$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/b706d41a-c66e-3f9f-98db-035b0a62613b.roa File: b706d41a-c66e-3f9f-98db-035b0a62613b.roa (raw, json) Hash identifier: ZooO4aYhraiFEgZkjebrjjIzk/+PoHTSBVzAmi3UcAU= Subject key identifier: E2:74:66:12:1C:E2:8C:53:E6:D8:4F:3A:A8:CD:B8:79:E0:D7:10:5D Certificate issuer: /CN=bf895287-fee6-4682-8ac4-732f64947fe4 Certificate serial: 010D0C9F4328584F3B7D1EE80480D030EADD8C60 Authority key identifier: 75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/b706d41a-c66e-3f9f-98db-035b0a62613b.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 54847 IP address blocks: 208.98.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:1e:e8:04:80:d0:30:ea:dd:8c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf895287-fee6-4682-8ac4-732f64947fe4 Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=1b36516b-f226-4d0e-bfde-bec450e30f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:07:3f:3e:13:3c:4a:8a:51:d7:9d:2b:2d:f3: 84:e9:9f:48:db:06:b9:73:3d:90:5b:b3:0d:1a:11: d5:99:ca:b1:21:ba:82:1c:74:11:fb:7d:39:7d:ea: 14:bf:d6:39:60:72:70:ef:5e:58:85:1d:ee:9f:4e: 2a:6e:9e:01:91:d2:20:4b:35:3c:39:3f:02:83:aa: cd:6c:bf:8a:6f:c5:ce:d3:ed:8b:99:39:5e:ae:01: e1:5c:82:a5:b5:4c:71:a4:0b:d1:e5:2f:0b:aa:29: 5b:ae:75:30:46:7c:3c:ec:ee:cf:54:ba:90:6a:98: bc:41:f9:e3:6a:ab:30:2e:2a:5d:5e:ea:be:7e:5c: 86:c7:63:66:ce:84:f5:ce:5d:79:e9:76:8e:bf:6c: 50:c1:62:a1:e8:ca:8a:1b:52:7c:c9:26:34:1d:af: e6:74:fe:40:e3:24:72:43:f8:0c:10:af:9c:65:b6: 9b:79:f1:a6:1d:a2:1f:ea:b5:c1:9a:05:c9:26:fa: cd:6c:59:3e:bb:5b:57:10:27:f0:89:56:3e:a3:4a: 47:9a:e1:b9:1c:c1:00:5a:de:45:1e:91:b3:6b:60: 50:99:2e:21:d7:77:0d:90:95:16:47:c9:d6:c3:23: aa:6f:bd:0b:31:2e:ad:c9:d0:b9:6b:d4:c5:5f:7b: ce:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:74:66:12:1C:E2:8C:53:E6:D8:4F:3A:A8:CD:B8:79:E0:D7:10:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/b706d41a-c66e-3f9f-98db-035b0a62613b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl X509v3 Authority Key Identifier: keyid:75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer sbgp-ipAddrBlock: critical IPv4: 208.98.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:74:85:77:81:7b:58:3c:c5:0a:66:7a:a1:60:78:65:9a:07: dd:0e:1f:59:c6:66:ec:09:81:bf:0b:84:e1:a1:94:a6:2f:c3: 30:c6:57:05:8a:5b:42:f1:d4:15:1c:16:80:b3:49:9c:8c:b3: 34:94:6e:3d:e2:bd:97:ef:f6:cf:0d:97:fa:79:29:96:af:38: 95:b0:ff:46:a6:ea:86:6f:07:70:63:72:55:b3:67:29:ed:e0: f4:86:38:2a:d7:94:dc:80:1d:97:67:43:9b:b9:ae:3f:a4:c7: 72:c0:54:77:66:6e:16:c1:2f:c1:0f:0a:49:85:f8:bf:96:9a: e8:1f:3b:da:d0:ff:bd:7c:cd:1e:a4:39:da:52:73:f5:31:fd: 13:13:1a:35:f7:65:af:35:5e:7d:9f:63:79:d0:5a:6d:07:5a: 54:47:b1:bb:af:2e:84:94:1e:80:11:c3:48:af:6a:b9:ae:35: 18:76:7e:a9:25:ad:13:1d:9c:ee:ae:95:ef:12:c0:4a:49:40: a0:f4:8f:7b:39:40:4e:40:1d:d9:87:87:52:cf:4c:f5:37:a1: e2:49:1d:a4:d4:c8:c2:6e:61:98:ba:42:5c:36:16:07:4b:a4: 59:98:9c:9b:4f:5e:9a:02:60:5e:15:15:39:42:8a:b6:03:ed: 56:7f:08:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fR7oBIDQMOrdjGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY4OTUyODctZmVlNi00NjgyLThhYzQtNzMyZjY0OTQ3 ZmU0MB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk MWIzNjUxNmItZjIyNi00ZDBlLWJmZGUtYmVjNDUwZTMwZjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwc/PhM8SopR150rLfOE6Z9I2wa5cz2QW7MN GhHVmcqxIbqCHHQR+305feoUv9Y5YHJw715YhR3un04qbp4BkdIgSzU8OT8Cg6rN bL+Kb8XO0+2LmTlergHhXIKltUxxpAvR5S8LqilbrnUwRnw87O7PVLqQapi8Qfnj aqswLipdXuq+flyGx2NmzoT1zl156XaOv2xQwWKh6MqKG1J8ySY0Ha/mdP5A4yRy Q/gMEK+cZbabefGmHaIf6rXBmgXJJvrNbFk+u1tXECfwiVY+o0pHmuG5HMEAWt5F HpGza2BQmS4h13cNkJUWR8nWwyOqb70LMS6tydC5a9TFX3vOfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJ0ZhIc4oxT5thPOqjNuHng1xBdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZjg5 NTI4Ny1mZWU2LTQ2ODItOGFjNC03MzJmNjQ5NDdmZTQvYjcwNmQ0MWEtYzY2ZS0z ZjlmLTk4ZGItMDM1YjBhNjI2MTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmY4OTUyODctZmVlNi00NjgyLThh YzQtNzMyZjY0OTQ3ZmU0L2JmODk1Mjg3LWZlZTYtNDY4Mi04YWM0LTczMmY2NDk0 N2ZlNC5jcmwwHwYDVR0jBBgwFoAUdfQONwd2lIOhCT08mnfB3pf3ZsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZjg5NTI4Ny1mZWU2LTQ2ODItOGFjNC03MzJm NjQ5NDdmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0GKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZ0hXeBe1g8xQpmeqFgeGWaB90OH1nGZuwJgb8LhOGhlKYvwzDGVwWK W0Lx1BUcFoCzSZyMszSUbj3ivZfv9s8Nl/p5KZavOJWw/0am6oZvB3BjclWzZynt 4PSGOCrXlNyAHZdnQ5u5rj+kx3LAVHdmbhbBL8EPCkmF+L+WmugfO9rQ/718zR6k OdpSc/Ux/RMTGjX3Za81Xn2fY3nQWm0HWlRHsbuvLoSUHoARw0ivarmuNRh2fqkl rRMdnO6ule8SwEpJQKD0j3s5QE5AHdmHh1LPTPU3oeJJHaTUyMJuYZi6Qlw2FgdL pFmYnJtPXpoCYF4VFTlCirYD7VZ/CAo= -----END CERTIFICATE-----Generated at Thu Sep 24 14:06:59 2026 by rpki-client