$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/3a7217b7-2254-31de-bdcd-a13c9dbcd9b2.roa File: 3a7217b7-2254-31de-bdcd-a13c9dbcd9b2.roa (raw, json) Hash identifier: q+LyRoGyuz4lBkwLAueMSYH2ERcFTGnmrJ7HV3ET3C8= Subject key identifier: 2C:A7:2C:5D:3C:E3:7A:19:67:7A:3E:94:24:E7:03:12:06:D8:AE:CD Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584F20F7C0D1ED5E7ED1A7FF0D00 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/3a7217b7-2254-31de-bdcd-a13c9dbcd9b2.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 4213 IP address blocks: 107.6.234.0/23 maxlen: 24 107.6.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:c0:d1:ed:5e:7e:d1:a7:ff:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=6135af27-3c7f-4fcc-83a8-96c82ced0773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:21:cd:a3:a5:79:bf:7f:a4:f7:5a:5c:21:b0: 87:c6:d4:99:78:14:a6:60:d7:35:4c:45:61:f5:1d: c4:6f:6b:19:74:71:b3:55:bf:d5:ae:1d:0f:5d:ba: 32:5c:ba:4a:21:7d:0b:32:e7:e4:36:6a:50:0b:ab: 21:a6:e7:e1:c3:52:80:e4:1f:bb:6a:36:e1:6e:d1: 00:b1:82:5b:fb:29:b9:83:66:34:39:87:2b:d0:d0: b2:13:39:f8:d4:6d:5c:15:2e:5a:63:44:55:57:d1: dd:27:a8:ee:38:26:11:63:dd:72:d8:ac:43:d8:0a: 33:be:7a:79:68:34:da:2f:e9:50:6d:ae:a4:9e:9f: 6b:93:7f:b6:6a:14:75:47:27:4e:49:c2:c5:cb:f2: 78:91:38:92:51:94:69:d7:64:43:8b:b3:fd:da:97: 63:ff:d5:f8:1b:38:34:cc:03:72:9a:17:a7:2e:96: c8:d3:b1:0b:94:b8:bf:73:cf:f4:ab:ab:58:30:c6: 46:e1:cf:03:95:62:21:bd:46:da:02:e3:cb:30:72: 20:a9:df:12:16:a5:b0:2c:4f:66:87:00:0e:c7:fe: 2e:38:02:e5:55:77:64:b2:91:7f:9a:bb:ae:e8:57: 86:1e:5d:d5:45:c2:8e:6f:85:b4:37:19:a8:05:8e: a6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A7:2C:5D:3C:E3:7A:19:67:7A:3E:94:24:E7:03:12:06:D8:AE:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/3a7217b7-2254-31de-bdcd-a13c9dbcd9b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 107.6.234.0-107.6.239.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:4b:4f:28:84:eb:81:04:ba:f9:de:33:0e:6b:75:c3:22:79: 6b:92:c5:f3:8a:75:71:34:65:01:0b:ec:51:d6:14:a7:42:a3: 4f:1f:5d:3d:a5:61:56:bb:a1:a9:bc:75:5f:8d:f9:4e:61:9d: a0:f4:e2:1f:a9:32:79:45:fa:50:ba:b7:ec:2c:b5:00:2f:0f: b5:c5:7f:58:61:d7:8e:95:bf:67:7a:ee:fa:80:92:5f:1e:e0: 82:5c:b5:0d:ca:26:58:da:de:aa:77:6a:b8:c4:69:a7:b1:fc: 5b:34:dd:bc:fb:6b:65:6f:d6:88:e0:0e:48:aa:0f:f4:81:3d: d5:4a:80:d3:08:08:7a:71:59:c7:97:95:d9:d4:d5:22:fe:22: 7b:d4:5e:e0:24:49:f4:73:03:3b:78:c1:c3:fd:b9:5a:af:51: 83:1e:9d:c7:75:e4:5c:97:58:69:3b:5b:c3:dd:fc:93:da:18: 65:52:a0:21:e5:4f:6f:ff:36:1f:91:8f:80:0a:a9:9a:25:cf: c5:8c:2d:c7:40:ac:05:9d:0d:13:f4:1a:5c:dc:1b:de:f0:6d: b8:ab:b7:28:6d:f0:a7:15:67:b8:01:d2:bd:87:30:b4:f1:6b: b1:89:1e:ed:88:13:9d:16:ed:17:24:47:db:39:72:76:99:df: fd:63:ed:78 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE8g98DR7V5+0af/DQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NjEzNWFmMjctM2M3Zi00ZmNjLTgzYTgtOTZjODJjZWQwNzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yHNo6V5v3+k91pcIbCHxtSZeBSmYNc1TEVh 9R3Eb2sZdHGzVb/Vrh0PXboyXLpKIX0LMufkNmpQC6shpufhw1KA5B+7ajbhbtEA sYJb+ym5g2Y0OYcr0NCyEzn41G1cFS5aY0RVV9HdJ6juOCYRY91y2KxD2Aozvnp5 aDTaL+lQba6knp9rk3+2ahR1RydOScLFy/J4kTiSUZRp12RDi7P92pdj/9X4Gzg0 zANymhenLpbI07ELlLi/c8/0q6tYMMZG4c8DlWIhvUbaAuPLMHIgqd8SFqWwLE9m hwAOx/4uOALlVXdkspF/mruu6FeGHl3VRcKOb4W0NxmoBY6mZwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFCynLF0843oZZ3o+lCTnAxIG2K7NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvM2E3MjE3YjctMjI1NC0z MWRlLWJkY2QtYTEzYzlkYmNkOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFrBuoD BARrBuAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAmEtPKITrgQS6+d4zDmt1wyJ5a5LF84p1cTRlAQvsUdYU p0KjTx9dPaVhVruhqbx1X435TmGdoPTiH6kyeUX6ULq37Cy1AC8PtcV/WGHXjpW/ Z3ru+oCSXx7ggly1DcomWNreqndquMRpp7H8WzTdvPtrZW/WiOAOSKoP9IE91UqA 0wgIenFZx5eV2dTVIv4ie9Re4CRJ9HMDO3jBw/25Wq9Rgx6dx3XkXJdYaTtbw938 k9oYZVKgIeVPb/82H5GPgAqpmiXPxYwtx0CsBZ0NE/QaXNwb3vBtuKu3KG3wpxVn uAHSvYcwtPFrsYke7YgTnRbtFyRH2zlydpnf/WPteA== -----END CERTIFICATE-----Generated at Tue Sep 22 01:09:59 2026 by rpki-client