$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c416d5d7-6d0c-3e75-b5aa-334bcbd5d475.roa File: c416d5d7-6d0c-3e75-b5aa-334bcbd5d475.roa (raw, json) Hash identifier: pm3k8gS8uWdndFHt6YXFS6+qXGoYvdOGjiX4EbdIyts= Subject key identifier: F7:28:C2:12:97:20:C5:5D:5C:15:A3:08:D7:65:AA:F7:96:7C:FA:42 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584F20F7C1410996243CF22851C0 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c416d5d7-6d0c-3e75-b5aa-334bcbd5d475.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 4213 IP address blocks: 184.164.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:c1:41:09:96:24:3c:f2:28:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=bff29727-3b24-410d-9700-adb3d83e3a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:86:33:2b:58:8d:33:db:2d:7b:c0:82:05:46: 99:a4:30:66:d4:7b:a3:a6:34:df:4f:da:85:39:b7: 4c:8d:eb:05:5f:bb:c7:10:9f:1d:87:26:ac:41:6e: 83:a2:5f:7d:69:8d:57:59:55:63:00:8c:ee:16:60: 4e:a5:c5:90:d1:a0:66:7e:3d:e8:23:30:c0:0d:d4: a6:50:8e:08:70:a7:f8:26:ee:a1:0b:fd:3c:dc:37: ae:65:46:e3:78:0f:06:a3:3c:92:0e:ef:8e:5c:71: 38:5a:ae:48:76:fa:0e:a6:1d:a1:a3:b4:d8:e5:1c: 85:97:b9:ae:63:95:a9:b0:ec:90:db:30:22:7c:e2: e1:97:fc:66:22:85:8c:32:a8:cd:ca:0a:0e:08:00: 69:d9:c2:93:5f:29:df:14:49:12:b6:a7:2d:33:ec: fb:97:d1:34:34:dc:d3:6f:a7:83:16:80:d1:c8:70: 82:4d:44:ed:bd:19:bc:b9:2b:e6:3b:f3:87:59:c8: 58:57:0b:66:78:1a:37:11:52:0f:14:f5:c5:4c:3f: 22:65:03:b7:e6:ee:ab:a2:6c:cf:21:ef:27:48:dd: 8e:ed:e5:d1:32:83:be:f9:d9:f7:c1:f2:41:46:2e: ce:38:c6:29:db:fd:73:6d:03:92:2d:f6:e8:ed:7a: 34:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:28:C2:12:97:20:C5:5D:5C:15:A3:08:D7:65:AA:F7:96:7C:FA:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c416d5d7-6d0c-3e75-b5aa-334bcbd5d475.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 184.164.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:89:5a:cf:6b:8f:39:04:8a:3c:b8:8d:86:4c:97:03:b1:32: 5d:a1:84:b3:94:3e:22:73:fd:28:d8:c2:d6:fd:21:7d:f5:ed: 4b:65:45:39:15:b7:01:67:34:c6:5e:45:e9:52:b8:e9:58:f6: f6:59:4d:36:01:b3:9e:7b:16:af:1d:ae:0d:df:b6:d6:a5:2a: fb:d4:c3:7e:b1:35:03:e3:55:fd:56:e2:9f:78:99:a4:da:e5: 3e:c9:02:f1:ed:dd:c5:fc:fa:9f:ff:9e:cb:af:2b:86:42:47: a1:75:bd:47:e7:34:a6:41:6e:5b:48:5f:ff:a3:1d:ac:c4:60: ba:fe:0c:c7:13:d9:90:ca:6f:2e:f2:0c:c0:47:31:83:9e:a8: 7e:cf:48:18:23:d9:93:6b:c7:f2:43:1d:15:56:16:e9:a2:30: 22:cc:f8:6e:aa:78:fe:53:c3:8c:36:2e:8a:e6:a8:2c:9e:66: f4:be:69:3a:e8:51:79:84:82:8f:7a:f6:de:29:62:28:dd:95: 36:f8:52:a1:f0:1b:b5:55:3b:ea:87:e8:45:2d:e4:98:f2:68: 29:1a:ea:66:4a:c1:9a:46:6d:13:43:a6:cb:5a:df:17:de:5b: 71:6c:49:86:96:ab:f5:dc:23:7e:82:48:73:b9:d6:18:3b:39: 34:9d:fa:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98FBCZYkPPIoUcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk YmZmMjk3MjctM2IyNC00MTBkLTk3MDAtYWRiM2Q4M2UzYTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYYzK1iNM9ste8CCBUaZpDBm1HujpjTfT9qF ObdMjesFX7vHEJ8dhyasQW6Dol99aY1XWVVjAIzuFmBOpcWQ0aBmfj3oIzDADdSm UI4IcKf4Ju6hC/083DeuZUbjeA8GozySDu+OXHE4Wq5IdvoOph2ho7TY5RyFl7mu Y5WpsOyQ2zAifOLhl/xmIoWMMqjNygoOCABp2cKTXynfFEkStqctM+z7l9E0NNzT b6eDFoDRyHCCTUTtvRm8uSvmO/OHWchYVwtmeBo3EVIPFPXFTD8iZQO35u6romzP Ie8nSN2O7eXRMoO++dn3wfJBRi7OOMYp2/1zbQOSLfbo7Xo0IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcowhKXIMVdXBWjCNdlqveWfPpCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvYzQxNmQ1ZDctNmQwYy0z ZTc1LWI1YWEtMzM0YmNiZDVkNDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFuKTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuJWs9rjzkEijy4jYZMlwOxMl2hhLOUPiJz/SjYwtb9IX317UtlRTkV twFnNMZeRelSuOlY9vZZTTYBs557Fq8drg3fttalKvvUw36xNQPjVf1W4p94maTa 5T7JAvHt3cX8+p//nsuvK4ZCR6F1vUfnNKZBbltIX/+jHazEYLr+DMcT2ZDKby7y DMBHMYOeqH7PSBgj2ZNrx/JDHRVWFumiMCLM+G6qeP5Tw4w2LormqCyeZvS+aTro UXmEgo969t4pYijdlTb4UqHwG7VVO+qH6EUt5JjyaCka6mZKwZpGbRNDpsta3xfe W3FsSYaWq/XcI36CSHO51hg7OTSd+po= -----END CERTIFICATE-----Generated at Sun Sep 20 18:24:00 2026 by rpki-client