$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/bd53a3c2-b425-32de-abae-cbb2ab87890a.roa File: bd53a3c2-b425-32de-abae-cbb2ab87890a.roa (raw, json) Hash identifier: bMZ76WU+YfKoyn9KleUoYU5AtfKwtjuMHzvBsSQAoII= Subject key identifier: 65:6A:CA:06:D2:ED:A5:6F:DA:2E:AE:85:86:39:BE:0D:F7:35:4A:24 Certificate issuer: /CN=b1f976fd-7fa0-4323-97fa-35bb869a9231 Certificate serial: 010D0C9F4328584F4112B5F221C4797C9AFC9980 Authority key identifier: AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/bd53a3c2-b425-32de-abae-cbb2ab87890a.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 2055 IP address blocks: 167.96.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:b5:f2:21:c4:79:7c:9a:fc:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1f976fd-7fa0-4323-97fa-35bb869a9231 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=6f83e07a-98d5-4fd5-a3a3-5929b5547de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a8:48:c2:5c:67:e4:69:3b:55:54:e1:cb:e7: b2:bc:4f:95:ad:9f:ca:15:39:5c:91:0f:32:0c:18: 0f:f6:76:5d:c0:7e:80:be:f7:59:fa:f3:a2:16:c5: cd:f5:e0:bc:33:f9:66:cd:6a:5b:09:11:93:81:ae: 77:71:62:fa:3e:c0:0b:76:b1:45:fe:47:f1:20:11: 27:b4:6a:35:40:d7:f6:df:cd:3e:94:7c:fd:3f:02: f2:69:0a:10:47:d5:65:25:bf:4e:b0:be:a4:08:4c: b7:5a:0a:62:34:c8:96:07:60:69:41:0b:17:b7:d2: 72:3e:14:5f:6a:e7:57:2a:e5:ea:9d:74:01:2b:c2: ad:83:6a:da:1e:6c:b2:51:ff:2d:fd:d1:8a:99:fc: d4:d4:a4:ac:8b:2a:b1:49:ce:a8:1c:76:88:ba:a8: d9:a7:1d:98:f9:cb:2c:b4:d8:d9:c6:6b:e2:32:f0: 28:c3:97:4c:f7:5b:cc:79:d9:23:2a:71:0c:ed:91: 38:7c:f2:90:13:df:db:f5:5a:e1:79:2e:9f:f2:08: 7c:aa:dd:65:bc:5c:33:16:07:a1:b3:b2:13:92:ce: bd:0b:b6:f0:74:e8:bb:f2:75:28:c1:4d:38:95:73: 5b:1c:59:e5:68:e2:eb:31:8b:48:76:6e:0f:38:f6: af:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6A:CA:06:D2:ED:A5:6F:DA:2E:AE:85:86:39:BE:0D:F7:35:4A:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/bd53a3c2-b425-32de-abae-cbb2ab87890a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.crl X509v3 Authority Key Identifier: keyid:AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer sbgp-ipAddrBlock: critical IPv4: 167.96.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:a7:78:1f:d8:65:b3:58:27:f8:f1:1f:2e:6a:fd:d9:e1:62: 09:2e:9d:96:60:5f:87:e7:fb:57:75:93:c6:0a:1a:4d:91:0b: 68:ad:fe:55:a4:26:a7:4d:85:73:96:89:af:0e:b4:67:16:84: b3:60:84:6f:c8:87:aa:40:df:12:df:f9:c2:09:c1:98:05:72: 08:ff:69:b4:fa:e9:c5:d3:c9:90:e0:b0:5d:89:79:1a:22:6b: bf:f4:90:c5:5a:69:8f:33:e6:68:79:b1:e4:50:fb:eb:c3:b5: 69:dd:53:3c:5f:8b:11:82:32:32:1c:c7:e5:13:b9:a1:f1:45: 5c:ad:3b:cc:15:c6:88:1b:b0:85:9b:47:a2:ff:45:c7:2c:31: 34:14:bc:11:02:cd:e1:42:bf:77:f7:5a:8f:3d:23:55:46:0d: db:c5:e2:98:f5:d3:c1:4f:99:ae:78:e7:c7:2a:d3:b2:d1:3c: fc:cc:18:09:5e:fb:f4:0d:ee:6c:16:9a:41:67:77:f0:1b:22: 07:27:8c:f5:34:c5:cb:56:18:4e:b6:5d:fc:66:1c:01:3c:04: 6d:b8:e7:e0:e4:c2:b1:8a:ad:6b:33:d2:e3:0f:e0:38:8b:df: 91:3b:d6:08:ef:8b:a7:82:48:88:e7:0b:62:3d:37:18:54:bc: 37:be:86:67 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9BErXyIcR5fJr8mYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFmOTc2ZmQtN2ZhMC00MzIzLTk3ZmEtMzViYjg2OWE5 MjMxMB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk NmY4M2UwN2EtOThkNS00ZmQ1LWEzYTMtNTkyOWI1NTQ3ZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmahIwlxn5Gk7VVThy+eyvE+VrZ/KFTlckQ8y DBgP9nZdwH6AvvdZ+vOiFsXN9eC8M/lmzWpbCRGTga53cWL6PsALdrFF/kfxIBEn tGo1QNf2380+lHz9PwLyaQoQR9VlJb9OsL6kCEy3WgpiNMiWB2BpQQsXt9JyPhRf audXKuXqnXQBK8Ktg2raHmyyUf8t/dGKmfzU1KSsiyqxSc6oHHaIuqjZpx2Y+css tNjZxmviMvAow5dM91vMedkjKnEM7ZE4fPKQE9/b9VrheS6f8gh8qt1lvFwzFgeh s7ITks69C7bwdOi78nUowU04lXNbHFnlaOLrMYtIdm4POPavDQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGVqygbS7aVv2i6uhYY5vg33NUokMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iMWY5 NzZmZC03ZmEwLTQzMjMtOTdmYS0zNWJiODY5YTkyMzEvYmQ1M2EzYzItYjQyNS0z MmRlLWFiYWUtY2JiMmFiODc4OTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjFmOTc2ZmQtN2ZhMC00MzIzLTk3 ZmEtMzViYjg2OWE5MjMxL2IxZjk3NmZkLTdmYTAtNDMyMy05N2ZhLTM1YmI4Njlh OTIzMS5jcmwwHwYDVR0jBBgwFoAUrpokcZiF5gtdP+4v/cqhapTgJzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iMWY5NzZmZC03ZmEwLTQzMjMtOTdmYS0zNWJi ODY5YTkyMzEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAp2AwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAeKd4H9hls1gn+PEfLmr92eFiCS6dlmBfh+f7V3WTxgoaTZELaK3+VaQm p02Fc5aJrw60ZxaEs2CEb8iHqkDfEt/5wgnBmAVyCP9ptPrpxdPJkOCwXYl5GiJr v/SQxVppjzPmaHmx5FD768O1ad1TPF+LEYIyMhzH5RO5ofFFXK07zBXGiBuwhZtH ov9FxywxNBS8EQLN4UK/d/dajz0jVUYN28XimPXTwU+ZrnjnxyrTstE8/MwYCV77 9A3ubBaaQWd38BsiByeM9TTFy1YYTrZd/GYcATwEbbjn4OTCsYqtazPS4w/gOIvf kTvWCO+Lp4JIiOcLYj03GFS8N76GZw== -----END CERTIFICATE-----Generated at Tue Sep 29 04:06:35 2026 by rpki-client