$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/bdf5ebbd-7530-3578-b5ab-e9e6e864959e.roa File: bdf5ebbd-7530-3578-b5ab-e9e6e864959e.roa (raw, json) Hash identifier: dViXkrW+XdQwMIbJvpLk24X/iYCL8QfpK14VqaD/W38= Subject key identifier: 98:42:29:76:3E:E6:BE:11:A7:E8:74:D7:06:98:66:BD:AC:06:99:F3 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584F8F3DCB2554FD1A01A423A800 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/bdf5ebbd-7530-3578-b5ab-e9e6e864959e.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 7265 IP address blocks: 216.47.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:cb:25:54:fd:1a:01:a4:23:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=bc888fa8-6767-4ba3-86c7-0459a1467c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d9:66:74:e8:dd:49:dc:24:ae:5f:e3:5f:db: d0:01:24:10:ed:da:26:e7:f5:a2:f6:c2:9b:a5:66: cf:d8:dc:22:85:9d:49:51:aa:17:65:d5:e9:0f:da: 38:0b:36:07:f0:c6:24:4e:5d:f2:8c:99:af:6d:99: 42:6a:47:cb:e2:0b:cc:39:bc:ad:54:5f:43:dd:dd: a5:09:45:10:f2:84:63:2e:ef:86:5f:f2:14:f5:e4: 3c:de:29:30:63:1e:b8:ca:aa:8e:2e:ee:12:05:00: 50:fa:9c:9c:66:05:2e:de:7c:55:0c:ed:8e:b3:a1: 55:7a:f2:a0:46:ae:1c:27:97:d4:8e:a5:c9:78:26: 08:57:83:8e:94:b6:92:95:a1:90:0c:26:fb:96:2a: 5b:5a:12:12:40:40:84:16:8a:9b:a9:dc:e0:2e:78: df:50:eb:f3:36:3a:bf:79:9c:80:1e:44:16:02:12: 2b:78:d1:eb:8c:cc:8c:d1:46:79:67:ea:f7:7c:5c: 6c:64:13:a6:81:05:c6:c1:9e:4f:81:d1:ef:66:d6: 41:50:c0:65:2e:4f:19:e6:dc:31:b8:c6:92:92:b6: ce:e8:09:af:eb:a7:36:d9:1e:25:08:20:88:84:bb: c8:90:25:d7:6f:0a:ef:27:5b:47:01:1c:ba:30:73: ff:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:42:29:76:3E:E6:BE:11:A7:E8:74:D7:06:98:66:BD:AC:06:99:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/bdf5ebbd-7530-3578-b5ab-e9e6e864959e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 216.47.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c1:90:6d:51:96:1c:77:84:ef:1d:f1:6c:67:20:d4:44:29: a6:aa:f8:2e:ab:ed:d6:29:55:1e:bb:4e:4e:6c:9c:ea:64:45: d3:d1:d7:17:29:51:50:9d:55:91:a5:08:9e:77:3e:f3:1d:02: d8:50:60:e2:b2:be:c6:73:6a:83:08:7b:17:10:5a:fc:7b:f0: 0a:0b:f1:ad:bb:c8:45:91:36:fc:52:ee:f4:24:90:d3:f9:e0: be:b2:7d:1f:0f:01:73:94:8a:8b:4d:af:7c:01:2f:1b:f1:90: a5:1c:03:26:00:51:00:4d:7b:9c:d6:92:64:f6:bd:5b:e0:2f: 67:44:b2:3a:c4:b9:e5:da:f2:37:c9:88:03:78:bd:6d:96:13: e6:98:62:96:c2:53:86:52:02:ac:a7:c0:9c:5f:55:55:66:0e: 31:50:2c:75:b2:b7:5a:bd:50:1f:f6:9c:37:6c:82:ac:a4:f7: 8a:f1:53:8c:b3:1f:cb:76:10:3a:69:68:4a:6c:92:7c:48:1d: 77:9c:70:1d:3a:52:3a:ab:1b:13:db:08:9a:6b:26:10:ca:99: 2c:cf:e0:04:9c:07:a3:31:52:69:5a:8e:1f:77:1d:1e:ca:ee: a2:0c:ab:13:50:c4:27:6c:89:de:85:ad:79:bc:95:0a:64:04: 9a:a1:f7:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPcslVP0aAaQjqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk YmM4ODhmYTgtNjc2Ny00YmEzLTg2YzctMDQ1OWExNDY3YzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldlmdOjdSdwkrl/jX9vQASQQ7dom5/Wi9sKb pWbP2NwihZ1JUaoXZdXpD9o4CzYH8MYkTl3yjJmvbZlCakfL4gvMObytVF9D3d2l CUUQ8oRjLu+GX/IU9eQ83ikwYx64yqqOLu4SBQBQ+pycZgUu3nxVDO2Os6FVevKg Rq4cJ5fUjqXJeCYIV4OOlLaSlaGQDCb7lipbWhISQECEFoqbqdzgLnjfUOvzNjq/ eZyAHkQWAhIreNHrjMyM0UZ5Z+r3fFxsZBOmgQXGwZ5PgdHvZtZBUMBlLk8Z5twx uMaSkrbO6Amv66c22R4lCCCIhLvIkCXXbwrvJ1tHARy6MHP/6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhCKXY+5r4Rp+h01waYZr2sBpnzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvYmRmNWViYmQtNzUzMC0z NTc4LWI1YWItZTllNmU4NjQ5NTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2C/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3BkG1Rlhx3hO8d8WxnINREKaaq+C6r7dYpVR67Tk5snOpkRdPR1xcp UVCdVZGlCJ53PvMdAthQYOKyvsZzaoMIexcQWvx78AoL8a27yEWRNvxS7vQkkNP5 4L6yfR8PAXOUiotNr3wBLxvxkKUcAyYAUQBNe5zWkmT2vVvgL2dEsjrEueXa8jfJ iAN4vW2WE+aYYpbCU4ZSAqynwJxfVVVmDjFQLHWyt1q9UB/2nDdsgqyk94rxU4yz H8t2EDppaEpsknxIHXeccB06UjqrGxPbCJprJhDKmSzP4AScB6MxUmlajh93HR7K 7qIMqxNQxCdsid6FrXm8lQpkBJqh9wU= -----END CERTIFICATE-----Generated at Sun Nov 15 20:30:55 2026 by rpki-client