:82:12:e5:6d:7d:d9: 19:97:1a:11:18:1a:47:72:06:e1:69:df:67:7b:c5: f0:28:c7:58:d6:ac:fc:dd:55:6a:5d:69:56:07:9f: 31:56:59:57:ea:05:38:02:64:d3:0b:fa:92:ee:0b: 2c:ca:1d:8c:8f:43:f3:d3:c7:e8:b0:5c:d8:d7:91: 75:92:e9:66:00:5f:57:03:33:56:89:30:ff:b9:8a: ee:b0:2d:6a:36:7b:91:55:ba:4d:25:02:b7:ff:3f: ae:cb:59:cb:b3:d5:f2:85:13:65:e2:58:22:80:e2: 8b:42:a7:23:b9:f5:b7:90:dc:db:8a:fb:f4:93:cd: 51:fd:d1:9b:d0:bc:25:2e:00:61:da:06:63:94:2f: da:e3:fe:55:dd:8b:94:0e:b4:76:a8:a6:a4:18:87: f0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FB:15:8A:63:47:76:5F:DF:82:3E:D9:30:1F:AE:E2:52:6D:CE:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/f4eb3f45-23aa-397c-a750-8446a726a135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 66.186.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:3c:4e:8f:51:48:16:dd:21:85:3f:a6:03:0e:ab:0f:8d:02: 98:61:d2:55:fc:09:7d:ea:21:cd:7d:79:d3:0b:a2:7c:90:8b: 0b:c5:23:d3:2a:3f:b3:cc:7a:16:1e:65:39:76:4d:6a:dd:68: ea:d0:85:54:d1:1d:67:6f:6f:0e:f4:4b:af:b1:20:85:eb:29: 53:df:01:ea:68:6c:f3:87:03:c7:27:fe:67:99:e1:73:b5:32: 0a:e3:36:2b:bb:b7:10:d8:67:97:36:3e:34:30:74:fe:3e:03: 37:bd:27:25:53:3f:9e:1d:5e:4d:7f:4d:f3:81:71:35:2b:b0: 43:1a:3e:f8:98:3d:23:2b:a4:86:c3:b1:63:db:46:e0:c8:5f: d8:12:cf:26:39:0c:75:e6:a3:af:60:f4:a4:95:60:60:6e:94: d4:59:fc:df:35:90:49:ae:24:2c:8d:65:79:41:7e:97:e4:7b: 22:be:4c:9c:13:ac:29:79:23:7a:82:53:61:29:31:e1:22:27: d5:a4:82:45:66:7e:f2:90:3f:3b:80:ab:af:80:e2:d0:ee:77: 94:2b:89:9b:4a:e0:ac:31:44:00:71:c0:06:b1:39:c0:e2:75: 08:a9:a7:83:75:08:ac:7d:1d:23:32:30:f6:56:6a:28:b1:91: 4e:21:1b:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0jhlur8iKYNDAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk YmI4NGY2MWItZDJlOS00ZjJiLWI1MDktOWY1ZDBjYTAyYzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GNGW8lKC7S23x18BxMRcuCqPYA4L8hzIMZT p+PV0dBikacHIAn4Lnism9DH1M0Bgx64FItDJX32xZ6n6tOs0pZz6boxEY9EL1vG ZvO20B74awWe/TogjBZZOqMysFGbLq2CEuVtfdkZlxoRGBpHcgbhad9ne8XwKMdY 1qz83VVqXWlWB58xVllX6gU4AmTTC/qS7gssyh2Mj0Pz08fosFzY15F1kulmAF9X AzNWiTD/uYrusC1qNnuRVbpNJQK3/z+uy1nLs9XyhRNl4lgigOKLQqcjufW3kNzb ivv0k81R/dGb0LwlLgBh2gZjlC/a4/5V3YuUDrR2qKakGIfw1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP37FYpjR3Zf34I+2TAfruJSbc4MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZjRlYjNmNDUtMjNhYS0z OTdjLWE3NTAtODQ0NmE3MjZhMTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQrogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEU8To9RSBbdIYU/pgMOqw+NAphh0lX8CX3qIc19edMLonyQiwvFI9Mq P7PMehYeZTl2TWrdaOrQhVTRHWdvbw70S6+xIIXrKVPfAepobPOHA8cn/meZ4XO1 MgrjNiu7txDYZ5c2PjQwdP4+Aze9JyVTP54dXk1/TfOBcTUrsEMaPviYPSMrpIbD sWPbRuDIX9gSzyY5DHXmo69g9KSVYGBulNRZ/N81kEmuJCyNZXlBfpfkeyK+TJwT rCl5I3qCU2EpMeEiJ9WkgkVmfvKQPzuAq6+A4tDud5QriZtK4KwxRABxwAaxOcDi dQipp4N1CKx9HSMyMPZWaiixkU4hG0E= -----END CERTIFICATE-----Generated at Sun Sep 20 21:41:37 2026 by rpki-client