$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bcf4837b-705f-3ae0-a9a3-c8ce47882966.roa File: bcf4837b-705f-3ae0-a9a3-c8ce47882966.roa (raw, json) Hash identifier: zMxCIHMPTtmGLnFx5DZ4fZDMvNmJM1Uo00DCWRuc/DI= Subject key identifier: D7:CA:F5:52:22:0B:01:20:05:69:B3:A4:D7:2D:A6:F0:5C:84:64:0D Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584E9384F7D7913288DF6C45C180 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bcf4837b-705f-3ae0-a9a3-c8ce47882966.roa Signing time: Tue 21 Jul 2026 21:00:12 +0000 ROA not before: Tue 21 Jul 2026 21:00:12 +0000 ROA not after: Mon 19 Oct 2026 21:00:12 +0000 asID: 21947 IP address blocks: 216.47.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:93:84:f7:d7:91:32:88:df:6c:45:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Jul 21 21:00:12 2026 GMT Not After : Oct 19 21:00:12 2026 GMT Subject: CN=95f93eb8-9014-4bdc-a01a-0788521965d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0d:29:7b:f9:b6:e5:dc:a9:7e:89:2b:ad:02: ac:5d:2b:71:72:c0:6d:42:da:ed:ad:30:bf:20:c3: e9:30:8e:74:e7:c4:31:78:c9:53:43:fc:eb:a4:d1: 45:33:a8:b2:cd:a4:b2:eb:4c:7d:b1:77:2a:ff:12: ef:cb:e7:5e:fe:98:2b:a5:3a:23:87:02:16:05:58: b4:73:47:72:07:5e:85:b9:af:36:30:16:61:03:47: 21:a6:42:9c:9e:c6:d8:ad:53:7c:92:31:49:22:c2: 85:fa:c1:0d:17:57:5a:49:92:6e:d7:b6:6c:5f:e8: 1c:a4:1d:d6:d5:4a:0c:60:32:ba:58:27:5f:44:16: 6a:1d:e5:1d:5e:63:4e:e1:d1:98:c8:5e:e5:f2:5f: b2:ce:a7:19:b7:1a:fb:03:f2:9b:d7:c6:75:9f:c6: ef:3d:51:2d:df:b0:ea:82:c7:ac:70:7c:e1:d9:ca: 59:6b:1e:dc:f1:9a:14:9a:34:27:25:5e:50:f6:e9: 7e:24:cb:22:37:db:8a:cc:75:38:4f:f3:de:9c:32: 17:96:3a:d0:7c:1b:e8:52:c3:8d:9b:b1:a0:43:18: 44:c8:38:50:eb:48:6f:3f:d2:00:be:41:cd:02:10: 1b:de:48:ec:7d:6c:96:b5:41:eb:9a:ec:e6:cc:73: ae:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CA:F5:52:22:0B:01:20:05:69:B3:A4:D7:2D:A6:F0:5C:84:64:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/bcf4837b-705f-3ae0-a9a3-c8ce47882966.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 216.47.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:dc:bf:9e:64:64:1d:89:90:0c:37:74:31:ff:24:15:93:bd: 11:ab:85:43:27:c9:c0:a8:64:f9:85:91:cd:84:26:e9:db:44: 24:84:34:37:0a:11:53:fb:02:15:3e:9c:c7:0e:10:c8:7a:93: 21:ae:15:91:31:84:51:01:51:52:80:f1:e6:f2:16:9c:39:ab: fb:0d:e5:3d:23:ad:49:4a:80:4b:22:c4:4d:cf:cd:e6:57:d8: 9d:11:9b:72:19:03:61:df:ff:86:d5:f7:54:de:aa:0c:a7:83: c5:18:54:32:8e:3e:9d:6b:a1:f5:8d:ba:fb:8d:28:5e:74:3e: f6:75:5e:19:40:c8:c6:9f:fd:65:65:8c:2e:4f:bc:f2:67:8d: aa:1c:9b:03:e4:83:ce:1b:35:70:61:72:95:70:8b:48:96:10: 56:52:32:73:8f:5f:f7:6c:23:72:ed:8b:02:98:b2:6f:5f:18: e0:2b:59:5c:35:60:8f:17:36:d8:83:58:24:3d:35:97:18:cb: bf:90:2d:24:31:54:3d:2c:e8:12:cd:76:83:de:7f:a6:ce:bf: 3e:16:c2:30:c3:22:bd:7a:30:d8:44:12:b9:39:83:3d:67:94: 46:61:94:d0:5e:06:0d:b6:3d:fd:5c:fd:9f:fa:43:eb:fe:82: 48:29:c3:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ThPfXkTKI32xFwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI2MDcyMTIxMDAxMloXDTI2MTAxOTIxMDAxMlowLzEtMCsGA1UEAxMk OTVmOTNlYjgtOTAxNC00YmRjLWEwMWEtMDc4ODUyMTk2NWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw0pe/m25dypfokrrQKsXStxcsBtQtrtrTC/ IMPpMI5058QxeMlTQ/zrpNFFM6iyzaSy60x9sXcq/xLvy+de/pgrpTojhwIWBVi0 c0dyB16Fua82MBZhA0chpkKcnsbYrVN8kjFJIsKF+sENF1daSZJu17ZsX+gcpB3W 1UoMYDK6WCdfRBZqHeUdXmNO4dGYyF7l8l+yzqcZtxr7A/Kb18Z1n8bvPVEt37Dq gsescHzh2cpZax7c8ZoUmjQnJV5Q9ul+JMsiN9uKzHU4T/PenDIXljrQfBvoUsON m7GgQxhEyDhQ60hvP9IAvkHNAhAb3kjsfWyWtUHrmuzmzHOu6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfK9VIiCwEgBWmzpNctpvBchGQNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvYmNmNDgzN2ItNzA1Zi0z YWUwLWE5YTMtYzhjZTQ3ODgyOTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2C8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAncv55kZB2JkAw3dDH/JBWTvRGrhUMnycCoZPmFkc2EJunbRCSENDcK EVP7AhU+nMcOEMh6kyGuFZExhFEBUVKA8ebyFpw5q/sN5T0jrUlKgEsixE3PzeZX 2J0Rm3IZA2Hf/4bV91Teqgyng8UYVDKOPp1rofWNuvuNKF50PvZ1XhlAyMaf/WVl jC5PvPJnjaocmwPkg84bNXBhcpVwi0iWEFZSMnOPX/dsI3LtiwKYsm9fGOArWVw1 YI8XNtiDWCQ9NZcYy7+QLSQxVD0s6BLNdoPef6bOvz4WwjDDIr16MNhEErk5gz1n lEZhlNBeBg22Pf1c/Z/6Q+v+gkgpw5c= -----END CERTIFICATE-----Generated at Fri Jul 24 03:06:23 2026 by rpki-client