$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf860e69-66f7-37ab-b936-2a8cededc9a5.roa File: bf860e69-66f7-37ab-b936-2a8cededc9a5.roa (raw, json) Hash identifier: PMfvaGuv7vtx+cxPS9v729DnBzCLX+2FhJi9PaQiHD4= Subject key identifier: 7A:69:A7:CD:09:46:69:DE:3C:D6:C6:70:E4:93:16:CE:C1:9C:8E:C6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DF210B0D3729809A3CAF36380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf860e69-66f7-37ab-b936-2a8cededc9a5.roa Signing time: Mon 25 May 2026 01:00:24 +0000 ROA not before: Mon 25 May 2026 01:00:24 +0000 ROA not after: Sun 23 Aug 2026 01:00:24 +0000 asID: 396590 IP address blocks: 192.153.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f2:10:b0:d3:72:98:09:a3:ca:f3:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 25 01:00:24 2026 GMT Not After : Aug 23 01:00:24 2026 GMT Subject: CN=d4f50ad4-be20-4587-a3b7-54901e508c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3f:d5:4a:96:00:75:fe:ab:64:a1:9a:56:f0: 14:78:42:89:bd:e0:1a:9d:17:e1:fe:ee:d3:53:e0: fb:a9:3e:70:d0:5b:b6:f8:12:5a:e9:53:89:38:85: ae:f8:f6:81:c9:b6:e3:be:d9:da:08:0a:01:73:ae: b6:6e:ed:b7:e0:19:78:4f:05:97:a5:98:f4:41:93: f1:33:cf:9a:b3:c2:d0:33:16:b2:9a:8d:1d:c2:ad: e9:05:9e:0e:ef:9d:9c:7f:48:14:69:92:11:a8:89: 42:ec:7e:66:44:d3:b8:53:b0:b8:ac:b6:28:b8:30: f3:c9:e5:6f:17:d1:9d:29:43:ee:17:01:3c:5d:83: 96:7f:36:39:00:9c:59:e5:85:a1:29:a8:33:60:1e: 4d:c1:a4:23:25:56:97:c3:b2:be:db:78:a2:7b:fd: 49:f1:4f:af:13:3c:cb:9c:84:f5:fe:b0:f7:10:f9: 65:9b:c5:7e:9f:d7:15:07:2a:1f:42:f5:ef:0a:48: cb:6b:30:26:7f:67:2d:e6:bd:1d:23:56:6b:0f:08: e3:bd:eb:08:76:b8:60:df:12:85:1f:df:2e:d3:4b: 93:8c:50:24:3c:85:f7:34:a2:6e:42:5c:65:b2:64: d6:83:90:4a:bf:59:77:88:3c:40:11:2c:73:2f:89: d8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:69:A7:CD:09:46:69:DE:3C:D6:C6:70:E4:93:16:CE:C1:9C:8E:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf860e69-66f7-37ab-b936-2a8cededc9a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.153.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:e8:89:6f:7c:8b:de:a9:ef:52:b7:b8:93:42:1e:dc:2c:fe: ec:e8:38:3b:e2:b0:86:04:27:95:0c:9d:68:30:cc:a4:7b:33: 1a:a6:6d:a9:a8:a3:14:82:10:f8:83:d4:44:12:fe:0a:84:e2: 33:5a:66:ba:64:ff:4b:74:2b:7f:70:61:fd:16:14:60:37:29: 9a:a0:e3:d9:34:60:00:29:e9:5b:1f:be:05:b1:85:70:2e:4f: 78:f2:e5:aa:e1:ee:55:7f:af:52:e9:00:a1:f3:96:e0:28:e6: 17:c2:ae:f2:27:a4:b3:2a:82:86:3f:7c:24:1c:ec:2f:45:03: 7e:e8:eb:79:42:4a:76:b9:f9:77:9b:fa:a1:82:03:69:e5:35: 75:81:1f:5f:f8:6e:ed:ae:ce:84:3b:12:21:9e:d8:7e:8d:b8: 15:33:fe:6c:3e:88:3a:0d:c9:17:63:88:fe:0f:70:ba:d3:96: 42:86:87:14:8e:46:70:d1:89:ac:ed:48:07:d6:21:97:8a:78: d4:b9:5f:9a:c0:2c:b2:4d:cf:b4:51:88:87:1b:8f:2e:da:bd: 72:9c:9a:3f:2a:0a:3e:f2:48:77:93:ef:65:81:c2:11:e6:cd: a9:00:17:d5:92:20:d7:a1:2d:d0:f6:80:82:89:77:55:a2:34: fe:c3:c7:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3yELDTcpgJo8rzY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDUyNTAxMDAyNFoXDTI2MDgyMzAxMDAyNFowLzEtMCsGA1UEAxMk ZDRmNTBhZDQtYmUyMC00NTg3LWEzYjctNTQ5MDFlNTA4Yzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj/VSpYAdf6rZKGaVvAUeEKJveAanRfh/u7T U+D7qT5w0Fu2+BJa6VOJOIWu+PaBybbjvtnaCAoBc662bu234Bl4TwWXpZj0QZPx M8+as8LQMxaymo0dwq3pBZ4O752cf0gUaZIRqIlC7H5mRNO4U7C4rLYouDDzyeVv F9GdKUPuFwE8XYOWfzY5AJxZ5YWhKagzYB5NwaQjJVaXw7K+23iie/1J8U+vEzzL nIT1/rD3EPllm8V+n9cVByofQvXvCkjLazAmf2ct5r0dI1ZrDwjjvesIdrhg3xKF H98u00uTjFAkPIX3NKJuQlxlsmTWg5BKv1l3iDxAESxzL4nY8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHppp80JRmnePNbGcOSTFs7BnI7GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmY4NjBlNjktNjZmNy0z N2FiLWI5MzYtMmE4Y2VkZWRjOWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJn3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGroiW98i96p71K3uJNCHtws/uzoODvisIYEJ5UMnWgwzKR7Mxqmbamo oxSCEPiD1EQS/gqE4jNaZrpk/0t0K39wYf0WFGA3KZqg49k0YAAp6VsfvgWxhXAu T3jy5arh7lV/r1LpAKHzluAo5hfCrvInpLMqgoY/fCQc7C9FA37o63lCSna5+Xeb +qGCA2nlNXWBH1/4bu2uzoQ7EiGe2H6NuBUz/mw+iDoNyRdjiP4PcLrTlkKGhxSO RnDRiaztSAfWIZeKeNS5X5rALLJNz7RRiIcbjy7avXKcmj8qCj7ySHeT72WBwhHm zakAF9WSINehLdD2gIKJd1WiNP7Dx8o= -----END CERTIFICATE-----Generated at Sat Jun 13 16:21:59 2026 by rpki-client