$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfba4049-9260-3ea8-abbe-443facb7c8f1.roa File: bfba4049-9260-3ea8-abbe-443facb7c8f1.roa (raw, json) Hash identifier: mU7TEz3MLqlD6p6lavTQXr2dZagQwuSVVvO387GcDNM= Subject key identifier: 06:84:DB:BC:4C:B0:CC:F9:B6:FB:E2:32:F3:0B:AA:B0:A4:0E:16:D1 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F5A3302050B31D199B7C57C80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfba4049-9260-3ea8-abbe-443facb7c8f1.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 64267 IP address blocks: 192.171.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:02:05:0b:31:d1:99:b7:c5:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=4442b19b-b541-495f-b6d8-62d960fd49a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d7:52:45:93:82:bd:4d:10:f9:cb:57:9e:13: 1a:50:b3:57:ab:3e:94:01:91:64:14:b4:a1:34:03: a6:9c:3a:af:bd:a2:04:31:30:b0:fc:d2:a2:fe:36: 74:16:40:6f:b6:1a:71:ae:94:c9:b8:f0:e4:90:06: 17:c8:17:e7:40:20:23:dd:b9:51:de:eb:a6:c9:5e: 03:26:32:98:2a:73:b9:c2:32:3f:de:0b:ea:fd:9c: b1:ad:47:7d:5a:5c:81:cb:07:e0:01:fe:64:23:58: dd:b8:16:01:9e:14:d7:2a:a4:ca:ee:15:5f:c3:50: 34:af:50:d6:5d:f1:2d:34:55:d1:8e:b9:17:0d:d9: 0e:c9:3d:f8:9e:87:79:76:36:bb:a7:c1:f7:82:31: b9:06:0d:2c:20:89:26:ce:0f:30:bc:09:40:7e:98: 46:a5:cc:e2:06:6a:bd:84:3b:c1:5d:64:7b:57:ee: 45:1e:57:20:c0:14:c3:d5:f6:74:19:38:af:5f:de: 83:5a:44:de:4f:65:23:98:76:ee:ef:f1:0d:8c:b3: c8:8d:41:ce:f8:67:00:60:83:b6:4c:ca:e2:27:54: 6b:7e:11:3d:01:6a:21:0f:22:e2:aa:b4:d9:65:df: 24:28:5d:1f:50:0b:12:f4:20:ed:02:27:19:16:98: 8d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:84:DB:BC:4C:B0:CC:F9:B6:FB:E2:32:F3:0B:AA:B0:A4:0E:16:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfba4049-9260-3ea8-abbe-443facb7c8f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 192.171.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:dc:59:84:a9:66:92:12:92:d7:cf:8b:92:87:a9:2e:0b:06: b9:dc:d9:26:aa:50:3a:da:de:2a:ad:65:0e:76:0d:ea:95:08: 5a:5d:f6:43:dc:87:f3:40:0b:e2:be:f1:5e:85:7b:ea:80:f0: d9:3a:d4:02:dd:f1:aa:02:39:6d:55:65:6e:07:0e:01:48:62: 56:f8:4e:0b:c3:7e:d9:0c:f8:83:20:6d:e8:de:05:da:9c:b9: 06:12:e8:5d:bf:69:b4:d0:d9:89:5e:41:07:78:e6:47:d9:1e: be:43:2b:42:31:d4:84:ef:05:5e:9b:f2:9f:b5:42:30:22:69: 8f:d5:fd:12:be:e0:df:0b:35:0d:c9:6c:c5:08:d1:c4:50:d4: 46:d0:86:99:61:13:25:75:0a:95:85:38:cb:13:ce:6e:64:b8: d8:98:ed:39:56:cb:ed:ed:a7:48:2b:c1:a5:87:06:8c:bf:6c: 63:78:46:51:94:3a:54:2c:87:4d:00:b3:a8:2d:39:8b:15:0c: eb:9e:4a:ea:66:c0:ef:ce:e7:96:6d:07:a7:99:5a:fc:dd:d9: 1c:0f:d0:84:43:6f:87:64:25:c4:6a:de:9f:15:9e:89:19:ac: 7c:7f:cd:fe:88:4e:b1:95:58:b7:1e:5f:56:74:50:79:ff:37: 93:be:a2:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMwIFCzHRmbfFfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk NDQ0MmIxOWItYjU0MS00OTVmLWI2ZDgtNjJkOTYwZmQ0OWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztdSRZOCvU0Q+ctXnhMaULNXqz6UAZFkFLSh NAOmnDqvvaIEMTCw/NKi/jZ0FkBvthpxrpTJuPDkkAYXyBfnQCAj3blR3uumyV4D JjKYKnO5wjI/3gvq/ZyxrUd9WlyBywfgAf5kI1jduBYBnhTXKqTK7hVfw1A0r1DW XfEtNFXRjrkXDdkOyT34nod5dja7p8H3gjG5Bg0sIIkmzg8wvAlAfphGpcziBmq9 hDvBXWR7V+5FHlcgwBTD1fZ0GTivX96DWkTeT2UjmHbu7/ENjLPIjUHO+GcAYIO2 TMriJ1RrfhE9AWohDyLiqrTZZd8kKF0fUAsS9CDtAicZFpiNiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaE27xMsMz5tvviMvMLqrCkDhbRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYmZiYTQwNDktOTI2MC0z ZWE4LWFiYmUtNDQzZmFjYjdjOGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKtfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTcWYSpZpISktfPi5KHqS4LBrnc2SaqUDra3iqtZQ52DeqVCFpd9kPc h/NAC+K+8V6Fe+qA8Nk61ALd8aoCOW1VZW4HDgFIYlb4TgvDftkM+IMgbejeBdqc uQYS6F2/abTQ2YleQQd45kfZHr5DK0Ix1ITvBV6b8p+1QjAiaY/V/RK+4N8LNQ3J bMUI0cRQ1EbQhplhEyV1CpWFOMsTzm5kuNiY7TlWy+3tp0grwaWHBoy/bGN4RlGU OlQsh00As6gtOYsVDOueSupmwO/O55ZtB6eZWvzd2RwP0IRDb4dkJcRq3p8VnokZ rHx/zf6ITrGVWLceX1Z0UHn/N5O+opc= -----END CERTIFICATE-----Generated at Tue Oct 27 09:25:43 2026 by rpki-client