$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011/bc7fde31-81ce-3520-8133-fc9e3d699ece.roa File: bc7fde31-81ce-3520-8133-fc9e3d699ece.roa (raw, json) Hash identifier: e5bdktrP4+BNgQy5oQQ3p+L9vu2t1d/sMgLQrtVsoNk= Subject key identifier: 85:9C:DA:EF:AC:FB:4E:13:BB:31:18:5C:85:B3:0D:3F:CC:A6:3F:2F Certificate issuer: /CN=ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011 Certificate serial: 010D0C9F4328584F6292B0F2D1FD18CFB0A2EB00 Authority key identifier: 6C:6E:CD:76:06:4D:44:1A:D5:03:65:F3:E3:70:73:87:15:2A:71:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011/bc7fde31-81ce-3520-8133-fc9e3d699ece.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 14618 IP address blocks: 191.0.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:b0:f2:d1:fd:18:cf:b0:a2:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=ff9a08bb-bad7-4fa1-a128-fd0995a91aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ba:51:ce:c4:e2:04:72:d3:8f:85:89:38:1c: 8d:87:87:8e:48:69:e2:6b:ae:24:f2:cf:c0:2e:36: 9b:76:02:8e:a8:eb:59:b4:51:ca:69:24:51:c0:b4: 43:e3:4d:c4:61:70:fc:e8:e0:d1:56:3d:63:c4:05: 60:2d:ed:a8:76:9d:97:24:9a:7a:68:af:aa:25:e7: 39:66:d1:48:4c:04:10:b0:e3:3b:75:f0:ea:f8:e6: 9d:ac:d5:c7:2a:e2:5b:9d:fb:c2:b8:75:cc:57:b6: 6f:48:6c:6a:05:1a:bd:71:25:14:28:28:54:8c:17: 9b:76:c9:89:20:4a:91:0f:ad:f8:cc:1a:8a:03:5d: 31:40:a3:21:ba:ab:19:96:40:fe:05:c8:0e:17:40: ef:5d:48:fe:6d:08:0e:5e:d1:5b:90:dc:31:1a:10: 20:58:84:4e:6e:86:00:44:87:a5:a7:ae:63:82:45: 80:b8:4a:d3:91:d7:ca:2d:4f:32:ba:30:81:13:54: 69:7f:03:fd:22:10:b8:54:5f:01:8e:07:ea:2f:1c: 74:49:4c:fc:23:db:d3:96:e4:15:6b:dd:d8:8a:05: 6b:40:86:7c:bb:66:73:e4:d2:60:65:81:b4:0a:6c: 24:7b:06:be:29:91:d1:69:62:67:54:24:92:7e:1f: d4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9C:DA:EF:AC:FB:4E:13:BB:31:18:5C:85:B3:0D:3F:CC:A6:3F:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011/bc7fde31-81ce-3520-8133-fc9e3d699ece.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011.crl X509v3 Authority Key Identifier: keyid:6C:6E:CD:76:06:4D:44:1A:D5:03:65:F3:E3:70:73:87:15:2A:71:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ef2a9a0e-1f9a-4c3a-9b85-5d639f35d011.cer sbgp-ipAddrBlock: critical IPv4: 191.0.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ce:7d:37:09:78:6b:c2:e7:f7:a8:7b:80:00:3f:ca:23:c3: ea:bb:23:5f:c7:cd:a5:8f:4f:7b:09:49:af:59:8e:a6:2d:06: be:30:f0:62:ab:f3:39:0a:18:ca:3f:4c:d6:82:ca:85:30:7d: 44:02:6e:c7:99:ac:91:39:2b:8f:de:ca:7b:96:d2:7e:8a:c6: d4:42:2c:0f:c5:47:0c:35:54:c9:cf:74:ca:53:d1:71:19:c9: d5:8e:ac:9f:d5:5e:ed:74:dc:04:30:4a:53:88:27:4a:e1:ab: 73:6d:27:3c:c8:42:b4:a4:8e:0e:77:af:4c:fb:74:f4:b8:86: 0d:df:62:cc:36:65:2a:23:17:18:e6:aa:21:eb:70:bc:5d:98: 77:83:6e:ed:4c:e3:09:0a:a2:2c:1f:8a:64:4f:fb:71:e2:85: 45:58:f1:a9:ca:ac:b6:ba:e2:09:7e:c5:66:2b:1b:92:0b:dd: 55:22:17:34:b5:22:d7:b5:2e:76:24:33:75:ac:03:73:12:f9: 4e:e7:88:25:54:2a:df:fc:37:f1:fd:ef:ec:fb:1b:d4:3a:ec: f1:53:b0:45:c3:7f:0e:e1:08:2a:c3:65:0d:5d:86:85:65:c6: 5a:0a:ec:02:d6:88:cd:90:b9:13:58:71:d6:bd:f0:1f:94:e5: 69:fe:f4:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikrDy0f0Yz7Ci6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWYyYTlhMGUtMWY5YS00YzNhLTliODUtNWQ2MzlmMzVk MDExMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZmY5YTA4YmItYmFkNy00ZmExLWExMjgtZmQwOTk1YTkxYWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbpRzsTiBHLTj4WJOByNh4eOSGnia64k8s/A LjabdgKOqOtZtFHKaSRRwLRD403EYXD86ODRVj1jxAVgLe2odp2XJJp6aK+qJec5 ZtFITAQQsOM7dfDq+OadrNXHKuJbnfvCuHXMV7ZvSGxqBRq9cSUUKChUjBebdsmJ IEqRD634zBqKA10xQKMhuqsZlkD+BcgOF0DvXUj+bQgOXtFbkNwxGhAgWIROboYA RIelp65jgkWAuErTkdfKLU8yujCBE1RpfwP9IhC4VF8BjgfqLxx0SUz8I9vTluQV a93YigVrQIZ8u2Zz5NJgZYG0Cmwkewa+KZHRaWJnVCSSfh/UKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWc2u+s+04TuzEYXIWzDT/Mpj8vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9lZjJh OWEwZS0xZjlhLTRjM2EtOWI4NS01ZDYzOWYzNWQwMTEvYmM3ZmRlMzEtODFjZS0z NTIwLTgxMzMtZmM5ZTNkNjk5ZWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZWYyYTlhMGUtMWY5YS00YzNhLTli ODUtNWQ2MzlmMzVkMDExL2VmMmE5YTBlLTFmOWEtNGMzYS05Yjg1LTVkNjM5ZjM1 ZDAxMS5jcmwwHwYDVR0jBBgwFoAUbG7NdgZNRBrVA2Xz43BzhxUqcZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9lZjJhOWEwZS0xZjlhLTRjM2EtOWI4NS01ZDYz OWYzNWQwMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvwAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbOfTcJeGvC5/eoe4AAP8ojw+q7I1/HzaWPT3sJSa9ZjqYtBr4w8GKr 8zkKGMo/TNaCyoUwfUQCbseZrJE5K4/eynuW0n6KxtRCLA/FRww1VMnPdMpT0XEZ ydWOrJ/VXu103AQwSlOIJ0rhq3NtJzzIQrSkjg53r0z7dPS4hg3fYsw2ZSojFxjm qiHrcLxdmHeDbu1M4wkKoiwfimRP+3HihUVY8anKrLa64gl+xWYrG5IL3VUiFzS1 Ite1LnYkM3WsA3MS+U7niCVUKt/8N/H97+z7G9Q67PFTsEXDfw7hCCrDZQ1dhoVl xloK7ALWiM2QuRNYcda98B+U5Wn+9Bk= -----END CERTIFICATE-----Generated at Sat Oct 10 07:56:03 2026 by rpki-client