$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/bf834f19-14c8-34f2-bf95-b3797bd96d8a.roa File: bf834f19-14c8-34f2-bf95-b3797bd96d8a.roa (raw, json) Hash identifier: gsvF/lyP6EUIyJOSogfFSj5ZuapmaClzfbOaTtqzOq4= Subject key identifier: 48:95:62:3A:5A:CA:1C:64:95:CE:50:47:7A:B1:4C:9D:79:31:93:A1 Certificate issuer: /CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Certificate serial: 010D0C9F4328584EF01CF13B2F20DC85B50FFDE0 Authority key identifier: D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/bf834f19-14c8-34f2-bf95-b3797bd96d8a.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 22987 IP address blocks: 68.209.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:f1:3b:2f:20:dc:85:b5:0f:fd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=72fda9ba-dce9-4948-994a-adca740cd51c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a8:0f:f9:8a:9a:dd:57:b9:62:d7:a0:6d:d4: e2:51:cb:92:c2:ae:61:46:cc:0d:49:2b:22:18:c9: 9b:4f:30:cb:b3:02:04:31:74:e7:06:bf:5f:0c:d6: 8d:8a:3f:78:62:78:23:bb:f3:2d:0f:20:b4:c1:47: 3f:a8:01:62:61:8a:27:1e:9f:2b:55:a8:f4:61:cc: f9:80:a7:22:cd:37:4f:77:61:73:e3:3d:ba:2f:aa: 4f:d6:dd:00:d1:73:89:23:d9:e7:04:79:3a:72:4d: e0:b2:96:2c:d6:eb:43:4c:c9:4e:74:a3:f9:8b:0f: 5f:89:6d:6d:6e:2f:ba:e8:c3:3b:12:e4:7a:ce:82: 10:35:21:a6:a8:d8:a0:c7:14:8e:40:b8:ff:27:f4: c3:a7:be:cb:01:a2:fb:13:5d:d3:7c:16:85:df:94: 6c:ad:ee:93:90:2d:3e:01:70:9e:20:fd:65:05:d1: fa:a3:c4:dd:38:42:60:d5:31:22:3e:95:3b:42:eb: 95:71:c4:16:02:ec:bb:67:71:6c:f5:66:4a:fe:44: 79:9d:91:10:78:c5:f0:cb:22:fb:6c:ff:f1:21:51: 60:c5:d9:54:76:70:71:8c:ae:e7:f8:8f:c9:1b:d1: b6:aa:60:d5:be:fc:95:1a:ae:3d:4f:6a:82:73:55: bd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:95:62:3A:5A:CA:1C:64:95:CE:50:47:7A:B1:4C:9D:79:31:93:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/bf834f19-14c8-34f2-bf95-b3797bd96d8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl X509v3 Authority Key Identifier: keyid:D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer sbgp-ipAddrBlock: critical IPv4: 68.209.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:98:d3:b8:4a:75:e0:ec:43:bf:73:05:61:1c:bd:4e:29:51: ba:98:4f:c1:a8:b0:99:d5:c1:d8:ba:81:1a:b3:72:6c:8d:ec: 89:51:58:81:7b:23:9a:04:ff:a6:ac:6e:0f:2e:4f:45:68:36: 58:14:f2:02:de:c0:8e:71:ea:40:cd:ae:9d:50:51:21:72:2f: 7f:9d:bf:25:ef:3d:e9:ed:04:64:12:0e:8a:ee:fc:86:b3:06: d7:e5:7a:54:66:5e:ea:58:8b:4e:0a:60:da:aa:b5:7a:60:ac: 85:cf:b1:f4:03:db:d4:4c:83:80:41:86:c8:4d:5a:44:d5:6c: 37:1a:ed:e6:1b:4d:45:6b:75:cd:63:61:2f:c5:e6:39:50:5e: 5e:19:54:d4:d4:eb:cd:27:65:76:cb:2b:1e:96:8b:55:50:02: 73:91:45:4d:8c:07:0d:4f:f8:4c:eb:37:8d:32:b9:79:dc:12: c5:5f:d5:ac:08:24:12:a5:48:17:a2:dd:4a:7a:8f:68:f8:61: 06:cb:3a:0a:98:2a:75:69:4e:0b:c4:bc:17:1f:ab:7f:ec:a3: 44:46:b7:5a:87:c1:89:5b:ef:ec:a4:73:93:5c:2c:c8:c7:62: 37:1c:f3:0e:59:8e:a4:64:f8:a0:6e:dc:e9:af:d4:bb:96:bb: 61:e9:ed:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHPE7LyDchbUP/eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmFjZjhhZmEtNmNiMS00YzlkLTg0YzctNWVlODg0NTAw M2QxMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk NzJmZGE5YmEtZGNlOS00OTQ4LTk5NGEtYWRjYTc0MGNkNTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKgP+Yqa3Ve5YtegbdTiUcuSwq5hRswNSSsi GMmbTzDLswIEMXTnBr9fDNaNij94Yngju/MtDyC0wUc/qAFiYYonHp8rVaj0Ycz5 gKcizTdPd2Fz4z26L6pP1t0A0XOJI9nnBHk6ck3gspYs1utDTMlOdKP5iw9fiW1t bi+66MM7EuR6zoIQNSGmqNigxxSOQLj/J/TDp77LAaL7E13TfBaF35Rsre6TkC0+ AXCeIP1lBdH6o8TdOEJg1TEiPpU7QuuVccQWAuy7Z3Fs9WZK/kR5nZEQeMXwyyL7 bP/xIVFgxdlUdnBxjK7n+I/JG9G2qmDVvvyVGq49T2qCc1W9+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiVYjpayhxklc5QR3qxTJ15MZOhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YWNm OGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4ODQ1MDAzZDEvYmY4MzRmMTktMTRjOC0z NGYyLWJmOTUtYjM3OTdiZDk2ZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmFjZjhhZmEtNmNiMS00YzlkLTg0 YzctNWVlODg0NTAwM2QxLzZhY2Y4YWZhLTZjYjEtNGM5ZC04NGM3LTVlZTg4NDUw MDNkMS5jcmwwHwYDVR0jBBgwFoAU2CwXVNgQjCQxXtrqMr1JHFRelVYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YWNmOGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4 ODQ1MDAzZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRNGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOY07hKdeDsQ79zBWEcvU4pUbqYT8GosJnVwdi6gRqzcmyN7IlRWIF7 I5oE/6asbg8uT0VoNlgU8gLewI5x6kDNrp1QUSFyL3+dvyXvPentBGQSDoru/Iaz BtflelRmXupYi04KYNqqtXpgrIXPsfQD29RMg4BBhshNWkTVbDca7eYbTUVrdc1j YS/F5jlQXl4ZVNTU680nZXbLKx6Wi1VQAnORRU2MBw1P+EzrN40yuXncEsVf1awI JBKlSBei3Up6j2j4YQbLOgqYKnVpTgvEvBcfq3/so0RGt1qHwYlb7+ykc5NcLMjH Yjcc8w5ZjqRk+KBu3Omv1LuWu2Hp7eY= -----END CERTIFICATE-----Generated at Sat Sep 26 12:38:01 2026 by rpki-client