$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/397dc0ec-3da7-3245-b34a-fd0c48fd3756.roa File: 397dc0ec-3da7-3245-b34a-fd0c48fd3756.roa (raw, json) Hash identifier: lUowjp5txjfA+PNVZImcXWB4bldgoKA6U0H8JOdqIX8= Subject key identifier: 80:D3:50:2D:BE:92:DB:6E:C7:A4:9B:66:1C:9C:84:D7:C8:EC:F4:7A Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584EE0C207AD4E8A7BCCC5880940 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/397dc0ec-3da7-3245-b34a-fd0c48fd3756.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 53508 IP address blocks: 209.127.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:07:ad:4e:8a:7b:cc:c5:88:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=4e3e0141-a6f4-4062-96d5-c4a4cd55386e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:89:66:4f:90:29:74:6d:bc:c1:69:2f:4d:f8: 51:91:8a:8a:19:1f:33:c8:07:18:9f:15:75:3e:4f: 85:99:6d:44:c5:38:8b:d1:18:32:aa:1d:43:4f:38: 50:e0:42:8e:ef:13:ec:76:bd:48:41:fa:63:09:3a: b5:84:1a:0c:82:6d:07:bc:d2:bc:6b:32:e8:c1:92: a4:30:53:92:a6:8f:09:c7:14:f5:a6:33:53:2a:4a: b7:71:65:df:02:97:d1:22:0b:15:9a:e1:2f:36:5b: 73:2b:63:92:cd:64:b0:c2:7c:ab:0a:d1:f8:aa:7a: db:7f:d6:01:6f:aa:5a:71:f5:5e:29:c7:ce:e6:e6: 04:67:c2:61:6a:da:c3:c8:55:e0:b0:a4:20:de:83: 73:ff:b9:43:9a:85:50:e7:54:41:8b:1f:44:21:65: a3:86:e8:0d:8b:48:12:0f:9f:99:45:1e:15:5e:2f: ec:11:b9:a5:72:3f:58:dc:ec:18:99:6d:a0:10:76: 45:4a:87:de:29:bc:11:d8:95:3c:aa:89:ff:8c:8a: b9:d7:05:6c:de:4f:5f:37:8b:d3:80:55:df:bd:98: 79:6d:6a:bb:18:f2:a3:c3:80:56:23:da:ad:29:89: e2:bb:ce:47:cd:f7:05:9a:71:48:a6:58:0d:ba:e0: 6d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D3:50:2D:BE:92:DB:6E:C7:A4:9B:66:1C:9C:84:D7:C8:EC:F4:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/397dc0ec-3da7-3245-b34a-fd0c48fd3756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 209.127.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:d8:60:24:88:d2:e6:ef:2f:6d:52:bf:09:ab:f6:dc:0c:2a: 04:1e:23:45:59:99:e8:9a:6a:f3:3c:91:bd:f9:23:4f:20:6f: e6:f9:da:94:4b:5d:68:34:0a:a2:b3:21:55:a7:52:75:ad:fe: 03:74:86:7d:b3:f8:36:f7:c6:e8:53:91:1d:f9:c1:6d:79:49: 8b:22:fc:4f:ef:88:fc:f8:93:9f:78:f0:a2:cc:11:72:9b:65: 27:d5:72:ca:31:89:9d:9d:c9:82:ca:47:4d:4a:95:12:14:d7: 4f:74:12:7f:d8:0f:60:4c:bd:0f:2c:0f:f4:08:57:98:76:e0: 85:a8:a0:3e:9b:58:a5:7a:18:73:76:96:c8:6d:eb:14:5f:f8: 58:80:1e:53:d5:1b:28:c3:8b:c9:76:c8:1c:12:f4:00:7c:18: 4f:61:fb:8d:30:60:4f:cc:76:55:1e:2d:5c:1f:f2:e3:90:9e: 7b:08:fb:bc:e5:2e:ac:8b:f5:48:49:75:5b:8d:6f:01:61:44: 94:e3:7b:35:56:00:bf:24:a7:3f:98:3d:81:0e:b2:b2:cb:f9: aa:d6:04:28:31:71:e8:7b:8d:5f:df:76:ff:07:28:f6:62:10: 82:1a:b2:fb:f9:b3:e3:25:c7:db:a6:0b:5f:77:c9:9a:8f:a2: 2b:e6:f1:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwgetTop7zMWICUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk NGUzZTAxNDEtYTZmNC00MDYyLTk2ZDUtYzRhNGNkNTUzODZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4lmT5ApdG28wWkvTfhRkYqKGR8zyAcYnxV1 Pk+FmW1ExTiL0Rgyqh1DTzhQ4EKO7xPsdr1IQfpjCTq1hBoMgm0HvNK8azLowZKk MFOSpo8JxxT1pjNTKkq3cWXfApfRIgsVmuEvNltzK2OSzWSwwnyrCtH4qnrbf9YB b6pacfVeKcfO5uYEZ8JhatrDyFXgsKQg3oNz/7lDmoVQ51RBix9EIWWjhugNi0gS D5+ZRR4VXi/sEbmlcj9Y3OwYmW2gEHZFSofeKbwR2JU8qon/jIq51wVs3k9fN4vT gFXfvZh5bWq7GPKjw4BWI9qtKYniu85HzfcFmnFIplgNuuBtrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDTUC2+kttux6SbZhychNfI7PR6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMzk3ZGMwZWMtM2RhNy0z MjQ1LWIzNGEtZmQwYzQ4ZmQzNzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0X+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/YYCSI0ubvL21Svwmr9twMKgQeI0VZmeiaavM8kb35I08gb+b52pRL XWg0CqKzIVWnUnWt/gN0hn2z+Db3xuhTkR35wW15SYsi/E/viPz4k5948KLMEXKb ZSfVcsoxiZ2dyYLKR01KlRIU1090En/YD2BMvQ8sD/QIV5h24IWooD6bWKV6GHN2 lsht6xRf+FiAHlPVGyjDi8l2yBwS9AB8GE9h+40wYE/MdlUeLVwf8uOQnnsI+7zl LqyL9UhJdVuNbwFhRJTjezVWAL8kpz+YPYEOsrLL+arWBCgxceh7jV/fdv8HKPZi EIIasvv5s+Mlx9umC193yZqPoivm8XM= -----END CERTIFICATE-----Generated at Tue Sep 22 21:08:46 2026 by rpki-client