$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/bc8fac76-e3d7-3fda-bed0-46d01f095dd3.roa File: bc8fac76-e3d7-3fda-bed0-46d01f095dd3.roa (raw, json) Hash identifier: wZTtWgNbfHJ91JmSGfzejeDQaLUJKzRxtaqRPaQFJvk= Subject key identifier: 8F:72:1B:06:CE:33:CD:AE:6E:2D:20:3F:CD:44:1A:7B:76:A0:3C:7E Certificate issuer: /CN=b2fad91b-4146-4274-9411-fc471c444156 Certificate serial: 010D0C9F4328584FA308D4B2DA070F15A2E8BE00 Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/bc8fac76-e3d7-3fda-bed0-46d01f095dd3.roa Signing time: Tue 27 Oct 2026 03:10:00 +0000 ROA not before: Tue 27 Oct 2026 03:10:00 +0000 ROA not after: Mon 25 Jan 2027 04:10:00 +0000 asID: 11696 IP address blocks: 65.48.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a3:08:d4:b2:da:07:0f:15:a2:e8:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156 Validity Not Before: Oct 27 03:10:00 2026 GMT Not After : Jan 25 04:10:00 2027 GMT Subject: CN=127d5ce0-89aa-4b39-a1b5-1543fbd3bd16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a4:8a:da:0d:45:c5:d1:2b:59:13:c8:96:d3: 74:f5:f3:c2:ef:df:6d:d0:eb:59:2a:d4:27:ea:9c: 96:a6:da:84:b0:30:b4:f6:48:a1:85:f2:92:d2:37: 2f:41:86:f9:08:a7:d2:ef:cc:67:6f:54:81:0a:80: 4f:e2:df:72:3c:9b:a3:7c:b9:ae:38:90:ab:c1:82: b8:4b:aa:5f:7b:66:73:5d:20:44:9d:c4:81:da:b9: b8:ea:ac:61:2c:fa:1f:4f:dd:60:88:68:25:e9:34: 51:99:9d:4d:06:86:7e:ae:2f:8c:d5:2f:7d:da:ba: 4f:dd:4d:df:90:ae:ea:79:71:ec:0b:66:53:a8:cf: 35:89:f2:9b:c8:7d:32:48:f0:b6:84:15:92:46:a3: a6:6c:3f:03:50:97:ad:50:a1:90:c1:7e:a9:1e:9e: c6:b4:56:bb:4d:c8:e6:4e:56:71:0b:63:aa:5b:e8: 68:a1:0d:dc:6c:ab:8f:24:ff:13:3b:fb:e6:4c:f9: f7:6b:6b:80:8e:88:d8:68:e2:7a:e4:7f:d4:f9:35: 00:21:89:5a:6d:f7:fd:d5:76:55:49:24:fe:eb:94: d3:05:91:86:9a:be:7e:f8:09:b1:15:9f:25:52:94: 54:20:80:bd:5e:fe:4e:5e:cd:04:2c:d4:d4:0c:b5: ad:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:72:1B:06:CE:33:CD:AE:6E:2D:20:3F:CD:44:1A:7B:76:A0:3C:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/bc8fac76-e3d7-3fda-bed0-46d01f095dd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl X509v3 Authority Key Identifier: keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer sbgp-ipAddrBlock: critical IPv4: 65.48.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:01:4b:44:f2:b6:24:58:f6:2e:d9:40:63:51:83:13:32:a5: c3:4d:65:37:59:3a:41:bd:53:4b:71:16:33:c5:51:4d:5b:53: e2:bb:b2:5f:b6:1e:12:41:b2:05:c7:f1:29:8c:2a:06:7f:87: 57:a1:3f:42:6d:30:75:8e:89:f2:2f:cc:66:49:e4:8f:53:b9: 73:2c:08:43:17:5e:df:dc:50:50:6f:ce:d2:18:22:de:d7:e0: dd:97:bb:5c:dc:2c:c7:89:95:c7:d9:5d:89:7d:f6:77:0c:93: 9a:b6:8f:97:ea:35:23:8d:4d:73:f0:87:85:36:4c:91:6d:7f: aa:9f:f5:eb:fc:bf:43:fb:52:98:28:4c:be:89:1f:5b:b1:32: 05:d5:13:4b:16:51:75:af:0b:93:a9:c0:dd:58:e5:6d:15:0d: eb:0a:22:4b:f3:5d:8e:e0:1f:25:9e:e0:4f:a9:46:41:1c:96: 04:e7:95:36:ca:74:0e:ec:29:3c:4b:41:d9:95:48:98:47:a6: e7:59:f0:62:d0:3f:3a:b2:13:da:66:9e:9f:f7:fa:75:95:b8: 9a:80:b1:89:bb:c4:a3:02:4a:e5:e0:78:f7:a7:0d:97:d0:58: 14:f5:61:25:31:b3:9f:c9:d3:7d:f1:3b:5e:69:e8:82:f7:62: 68:f5:75:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+jCNSy2gcPFaLovgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmYWQ5MWItNDE0Ni00Mjc0LTk0MTEtZmM0NzFjNDQ0 MTU2MB4XDTI2MTAyNzAzMTAwMFoXDTI3MDEyNTA0MTAwMFowLzEtMCsGA1UEAxMk MTI3ZDVjZTAtODlhYS00YjM5LWExYjUtMTU0M2ZiZDNiZDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qSK2g1FxdErWRPIltN09fPC799t0OtZKtQn 6pyWptqEsDC09kihhfKS0jcvQYb5CKfS78xnb1SBCoBP4t9yPJujfLmuOJCrwYK4 S6pfe2ZzXSBEncSB2rm46qxhLPofT91giGgl6TRRmZ1NBoZ+ri+M1S992rpP3U3f kK7qeXHsC2ZTqM81ifKbyH0ySPC2hBWSRqOmbD8DUJetUKGQwX6pHp7GtFa7Tcjm TlZxC2OqW+hooQ3cbKuPJP8TO/vmTPn3a2uAjojYaOJ65H/U+TUAIYlabff91XZV SST+65TTBZGGmr5++AmxFZ8lUpRUIIC9Xv5OXs0ELNTUDLWt8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9yGwbOM82ubi0gP81EGnt2oDx+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iMmZh ZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3MWM0NDQxNTYvYmM4ZmFjNzYtZTNkNy0z ZmRhLWJlZDAtNDZkMDFmMDk1ZGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjJmYWQ5MWItNDE0Ni00Mjc0LTk0 MTEtZmM0NzFjNDQ0MTU2L2IyZmFkOTFiLTQxNDYtNDI3NC05NDExLWZjNDcxYzQ0 NDE1Ni5jcmwwHwYDVR0jBBgwFoAU7aCvFp+VjxeyKaJpcBRGsbA76wgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iMmZhZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3 MWM0NDQxNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTBtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgBS0TytiRY9i7ZQGNRgxMypcNNZTdZOkG9U0txFjPFUU1bU+K7sl+2 HhJBsgXH8SmMKgZ/h1ehP0JtMHWOifIvzGZJ5I9TuXMsCEMXXt/cUFBvztIYIt7X 4N2Xu1zcLMeJlcfZXYl99ncMk5q2j5fqNSONTXPwh4U2TJFtf6qf9ev8v0P7Upgo TL6JH1uxMgXVE0sWUXWvC5OpwN1Y5W0VDesKIkvzXY7gHyWe4E+pRkEclgTnlTbK dA7sKTxLQdmVSJhHpudZ8GLQPzqyE9pmnp/3+nWVuJqAsYm7xKMCSuXgePenDZfQ WBT1YSUxs5/J033xO15p6IL3Ymj1dTM= -----END CERTIFICATE-----Generated at Wed Oct 28 18:42:41 2026 by rpki-client