$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf860e69-66f7-37ab-b936-2a8cededc9a5.roa File: bf860e69-66f7-37ab-b936-2a8cededc9a5.roa (raw, json) Hash identifier: CF+VotV/4A93qsWNJoLNGxyDuLkZOWmrO6Bcu76OFbY= Subject key identifier: 12:D8:C8:B9:61:63:37:A5:EB:37:D3:AA:CB:E6:91:10:FE:1C:63:CB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1199BF44B7DCDAF7DABD1000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf860e69-66f7-37ab-b936-2a8cededc9a5.roa Signing time: Thu 05 Mar 2026 15:20:06 +0000 ROA not before: Thu 05 Mar 2026 15:20:06 +0000 ROA not after: Wed 03 Jun 2026 14:20:06 +0000 asID: 396590 IP address blocks: 192.153.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:99:bf:44:b7:dc:da:f7:da:bd:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 5 15:20:06 2026 GMT Not After : Jun 3 14:20:06 2026 GMT Subject: CN=2e065fdb-61f0-49c1-a27d-b578f69699e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b1:8c:e7:66:b9:85:f7:4b:16:66:b4:c9:c8: 8e:11:ca:6f:da:05:02:eb:07:76:c5:ae:fe:b6:9e: b1:b6:45:08:7a:a8:d4:78:71:35:16:f0:e3:d6:b5: 36:58:2d:6d:69:c3:ae:6b:17:84:5a:09:a1:21:b9: 22:d2:c3:3f:52:33:5e:c1:bd:b1:05:2b:46:a8:a2: 78:e9:9c:fb:6c:af:67:10:eb:47:c1:9b:41:11:1e: 69:67:ad:45:0b:ff:6d:74:4a:2d:02:03:b8:06:a1: f6:7e:2c:f5:3b:8b:60:42:cd:9c:c0:1d:28:0f:43: df:d7:f4:15:9a:9c:f8:bf:53:21:fa:53:69:57:b6: 2d:2d:75:02:27:1d:6c:91:00:61:39:38:55:3c:b9: 48:a0:bd:87:a5:98:a7:ad:bf:eb:4e:ec:84:8b:5d: 7d:87:4d:d5:78:d3:1d:2f:94:a5:54:24:c7:20:63: 9b:e2:ac:19:ef:44:4e:ff:bb:89:a2:6a:65:04:71: f8:4a:a4:eb:f5:c0:5c:60:da:c4:27:01:9e:28:e3: be:e0:b0:09:cc:66:2a:34:bd:65:cb:fd:37:00:ff: 7b:98:77:43:7b:2b:59:43:c1:1b:3b:40:41:ab:26: 75:2f:44:c4:d5:9c:75:41:c3:a9:e2:32:a7:2a:f0: bf:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D8:C8:B9:61:63:37:A5:EB:37:D3:AA:CB:E6:91:10:FE:1C:63:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf860e69-66f7-37ab-b936-2a8cededc9a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.153.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:3b:fb:86:10:4a:64:e0:b8:b2:eb:ff:c2:0d:4e:d5:dc:c3: e7:ca:f4:59:38:0b:94:b9:12:1a:a3:34:f4:6d:b9:78:aa:56: b7:ac:f6:20:ac:65:f7:cc:b2:ec:90:27:67:85:8b:fc:0b:35: 6c:ac:fc:d3:5b:be:fc:20:86:49:47:0a:3a:5f:a7:82:e5:c1: c5:cd:2f:46:fa:0d:ba:65:55:5f:ed:39:ba:49:8d:df:cd:eb: ac:ba:af:ab:c1:e4:73:52:e7:a4:e1:ba:81:51:e2:42:eb:b6: 5f:2d:62:67:be:b1:0c:b5:85:ef:2e:c9:a8:03:ee:e3:e9:1e: ab:0b:cb:e0:2a:d9:7a:3a:46:56:74:53:ed:c6:64:50:c1:57: b5:1c:f6:d4:6d:e9:38:a7:dd:8e:ed:1b:dd:3a:25:73:6d:dc: 75:a1:60:1f:42:d8:9d:49:2f:3b:e0:bb:45:51:d3:7b:99:d8: 40:a5:70:82:75:08:f8:2b:99:90:3d:16:b5:b1:b1:ee:9b:d5: 13:7d:f7:12:f4:90:df:8c:87:72:ec:41:59:82:17:8e:d8:dd: bb:99:b6:39:71:c8:e0:70:7f:92:e5:c1:db:0e:a9:7c:52:f9: 78:3a:18:99:e2:9e:51:02:f3:68:90:4c:82:e4:1d:39:6a:7a: b6:1c:45:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Rmb9Et9za99q9EAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNTE1MjAwNloXDTI2MDYwMzE0MjAwNlowLzEtMCsGA1UEAxMk MmUwNjVmZGItNjFmMC00OWMxLWEyN2QtYjU3OGY2OTY5OWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrGM52a5hfdLFma0yciOEcpv2gUC6wd2xa7+ tp6xtkUIeqjUeHE1FvDj1rU2WC1tacOuaxeEWgmhIbki0sM/UjNewb2xBStGqKJ4 6Zz7bK9nEOtHwZtBER5pZ61FC/9tdEotAgO4BqH2fiz1O4tgQs2cwB0oD0Pf1/QV mpz4v1Mh+lNpV7YtLXUCJx1skQBhOThVPLlIoL2HpZinrb/rTuyEi119h03VeNMd L5SlVCTHIGOb4qwZ70RO/7uJomplBHH4SqTr9cBcYNrEJwGeKOO+4LAJzGYqNL1l y/03AP97mHdDeytZQ8EbO0BBqyZ1L0TE1Zx1QcOp4jKnKvC/DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLYyLlhYzel6zfTqsvmkRD+HGPLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmY4NjBlNjktNjZmNy0z N2FiLWI5MzYtMmE4Y2VkZWRjOWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJn3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHw7+4YQSmTguLLr/8INTtXcw+fK9Fk4C5S5EhqjNPRtuXiqVres9iCs ZffMsuyQJ2eFi/wLNWys/NNbvvwghklHCjpfp4LlwcXNL0b6DbplVV/tObpJjd/N 66y6r6vB5HNS56ThuoFR4kLrtl8tYme+sQy1he8uyagD7uPpHqsLy+Aq2Xo6RlZ0 U+3GZFDBV7Uc9tRt6Tin3Y7tG906JXNt3HWhYB9C2J1JLzvgu0VR03uZ2EClcIJ1 CPgrmZA9FrWxse6b1RN99xL0kN+Mh3LsQVmCF47Y3buZtjlxyOBwf5LlwdsOqXxS +Xg6GJninlEC82iQTILkHTlqerYcRU8= -----END CERTIFICATE-----Generated at Thu Mar 26 09:53:27 2026 by rpki-client