$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/cb4f7901-cca5-3753-ab11-c977fba3450e.roa File: cb4f7901-cca5-3753-ab11-c977fba3450e.roa (raw, json) Hash identifier: biZAGIyVKWwY0O5xAzoqd2NM7YiRHtD799vR2tkLfE0= Subject key identifier: 53:90:E1:B1:3C:78:E7:35:D2:11:98:10:E6:99:31:35:43:99:CB:3A Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584F20F7BA08751C5F3B3AA4E320 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/cb4f7901-cca5-3753-ab11-c977fba3450e.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 35908 IP address blocks: 107.6.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:ba:08:75:1c:5f:3b:3a:a4:e3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=f26042cb-5bf4-401b-b3b2-f38d083ca12b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a3:e5:cb:47:c2:7a:a2:a7:51:f5:03:fe:8f: 87:5d:99:e3:81:1f:e4:fe:a0:3b:1b:a3:f2:c5:b0: cd:a5:b7:a9:a3:c0:2d:54:ba:0f:88:66:f1:38:6e: a0:97:20:51:a7:46:91:b5:60:e3:bd:81:4f:60:91: 27:c2:9b:cf:ec:d3:9c:93:bb:00:48:a2:18:4b:44: 4f:47:42:21:02:c1:38:12:27:5f:04:b8:2e:76:3b: 5a:8a:72:4a:3c:05:da:f3:c1:57:36:1e:fe:1d:b7: ba:7d:d2:24:14:56:4b:b3:a2:5f:dd:18:0a:b1:d4: 85:0a:41:b6:e3:11:b9:5e:aa:22:aa:f7:9c:4e:2d: e1:e2:3b:9f:ed:b0:a0:ec:89:93:c8:a5:b0:8d:5d: be:67:5e:d3:de:20:8f:49:f1:98:58:7d:f4:f5:1d: ad:2c:27:90:41:f7:ad:a7:d6:b9:67:2f:e3:63:13: 9f:54:23:04:30:ce:7b:33:0d:87:52:3c:b9:a6:1f: eb:4f:e5:8c:4c:55:96:07:2b:d3:5f:c8:37:0a:22: fd:3b:09:6d:0d:b3:c6:b2:ce:1e:d7:51:89:94:b4: 10:26:92:8a:8e:8e:ae:f7:00:f3:4b:39:5e:dc:0e: 24:a5:8f:30:0a:11:c0:cf:3e:b3:45:25:f8:d7:50: ba:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:90:E1:B1:3C:78:E7:35:D2:11:98:10:E6:99:31:35:43:99:CB:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/cb4f7901-cca5-3753-ab11-c977fba3450e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 107.6.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:37:20:19:de:08:01:5e:f2:43:e0:33:87:ab:80:5e:72:bb: b4:d8:1b:f1:ab:c7:d5:8b:76:35:6c:43:21:aa:c5:0e:08:84: 2b:80:3f:c2:c2:c0:6c:04:99:81:32:e2:1a:95:08:c9:16:c8: 72:fa:5d:2f:a6:cc:c6:ac:62:da:cf:4b:71:9f:d8:52:ee:9d: 65:e9:44:d0:bf:e8:09:9d:7a:bd:14:4a:22:ed:0d:36:38:e6: 37:99:06:c7:08:40:19:15:cb:44:f6:35:df:1e:1b:cb:53:f2: 21:4a:d7:63:71:72:1d:d2:ae:0b:dd:c5:73:a7:d5:34:5f:81: 46:b7:db:af:b4:f9:fc:0d:ce:d0:9f:49:a0:ba:f0:fa:3c:98: 94:6e:ee:84:5a:cd:9a:cd:2c:2b:35:f9:fe:5e:6a:b2:35:73: e7:85:5e:87:41:9e:2c:4d:b2:5d:fd:56:fe:e1:cf:27:41:d5: f3:b6:91:da:a1:26:6a:8c:80:68:58:1b:44:13:c9:ef:dd:d6: be:05:57:32:df:92:bf:90:59:ae:44:66:a8:ac:9b:6a:ff:ac: 71:86:91:2a:34:a6:10:f3:15:52:57:e4:00:a4:05:ef:3d:ee: de:6b:5d:04:a9:e4:b1:7c:62:75:be:ee:df:c2:ab:a5:7c:4d: dc:b0:51:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97oIdRxfOzqk4yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZjI2MDQyY2ItNWJmNC00MDFiLWIzYjItZjM4ZDA4M2NhMTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaPly0fCeqKnUfUD/o+HXZnjgR/k/qA7G6Py xbDNpbepo8AtVLoPiGbxOG6glyBRp0aRtWDjvYFPYJEnwpvP7NOck7sASKIYS0RP R0IhAsE4EidfBLgudjtainJKPAXa88FXNh7+Hbe6fdIkFFZLs6Jf3RgKsdSFCkG2 4xG5XqoiqvecTi3h4juf7bCg7ImTyKWwjV2+Z17T3iCPSfGYWH309R2tLCeQQfet p9a5Zy/jYxOfVCMEMM57Mw2HUjy5ph/rT+WMTFWWByvTX8g3CiL9OwltDbPGss4e 11GJlLQQJpKKjo6u9wDzSzle3A4kpY8wChHAzz6zRSX411C6zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOQ4bE8eOc10hGYEOaZMTVDmcs6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvY2I0Zjc5MDEtY2NhNS0z NzUzLWFiMTEtYzk3N2ZiYTM0NTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGawbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIY3IBneCAFe8kPgM4ergF5yu7TYG/Grx9WLdjVsQyGqxQ4IhCuAP8LC wGwEmYEy4hqVCMkWyHL6XS+mzMasYtrPS3Gf2FLunWXpRNC/6Amder0USiLtDTY4 5jeZBscIQBkVy0T2Nd8eG8tT8iFK12Nxch3SrgvdxXOn1TRfgUa326+0+fwNztCf SaC68Po8mJRu7oRazZrNLCs1+f5earI1c+eFXodBnixNsl39Vv7hzydB1fO2kdqh JmqMgGhYG0QTye/d1r4FVzLfkr+QWa5EZqism2r/rHGGkSo0phDzFVJX5ACkBe89 7t5rXQSp5LF8YnW+7t/Cq6V8TdywUUM= -----END CERTIFICATE-----Generated at Mon Sep 21 18:03:20 2026 by rpki-client