$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfa7d67a-952c-3905-85f8-44a66117cd46.roa File: bfa7d67a-952c-3905-85f8-44a66117cd46.roa (raw, json) Hash identifier: fTWU1K+lX/Opryo/8pZWus+qiSuFw9LeZZDg8UuhYko= Subject key identifier: F2:A8:69:BF:49:AB:4C:28:1E:45:52:CE:C0:90:AC:6E:8F:8D:9C:CC Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F497630470C43D47190AD3190 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfa7d67a-952c-3905-85f8-44a66117cd46.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 64267 IP address blocks: 23.157.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:30:47:0c:43:d4:71:90:ad:31:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4a2cb14a-4557-4b3c-a6e1-6b50cc9f2024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bf:c2:37:b1:06:6a:54:2c:16:c4:8b:fb:a9: 0a:57:58:34:99:3e:52:8d:89:e0:96:ba:21:96:18: b1:83:17:2c:9c:0d:bf:a7:15:06:ca:64:56:91:30: f4:8e:62:23:5e:94:b0:7a:dd:16:08:7a:6b:e2:ba: 2c:64:de:5a:18:ea:7b:37:0d:6b:df:78:ff:98:81: ed:38:ce:95:47:28:c9:43:5d:36:12:1c:9d:0d:75: 38:f6:a7:02:99:f2:94:45:9d:1f:c4:2b:9d:47:cb: ee:fa:d0:8e:d9:14:83:01:c3:20:f0:ad:d4:05:52: 7a:5b:97:89:b2:38:b0:db:02:1e:df:f7:11:c1:fe: c8:02:c3:40:f2:27:dd:2c:10:fa:63:b8:6e:c5:96: 24:ca:95:48:e2:3e:58:9f:e3:35:18:9e:e3:ee:1e: be:78:ca:86:fe:27:20:31:03:be:2f:2f:a3:d3:7a: c8:ae:22:24:30:aa:f2:56:02:aa:72:57:fd:b9:4a: 2b:f9:90:6f:28:5d:73:a3:2c:28:62:97:1c:e1:dd: 83:67:92:7f:70:4e:79:5a:ee:dd:35:51:77:f9:93: e8:52:20:60:90:58:95:a0:d5:55:07:1c:a6:83:01: 6e:a3:b0:6f:8c:64:df:72:b7:27:da:c6:37:c3:0b: 52:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A8:69:BF:49:AB:4C:28:1E:45:52:CE:C0:90:AC:6E:8F:8D:9C:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfa7d67a-952c-3905-85f8-44a66117cd46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 23.157.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:c3:01:58:59:82:0d:11:53:2e:46:6c:3a:73:fe:88:9e:d0: 88:5f:2c:8b:4c:da:43:07:bf:ee:b6:a9:1d:e6:27:31:86:4e: f2:c1:e6:84:03:a5:7e:63:27:b2:4b:4a:1b:4d:9c:cd:2b:36: d9:f2:e8:cf:79:d3:c9:7a:d9:ec:2a:ac:53:d0:70:83:87:b6: c2:22:52:be:15:53:e0:e7:25:d3:ac:88:a8:93:f4:e7:1a:45: 5c:bc:96:cf:d0:63:0d:47:42:ee:b0:77:31:0a:ba:4a:0f:fa: 8e:7b:76:48:e0:71:b5:d1:e1:9a:d5:a7:b5:9c:4b:ea:62:b3: 0e:33:f8:4c:ea:4a:68:1d:10:cb:c0:5a:3b:f2:07:f3:85:da: b3:72:03:72:4e:54:04:ab:dc:21:08:ec:cc:5c:ed:b7:4e:dd: 71:e8:63:84:86:54:81:93:b2:6e:d4:1b:94:24:7a:19:d2:57: 4c:6c:81:f4:77:2d:45:34:84:50:d4:d8:fe:27:b7:01:9b:e9: aa:4c:44:35:f0:43:5c:05:e6:0c:53:41:8a:21:45:30:33:1c: 60:38:45:fe:f1:f8:08:da:ba:62:dd:12:1e:cd:93:81:92:d7: 10:fc:a9:eb:93:61:16:f3:e7:e9:61:03:41:e3:ff:2a:f8:39: 66:2d:d4:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdjBHDEPUcZCtMZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGEyY2IxNGEtNDU1Ny00YjNjLWE2ZTEtNmI1MGNjOWYyMDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor/CN7EGalQsFsSL+6kKV1g0mT5SjYnglroh lhixgxcsnA2/pxUGymRWkTD0jmIjXpSwet0WCHpr4rosZN5aGOp7Nw1r33j/mIHt OM6VRyjJQ102EhydDXU49qcCmfKURZ0fxCudR8vu+tCO2RSDAcMg8K3UBVJ6W5eJ sjiw2wIe3/cRwf7IAsNA8ifdLBD6Y7huxZYkypVI4j5Yn+M1GJ7j7h6+eMqG/icg MQO+Ly+j03rIriIkMKryVgKqclf9uUor+ZBvKF1zoywoYpcc4d2DZ5J/cE55Wu7d NVF3+ZPoUiBgkFiVoNVVBxymgwFuo7BvjGTfcrcn2sY3wwtSHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKoab9Jq0woHkVSzsCQrG6PjZzMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYmZhN2Q2N2EtOTUyYy0z OTA1LTg1ZjgtNDRhNjYxMTdjZDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALXDAVhZgg0RUy5GbDpz/oie0IhfLItM2kMHv+62qR3mJzGGTvLB5oQD pX5jJ7JLShtNnM0rNtny6M9508l62ewqrFPQcIOHtsIiUr4VU+DnJdOsiKiT9Oca RVy8ls/QYw1HQu6wdzEKukoP+o57dkjgcbXR4ZrVp7WcS+pisw4z+EzqSmgdEMvA WjvyB/OF2rNyA3JOVASr3CEI7Mxc7bdO3XHoY4SGVIGTsm7UG5QkehnSV0xsgfR3 LUU0hFDU2P4ntwGb6apMRDXwQ1wF5gxTQYohRTAzHGA4Rf7x+AjaumLdEh7Nk4GS 1xD8qeuTYRbz5+lhA0Hj/yr4OWYt1DA= -----END CERTIFICATE-----Generated at Thu Oct 8 15:45:24 2026 by rpki-client