$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa File: bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa (raw, json) Hash identifier: V5u9DogdaI8IvEJIfQT/Owq+suBgjTmZy8xnMZkldNw= Subject key identifier: 03:0F:6B:E6:18:BC:01:12:7E:B6:47:F7:9A:28:20:71:DD:C1:EC:B2 Certificate issuer: /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Certificate serial: 010D0C9F4328584EA797F5FB2BCD3DB0E989B21A Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 400679 IP address blocks: 206.168.92.0/24 maxlen: 24 2602:fb82::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:f5:fb:2b:cd:3d:b0:e9:89:b2:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d4d3b824-7d29-4f32-bf6c-a7102162f89d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bb:cc:eb:f4:2c:c8:6a:fa:7c:7c:49:d6:47: f7:0e:f0:21:35:27:1a:78:cb:5c:39:44:55:b5:3f: 46:cb:5f:f2:2b:68:bd:66:ab:bb:38:e6:f5:b4:d4: 75:8e:8d:33:0a:1c:9c:58:88:31:97:ca:61:d3:cd: 19:5b:b9:bd:1a:c4:11:46:70:19:ef:55:df:45:46: fc:2f:9f:28:24:6b:c5:fc:ee:08:dd:96:89:99:1d: 41:6f:18:fb:75:0c:4f:35:bf:85:ec:89:91:8a:91: 8e:ac:bf:2b:74:5f:88:97:48:a0:da:0f:15:4d:41: 70:b9:80:3a:23:8e:2a:4c:ed:2c:5b:c4:ac:87:db: a2:b3:3c:1b:01:84:43:8d:2e:6c:36:58:50:86:3f: e1:99:2e:05:58:d9:9c:63:c9:6e:6c:28:c6:69:82: b5:4a:78:ca:2f:9f:72:0c:41:4f:d8:5e:f5:51:4a: ed:f6:21:83:85:db:3d:27:0d:04:d5:3b:be:f8:0f: fc:fd:33:ae:92:06:ff:49:20:01:8a:21:fe:bf:61: f7:7b:9a:35:70:c1:1f:66:9d:94:54:17:99:ab:4c: c1:1a:a1:19:4e:43:21:35:71:a6:ca:19:01:b1:4b: 4d:0e:ee:6b:4b:0e:e2:49:d3:5d:df:5a:1e:36:76: 0c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0F:6B:E6:18:BC:01:12:7E:B6:47:F7:9A:28:20:71:DD:C1:EC:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl X509v3 Authority Key Identifier: keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer sbgp-ipAddrBlock: critical IPv4: 206.168.92.0/24 IPv6: 2602:fb82::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:8a:71:62:a5:2c:3d:1b:f6:f9:50:ac:ee:6e:14:d6:2d:3a: a8:4c:af:d6:46:90:8a:75:34:98:7b:cd:02:c6:f1:d8:12:2c: ea:81:ed:a2:5d:eb:17:2e:04:47:2e:39:6b:93:1c:da:54:20: 37:00:4b:57:36:6f:97:02:e4:9c:83:de:b8:08:07:4e:a3:da: 14:2d:21:9e:46:27:3d:cf:4b:b0:d7:4e:10:50:ca:59:ca:88: 67:d7:3d:d1:ba:8c:6b:08:7f:c1:c7:50:4d:4b:28:ed:8b:95: f0:8a:f4:67:a6:22:34:8e:96:fe:0d:ec:39:9b:64:ab:2a:7d: de:32:5a:7b:8f:e6:11:be:77:08:79:72:5c:db:f0:58:d0:83: 1c:ac:cd:5f:12:11:84:30:ad:1d:40:73:22:75:b5:f3:e0:20: e1:51:84:ff:ac:bf:a8:2d:f6:ca:b8:43:74:c6:de:c6:74:eb: ca:e3:f0:a9:e6:0d:7f:16:10:d1:01:f4:ed:64:da:6c:e7:06: 8f:75:74:eb:5b:7b:7b:4e:cc:f8:0b:93:aa:45:47:7f:1c:36: 28:dd:4d:d4:89:ea:89:55:0b:b6:4f:d9:b4:bf:41:76:97:1a: de:d2:ba:4b:89:80:84:f7:d5:e3:45:2f:b4:f9:b8:3c:1b:e8: 13:5a:e8:05 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6nl/X7K809sOmJshowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4OWYzZTQtMjcwMS00OGY1LTljNmItN2VhOGQwNzFl Y2U3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDRkM2I4MjQtN2QyOS00ZjMyLWJmNmMtYTcxMDIxNjJmODlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbvM6/QsyGr6fHxJ1kf3DvAhNScaeMtcOURV tT9Gy1/yK2i9Zqu7OOb1tNR1jo0zChycWIgxl8ph080ZW7m9GsQRRnAZ71XfRUb8 L58oJGvF/O4I3ZaJmR1Bbxj7dQxPNb+F7ImRipGOrL8rdF+Il0ig2g8VTUFwuYA6 I44qTO0sW8Ssh9uiszwbAYRDjS5sNlhQhj/hmS4FWNmcY8lubCjGaYK1SnjKL59y DEFP2F71UUrt9iGDhds9Jw0E1Tu++A/8/TOukgb/SSABiiH+v2H3e5o1cMEfZp2U VBeZq0zBGqEZTkMhNXGmyhkBsUtNDu5rSw7iSdNd31oeNnYMxwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAMPa+YYvAESfrZH95ooIHHdweyyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5 ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4ZDA3MWVjZTcvYmYxZWEwZDAtYzZjMy0z YmRmLWEyMGMtYThhOTM5NTUxYTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDU4OWYzZTQtMjcwMS00OGY1LTlj NmItN2VhOGQwNzFlY2U3L2Q1ODlmM2U0LTI3MDEtNDhmNS05YzZiLTdlYThkMDcx ZWNlNy5jcmwwHwYDVR0jBBgwFoAUQbmkG8YihK7ly7p7M2I7+iT7/yIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4 ZDA3MWVjZTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAzqhcMA4E AgACMAgDBgQmAvuCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBqinFipSw9G/b5UKzubhTWLTqoTK/WRpCK dTSYe80CxvHYEizqge2iXesXLgRHLjlrkxzaVCA3AEtXNm+XAuScg964CAdOo9oU LSGeRic9z0uw104QUMpZyohn1z3RuoxrCH/Bx1BNSyjti5XwivRnpiI0jpb+Dew5 m2SrKn3eMlp7j+YRvncIeXJc2/BY0IMcrM1fEhGEMK0dQHMidbXz4CDhUYT/rL+o LfbKuEN0xt7GdOvK4/Cp5g1/FhDRAfTtZNps5waPdXTrW3t7Tsz4C5OqRUd/HDYo 3U3UieqJVQu2T9m0v0F2lxre0rpLiYCE99XjRS+0+bg8G+gTWugF -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:43 2026 by rpki-client