$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fbb388ff-402d-371a-b111-12939dcd0b26.roa File: fbb388ff-402d-371a-b111-12939dcd0b26.roa (raw, json) Hash identifier: 7f21kKZZqIJZJuuF4Lm1AUZUFXJgAKxKrRH60BDcD98= Subject key identifier: FE:2B:C5:89:FF:C9:8F:F1:3B:49:34:73:97:15:6B:A2:36:FF:00:09 Certificate issuer: /CN=7bfbf0a8-433c-47ca-b579-b6c12883088e Certificate serial: 010D0C9F4328584F7A4D9F19391F55103B2A1E60 Authority key identifier: D0:50:31:C1:0A:29:88:3A:C9:BC:2E:17:4E:1B:F8:15:03:83:33:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fbb388ff-402d-371a-b111-12939dcd0b26.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 19201 IP address blocks: 143.223.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/7bfbf0a8-433c-47ca-b579-b6c12883088e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/7bfbf0a8-433c-47ca-b579-b6c12883088e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:9f:19:39:1f:55:10:3b:2a:1e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bfbf0a8-433c-47ca-b579-b6c12883088e Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=f05bde55-8bd5-4984-936a-f15b59544ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:75:e7:6d:2e:b2:dc:5b:49:11:53:ca:55:e8: 90:6b:1b:40:a3:90:b0:a6:ea:2b:5a:34:58:ab:94: c5:62:c5:e3:b0:b2:84:b9:ab:6c:00:2d:05:dc:bf: 7f:0c:0e:9c:ad:0e:f2:03:b9:81:f6:57:94:ec:8e: 53:ad:e3:67:c7:29:07:78:2b:12:4f:bf:f5:7a:5f: 86:90:ae:47:42:59:27:44:fa:46:77:7e:33:f7:cc: e2:6e:44:92:86:0c:e4:68:77:5f:d3:24:5b:07:7c: 96:b4:78:4d:30:2c:d8:f4:9e:a8:b5:29:06:2b:b2: f5:cd:60:c9:19:75:18:39:d1:da:5c:60:44:f1:06: a8:1b:a5:79:cc:69:f8:0e:35:17:d2:27:d9:6c:32: 7e:b2:5a:b2:a1:10:27:e1:6d:83:72:f2:61:5d:1a: 02:3a:5b:30:c5:42:85:d0:15:74:92:dd:aa:c9:52: 0f:aa:57:18:c1:a1:29:95:2c:a1:4c:0c:1d:f9:18: 88:95:28:e6:7e:e0:ba:fc:49:fc:e2:80:4b:c7:75: 97:44:bb:e9:8d:de:c2:1c:63:05:1d:76:4d:f1:40: 2e:79:0f:4b:e3:9e:a3:4d:29:3a:d6:b6:b7:4d:25: 95:27:be:97:64:e9:d6:f6:e7:34:af:6a:24:14:10: e6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2B:C5:89:FF:C9:8F:F1:3B:49:34:73:97:15:6B:A2:36:FF:00:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fbb388ff-402d-371a-b111-12939dcd0b26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/7bfbf0a8-433c-47ca-b579-b6c12883088e.crl X509v3 Authority Key Identifier: keyid:D0:50:31:C1:0A:29:88:3A:C9:BC:2E:17:4E:1B:F8:15:03:83:33:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer sbgp-ipAddrBlock: critical IPv4: 143.223.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:df:2a:38:a0:da:c5:bb:49:0f:ca:47:5f:c8:66:63:a4:c3: 6e:f2:46:98:d0:84:4c:1c:8d:9f:13:82:27:b0:a7:ee:94:e1: e4:48:d5:89:ac:75:f4:23:93:3c:8f:5d:36:b8:f1:cb:e7:e2: 9b:be:c2:5c:03:e5:cb:34:36:61:fe:df:33:8c:46:fc:9c:ed: ea:c2:ac:a9:f5:7c:3a:76:9f:fa:5f:04:ba:4c:19:71:06:b0: 09:2b:47:29:ec:10:2f:74:25:51:1f:f9:6a:5a:f6:87:f6:bc: 32:f4:1c:c5:1a:08:b3:a2:2f:a4:79:fa:4f:ae:63:24:f2:e6: fc:78:62:40:49:d5:ba:ad:2f:e6:1e:d4:25:70:36:71:16:ac: e0:d4:a1:38:1d:7e:a9:8f:98:aa:78:36:41:78:8c:e8:8b:77: 81:35:bb:1e:08:b9:dc:22:81:e4:8a:42:b3:d9:27:32:53:ac: 44:8a:8b:3e:44:42:27:ac:65:69:db:a5:83:7c:74:60:92:02: 25:af:8c:9b:1f:b6:a1:10:da:9a:64:45:10:c3:6a:9a:5a:d3: c1:3c:eb:31:f2:a8:5c:bb:9b:af:56:71:b6:d7:5b:7c:83:76: 8c:ca:e4:73:37:28:22:fc:a0:af:d5:f4:77:01:5b:54:bf:29: 0e:0d:1c:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TZ8ZOR9VEDsqHmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JmYmYwYTgtNDMzYy00N2NhLWI1NzktYjZjMTI4ODMw ODhlMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZjA1YmRlNTUtOGJkNS00OTg0LTkzNmEtZjE1YjU5NTQ0YWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnXnbS6y3FtJEVPKVeiQaxtAo5CwpuorWjRY q5TFYsXjsLKEuatsAC0F3L9/DA6crQ7yA7mB9leU7I5TreNnxykHeCsST7/1el+G kK5HQlknRPpGd34z98zibkSShgzkaHdf0yRbB3yWtHhNMCzY9J6otSkGK7L1zWDJ GXUYOdHaXGBE8QaoG6V5zGn4DjUX0ifZbDJ+slqyoRAn4W2DcvJhXRoCOlswxUKF 0BV0kt2qyVIPqlcYwaEplSyhTAwd+RiIlSjmfuC6/En84oBLx3WXRLvpjd7CHGMF HXZN8UAueQ9L456jTSk61ra3TSWVJ76XZOnW9uc0r2okFBDmFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4rxYn/yY/xO0k0c5cVa6I2/wAJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83YmZi ZjBhOC00MzNjLTQ3Y2EtYjU3OS1iNmMxMjg4MzA4OGUvZmJiMzg4ZmYtNDAyZC0z NzFhLWIxMTEtMTI5MzlkY2QwYjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2JmYmYwYTgtNDMzYy00N2NhLWI1 NzktYjZjMTI4ODMwODhlLzdiZmJmMGE4LTQzM2MtNDdjYS1iNTc5LWI2YzEyODgz MDg4ZS5jcmwwHwYDVR0jBBgwFoAU0FAxwQopiDrJvC4XThv4FQODM4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83YmZiZjBhOC00MzNjLTQ3Y2EtYjU3OS1iNmMx Mjg4MzA4OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFj9/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjfKjig2sW7SQ/KR1/IZmOkw27yRpjQhEwcjZ8Tgiewp+6U4eRI1Yms dfQjkzyPXTa48cvn4pu+wlwD5cs0NmH+3zOMRvyc7erCrKn1fDp2n/pfBLpMGXEG sAkrRynsEC90JVEf+Wpa9of2vDL0HMUaCLOiL6R5+k+uYyTy5vx4YkBJ1bqtL+Ye 1CVwNnEWrODUoTgdfqmPmKp4NkF4jOiLd4E1ux4IudwigeSKQrPZJzJTrESKiz5E QiesZWnbpYN8dGCSAiWvjJsftqEQ2ppkRRDDappa08E86zHyqFy7m69WcbbXW3yD dozK5HM3KCL8oK/V9HcBW1S/KQ4NHCw= -----END CERTIFICATE-----Generated at Sun Nov 15 18:35:25 2026 by rpki-client