$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/00ab9988-b83a-3e42-aaff-72c4f05f5b11.roa File: 00ab9988-b83a-3e42-aaff-72c4f05f5b11.roa (raw, json) Hash identifier: KzAHhs+hAXHqWyzl+HBb8aBWX3bMp2JdUqxpFbD8zLE= Subject key identifier: 2E:3F:EF:E5:46:79:F4:69:39:31:16:B8:5D:41:5A:35:B7:6E:57:D4 Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584CB551D5BB6F37D11371D73560 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/00ab9988-b83a-3e42-aaff-72c4f05f5b11.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 46450 IP address blocks: 64.112.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:d5:bb:6f:37:d1:13:71:d7:35:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=4fb876c1-5ada-4a00-bd82-36e863fb8014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:87:8a:6e:43:34:e9:18:f6:fe:00:33:a1:bb: e1:ef:b0:76:a9:48:8c:35:9b:0c:11:4b:c4:8e:b0: b9:df:ed:b3:22:2b:ba:00:82:29:ee:e8:48:71:e9: d9:aa:2b:9a:16:27:ff:00:6c:a0:7c:8f:45:48:4f: f6:30:f2:08:8a:07:df:cd:bb:bb:e4:d7:c1:3f:11: 97:6d:f0:a5:b1:19:19:45:01:a3:24:d4:88:ec:b5: 97:71:55:1d:30:83:c2:c3:e2:91:43:53:f0:86:79: f6:c2:e3:0c:48:10:7d:e3:33:21:a1:1b:f7:f0:9f: 1d:93:2d:69:61:d9:46:92:e8:3c:b3:4c:8a:2d:30: 35:68:55:3a:0d:02:ed:b1:e5:c5:4b:3a:a5:25:b5: 47:f2:b3:be:b5:2a:2e:6f:fd:5c:5a:08:77:f2:73: 22:16:30:ea:6b:da:15:80:78:db:03:af:98:4e:9b: c9:9a:9c:85:1d:7b:95:0a:b4:48:2d:67:bf:a2:a3: 4b:75:1a:68:7f:25:96:36:26:ca:39:11:23:12:bb: 78:8d:f4:60:8c:e8:ee:0e:a4:86:4a:43:19:ad:c7: d6:2e:4d:78:8e:27:23:46:b4:d9:cf:10:f7:75:72: d6:8f:1a:68:88:d8:95:df:56:eb:6d:3d:d0:31:09: e8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:3F:EF:E5:46:79:F4:69:39:31:16:B8:5D:41:5A:35:B7:6E:57:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/00ab9988-b83a-3e42-aaff-72c4f05f5b11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 64.112.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:43:10:8e:88:80:46:ee:3a:7f:41:7d:50:8f:66:74:36:f0: a3:0a:e1:71:a6:d6:e9:eb:cb:5c:fb:1e:34:77:6a:a5:6f:33: 55:11:9d:c9:dc:b5:44:ee:50:05:1b:62:d5:b8:f7:7b:e2:56: 2f:2e:1d:02:2e:03:05:08:2c:c2:b3:60:d0:00:45:e5:28:6e: e6:30:06:52:6e:93:87:01:39:db:06:66:07:1e:19:46:fc:94: d6:69:93:79:cd:9e:1a:9b:ba:f5:9a:60:c8:09:21:73:be:84: e9:d6:f2:d1:04:13:c6:6a:12:6a:97:98:92:b2:4f:f4:28:22: 36:dc:67:a2:9e:8f:46:21:2b:ee:da:67:71:5e:ab:1e:7a:e6: 8e:b8:84:49:e4:e9:2b:79:43:b1:92:ef:94:d8:c6:45:94:91: 50:2c:de:5c:ea:48:ee:c5:4c:f5:82:c5:f6:9d:02:8d:11:c2: 13:e1:51:90:c5:a5:9e:a4:7a:08:b5:05:fe:9d:ec:c5:c1:1f: e0:6d:02:eb:13:98:26:4d:bf:ff:c5:67:5e:9d:bd:72:0e:07: 43:5f:09:47:18:17:50:73:b7:21:f4:5d:e6:ef:b8:fc:60:2d: 68:6d:d1:83:5a:ae:cc:49:52:47:0a:ab:ef:2a:5e:05:a3:38: b5:1f:c9:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UdW7bzfRE3HXNWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk NGZiODc2YzEtNWFkYS00YTAwLWJkODItMzZlODYzZmI4MDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYeKbkM06Rj2/gAzobvh77B2qUiMNZsMEUvE jrC53+2zIiu6AIIp7uhIcenZqiuaFif/AGygfI9FSE/2MPIIigffzbu75NfBPxGX bfClsRkZRQGjJNSI7LWXcVUdMIPCw+KRQ1Pwhnn2wuMMSBB94zMhoRv38J8dky1p YdlGkug8s0yKLTA1aFU6DQLtseXFSzqlJbVH8rO+tSoub/1cWgh38nMiFjDqa9oV gHjbA6+YTpvJmpyFHXuVCrRILWe/oqNLdRpofyWWNibKOREjErt4jfRgjOjuDqSG SkMZrcfWLk14jicjRrTZzxD3dXLWjxpoiNiV31brbT3QMQnoLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4/7+VGefRpOTEWuF1BWjW3blfUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvMDBhYjk5ODgtYjgzYS0z ZTQyLWFhZmYtNzJjNGYwNWY1YjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQHDkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9DEI6IgEbuOn9BfVCPZnQ28KMK4XGm1unry1z7HjR3aqVvM1URncnc tUTuUAUbYtW493viVi8uHQIuAwUILMKzYNAAReUobuYwBlJuk4cBOdsGZgceGUb8 lNZpk3nNnhqbuvWaYMgJIXO+hOnW8tEEE8ZqEmqXmJKyT/QoIjbcZ6Kej0YhK+7a Z3Feqx565o64hEnk6St5Q7GS75TYxkWUkVAs3lzqSO7FTPWCxfadAo0RwhPhUZDF pZ6kegi1Bf6d7MXBH+BtAusTmCZNv//FZ16dvXIOB0NfCUcYF1BztyH0XebvuPxg LWht0YNarsxJUkcKq+8qXgWjOLUfye8= -----END CERTIFICATE-----Generated at Mon Mar 2 02:39:47 2026 by rpki-client