$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/af36cc3e-2eb5-3281-96f2-815b0e19eb88.roa File: af36cc3e-2eb5-3281-96f2-815b0e19eb88.roa (raw, json) Hash identifier: zGdJf3hqWoFV2TSkAhMGEiTxQzGHp+Xp3CN14lVu394= Subject key identifier: 33:5C:A3:B1:42:3A:3F:88:63:36:45:31:9E:BF:C4:14:87:4B:8D:B6 Certificate issuer: /CN=bf895287-fee6-4682-8ac4-732f64947fe4 Certificate serial: 010D0C9F4328584F27F256953C730DC97D059F70 Authority key identifier: 75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/af36cc3e-2eb5-3281-96f2-815b0e19eb88.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 30530 IP address blocks: 208.98.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:56:95:3c:73:0d:c9:7d:05:9f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf895287-fee6-4682-8ac4-732f64947fe4 Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=a2420591-75d4-4461-b112-856c5f027bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:41:59:e6:f3:a6:c0:16:e6:52:54:09:24:c4: a4:73:59:f1:79:07:b2:8a:fc:3a:1f:75:23:4f:aa: b7:46:a3:46:97:34:eb:18:ab:87:a4:b5:86:d1:5a: 89:1c:cb:a9:a5:cd:a9:0f:df:fd:6c:25:ba:17:87: dd:73:df:6a:7d:2a:ab:62:85:f9:a6:bd:46:26:6f: a3:08:1f:8d:18:f9:fd:cf:cd:27:6f:e5:c6:00:01: e5:1b:ca:28:e3:de:20:d1:b0:9e:70:c4:ab:b2:f8: a1:87:9e:4d:28:ac:6b:32:42:4a:38:70:35:ed:f6: 32:d1:bd:6f:13:99:90:61:a4:a6:f0:d4:dd:b9:bf: c3:d4:78:b2:17:71:16:df:4d:30:7d:f3:87:ca:a3: 3b:df:ff:e5:c1:87:33:5f:93:d3:f5:7d:ec:99:59: d1:c6:98:3e:84:82:96:c7:ed:d4:42:45:09:44:0a: 91:95:a0:ec:de:13:5c:12:74:f0:34:17:aa:82:a4: b2:58:b5:bc:71:a1:42:dd:93:51:0d:c2:6f:df:9b: 84:8b:47:ec:0f:15:26:0d:82:49:f8:8f:cb:e9:4e: 9f:68:74:77:5f:83:58:98:44:aa:e7:02:ea:ff:c5: bb:fc:18:10:91:ce:fa:7e:89:b7:54:71:4e:a9:73: 2f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5C:A3:B1:42:3A:3F:88:63:36:45:31:9E:BF:C4:14:87:4B:8D:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/af36cc3e-2eb5-3281-96f2-815b0e19eb88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl X509v3 Authority Key Identifier: keyid:75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer sbgp-ipAddrBlock: critical IPv4: 208.98.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:d7:ed:2b:fb:ff:f6:45:0d:c8:37:71:cb:77:d1:fb:2d:82: c9:87:97:0b:00:a1:b9:7b:a7:64:4f:af:e0:66:e7:ef:57:94: a5:a5:17:15:59:78:47:4f:65:a9:d1:3b:4f:b8:bc:ca:94:38: b1:13:8a:9f:12:c4:75:53:a3:58:d4:58:7f:09:61:66:d2:92: 9c:80:96:44:23:ff:2f:cc:15:e9:3f:f6:c4:57:31:3f:d3:2d: 4b:9d:7a:a4:f8:44:e2:fa:4f:3c:ba:e5:ca:d2:b9:ce:99:3e: a3:ab:60:25:48:30:fe:60:c7:55:49:04:ae:35:bc:71:15:a0: 42:0d:81:5a:2c:25:00:7a:e5:b2:36:8f:e8:0b:2d:5c:e2:af: ce:0f:70:72:a4:81:4f:9c:44:81:2b:ef:03:fe:4a:99:25:e4: 3f:71:55:05:81:11:0e:9f:8e:b4:e8:c9:6b:7f:3e:2d:88:a7: 70:01:47:57:10:ea:3e:08:ef:2e:1f:fd:60:f4:43:4f:2a:1f: e0:7c:10:f8:17:65:bb:1e:3d:42:33:ea:a7:39:df:a2:52:cb: d3:3a:c2:46:0e:5d:71:02:53:e1:ae:a6:26:93:8d:70:04:df: e2:61:66:96:dd:4d:01:53:94:d3:a1:78:be:9c:13:13:ba:cb: 24:2e:f2:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8n8laVPHMNyX0Fn3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY4OTUyODctZmVlNi00NjgyLThhYzQtNzMyZjY0OTQ3 ZmU0MB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk YTI0MjA1OTEtNzVkNC00NDYxLWIxMTItODU2YzVmMDI3YmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkFZ5vOmwBbmUlQJJMSkc1nxeQeyivw6H3Uj T6q3RqNGlzTrGKuHpLWG0VqJHMuppc2pD9/9bCW6F4fdc99qfSqrYoX5pr1GJm+j CB+NGPn9z80nb+XGAAHlG8oo494g0bCecMSrsvihh55NKKxrMkJKOHA17fYy0b1v E5mQYaSm8NTdub/D1HiyF3EW300wffOHyqM73//lwYczX5PT9X3smVnRxpg+hIKW x+3UQkUJRAqRlaDs3hNcEnTwNBeqgqSyWLW8caFC3ZNRDcJv35uEi0fsDxUmDYJJ +I/L6U6faHR3X4NYmESq5wLq/8W7/BgQkc76fom3VHFOqXMv6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNco7FCOj+IYzZFMZ6/xBSHS422MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZjg5 NTI4Ny1mZWU2LTQ2ODItOGFjNC03MzJmNjQ5NDdmZTQvYWYzNmNjM2UtMmViNS0z MjgxLTk2ZjItODE1YjBlMTllYjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmY4OTUyODctZmVlNi00NjgyLThh YzQtNzMyZjY0OTQ3ZmU0L2JmODk1Mjg3LWZlZTYtNDY4Mi04YWM0LTczMmY2NDk0 N2ZlNC5jcmwwHwYDVR0jBBgwFoAUdfQONwd2lIOhCT08mnfB3pf3ZsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZjg5NTI4Ny1mZWU2LTQ2ODItOGFjNC03MzJm NjQ5NDdmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0GKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7X7Sv7//ZFDcg3cct30fstgsmHlwsAobl7p2RPr+Bm5+9XlKWlFxVZ eEdPZanRO0+4vMqUOLETip8SxHVTo1jUWH8JYWbSkpyAlkQj/y/MFek/9sRXMT/T LUudeqT4ROL6Tzy65crSuc6ZPqOrYCVIMP5gx1VJBK41vHEVoEINgVosJQB65bI2 j+gLLVzir84PcHKkgU+cRIEr7wP+Spkl5D9xVQWBEQ6fjrToyWt/Pi2Ip3ABR1cQ 6j4I7y4f/WD0Q08qH+B8EPgXZbsePUIz6qc536JSy9M6wkYOXXECU+GupiaTjXAE 3+JhZpbdTQFTlNOheL6cExO6yyQu8rY= -----END CERTIFICATE-----Generated at Thu Sep 24 08:10:32 2026 by rpki-client