$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf9cb1dc-a60a-3332-9946-02e72501534e.roa File: bf9cb1dc-a60a-3332-9946-02e72501534e.roa (raw, json) Hash identifier: OyKv2jectxr0mRRCBU8hH0ONsbaeJzoPXnkshnTl2SI= Subject key identifier: B3:48:99:8A:3A:A7:3D:3C:9D:56:2B:2D:C6:B2:D9:65:3D:E9:0E:46 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CA061E94B940E6BCA5D1B2B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf9cb1dc-a60a-3332-9946-02e72501534e.roa Signing time: Sat 24 Jan 2026 02:00:31 +0000 ROA not before: Sat 24 Jan 2026 02:00:31 +0000 ROA not after: Fri 24 Apr 2026 01:00:31 +0000 asID: 7725 IP address blocks: 67.191.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a0:61:e9:4b:94:0e:6b:ca:5d:1b:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 24 02:00:31 2026 GMT Not After : Apr 24 01:00:31 2026 GMT Subject: CN=f9781f59-c583-4694-ae6f-8bc402bd67d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:35:87:b3:80:d9:af:93:b6:65:ab:c5:87:61: 70:cb:2a:8a:3e:71:b9:18:e8:6d:b4:77:e3:36:9a: 2e:4c:ba:61:33:0e:a5:1f:c1:01:a6:d3:2f:cc:b6: d2:49:5d:67:a0:40:b8:54:eb:7b:37:cb:95:d8:a0: b5:f0:cb:5e:37:1e:29:80:36:d2:87:23:f8:9a:5d: d2:40:03:f8:85:96:ce:d3:79:0e:1b:a3:57:de:13: b3:70:90:10:c5:80:14:54:59:f1:2d:eb:ac:21:2e: 3e:95:fc:ec:86:16:59:7f:8a:bf:10:a2:f5:e8:f5: f7:a8:0b:d2:4b:68:f3:52:28:b4:0c:6d:15:71:cb: 09:c1:e0:0d:2c:be:35:07:1a:0c:18:5a:b0:fb:c7: df:a6:f8:b5:9d:c8:ab:ea:78:27:f0:1d:c6:a1:29: b8:2b:af:56:09:31:a0:66:b5:ec:2f:de:52:49:42: d6:84:a9:43:9a:40:19:31:b9:53:a1:50:54:2d:98: 8f:d9:5c:14:c9:29:eb:4e:5d:30:6f:c9:5c:65:94: 91:e6:f9:df:af:4e:e1:bd:b2:63:14:a7:79:8d:72: 84:ee:26:c6:e7:47:6b:03:50:8a:36:ab:6e:d5:60: 07:2f:59:2c:40:ba:0f:c1:a5:0c:5e:e5:c3:db:fb: 1f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:48:99:8A:3A:A7:3D:3C:9D:56:2B:2D:C6:B2:D9:65:3D:E9:0E:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf9cb1dc-a60a-3332-9946-02e72501534e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.191.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:e6:0c:2b:3b:32:e6:f4:5d:93:0e:76:e5:6f:5c:bc:b5:2a: da:b4:bd:5e:bb:73:12:ad:13:26:1d:b4:75:59:c9:a6:50:b1: ac:ac:3c:02:0f:93:df:72:98:8a:64:55:32:5a:af:df:57:50: 44:1f:cf:a8:69:8f:11:eb:ba:7f:d8:9a:34:80:77:92:b6:2e: b5:27:f3:ab:f6:f0:c6:ae:9e:42:9b:7e:f5:41:51:2e:7c:f8: ef:fb:04:98:f4:a5:0f:3d:17:22:2e:bf:07:c4:71:e7:38:a1: ff:68:ae:26:a2:18:f5:50:13:33:2a:ea:b4:f2:b2:4f:0f:1c: 03:83:f9:93:58:ba:a6:06:38:f6:8a:7b:05:47:ef:28:9b:25: ef:66:18:78:93:03:29:aa:2b:b7:0f:54:b0:d9:51:50:b8:2f: 1e:01:32:3f:ce:2c:2a:00:64:1b:9d:dd:89:1c:b6:ea:2c:c0: fb:be:e3:fd:70:77:eb:84:9d:07:25:d4:a2:1a:fb:2d:94:1b: 30:28:87:42:15:aa:00:35:9b:71:5b:52:b5:d9:69:d5:62:4d: e6:95:5c:cd:f8:31:dd:ca:6a:9d:cb:6c:7c:2c:ed:10:04:b6: b7:b9:69:43:b0:64:9b:36:3d:9a:c5:04:2c:75:6d:8f:8c:2b: 1a:b4:46:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEygYelLlA5ryl0bKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyNDAyMDAzMVoXDTI2MDQyNDAxMDAzMVowLzEtMCsGA1UEAxMk Zjk3ODFmNTktYzU4My00Njk0LWFlNmYtOGJjNDAyYmQ2N2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjWHs4DZr5O2ZavFh2FwyyqKPnG5GOhttHfj NpouTLphMw6lH8EBptMvzLbSSV1noEC4VOt7N8uV2KC18MteNx4pgDbShyP4ml3S QAP4hZbO03kOG6NX3hOzcJAQxYAUVFnxLeusIS4+lfzshhZZf4q/EKL16PX3qAvS S2jzUii0DG0VccsJweANLL41BxoMGFqw+8ffpvi1ncir6ngn8B3GoSm4K69WCTGg ZrXsL95SSULWhKlDmkAZMblToVBULZiP2VwUySnrTl0wb8lcZZSR5vnfr07hvbJj FKd5jXKE7ibG50drA1CKNqtu1WAHL1ksQLoPwaUMXuXD2/sfUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNImYo6pz08nVYrLcay2WU96Q5GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmY5Y2IxZGMtYTYwYS0z MzMyLTk5NDYtMDJlNzI1MDE1MzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALnmDCs7Mub0XZMOduVvXLy1Ktq0vV67cxKtEyYdtHVZyaZQsaysPAIP k99ymIpkVTJar99XUEQfz6hpjxHrun/YmjSAd5K2LrUn86v28MaunkKbfvVBUS58 +O/7BJj0pQ89FyIuvwfEcec4of9oriaiGPVQEzMq6rTysk8PHAOD+ZNYuqYGOPaK ewVH7yibJe9mGHiTAymqK7cPVLDZUVC4Lx4BMj/OLCoAZBud3YkctuoswPu+4/1w d+uEnQcl1KIa+y2UGzAoh0IVqgA1m3FbUrXZadViTeaVXM34Md3Kap3LbHws7RAE tre5aUOwZJs2PZrFBCx1bY+MKxq0RlU= -----END CERTIFICATE-----Generated at Sun Mar 1 19:09:09 2026 by rpki-client