$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/3a7217b7-2254-31de-bdcd-a13c9dbcd9b2.roa File: 3a7217b7-2254-31de-bdcd-a13c9dbcd9b2.roa (raw, json) Hash identifier: PKlMiOOzPv/ipCi/QYleHSiVvc3Vn96GOKeFZW4lsQI= Subject key identifier: 21:B6:88:C1:E2:45:4D:BD:CB:64:5D:09:4B:4C:09:6C:89:6B:51:7A Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584FC301375A6296E85785D93D00 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/3a7217b7-2254-31de-bdcd-a13c9dbcd9b2.roa Signing time: Sat 07 Nov 2026 14:00:12 +0000 ROA not before: Sat 07 Nov 2026 14:00:12 +0000 ROA not after: Fri 05 Feb 2027 14:00:12 +0000 asID: 4213 IP address blocks: 107.6.234.0/23 maxlen: 24 107.6.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c3:01:37:5a:62:96:e8:57:85:d9:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Nov 7 14:00:12 2026 GMT Not After : Feb 5 14:00:12 2027 GMT Subject: CN=d25929dc-61e4-46c6-aee5-b3b8d854f824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2f:53:f9:4c:7a:38:23:0c:d6:f8:c1:e1:13: 7e:47:ae:d6:38:d6:c0:3f:1c:90:4c:fd:8f:63:39: bb:1d:67:ee:92:30:05:e7:56:64:f6:c3:4e:9d:f0: d2:71:df:99:0f:44:66:2b:8f:86:fa:f5:2a:45:51: c7:12:a3:73:cb:51:54:dd:43:54:c2:a4:8d:5d:14: 6e:be:8a:70:17:0e:be:a0:45:5b:e0:cb:05:bf:21: 29:67:1f:03:49:ba:ea:3b:97:05:ab:05:16:d2:10: f0:44:b6:6f:58:00:5c:4b:30:fa:07:5f:b9:ff:8b: f5:78:af:10:7c:cb:10:04:8b:b4:0d:49:52:9a:e1: 7d:3c:20:a1:b1:84:53:73:e7:1f:e0:1a:ff:36:ff: b3:68:5c:8b:6f:c9:3c:ae:60:47:bd:ba:a0:9b:bb: a0:d3:d2:e3:a8:91:1d:6b:ad:86:e9:0a:d3:dc:83: 0a:91:9f:15:29:5d:bf:e7:05:48:97:8e:f9:2a:5b: 44:22:bb:64:00:b3:50:a7:06:0d:7c:49:bf:e8:41: 37:50:8a:03:af:11:e7:a5:d4:66:d5:ab:85:c1:af: 7e:7a:ec:58:19:8b:9a:e3:23:36:50:28:ea:3b:24: f3:23:e3:76:79:5b:ee:7e:e1:53:0d:89:03:85:a1: a6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B6:88:C1:E2:45:4D:BD:CB:64:5D:09:4B:4C:09:6C:89:6B:51:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/3a7217b7-2254-31de-bdcd-a13c9dbcd9b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 107.6.234.0-107.6.239.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:72:70:ee:d6:ea:da:e9:d6:59:a7:6b:93:ba:11:ef:51:c0: 53:d8:ac:6c:b4:da:87:f0:40:e8:07:b4:50:56:2e:52:76:15: e8:e0:57:80:e8:0c:94:23:1e:a4:6a:4a:27:ae:6a:40:d9:8a: a0:60:2f:14:1d:7b:a3:e7:3d:96:6c:5d:0e:c2:0d:75:08:8e: d6:97:4d:61:1a:8f:be:88:c3:2d:9e:d4:58:6c:9d:ad:37:3d: 5e:96:4f:33:af:16:13:55:c3:26:0c:87:81:28:8f:3d:9f:da: 44:69:fd:28:65:16:4a:20:40:56:ed:99:9a:ff:7f:43:67:1e: 2f:da:80:70:78:37:e1:da:0d:45:07:57:59:86:fd:5b:cb:43: a5:72:69:6a:5b:d7:16:ae:ad:21:8a:3d:6d:f7:a5:c7:7f:11: c7:a0:d9:90:03:2b:3a:47:b6:88:cc:55:25:41:87:b3:ca:1f: 22:c8:7d:96:92:72:52:15:b1:d7:ff:50:6c:ae:96:58:b0:da: 6b:e6:8f:31:ba:fd:a5:d8:bb:25:eb:43:0a:ad:40:33:d8:58: 03:0a:da:8c:85:f0:dd:9b:0d:cf:57:fe:09:b0:29:c8:f1:87: d7:3a:73:03:b9:13:eb:2a:48:b0:d4:d8:3c:05:85:56:86:4b: 2f:d5:a2:d0 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE/DATdaYpboV4XZPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MTEwNzE0MDAxMloXDTI3MDIwNTE0MDAxMlowLzEtMCsGA1UEAxMk ZDI1OTI5ZGMtNjFlNC00NmM2LWFlZTUtYjNiOGQ4NTRmODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui9T+Ux6OCMM1vjB4RN+R67WONbAPxyQTP2P Yzm7HWfukjAF51Zk9sNOnfDScd+ZD0RmK4+G+vUqRVHHEqNzy1FU3UNUwqSNXRRu vopwFw6+oEVb4MsFvyEpZx8DSbrqO5cFqwUW0hDwRLZvWABcSzD6B1+5/4v1eK8Q fMsQBIu0DUlSmuF9PCChsYRTc+cf4Br/Nv+zaFyLb8k8rmBHvbqgm7ug09LjqJEd a62G6QrT3IMKkZ8VKV2/5wVIl475KltEIrtkALNQpwYNfEm/6EE3UIoDrxHnpdRm 1auFwa9+euxYGYua4yM2UCjqOyTzI+N2eVvufuFTDYkDhaGmKwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFCG2iMHiRU29y2RdCUtMCWyJa1F6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvM2E3MjE3YjctMjI1NC0z MWRlLWJkY2QtYTEzYzlkYmNkOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFrBuoD BARrBuAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAqHJw7tbq2unWWadrk7oR71HAU9isbLTah/BA6Ae0UFYu UnYV6OBXgOgMlCMepGpKJ65qQNmKoGAvFB17o+c9lmxdDsINdQiO1pdNYRqPvojD LZ7UWGydrTc9XpZPM68WE1XDJgyHgSiPPZ/aRGn9KGUWSiBAVu2Zmv9/Q2ceL9qA cHg34doNRQdXWYb9W8tDpXJpalvXFq6tIYo9bfelx38Rx6DZkAMrOke2iMxVJUGH s8ofIsh9lpJyUhWx1/9QbK6WWLDaa+aPMbr9pdi7JetDCq1AM9hYAwrajIXw3ZsN z1f+CbApyPGH1zpzA7kT6ypIsNTYPAWFVoZLL9Wi0A== -----END CERTIFICATE-----Generated at Sun Nov 15 15:05:01 2026 by rpki-client