$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/21d0fa15-e863-3986-aea1-3a7306397923.roa File: 21d0fa15-e863-3986-aea1-3a7306397923.roa (raw, json) Hash identifier: nWOax7o/+wTyuC31fA8WLn8/mprwoyydY7CkU7G9I+o= Subject key identifier: DC:8F:59:3E:AD:84:D9:25:01:81:CC:6D:3C:A8:B7:2A:AE:94:0C:C4 Certificate issuer: /CN=bf895287-fee6-4682-8ac4-732f64947fe4 Certificate serial: 010D0C9F4328584F0ED244C421431AF747724A80 Authority key identifier: 75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/21d0fa15-e863-3986-aea1-3a7306397923.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 19218 IP address blocks: 158.120.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:44:c4:21:43:1a:f7:47:72:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf895287-fee6-4682-8ac4-732f64947fe4 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=0c0dbd1e-cf6f-4212-a9fd-0de0404354bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:25:3c:b2:a2:8b:3e:c6:2f:b9:09:6e:af:0e: 02:b9:af:3c:cc:27:0e:c0:47:a6:f8:23:b3:e4:f1: b6:ac:68:60:2d:10:a4:e5:ed:9d:41:3c:11:3c:ff: 68:07:63:1a:be:a4:c2:95:f1:10:7e:17:05:fe:99: 7e:b6:bd:a0:a9:a9:7f:9e:f1:28:71:1b:e9:4b:41: 94:3a:1d:75:d8:36:f9:c4:cf:85:30:d7:dc:6e:4b: f5:db:15:79:11:81:31:89:0d:43:58:2e:52:88:49: 86:ce:5e:f2:f9:97:48:af:4c:a1:f6:36:10:96:d6: bc:bc:3b:5a:9b:74:04:21:7f:48:eb:15:8a:f4:73: 3d:62:b0:c3:cb:49:a8:06:b7:55:af:01:db:1f:70: 4a:0e:e2:bd:44:db:e6:1e:44:4f:79:1d:45:a0:de: 0c:ba:cd:79:bf:3f:3d:4a:7b:39:a1:d3:1a:11:20: 46:5a:8d:93:0e:4f:53:ed:ff:85:d6:36:b2:bd:ca: f4:f7:5f:34:d0:92:62:42:1a:17:cc:be:67:e9:0e: 5c:4d:13:e1:29:cc:29:68:a4:ff:05:d6:c3:41:76: 09:3c:93:80:3a:b0:21:1f:7f:20:c1:c8:21:c4:e2: 5b:5e:11:ae:fa:61:08:4c:9b:25:c3:7b:a4:26:d9: cc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8F:59:3E:AD:84:D9:25:01:81:CC:6D:3C:A8:B7:2A:AE:94:0C:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/21d0fa15-e863-3986-aea1-3a7306397923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl X509v3 Authority Key Identifier: keyid:75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer sbgp-ipAddrBlock: critical IPv4: 158.120.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:f7:7c:92:5d:76:17:af:b3:f4:db:01:73:d3:27:4a:81:b5: ea:2f:5e:8d:9f:48:b0:16:5a:21:36:71:1a:e7:88:07:21:dc: 7f:17:e6:72:50:13:9c:bf:ca:2b:e3:33:fe:e3:02:42:00:0d: b4:56:98:f1:1c:24:a8:09:73:01:95:d6:fa:68:50:2e:20:c0: 79:3e:40:5d:92:06:34:33:94:f4:a7:3d:a8:d7:dc:5b:74:76: 9d:66:6d:a0:fe:fa:b2:c0:ee:44:ed:53:d3:c1:5c:29:87:28: 9c:78:0a:52:8d:a8:7c:34:f1:1b:58:0d:28:93:a8:ac:f4:b7: 4a:6d:ca:15:3f:c1:a9:64:26:be:18:9c:2b:3d:e0:a2:70:02: 8f:33:b9:fd:52:89:81:56:7a:d8:91:8b:bf:b9:47:57:0b:5e: fb:fb:6e:37:4d:4f:ac:6c:71:91:7e:6f:f5:8d:0f:d0:72:e7: 0b:2f:77:45:33:23:94:e2:6b:c3:62:3c:64:a5:ef:ab:4a:ec: 30:53:f6:4c:bb:f7:28:09:87:b5:02:14:ad:9e:8c:c2:2b:48: a2:8f:5c:91:e7:f9:47:e3:ca:d0:b5:8d:7d:fd:2c:43:eb:bb: dc:2a:ff:5c:a3:81:f0:cf:7b:00:a5:08:c3:54:b3:22:e5:9a: 8f:23:0c:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0kTEIUMa90dySoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY4OTUyODctZmVlNi00NjgyLThhYzQtNzMyZjY0OTQ3 ZmU0MB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk MGMwZGJkMWUtY2Y2Zi00MjEyLWE5ZmQtMGRlMDQwNDM1NGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCU8sqKLPsYvuQlurw4Cua88zCcOwEem+COz 5PG2rGhgLRCk5e2dQTwRPP9oB2MavqTClfEQfhcF/pl+tr2gqal/nvEocRvpS0GU Oh112Db5xM+FMNfcbkv12xV5EYExiQ1DWC5SiEmGzl7y+ZdIr0yh9jYQlta8vDta m3QEIX9I6xWK9HM9YrDDy0moBrdVrwHbH3BKDuK9RNvmHkRPeR1FoN4Mus15vz89 Sns5odMaESBGWo2TDk9T7f+F1jayvcr091800JJiQhoXzL5n6Q5cTRPhKcwpaKT/ BdbDQXYJPJOAOrAhH38gwcghxOJbXhGu+mEITJslw3ukJtnMNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyPWT6thNklAYHMbTyotyqulAzEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZjg5 NTI4Ny1mZWU2LTQ2ODItOGFjNC03MzJmNjQ5NDdmZTQvMjFkMGZhMTUtZTg2My0z OTg2LWFlYTEtM2E3MzA2Mzk3OTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmY4OTUyODctZmVlNi00NjgyLThh YzQtNzMyZjY0OTQ3ZmU0L2JmODk1Mjg3LWZlZTYtNDY4Mi04YWM0LTczMmY2NDk0 N2ZlNC5jcmwwHwYDVR0jBBgwFoAUdfQONwd2lIOhCT08mnfB3pf3ZsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZjg5NTI4Ny1mZWU2LTQ2ODItOGFjNC03MzJm NjQ5NDdmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnj6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIr3fJJddhevs/TbAXPTJ0qBteovXo2fSLAWWiE2cRrniAch3H8X5nJQ E5y/yivjM/7jAkIADbRWmPEcJKgJcwGV1vpoUC4gwHk+QF2SBjQzlPSnPajX3Ft0 dp1mbaD++rLA7kTtU9PBXCmHKJx4ClKNqHw08RtYDSiTqKz0t0ptyhU/walkJr4Y nCs94KJwAo8zuf1SiYFWetiRi7+5R1cLXvv7bjdNT6xscZF+b/WND9By5wsvd0Uz I5Tia8NiPGSl76tK7DBT9ky79ygJh7UCFK2ejMIrSKKPXJHn+UfjytC1jX39LEPr u9wq/1yjgfDPewClCMNUsyLlmo8jDLs= -----END CERTIFICATE-----Generated at Wed Sep 23 20:56:30 2026 by rpki-client