$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfa2ace2-3d56-31a3-845e-eefbc5f57f0a.roa File: bfa2ace2-3d56-31a3-845e-eefbc5f57f0a.roa (raw, json) Hash identifier: mv00ouzaGnMTASks2+IKtXYXvhOOk6sD67Vwm8ZAkKs= Subject key identifier: 83:D8:4A:8A:5A:3D:2B:93:47:2B:05:D1:1E:0A:96:9D:CA:31:F0:99 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F90A3216A17850D529E086540 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfa2ace2-3d56-31a3-845e-eefbc5f57f0a.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 20940 IP address blocks: 96.17.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:21:6a:17:85:0d:52:9e:08:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=5f960889-fe6f-44e4-ba01-2a94a3f7a188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8c:db:16:0b:8a:aa:d3:f7:96:52:d9:9c:86: 70:a6:21:09:75:1b:0f:b7:71:dd:5e:88:00:99:4b: ad:df:bf:a7:82:2c:e7:2b:a1:89:7c:e0:6a:16:04: d9:2d:44:94:7f:70:62:ad:72:bb:63:e2:27:72:c0: 1b:f5:a6:8d:16:c1:b1:aa:60:c8:af:e5:be:ce:0f: ff:d8:66:49:31:25:70:7b:e4:76:98:2c:4f:05:ea: ac:d1:d6:11:2b:c2:2b:9a:f0:01:74:9f:aa:cf:81: 24:5d:99:f6:35:57:4a:8b:7e:95:e1:74:f4:e9:59: 2b:00:af:9b:5f:6f:39:c5:40:e7:8d:48:4e:56:15: 3f:02:ba:c3:cb:a0:c6:20:2d:71:9c:a6:27:45:0a: 18:bc:b5:17:47:da:2b:07:31:59:59:30:b6:09:0a: 2e:91:1d:15:e4:cc:51:cf:6c:f9:8c:e1:76:fc:ea: 8b:c2:2d:cc:ce:2e:3c:53:b5:cc:11:f2:41:fd:91: 74:62:e5:8e:c2:51:7b:da:de:e8:ec:fa:fb:a0:0d: e8:b8:32:bd:7f:97:ed:87:ab:69:ea:9d:e8:b1:6b: d4:fe:d2:f2:cd:af:cc:96:4e:87:f2:b2:12:8a:14: 41:03:b6:60:49:dd:42:50:39:9d:2a:a1:7a:d5:c9: d1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D8:4A:8A:5A:3D:2B:93:47:2B:05:D1:1E:0A:96:9D:CA:31:F0:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfa2ace2-3d56-31a3-845e-eefbc5f57f0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.17.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:32:6c:55:24:39:ba:e8:6a:3a:37:67:1f:8d:6b:40:71:1d: 01:5c:68:ad:6d:5a:ad:e4:74:f3:c8:3d:bf:00:70:14:74:36: e7:f7:ce:4a:61:69:0f:46:e6:55:dc:e6:3c:a3:f8:48:16:07: 80:06:28:16:3a:e4:c8:14:13:3c:3d:b8:19:4a:23:74:1b:71: 24:e8:c8:dd:00:9d:5c:db:ae:52:f0:13:64:cb:de:23:5f:8f: 6c:a2:e1:74:a7:65:0b:98:37:b5:d0:08:96:f5:f7:fd:9f:a6: 9b:55:1e:71:8a:25:01:19:f8:df:d9:7b:43:ae:c1:d5:d1:f5: 1c:16:fa:99:86:d2:bd:f2:2c:1a:eb:0a:6a:b2:6e:73:1a:db: b8:64:8d:a3:b6:01:24:b0:63:90:1b:b4:bb:e4:5c:75:e8:0d: 87:02:ab:5a:e0:76:e4:c5:4f:5d:db:b6:ff:a0:05:54:90:d4: 0c:7d:3c:61:64:9b:e1:54:b7:4e:0f:3e:93:88:c1:ed:ce:9e: 02:3c:36:cb:0e:d9:25:bc:d9:e4:d8:3b:2a:19:37:33:b8:49: f8:67:e8:df:90:71:fb:e3:93:06:e0:4d:be:df:af:69:24:48: a6:98:94:4f:11:41:93:a7:0d:95:b2:e8:df:69:68:10:a4:b9: 37:9b:82:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QoyFqF4UNUp4IZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk NWY5NjA4ODktZmU2Zi00NGU0LWJhMDEtMmE5NGEzZjdhMTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYzbFguKqtP3llLZnIZwpiEJdRsPt3HdXogA mUut37+ngiznK6GJfOBqFgTZLUSUf3BirXK7Y+IncsAb9aaNFsGxqmDIr+W+zg// 2GZJMSVwe+R2mCxPBeqs0dYRK8IrmvABdJ+qz4EkXZn2NVdKi36V4XT06VkrAK+b X285xUDnjUhOVhU/ArrDy6DGIC1xnKYnRQoYvLUXR9orBzFZWTC2CQoukR0V5MxR z2z5jOF2/OqLwi3Mzi48U7XMEfJB/ZF0YuWOwlF72t7o7Pr7oA3ouDK9f5fth6tp 6p3osWvU/tLyza/Mlk6H8rISihRBA7ZgSd1CUDmdKqF61cnR4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPYSopaPSuTRysF0R4Klp3KMfCZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmZhMmFjZTItM2Q1Ni0z MWEzLTg0NWUtZWVmYmM1ZjU3ZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUybFUkObroajo3Zx+Na0BxHQFcaK1tWq3kdPPIPb8AcBR0Nuf3zkph aQ9G5lXc5jyj+EgWB4AGKBY65MgUEzw9uBlKI3QbcSToyN0AnVzbrlLwE2TL3iNf j2yi4XSnZQuYN7XQCJb19/2fpptVHnGKJQEZ+N/Ze0OuwdXR9RwW+pmG0r3yLBrr CmqybnMa27hkjaO2ASSwY5AbtLvkXHXoDYcCq1rgduTFT13btv+gBVSQ1Ax9PGFk m+FUt04PPpOIwe3OngI8NssO2SW82eTYOyoZNzO4Sfhn6N+QcfvjkwbgTb7fr2kk SKaYlE8RQZOnDZWy6N9paBCkuTebgtk= -----END CERTIFICATE-----Generated at Tue Oct 20 22:12:36 2026 by rpki-client