$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/a2c64d3d-ff58-37e5-877f-f1b13ea31106.roa File: a2c64d3d-ff58-37e5-877f-f1b13ea31106.roa (raw, json) Hash identifier: VT/abkML+iX4focsfcttp/26aNgZaLRZJXBBqx4foS0= Subject key identifier: 93:86:94:30:12:CC:0C:84:D4:F9:61:3F:96:4E:4B:46:5C:82:2F:7D Certificate issuer: /CN=bc061f95-a504-48f1-88f1-fae53628511e Certificate serial: 010D0C9F4328584EA798728F043C56DE9AD3EF00 Authority key identifier: 14:50:15:A2:CB:AD:07:77:38:CC:81:8B:92:AD:A3:2E:51:4A:F3:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/a2c64d3d-ff58-37e5-877f-f1b13ea31106.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 398885 IP address blocks: 204.107.12.0/24 maxlen: 24 204.107.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/bc061f95-a504-48f1-88f1-fae53628511e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/bc061f95-a504-48f1-88f1-fae53628511e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:72:8f:04:3c:56:de:9a:d3:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc061f95-a504-48f1-88f1-fae53628511e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a25e2df0-3964-4f89-94ff-8819432a1ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:53:74:41:39:f6:3a:cd:da:65:2d:e4:76:e6: 75:96:ce:45:d2:be:0e:47:a4:13:8e:13:49:f5:ad: b7:15:1c:4c:b7:3c:77:9d:b6:6b:a2:a3:7e:72:74: e2:e9:1e:52:90:04:cd:39:c2:a9:00:05:d9:6a:9e: 3c:95:4e:1c:5d:db:9e:32:95:68:ad:91:e5:b5:88: 0c:02:21:94:58:61:af:47:0e:55:6d:99:72:01:fd: 94:13:a4:d8:65:47:7d:de:51:f3:94:34:0a:17:33: c5:5d:72:56:73:48:72:24:1a:4e:24:4c:66:26:11: b6:0d:4b:f1:4f:ad:5e:91:ae:e4:03:f7:d6:06:bd: d8:3d:b6:ab:8c:29:24:a5:ac:60:b0:e7:05:1a:37: 78:da:80:ed:d5:ff:1d:9f:f4:1a:23:25:62:5d:ac: aa:03:8f:cb:5d:ae:d3:9f:24:b9:c9:2c:d1:55:87: c7:ac:32:8e:76:7c:e9:e6:d4:53:ac:a0:83:b0:22: aa:50:8d:42:cc:59:85:b6:a7:6e:8b:82:6a:4f:31: 26:0d:eb:7e:aa:d4:ac:94:cf:ed:cc:49:73:f5:6b: 73:06:74:61:0b:79:e5:bc:f7:9e:7e:36:1b:ca:7b: e1:c9:e2:64:35:b2:9c:4a:2e:60:dc:bf:46:98:50: 1e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:86:94:30:12:CC:0C:84:D4:F9:61:3F:96:4E:4B:46:5C:82:2F:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/a2c64d3d-ff58-37e5-877f-f1b13ea31106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e/bc061f95-a504-48f1-88f1-fae53628511e.crl X509v3 Authority Key Identifier: keyid:14:50:15:A2:CB:AD:07:77:38:CC:81:8B:92:AD:A3:2E:51:4A:F3:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc061f95-a504-48f1-88f1-fae53628511e.cer sbgp-ipAddrBlock: critical IPv4: 204.107.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:4b:df:e7:9b:17:8c:f9:6f:c9:5e:dd:58:01:92:08:d8:e4: 3c:89:9d:ef:75:94:9b:2d:21:5e:2a:f0:8e:d2:68:2d:a3:b9: 26:eb:c5:31:f6:76:e0:08:4b:1a:d9:5a:64:8b:83:e9:6f:15: af:bf:d5:5a:9f:9f:64:1f:42:8d:39:db:2e:32:25:1f:fe:15: 64:e2:e4:f0:c3:ce:ea:e0:8c:38:6a:15:89:00:0b:9b:80:38: 79:7e:fa:27:cc:2d:07:0c:c9:6f:ee:5c:05:8c:f5:12:67:61: 9e:27:5d:18:1d:30:f7:48:c6:17:32:f9:74:f8:1f:b4:8d:f2: 33:d8:86:ce:83:09:eb:0d:39:1a:4f:46:5e:9d:e4:3b:89:f5: b7:ae:e4:27:12:61:1b:fa:db:62:c2:e0:cf:fa:05:42:65:ff: ab:ce:f0:40:b2:32:75:a1:60:1a:f0:f2:91:18:aa:70:12:91: 3c:1e:35:94:da:4d:8e:e4:ea:89:8f:f4:0c:0a:b1:0f:d8:4e: af:76:bb:18:43:d1:b1:0d:d4:36:34:03:c5:37:dd:b9:35:66: 50:a1:f2:b9:2a:e4:4e:ec:c6:cf:38:08:c1:1d:ec:8f:b8:3c: 84:72:87:54:96:95:32:95:b6:e2:e4:aa:a1:74:79:4a:f6:e4: 68:55:9d:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmHKPBDxW3prT7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMwNjFmOTUtYTUwNC00OGYxLTg4ZjEtZmFlNTM2Mjg1 MTFlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTI1ZTJkZjAtMzk2NC00Zjg5LTk0ZmYtODgxOTQzMmExYWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFN0QTn2Os3aZS3kduZ1ls5F0r4OR6QTjhNJ 9a23FRxMtzx3nbZroqN+cnTi6R5SkATNOcKpAAXZap48lU4cXdueMpVorZHltYgM AiGUWGGvRw5VbZlyAf2UE6TYZUd93lHzlDQKFzPFXXJWc0hyJBpOJExmJhG2DUvx T61eka7kA/fWBr3YPbarjCkkpaxgsOcFGjd42oDt1f8dn/QaIyViXayqA4/LXa7T nyS5ySzRVYfHrDKOdnzp5tRTrKCDsCKqUI1CzFmFtqdui4JqTzEmDet+qtSslM/t zElz9WtzBnRhC3nlvPeefjYbynvhyeJkNbKcSi5g3L9GmFAeDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOGlDASzAyE1PlhP5ZOS0Zcgi99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYzA2 MWY5NS1hNTA0LTQ4ZjEtODhmMS1mYWU1MzYyODUxMWUvYTJjNjRkM2QtZmY1OC0z N2U1LTg3N2YtZjFiMTNlYTMxMTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmMwNjFmOTUtYTUwNC00OGYxLTg4 ZjEtZmFlNTM2Mjg1MTFlL2JjMDYxZjk1LWE1MDQtNDhmMS04OGYxLWZhZTUzNjI4 NTExZS5jcmwwHwYDVR0jBBgwFoAUFFAVosutB3c4zIGLkq2jLlFK84EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYzA2MWY5NS1hNTA0LTQ4ZjEtODhmMS1mYWU1 MzYyODUxMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzGsMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChL3+ebF4z5b8le3VgBkgjY5DyJne91lJstIV4q8I7SaC2juSbrxTH2 duAISxrZWmSLg+lvFa+/1Vqfn2QfQo052y4yJR/+FWTi5PDDzurgjDhqFYkAC5uA OHl++ifMLQcMyW/uXAWM9RJnYZ4nXRgdMPdIxhcy+XT4H7SN8jPYhs6DCesNORpP Rl6d5DuJ9beu5CcSYRv622LC4M/6BUJl/6vO8ECyMnWhYBrw8pEYqnASkTweNZTa TY7k6omP9AwKsQ/YTq92uxhD0bEN1DY0A8U33bk1ZlCh8rkq5E7sxs84CMEd7I+4 PIRyh1SWlTKVtuLkqqF0eUr25GhVnbI= -----END CERTIFICATE-----Generated at Wed Jul 29 11:31:05 2026 by rpki-client