$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bfcebbb0-1eea-3e86-ac7f-63d69f4f1e44.roa File: bfcebbb0-1eea-3e86-ac7f-63d69f4f1e44.roa (raw, json) Hash identifier: D11MykUnRF+oBx5LQHL4ObJz5SA5IOP6T/E3Hy1SZsM= Subject key identifier: B0:D5:99:6B:26:79:7C:9B:93:52:12:97:3B:EB:DA:F5:FD:55:C5:13 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EA799F15537602CA41047B080 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bfcebbb0-1eea-3e86-ac7f-63d69f4f1e44.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 50118 IP address blocks: 64.81.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:99:f1:55:37:60:2c:a4:10:47:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3c39e228-ae0d-4792-860e-a6383ce7ac85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a6:12:e0:56:ce:27:4e:05:e7:63:19:1a:ea: 4b:6d:b3:c5:05:6e:f1:7a:ce:8a:5a:69:8f:b4:ba: 82:b0:c7:72:59:b0:12:43:b2:a8:10:00:d3:41:64: f8:f6:64:c7:7c:1a:05:61:ff:ae:46:d6:98:f8:84: 22:74:4b:37:52:02:d6:de:91:0b:dc:a3:60:b7:2d: 29:f3:e1:bc:ca:e7:e0:c1:53:04:f9:22:cb:2d:ad: 97:31:4b:04:c0:40:72:a3:6a:15:41:7c:5d:af:a2: 4e:7a:17:ad:3e:2c:4d:8f:82:32:15:35:d6:16:37: 98:49:bd:bc:b1:ff:86:74:0f:04:ae:17:79:05:48: 30:a7:b8:64:28:cd:d9:83:3e:e1:fc:b4:e3:96:85: 7d:e3:63:c0:88:90:aa:be:91:e2:5c:41:76:14:bb: b5:87:a0:8c:9d:91:6a:4d:0a:d5:be:35:13:a6:8d: 58:60:39:3c:76:02:b5:bd:1c:66:7f:70:ad:5e:8a: 68:80:09:83:9d:1a:13:20:95:1d:8d:66:28:19:29: c0:e0:8f:92:cd:5f:c5:6c:17:99:44:97:fb:5f:8c: 5e:a6:b3:4a:fd:03:03:1c:9c:d8:7e:77:76:9d:8e: d3:54:42:99:52:e7:7c:75:a9:7f:c6:60:38:a7:78: 3a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D5:99:6B:26:79:7C:9B:93:52:12:97:3B:EB:DA:F5:FD:55:C5:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bfcebbb0-1eea-3e86-ac7f-63d69f4f1e44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.81.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:72:4b:35:f7:a5:e5:8a:ab:09:14:7e:16:06:8b:50:00:2d: 66:59:a6:a0:42:70:87:79:c8:68:13:e6:67:00:ff:10:42:1c: 7e:74:21:05:aa:f4:04:2c:69:73:db:d9:1f:a4:22:5e:af:5b: 33:1e:a8:a9:36:73:b8:55:bf:fe:4f:df:56:25:4c:81:ff:46: db:a8:d1:77:3d:df:9e:cd:35:62:3f:43:cd:70:ca:37:29:32: fb:87:a9:35:79:42:02:96:2a:21:44:e2:79:04:53:ed:0b:89: 20:fe:36:f0:a6:91:50:a7:09:3e:4b:fb:53:16:0e:97:da:0c: 92:93:cc:64:91:9a:0b:83:d3:5c:74:ff:c5:3d:46:0a:c6:5e: 31:83:cc:90:07:4f:90:aa:fa:f5:04:4c:d9:bd:97:07:21:ca: a5:ad:87:50:57:73:8a:08:fb:d9:26:52:9b:e0:3c:51:f5:67: d5:a4:26:b8:96:5c:38:be:d3:bb:7c:b5:9b:08:bf:a1:4f:83: b6:f5:e8:16:16:d2:ad:4d:e7:23:40:ac:b9:59:93:82:5b:2c: 3b:83:99:8b:d2:aa:f3:e3:21:3a:de:99:11:6d:c4:32:59:90: d8:91:fc:2e:dc:0c:37:24:e7:a0:f6:f5:e8:c5:d3:46:f9:bf: 40:f0:41:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmfFVN2AspBBHsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2MzOWUyMjgtYWUwZC00NzkyLTg2MGUtYTYzODNjZTdhYzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKYS4FbOJ04F52MZGupLbbPFBW7xes6KWmmP tLqCsMdyWbASQ7KoEADTQWT49mTHfBoFYf+uRtaY+IQidEs3UgLW3pEL3KNgty0p 8+G8yufgwVME+SLLLa2XMUsEwEByo2oVQXxdr6JOehetPixNj4IyFTXWFjeYSb28 sf+GdA8Erhd5BUgwp7hkKM3Zgz7h/LTjloV942PAiJCqvpHiXEF2FLu1h6CMnZFq TQrVvjUTpo1YYDk8dgK1vRxmf3CtXopogAmDnRoTIJUdjWYoGSnA4I+SzV/FbBeZ RJf7X4xeprNK/QMDHJzYfnd2nY7TVEKZUud8dal/xmA4p3g6XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDVmWsmeXybk1ISlzvr2vX9VcUTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmZjZWJiYjAtMWVlYS0z ZTg2LWFjN2YtNjNkNjlmNGYxZTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQFFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItySzX3peWKqwkUfhYGi1AALWZZpqBCcId5yGgT5mcA/xBCHH50IQWq 9AQsaXPb2R+kIl6vWzMeqKk2c7hVv/5P31YlTIH/Rtuo0Xc9357NNWI/Q81wyjcp MvuHqTV5QgKWKiFE4nkEU+0LiSD+NvCmkVCnCT5L+1MWDpfaDJKTzGSRmguD01x0 /8U9RgrGXjGDzJAHT5Cq+vUETNm9lwchyqWth1BXc4oI+9kmUpvgPFH1Z9WkJriW XDi+07t8tZsIv6FPg7b16BYW0q1N5yNArLlZk4JbLDuDmYvSqvPjITremRFtxDJZ kNiR/C7cDDck56D29ejF00b5v0DwQWA= -----END CERTIFICATE-----Generated at Wed Jul 29 08:19:44 2026 by rpki-client