$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/0bf4b25f-595b-3aee-bcd1-1342e5e7eb51.roa File: 0bf4b25f-595b-3aee-bcd1-1342e5e7eb51.roa (raw, json) Hash identifier: vuvnhHow+VTmwAEpSAC6dNa1j+SVvKUqfeHZRSek9MI= Subject key identifier: 16:A9:A0:2F:F6:E8:41:CB:98:E6:30:F3:87:02:1B:3D:61:86:6F:E8 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584FC3013765C611441C53DE7300 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/0bf4b25f-595b-3aee-bcd1-1342e5e7eb51.roa Signing time: Sat 07 Nov 2026 14:00:12 +0000 ROA not before: Sat 07 Nov 2026 14:00:12 +0000 ROA not after: Fri 05 Feb 2027 14:00:12 +0000 asID: 4213 IP address blocks: 107.6.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c3:01:37:65:c6:11:44:1c:53:de:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Nov 7 14:00:12 2026 GMT Not After : Feb 5 14:00:12 2027 GMT Subject: CN=b0056bc6-5d03-4f6f-a5fc-f9b6326c8fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5f:c6:e5:35:c7:35:4b:13:75:d0:15:1b:7c: 46:30:d7:aa:89:6c:e4:11:c9:9e:12:1c:2d:1a:4d: 9d:58:ce:c2:f0:61:1f:93:13:86:71:7e:53:40:97: 92:72:2f:06:f9:9e:63:e6:80:0f:c2:eb:7f:de:d0: da:dd:c3:27:1f:f4:1c:0e:a0:88:7b:77:28:65:f6: 85:92:37:1e:d6:ea:e2:f6:dc:30:df:b2:67:4e:9f: 1d:39:59:45:a5:39:4e:ab:55:bd:4b:6a:51:e4:94: 53:7e:86:f6:e4:34:2e:df:01:2c:d4:88:bc:a0:46: 52:b3:d6:5c:99:43:75:64:fc:0c:b9:41:ac:0d:8c: 22:6d:d5:f4:fa:77:38:54:a9:c8:d7:f9:24:60:08: 74:60:38:c7:03:3b:6d:3e:78:aa:ba:3f:a0:ea:9d: 7c:6b:21:e2:86:75:74:5e:b3:eb:bb:0e:20:63:3b: ef:ef:83:df:68:10:ed:61:ab:4c:bb:51:93:b4:21: 90:3d:d3:8a:61:43:6f:8c:9d:3a:02:27:60:8c:9c: 38:47:2c:23:ef:1a:5b:47:3c:ea:9c:68:41:00:c3: 3f:19:27:e4:63:27:ae:7e:99:47:2c:11:57:ad:22: a9:a8:b0:28:6f:aa:81:e1:ea:20:f6:8b:5c:d8:55: 90:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A9:A0:2F:F6:E8:41:CB:98:E6:30:F3:87:02:1B:3D:61:86:6F:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/0bf4b25f-595b-3aee-bcd1-1342e5e7eb51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 107.6.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:5d:58:58:05:fd:42:cf:eb:a5:de:08:e1:78:55:39:bb:3c: dd:b1:0d:39:4d:66:5a:82:5e:fd:4d:b6:c2:4e:da:56:78:ff: 1e:15:58:3d:78:65:e2:a2:20:ac:1c:ea:a3:65:d4:f2:91:ab: 60:62:54:2f:84:e5:a1:6b:59:a5:63:3e:ec:72:15:e7:a9:83: 1b:7d:a0:dd:87:da:94:1f:4c:0a:5b:05:f5:bd:31:32:7c:da: df:dd:9d:05:7c:bf:ee:cd:8b:59:21:09:b2:06:c6:06:0b:c4: 6e:19:27:42:c7:e8:42:44:0b:23:7b:b9:fe:43:36:06:c2:f7: 34:4a:d2:bb:c4:97:d3:ff:8e:58:39:6a:03:1e:7e:67:55:b1: 4f:9c:1b:05:af:61:fe:23:50:dc:a5:27:d8:d1:66:10:60:f3: 11:9f:7c:8d:59:12:67:f4:2b:b2:89:2f:c0:a9:6a:6e:35:10: 75:c9:ba:d5:25:7a:66:92:52:ff:48:14:f4:b9:6c:1c:f2:3b: b2:8a:4d:1f:bb:92:c3:36:70:4a:fa:a2:8c:1a:1a:37:64:aa: 5b:29:93:07:4f:5a:a6:4c:d6:ee:ce:b1:f9:76:de:a5:58:aa: ab:e1:05:70:ee:d6:50:34:a8:53:16:f8:3e:38:41:df:d2:f9: 46:2f:d4:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/DATdlxhFEHFPecwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MTEwNzE0MDAxMloXDTI3MDIwNTE0MDAxMlowLzEtMCsGA1UEAxMk YjAwNTZiYzYtNWQwMy00ZjZmLWE1ZmMtZjliNjMyNmM4ZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF/G5TXHNUsTddAVG3xGMNeqiWzkEcmeEhwt Gk2dWM7C8GEfkxOGcX5TQJeSci8G+Z5j5oAPwut/3tDa3cMnH/QcDqCIe3coZfaF kjce1uri9tww37JnTp8dOVlFpTlOq1W9S2pR5JRTfob25DQu3wEs1Ii8oEZSs9Zc mUN1ZPwMuUGsDYwibdX0+nc4VKnI1/kkYAh0YDjHAzttPniquj+g6p18ayHihnV0 XrPruw4gYzvv74PfaBDtYatMu1GTtCGQPdOKYUNvjJ06AidgjJw4Rywj7xpbRzzq nGhBAMM/GSfkYyeufplHLBFXrSKpqLAob6qB4eog9otc2FWQ4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBapoC/26EHLmOYw84cCGz1hhm/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvMGJmNGIyNWYtNTk1Yi0z YWVlLWJjZDEtMTM0MmU1ZTdlYjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBawbyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZdWFgF/ULP66XeCOF4VTm7PN2xDTlNZlqCXv1NtsJO2lZ4/x4VWD14 ZeKiIKwc6qNl1PKRq2BiVC+E5aFrWaVjPuxyFeepgxt9oN2H2pQfTApbBfW9MTJ8 2t/dnQV8v+7Ni1khCbIGxgYLxG4ZJ0LH6EJECyN7uf5DNgbC9zRK0rvEl9P/jlg5 agMefmdVsU+cGwWvYf4jUNylJ9jRZhBg8xGffI1ZEmf0K7KJL8Cpam41EHXJutUl emaSUv9IFPS5bBzyO7KKTR+7ksM2cEr6oowaGjdkqlspkwdPWqZM1u7Osfl23qVY qqvhBXDu1lA0qFMW+D44Qd/S+UYv1KI= -----END CERTIFICATE-----Generated at Sun Nov 15 14:55:34 2026 by rpki-client